Data transmission method and device based on hierarchical user permission and hierarchical equipment collaboration

Abstract

The invention provides a data transmission method and device based on hierarchical user permission and hierarchical equipment collaboration, and relates to the technical field of data transmission and access control, and the method comprises the steps: building a permission mapping relation between a user level and an equipment level; performing two-factor authentication based on the one-time authentication code information and the hardware fingerprint information of each device, and issuing a device digital certificate to each device after the authentication is passed; verifying whether the data transmission request meets the permission mapping relationship; and under the condition that the data transmission request meets the permission mapping relationship, determining a transmission strategy corresponding to the data transmission request, and performing data transmission. According to the method and the device provided by the invention, the authority boundary is defined by combining hierarchical authority management and control and equipment security collaborative management; through safe network access processes such as double-factor verification and the like, risks of identity counterfeiting and unauthorized operation are reduced; the corresponding transmission strategy is matched for the transmission request, so that the transmission efficiency is improved, and efficient and safe high-throughput data transmission is realized.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of data transmission and access control, and in particular to a data transmission method and device based on hierarchical user permissions and hierarchical device cooperation. BACKGROUND

[0002] Under the background of the rapid development of enterprise digital transformation and Internet of Things technology, the demand for high-throughput data transmission across organizations and multiple device types is increasing. Among them, fine-grained permission control and device security cooperation are the core links to ensure secure data transmission.

[0003] In existing systems, a static role assignment mechanism is usually used. In this mode, permission configuration relies on pre-set fixed rules, and flexibility is severely insufficient. Moreover, in complex industrial Internet of Things environments, access authentication of various devices usually uses a simple password or certificate mechanism. In this mode, once the device credentials are leaked or cracked, attackers can easily pretend to be legitimate devices to access the system, posing a major risk to enterprise data security. In addition, data transmission in a multi-network environment faces serious challenges. Traditional transmission solutions cannot automatically optimize transmission strategies according to business scenario characteristics, resulting in low transmission efficiency. Furthermore, existing architectures mostly use centralized control mode, and when facing large-scale device access, the central server is prone to becoming a performance bottleneck.

[0004] Therefore, how to achieve secure, efficient, and multi-scenario-adaptive high-throughput data transmission has become a technical problem that the industry urgently needs to solve. SUMMARY

[0005] The present application provides a data transmission method and device based on hierarchical user permissions and hierarchical device cooperation to solve the defects of low data transmission efficiency and inability to ensure data transmission security in the prior art, and to achieve secure, efficient, and multi-scenario-adaptive high-throughput data transmission.

[0006] The present application provides a data transmission method based on hierarchical user permissions and hierarchical device cooperation, comprising: dividing users into multiple user levels, dividing devices into multiple device levels, and establishing a permission mapping relationship between the user levels and the device levels; performing two-factor authentication based on one-time authentication code information and hardware fingerprint information of each device, and issuing a device digital certificate representing the device level for each device after authentication; based on the device digital certificate of the device sending the data transmission request and the user level of the user sending the data transmission request, verifying whether the data transmission request meets the permission mapping relationship; In a case where the data transmission request meets the permission mapping relationship, a transmission strategy corresponding to the data transmission request is determined, and data transmission is performed based on the transmission strategy.

[0007] In some embodiments, the dividing users into a plurality of user levels, dividing devices into a plurality of device levels, and establishing a permission mapping relationship between the user levels and the device levels comprises: dividing users into a super administrator, a tenant administrator, and a common user; dividing devices into a management node, a system-level data node, a tenant-level data node, and a user-level data node; Among them, the management node allows the super administrator to operate; the system-level data node is managed by the super administrator; the tenant-level data node is managed by the tenant administrator; and the user-level data node is managed by the common user.

[0008] In some embodiments, the two-factor authentication based on the one-time authentication code information and the hardware fingerprint information of each device comprises: extracting the hardware fingerprint information of each device; verifying whether the one-time authentication code information is used within a specified time and a specified address segment and whether the hardware fingerprint information already exists; If the one-time authentication code is used within a specified time and a specified address segment and the hardware fingerprint information does not exist, the authentication is passed; Among them, the one-time authentication code includes at least one of device type, intended home tenant, and validity period; and the hardware fingerprint information includes a central processing unit serial number and / or a media access control address.

[0009] In some embodiments, the method further comprises: When opening a temporary permission, a permission decay factor is configured; the permission decay factor includes a time decay factor and a number decay factor; the time decay factor is used to specify the validity period of the temporary permission; and the number decay factor is used to specify the effective number of the temporary permission; When cross-tenant data sharing is needed, a permission proxy node is set up to respond to access requests from external tenants, and cross-tenant authorization and access operations are recorded and notarized through a blockchain smart contract.

[0010] In some embodiments, the method further comprises: Continuously monitoring the running index data of each device, and calculating a device health score based on the running index data; the running index data includes at least one of central processing unit usage, memory occupancy, network delay, and certificate validity period; When the device health score is lower than a preset threshold, maintenance operations are triggered; the maintenance operations include alarm notification, task adjustment or primary / backup switch.

[0011] In some embodiments, determining the transmission strategy corresponding to the data transmission request when the data transmission request satisfies the permission mapping relationship includes: Based on the tenant group to which the user who sent the data transmission request belongs, select a scenario-based workflow template and determine the transmission strategy; The scenario-based workflow templates include industrial scenario workflow templates, enterprise scenario templates, and personal scenario templates; each scenario-based workflow template corresponds to a corresponding transmission strategy; the transmission strategy includes at least one of the following: data transmission triggering conditions, data verification methods, transmission priority, and compliance filtering strategies.

[0012] In some embodiments, the data transmission based on the transmission strategy further includes: The optimal transmission path is selected from multiple available network paths using a dynamic programming algorithm, and the data block to be transmitted is split into multiple fragments and transmitted in parallel through multiple relay nodes.

[0013] In some embodiments, the method further includes: Perform data preprocessing operations at the edge nodes; the preprocessing operations include at least one of data compression, feature extraction, and format conversion. The pre-processed data is transmitted to the cloud node.

[0014] This invention provides a data transmission device based on hierarchical user permissions and hierarchical device collaboration, comprising: The access control module is used to classify users into multiple user levels, devices into multiple device levels, and establish an access mapping relationship between the user levels and the device levels. The device security collaborative management module is used to perform two-factor authentication based on one-time authentication code information and hardware fingerprint information of each device. After successful authentication, a device digital certificate is issued to each device to represent the device level. The permission verification module is used to verify whether the data transmission request satisfies the permission mapping relationship based on the device digital credential of the device sending the data transmission request and the user level of the user sending the data transmission request. An adaptive transmission module is used to determine the transmission strategy corresponding to the data transmission request when the data transmission request satisfies the permission mapping relationship, and to perform data transmission based on the transmission strategy.

[0015] The present invention provides an electronic device, including a memory, a processor, and a computer program stored in the memory and running on the processor. When the processor executes the computer program, it implements the data transmission method based on hierarchical user permissions and hierarchical device collaboration.

[0016] The present invention provides a non-transitory computer-readable storage medium storing a computer program thereon, wherein the computer program, when executed by a processor, implements the data transmission method based on hierarchical user permissions and hierarchical device collaboration.

[0017] The present invention also provides a computer program product, including a computer program, which, when executed by a processor, implements the data transmission method based on hierarchical user permissions and hierarchical device collaboration.

[0018] The data transmission method and apparatus based on hierarchical user permissions and hierarchical device collaboration provided by this invention deeply integrates user hierarchies and device hierarchies by combining hierarchical permission control with device security collaborative management, clarifying permission boundaries and solving the problem of ambiguous permission hierarchies; through secure network access processes such as two-factor authentication, it achieves tight binding between device identity and permissions, reduces the risk of identity forgery and unauthorized operation, and enhances the security and stability of device management; by matching corresponding transmission strategies to transmission requests, it improves transmission efficiency, significantly enhances system flexibility, and thus achieves efficient and secure high-throughput data transmission. Attached Figure Description

[0019] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments consistent with the invention and, together with the description, serve to explain the principles of the invention.

[0020] To more clearly illustrate the technical solutions in this invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of this invention. For those skilled in the art, other drawings can be obtained from these drawings without creative effort.

[0021] Figure 1 This is a flowchart illustrating the data transmission method based on hierarchical user permissions and hierarchical device collaboration provided by the present invention.

[0022] Figure 2 This is a schematic diagram of a multi-scenario adaptive workflow for a data transmission method based on hierarchical user permissions and hierarchical device collaboration provided by the present invention.

[0023] Figure 3 This is a diagram showing the interaction between the user end and the device end in the data transmission method based on hierarchical user permissions and hierarchical device collaboration provided by the present invention.

[0024] Figure 4 This is a schematic diagram of the data transmission device based on hierarchical user permissions and hierarchical device collaboration provided by the present invention.

[0025] Figure 5 This is a schematic diagram of the structure of the electronic device provided by the present invention. Detailed Implementation

[0026] To enable those skilled in the art to better understand the present invention, the technical solutions of the present invention will be clearly and completely described below with reference to the accompanying drawings of the embodiments of the present invention. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort should fall within the scope of protection of the present invention.

[0027] It should be noted that the terms "first," "second," etc., used in this invention are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments of the invention described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion; for example, a process, method, system, product, or device that comprises a series of steps, units, or modules is not necessarily limited to those explicitly listed, but may include other steps, units, or modules not explicitly listed or inherent to such processes, methods, products, or devices.

[0028] Figure 1 This is a flowchart illustrating the data transmission method based on hierarchical user permissions and hierarchical device collaboration provided by the present invention, as shown below. Figure 1 As shown, the method includes steps 110, 120, 130 and 140.

[0029] Step 110: Divide users into multiple user levels, divide devices into multiple device levels, and establish a permission mapping relationship between the user levels and the device levels.

[0030] Specifically, the data transmission method based on hierarchical user permissions and hierarchical device collaboration provided in this embodiment of the invention is executed by a data transmission device based on hierarchical user permissions and hierarchical device collaboration. This device can be implemented in software, such as a data transmission program running on a computer based on hierarchical user permissions and hierarchical device collaboration; or it can be implemented in hardware, such as a computer or server that executes the data transmission method based on hierarchical user permissions and hierarchical device collaboration.

[0031] User levels are permission hierarchies defined based on a user's role and responsibilities within the system, used to determine the operations a user can perform and the scope of resources they can access.

[0032] Device class is a hierarchy based on the device's functions and permissions within the system, used to determine the operations the device can perform and the range of resources it can access.

[0033] Permission mapping refers to the mapping between user levels and device levels within a system. This mapping ensures that users can access and operate devices at the corresponding levels according to their user privileges, while also guaranteeing system security and flexibility. Specifically, permission mapping defines a user's operational permissions at different device levels, ensuring that users can only operate within their authorized scope.

[0034] In this embodiment of the invention, to achieve efficient and secure data transmission and management, the system divides users and devices into multiple levels and establishes a permission mapping relationship between user levels and device levels. This hierarchical mechanism ensures that the system can flexibly manage data transmission and access control according to the different permissions of users and devices.

[0035] Step 120: Perform two-factor authentication based on the one-time authentication code information and the hardware fingerprint information of each device. After successful authentication, issue a device digital certificate to each device to represent the device level.

[0036] Specifically, the one-time authentication code (AuthCode) is a one-time use authentication code generated by the centralized management server for the initial authentication of devices. It contains information such as device type, intended tenant, and validity period, ensuring the legitimacy and uniqueness of the device's identity when accessing the system. The AuthCode is sent to the device administrator via an encrypted channel to ensure its security during transmission.

[0037] It should be noted that, unlike traditional centralized architectures, the data transmission system based on hierarchical user permissions and hierarchical device collaboration provided in this embodiment of the invention adopts a distributed architecture of "centralized cloud management and control + distributed edge execution + multi-level node collaboration." The centralized management and control server is the core node of this invention's distributed intelligent collaborative architecture. In this embodiment, the centralized management and control server is used to generate user and device behavior baselines and handle core functions such as user authentication, permission verification, and task scheduling. For example, by analyzing users' historical operation records, a user behavior baseline is generated. When abnormal operations are detected, such as a batch download initiated from an unknown IP at 3 AM, secondary verification is automatically triggered.

[0038] In this embodiment of the invention, to address the issue of device identity forgery and mitigate the risk of unauthorized operations, two-factor authentication is required when a device joins the network. Specifically, the centralized management server generates an AuthCode for the device to be added to the network, containing the device type, expected tenant, and validity period. After verifying the validity of the AuthCode and the uniqueness of the hardware fingerprint, the server notifies the Certificate Authority (CA) server to generate an X.509 certificate, i.e., a digital credential for the device, containing both the device identifier (ID) and the tenant identifier. The CA server selects an appropriate encryption algorithm based on the device type and node level. System nodes use RSA 2048-bit encryption, while relay nodes use the Elliptic Curve Cryptography secp256r1 (ECC secp256r1) algorithm. It should be noted that the certificate has built-in permission attributes such as "tenant-level data node." The "transmission assistant" can automatically adapt its operating permissions based on these certificate permission attributes. For example, the system node assistant has root permissions and can configure network ports; the user device assistant only has user-level permissions and cannot modify system configurations.

[0039] The CA server is the core node of the distributed intelligent collaborative architecture of this invention. The CA server is used to generate user and device certificates with compliance identifiers, such as adding Health Insurance Portability and Accountability Act (HIPAA) compliance identifiers to device certificates in medical scenarios to ensure data transmission complies with industry regulations.

[0040] X.509 is an international standard used to define the format and content of digital certificates. An X.509 certificate contains the certificate holder's identity information, public key, certificate validity period, and CA information, and is a core component of the public key infrastructure. RSA is an asymmetric encryption algorithm; 2048 indicates a key length of 2048 bits. A longer key length results in higher encryption strength, but also higher computational cost. ECC is an asymmetric encryption algorithm based on elliptic curve mathematics; secp256r1 is a specific implementation of ECC that uses 256-bit elliptic curve parameters.

[0041] After a device has its certificate installed, it must pass a "certificate chain verification," which verifies both the CA root certificate and intermediate certificates, before it can connect to the network, preventing forged certificates from gaining access. The root certificate is the top-level certificate of the Certificate Authority (CA) and the starting point of the trust chain, used to issue intermediate certificates. Intermediate certificates are certificates issued by the root certificate and are used to issue certificates for end users or devices, bridging the root and final certificates to ensure the integrity and security of the entire certificate chain. Through this layered structure, the CA can efficiently and securely manage the certificate issuance process while reducing the direct use of the root certificate, thus lowering security risks.

[0042] It should be noted that, in this embodiment of the invention, the device certificate and the user account form a "many-to-one" binding relationship. For example, a tenant administrator can bind multiple enterprise-level devices, and the binding information is written into the blockchain. Modification requires the administrator's signature.

[0043] Step 130: Based on the device digital credential of the device sending the data transmission request and the user level of the user sending the data transmission request, verify whether the data transmission request satisfies the permission mapping relationship.

[0044] Specifically, in this embodiment of the invention, in order to ensure the security and compliance of data transmission, when the system receives a data transmission request, it will verify whether the data transmission request satisfies the permission mapping relationship based on the device digital certificate of the device sending the data transmission request and the user level of the user sending the data transmission request.

[0045] Specifically, the system receives a data transmission request containing the device's digital credentials and the user's user level information. The system verifies the user's permissions, specifically whether the user has a legitimate identity within the three-tier user system; it also verifies the validity of the device's digital credentials to ensure the device is an authenticated and legitimate device. Then, based on the device's digital credentials and the user level, the system checks whether the data transmission request satisfies a preset permission mapping relationship; if the request satisfies the permission mapping relationship, the system allows the request to proceed.

[0046] Step 140: If the data transmission request satisfies the permission mapping relationship, determine the transmission strategy corresponding to the data transmission request, and perform data transmission based on the transmission strategy.

[0047] Specifically, a transmission strategy refers to a set of data transmission rules and methods that the system dynamically generates based on the specific characteristics of the data transmission request, such as data type, data volume, and priority, as well as system resource conditions, such as network bandwidth and server load.

[0048] In this embodiment of the invention, when the data transmission request satisfies the permission mapping relationship, a corresponding transmission strategy is determined based on the user and device that sent the data transmission request, and then data transmission is performed based on the transmission strategy.

[0049] The data transmission method based on hierarchical user permissions and hierarchical device collaboration provided in this invention deeply integrates user hierarchies and device hierarchies by combining hierarchical permission control with device security collaborative management, clarifying permission boundaries and solving the problem of ambiguous permission hierarchies; through secure network access processes such as two-factor authentication, it achieves tight binding between device identity and permissions, reduces the risk of identity forgery and unauthorized operation, and enhances the security and stability of device management; by matching corresponding transmission strategies to transmission requests, it improves transmission efficiency, significantly enhances system flexibility, and thus achieves efficient and secure high-throughput data transmission.

[0050] In some embodiments, the step of dividing users into multiple user levels, dividing devices into multiple device levels, and establishing a permission mapping relationship between the user levels and the device levels includes: Users are categorized into super administrators, tenant administrators, and regular users; The equipment is divided into management nodes, system-level data nodes, tenant-level data nodes, and user-level data nodes; The management node is operated by the super administrator; the system-level data node is managed by the super administrator; the tenant-level data node is managed by the tenant administrator; and the user-level data node is managed by the ordinary user.

[0051] Specifically, in this embodiment of the invention, users are divided into super administrators, tenant administrators, and ordinary users. Super administrators possess the highest control over system-level resources, are responsible for initializing system nodes, creating tenants, and assigning tenant administrator permissions, and can configure access policies for cross-tenant public relay nodes. Their operation logs are uploaded to the blockchain for evidence storage throughout the process. Tenant administrators manage all resources within their tenant, including creating user accounts, configuring enterprise data node permissions, defining transmission workflow templates, and can create "role groups" for temporary projects and assign permissions in batches. Ordinary users can only operate their personally bound devices and authorized resources; their transmission tasks are limited by traffic quotas and content filtering rules preset by the tenant administrators.

[0052] The equipment is divided into management nodes, system-level data nodes, tenant-level data nodes, and user-level data nodes. Management nodes are operated by the super administrator; system-level data nodes are managed by the super administrator; tenant-level data nodes are managed by tenant administrators; and user-level data nodes are managed by ordinary users. Specifically, management nodes include system-level devices such as centralized management servers and CA servers, and only allow super administrators to operate them through two-factor authentication (password and hardware key). System-level data nodes, such as public relay servers, are managed by the super administrator and provide cross-network relay services to all tenants, with their transmission bandwidth dynamically allocated according to tenant weight. Tenant-level data nodes, such as enterprise production servers and edge gateways, are managed by tenant administrators and only allow authorized users within the tenant to access them, supporting data partitioning by department. User-level data nodes, such as personal computers and mobile terminals, are managed by ordinary users, automatically inheriting user permissions upon access, and can only transmit data within their personal directories.

[0053] The data transmission method based on hierarchical user permissions and hierarchical device collaboration provided in this invention achieves refined permission control through hierarchical linkage between users and devices, with the three-dimensional linkage of "user", "device" and "permission" as the core, thus building a solid permission security defense for the system.

[0054] In some embodiments, the two-factor authentication based on one-time authentication code information and hardware fingerprint information of each device includes: Extract hardware fingerprint information from each device; Verify whether the one-time authentication code information has been used within a specified time and a specified address range, and whether the hardware fingerprint information already exists; If the one-time authentication code is used within the specified time and address range and the hardware fingerprint information does not exist, then the authentication is successful; The one-time authentication code includes at least one of the following: device type, expected tenant, and validity period; the hardware fingerprint information includes the central processing unit serial number and / or media access control address.

[0055] Specifically, in this embodiment of the invention, to ensure secure access and authentication of devices, the system employs a two-factor authentication mechanism. Two-factor authentication combines a one-time authentication code with the device's hardware fingerprint information to ensure the legitimacy and uniqueness of the device's identity.

[0056] Specifically, the AuthCode generated by the centralized management server includes the device type, the expected tenant, and the validity period. The format is: Device Type Code + Tenant ID + Random String + Timestamp Hash. This AuthCode is sent to the device administrator via an encrypted channel. It should be noted that the AuthCode is valid for 24 hours and can only be used within a specified Internet Protocol (IP) address range to prevent misuse after leakage.

[0057] Then, the device runs the "Transmission Assistant". After entering the AuthCode, the assistant automatically collects the device's hardware fingerprint, such as the Central Processing Unit (CPU) serial number and Media Access Control Address (MAC), and generates the device's public key, which is sent to the centralized management server along with the AuthCode.

[0058] Next, the centralized management server verifies the validity of the AuthCode, ensuring it is used within the specified time and address range and has not been used before. The server also receives the hardware fingerprint information, checking if the CPU serial number and MAC address already exist in the system. If the hardware fingerprint is unique, proceed to the next step; otherwise, deny device access and prompt the device administrator to regenerate the AuthCode or check the device information. If both the validity of the AuthCode and the uniqueness of the hardware fingerprint are satisfied, authentication is successful.

[0059] The data transmission method based on hierarchical user permissions and hierarchical device collaboration provided in this invention performs two-factor authentication on the device network access process by combining a one-time authentication code and the device's hardware fingerprint information, ensuring the legitimacy and uniqueness of the device's identity. Through this mechanism, the system can effectively prevent unauthorized devices from accessing the network and improve system security.

[0060] In some embodiments, the method further includes: When granting temporary permissions, a permission decay factor is configured; the permission decay factor includes a time decay factor and a number decay factor; the time decay factor is used to specify the validity period of the temporary permission; the number decay factor is used to specify the number of times the temporary permission is valid. When cross-tenant data sharing is required, an authorization proxy node is set up to respond to the access requests of external tenants, and the authorization and access operations of cross-tenants are recorded and stored through blockchain smart contracts.

[0061] Specifically, existing systems typically employ a static role allocation mechanism, where permission configuration relies on pre-defined, fixed rules. When faced with temporary collaboration needs or cross-departmental or cross-organizational data sharing requirements, administrators need to manually adjust permission settings. However, this approach suffers from a severe lack of flexibility. In the event of sudden collaboration needs, such as emergency production scheduling across factories or joint consultations between multiple hospitals, cumbersome permission approval processes can lead to delays in critical data transmission, severely impacting business continuity. More seriously, static permission systems struggle to promptly revoke temporary permissions, easily resulting in over-expansion of permissions and increasing the risk of data leakage. Therefore, this invention introduces permission decay factors and permission proxy nodes to construct a dynamic permission system.

[0062] In this embodiment of the invention, to achieve flexible and secure permission management, a temporary permission configuration function is provided. When granting temporary permissions, a permission decay factor can be configured. Specifically, tenant administrators can configure two modes for temporary permissions: "time decay" and "number decay." In time decay mode, the permission validity period can be set from 1 hour to 30 days. After expiration, the system automatically reclaims the permission via Message Queueing Telemetry Transport (MQTT) commands. In number decay mode, the number of data accesses is limited, such as 5 downloads. Once the threshold is reached, the permission is frozen. It should be noted that when a temporary permission takes effect, the system automatically generates a timestamped authorization certificate, which is stored in a blockchain smart contract. Each use of the permission triggers a contract record, facilitating auditing and traceability.

[0063] The MQTT message queue is the core node function of the distributed intelligent collaborative architecture of this invention. In this embodiment, the MQTT message queue is deployed using a "cluster + partition" architecture, partitioned by device type such as management node area and data node area, with 3 replicas in each partition to ensure no message loss and end-to-end latency of less than 100 milliseconds; all messages are encrypted using Advanced Encryption Standard with a 256-bit key (AES-256), and the key is dynamically generated through Diffie-Hellman key exchange to prevent man-in-the-middle eavesdropping.

[0064] Furthermore, to achieve secure and reliable cross-organizational collaboration while ensuring the isolation of tenant data, this invention proposes a cross-tenant data sharing scheme based on "permission proxy" and "blockchain notarization." Specifically, when cross-tenant data sharing is required, a permission proxy node is established to respond to access requests from external tenants. A standardized permission mapping protocol can be established. When tenant A initiates a resource sharing request to tenant B, the sharing scope, such as read-only permissions for a specific dataset, validity period, and usage description, must be clearly defined and approved by the electronic signatures of both administrators. Moreover, tenant B does not need to directly open its data node; instead, the system generates a proxy node. Tenant A accesses data through the proxy node, and all operations are subject to double auditing (visible to both administrators). The proxy node's permissions are revoked synchronously with the primary permissions.

[0065] For example, when tenant A needs to share certain data with tenant B, tenant A's administrator does not directly add tenant B's user to their access control list. Instead, they set up a temporary, isolated permission proxy node to respond to external tenants' access requests. This proxy node can be a lightweight container or virtual machine that does not store the original data itself. Tenant A's administrator configures precise, minimal permissions for this proxy node, allowing it to access only the specific data to be shared. Then, tenant A provides the proxy node's access credentials to tenant B. All of tenant B's access requests are sent to this proxy node, which retrieves the data from tenant A's internal data nodes and returns it. When tenant A's administrator decides to authorize tenant B, the authorization details, such as the authorizing party, the authorized party, the permission content, the validity period, and the proxy node information, are packaged into a transaction and written to the blockchain via a smart contract. Every data access operation performed by tenant B through the permission proxy node, such as reading or downloading, is also recorded in logs, including the visitor, time, operation content, and return result, and written to the blockchain.

[0066] The data transmission method based on hierarchical user permissions and hierarchical device collaboration provided in this invention can flexibly manage temporary permissions by configuring permission decay factors, ensuring that permissions are valid within a specified time or number of uses. By establishing permission proxy nodes and blockchain smart contracts, the system can securely and efficiently share data across tenants, ensuring the transparency and compliance of operations. These technical means work together to ensure the efficient, secure, and stable operation of the system, meeting the complex data transmission needs of multi-tenant, multi-device, and multi-network environments.

[0067] In some embodiments, the method further includes: The system continuously monitors the operational metrics data of each device and calculates a device health score based on the operational metrics data. The operational metrics data include at least one of the following: CPU utilization, memory usage, network latency, and certificate validity period. When the device health score is lower than a preset threshold, maintenance operations are triggered; the maintenance operations include alarm notification, task adjustment or primary / backup switch.

[0068] Specifically, in this embodiment of the invention, not only is strict two-factor authentication performed on device access to the network, but a proactive and intelligent full lifecycle monitoring and maintenance mechanism based on quantitative health scores is also introduced.

[0069] Specifically, the system continuously monitors the operational metrics of each device and calculates a device health score based on this data. When the device health score falls below a preset threshold, maintenance operations are triggered.

[0070] In this embodiment of the invention, the management node or dedicated monitoring service in the system periodically collects multi-dimensional operational indicator data from all online devices, including management nodes, data nodes, and edge nodes. This data is a key basis for evaluating whether the devices are in good working condition. This operational indicator data includes, but is not limited to, CPU utilization, memory usage, disk I / O load, network latency, packet loss rate, network bandwidth throughput, and certificate validity period.

[0071] For example, a metrics collection server can collect 12 metrics from each device every 30 seconds. These metrics may include CPU, memory / disk usage, network throughput, packet loss rate, certificate validity period, etc.

[0072] After acquiring these multi-dimensional raw indicator data, the system will calculate a comprehensive equipment health score using a preset health assessment algorithm. For example, a weighted summation model can be used, assigning different weights to indicators of different importance, and then normalizing all indicators before performing a weighted calculation to obtain a final score, which can be set to 100 points as the maximum score; a device with a score of 100 represents that it is in perfect working condition.

[0073] In addition, administrators can set one or more preset thresholds based on the importance of the business and their risk tolerance. When a device's health score drops and reaches these thresholds, the system will trigger corresponding maintenance operations. These operations may include alarm notifications, task adjustments, or primary / standby failover.

[0074] For example, three threshold levels can be preset: 80 points or above is considered normal; 60-80 points triggers an alert and pushes the alert to the administrator application; below 60 points automatically triggers an emergency response, such as suspending non-critical data transmission when the industrial gateway's health is low.

[0075] In addition, the system is equipped with hot standby devices for critical equipment such as industrial relay nodes. When the health of the primary device is lower than the threshold, it can automatically switch over through the Virtual Router Redundancy Protocol (VRRP). During the switching process, "session persistence" technology is used to ensure that the transmission task is not interrupted.

[0076] It should be noted that when a device is taken offline, a "permission liquidation" process is triggered. This process involves the centralized management server revoking all associated permissions, the CA server revoking the device certificate, the assistant automatically deleting local sensitive data such as cached keys, and writing an offline record to the blockchain.

[0077] The data transmission method based on hierarchical user permissions and hierarchical device collaboration provided in this invention introduces mechanisms such as health monitoring, fault switching, and permission revocation to monitor devices throughout their entire lifecycle. This achieves tight binding and full control over device identity and permissions, ensuring secure and controllable operation of devices from network access to decommissioning, and enhancing the security and stability of device management.

[0078] In some embodiments, determining the transmission strategy corresponding to the data transmission request when the data transmission request satisfies the permission mapping relationship includes: Based on the tenant group to which the user who sent the data transmission request belongs, select a scenario-based workflow template and determine the transmission strategy; The scenario-based workflow templates include industrial scenario workflow templates, enterprise scenario templates, and personal scenario templates; each scenario-based workflow template corresponds to a corresponding transmission strategy; the transmission strategy includes at least one of the following: data transmission triggering conditions, data verification methods, transmission priority, and compliance filtering strategies.

[0079] Specifically, after verifying that the data transmission request meets the permission mapping relationship, the system will select the corresponding scenario-based workflow template according to the specific characteristics of the request and the tenant group to which the user belongs, and determine the specific transmission strategy based on the template.

[0080] Scenario-based workflow templates refer to a set of data transmission rules and processes pre-defined according to different business scenarios. These templates ensure the efficiency and compliance of data transmission in specific scenarios. Scenario-based workflow templates can be defined by tenant administrators.

[0081] Figure 2This is a schematic diagram of a multi-scenario adaptive workflow for a data transmission method based on hierarchical user permissions and hierarchical device collaboration provided by the present invention, as shown below. Figure 2 As shown, in this embodiment of the invention, a scenario-based workflow template is selected and a transmission strategy is determined based on the tenant group to which the user sending the data transmission request belongs.

[0082] The workflow template is a set of standardized data transmission process rules predefined by the tenant administrator. It includes data sharding strategies, relay node scheduling logic, verification mechanisms, fault handling rules such as breakpoint resume trigger conditions, transmission priorities, and compliance filtering strategies. After the administrator defines the template, users within the tenant can directly call the corresponding template when initiating a transmission task without having to repeatedly configure the transmission process.

[0083] For example, in industrial-grade downlink scenarios, tenant administrators specify source datasets (e.g., enterprise production servers), relay nodes (e.g., system public data nodes), and target datasets (e.g., edge gateways) within the system, and set trigger conditions such as production data reaching 10GB. When the trigger condition is met, the workflow engine cluster issues task commands via MQTT, and the data is transmitted through the public relay node, penetrating the intranet. A dual verification method is employed: "breakpoint resumption + 32-bit Cyclic Redundancy Check (CRC32) + blockchain hash." When transmission is interrupted and reconnected, the system resumes transmission based on the recorded transmission progress. After transmission is complete, the receiver calculates the CRC32 value and blockchain hash value of the data and compares them with the value provided by the sender; if they match, the data integrity is confirmed.

[0084] For enterprise-level downlink scenarios, workflows can be predefined to differentiate the priorities of different tasks or roles. For example, the system can dynamically adjust transmission priorities based on user roles, such as prioritizing bandwidth resources for management devices. Data is pushed to employee terminal devices after being relayed through public relay nodes, with network bandwidth monitored in real time during transmission and the transmission rate dynamically adjusted. Furthermore, workflows can be defined to verify access permissions for employee personal computers. For instance, based on file authorization permissions pre-mapped by employees using the GridFileTransfer Protocol (GridFTP), a centralized management server can verify access permissions for employee personal computers.

[0085] Additionally, in special scenarios such as healthcare, where transmitted content needs to undergo compliance filtering, tenant administrators can pre-configure workflows in the system, such as automatically removing patient privacy fields from medical images. In peer-to-peer transmission scenarios, access permissions can also be defined. For example, employees can establish direct peer-to-peer connections with enterprise data nodes via their personal computers, supporting the uploading or downloading of personal data. Before transmission, the system verifies the employee's access permissions to the target directory; transmission can only proceed if permissions are verified.

[0086] The data transmission method based on hierarchical user permissions and hierarchical device collaboration provided in this invention, through the design of a multi-scenario adaptive workflow, customizes workflows for different scenarios, including triggering conditions, transmission verification, priority scheduling, and compliance filtering. It provides an adaptation solution for data transmission in different vertical fields. Compared with the poor adaptability of traditional systems, it can better take into account the requirements of industrial-grade high anti-interference and medical-grade compliance, improve the efficiency and adaptability of data transmission, and ensure that the system can flexibly adjust according to different business scenarios to meet the complex data transmission needs of multi-tenant, multi-device type, and multi-network environments.

[0087] In some embodiments, the data transmission based on the transmission strategy further includes: The optimal transmission path is selected from multiple available network paths using a dynamic programming algorithm, and the data block to be transmitted is split into multiple fragments and transmitted in parallel through multiple relay nodes.

[0088] Specifically, in this embodiment of the invention, after receiving a transmission task, the workflow engine cluster performs path optimization based on a "rule engine + dynamic programming" approach. It calculates the bandwidth, latency, and stability scores of all available paths in real time, selects the optimal path (e.g., "source node - relay A - target node"), and re-evaluates every 30 seconds, dynamically switching to a better path. Alternatively, the data block to be transmitted can be split into multiple fragments, and a "greedy algorithm" can be used to allocate fragment tasks. For example, a 200MB fragment can be evenly distributed across multiple relay nodes for parallel transmission. The target node automatically reassembles the fragments after receiving them, significantly improving efficiency compared to single-path transmission. The workflow engine cluster is one of the core node functions of the distributed intelligent collaborative architecture of this invention.

[0089] The data transmission method based on hierarchical user permissions and hierarchical device collaboration provided in this invention comprehensively improves the system's path optimization capability and increases data transmission efficiency through dynamic path planning and parallel transmission.

[0090] In some embodiments, the method further includes: Perform data preprocessing operations at the edge nodes; the preprocessing operations include at least one of data compression, feature extraction, and format conversion. The pre-processed data is transmitted to the cloud node.

[0091] Specifically, Figure 3 This is a user-device interaction diagram of the data transmission method based on hierarchical user permissions and hierarchical device collaboration provided by the present invention, as shown in the figure. Figure 3As shown, in this embodiment of the invention, the raw data collected can be preprocessed based on edge nodes, such as compressing redundant fields and extracting key features. For example, in a vehicle-cloud collaborative scenario, edge nodes process video data collected by vehicle cameras, extracting only key frames for transmission to the cloud, reducing the amount of data transmitted. Then, the cloud receives the preprocessed data from the edge nodes for further analysis and storage, achieving efficient collaboration between the edge and the cloud.

[0092] The data transmission method based on hierarchical user permissions and hierarchical device collaboration provided in this invention significantly improves data transmission efficiency, reduces transmission volume, and reduces network bandwidth usage by performing data preprocessing operations at edge nodes and transmitting the preprocessed data to cloud nodes.

[0093] The apparatus provided in the embodiments of the present invention will be described below. The apparatus described below can be referred to in correspondence with the method described above.

[0094] Figure 4 This is a schematic diagram of the data transmission device based on hierarchical user permissions and hierarchical device collaboration provided by the present invention, as shown below. Figure 4 As shown, the device includes a permission control module 410, a device security collaborative management module 420, a permission verification module 430, and an adaptive transmission module 440 connected in sequence.

[0095] The permission control module 410 is used to divide users into multiple user levels, divide devices into multiple device levels, and establish a permission mapping relationship between the user levels and the device levels. The Device Security Collaboration Management Module 420 is used for two-factor authentication based on one-time authentication code information and hardware fingerprint information of each device. After successful authentication, a device digital certificate representing the device level is issued to each device. The permission verification module 430 is used to verify whether the data transmission request satisfies the permission mapping relationship based on the device digital credential of the device sending the data transmission request and the user level of the user sending the data transmission request. The adaptive transmission module 440 is used to determine the transmission strategy corresponding to the data transmission request when the data transmission request satisfies the permission mapping relationship, and to perform data transmission based on the transmission strategy.

[0096] The data transmission device based on hierarchical user permissions and hierarchical device collaboration provided in this invention deeply integrates user hierarchies and device hierarchies by combining hierarchical permission control with device security collaborative management, clarifying permission boundaries and solving the problem of ambiguous permission hierarchies; through secure network access processes such as two-factor authentication, it achieves tight binding between device identity and permissions, reduces the risk of identity forgery and unauthorized operation, and enhances the security and stability of device management; by matching corresponding transmission strategies to transmission requests, it improves transmission efficiency, significantly enhances system flexibility, and thus achieves efficient and secure high-throughput data transmission.

[0097] Figure 5 This is a schematic diagram of the structure of the electronic device provided by the present invention, such as... Figure 5 As shown, the electronic device may include: a processor 510, a communications interface 520, a memory 530, and a communications bus 540, wherein the processor 510, the communications interface 520, and the memory 530 communicate with each other via the communications bus 540. The processor 510 can call logical commands stored in the memory 530 to execute the methods described in the above embodiments, for example: Users are divided into multiple user levels, and devices are divided into multiple device levels. An access control mapping relationship is established between the user levels and the device levels. Two-factor authentication is performed based on one-time authentication code information and hardware fingerprint information of each device. After successful authentication, a device digital credential representing the device level is issued to each device. Based on the device digital credential of the device sending the data transmission request and the user level of the user sending the data transmission request, the data transmission request is verified to see if it satisfies the access control mapping relationship. If the data transmission request satisfies the access control mapping relationship, a transmission strategy corresponding to the data transmission request is determined, and data transmission is performed based on the transmission strategy.

[0098] Furthermore, the logical instructions in the aforementioned memory can be implemented as software functional units and sold or used as independent products, and can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art, or a part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of the present invention. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0099] The processor in the electronic device provided in this embodiment of the invention can call logical instructions in the memory to implement the above method. Its specific implementation method is the same as the aforementioned method implementation method and can achieve the same beneficial effects, which will not be repeated here.

[0100] This invention also provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, is implemented to perform the methods provided in the above embodiments.

[0101] The specific implementation method is the same as the aforementioned method implementation method and can achieve the same beneficial effects, so it will not be repeated here.

[0102] This invention provides a computer program product, including a computer program that, when executed by a processor, implements the method described above.

[0103] The system embodiments described above are merely illustrative. The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the modules can be selected to achieve the purpose of this embodiment according to actual needs. Those skilled in the art can understand and implement this without any creative effort.

[0104] Through the above description of the embodiments, those skilled in the art can clearly understand that each embodiment can be implemented by means of software plus necessary general-purpose hardware platforms, and of course, it can also be implemented by hardware. Based on this understanding, the above technical solutions, in essence or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, magnetic disk, optical disk, etc., and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute the methods described in the various embodiments or some parts of the embodiments.

[0105] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, and not to limit them; although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some of the technical features; and these modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A data transmission method based on hierarchical user permissions and hierarchical device cooperation, characterized in that, The method comprises the following steps: dividing users into multiple user levels, dividing devices into multiple device levels, and establishing a permission mapping relationship between the user levels and the device levels; performing two-factor authentication based on one-time authentication code information and hardware fingerprint information of each device, and issuing a device digital certificate for each device to represent the device level after authentication; verifying whether the data transmission request meets the permission mapping relationship based on the device digital certificate of the device sending the data transmission request and the user level of the user sending the data transmission request; determining a transmission strategy corresponding to the data transmission request and performing data transmission based on the transmission strategy if the data transmission request meets the permission mapping relationship.

2. The data transmission method based on hierarchical user authority and hierarchical device cooperation according to claim 1, characterized in that, The method of dividing users into multiple user levels, dividing devices into multiple device levels, and establishing a permission mapping relationship between the user levels and the device levels comprises: dividing users into super administrators, tenant administrators, and ordinary users; dividing devices into management nodes, system-level data nodes, tenant-level data nodes, and user-level data nodes; wherein the management nodes allow the super administrators to operate; the system-level data nodes are managed by the super administrators; the tenant-level data nodes are managed by the tenant administrators; and the user-level data nodes are managed by the ordinary users.

3. The method of claim 1, wherein, The method of performing two-factor authentication based on one-time authentication code information and hardware fingerprint information of each device comprises: extracting hardware fingerprint information of each device; verifying whether the one-time authentication code information is used within a specified time and a specified address segment and whether the hardware fingerprint information already exists; if the one-time authentication code is used within a specified time and a specified address segment and the hardware fingerprint information does not exist, the authentication is passed; wherein the one-time authentication code includes at least one of device type, intended home tenant, and validity period; and the hardware fingerprint information includes central processing unit serial number and / or media access control address.

4. The method of claim 1, wherein, The method further comprises: when opening temporary permissions, configuring a permission decay factor; the permission decay factor includes a time decay factor and a number decay factor; the time decay factor is used to specify the validity period of the temporary permissions; and the number decay factor is used to specify the effective number of the temporary permissions; when cross-tenant data sharing is needed, setting up a permission proxy node to respond to access requests from external tenants and recording and notarizing cross-tenant authorization and access operations through a blockchain smart contract.

5. The method of claim 1, wherein, The method further comprises: continuously monitoring running index data of each device and calculating a device health score based on the running index data; the running index data includes at least one of central processing unit usage, memory occupancy, network delay, and certificate validity period; when the device health score is lower than a preset threshold, triggering a maintenance operation; the maintenance operation includes alarm notification, task adjustment, or master-slave switching.

6. The method of claim 1, wherein, The method of determining a transmission strategy corresponding to the data transmission request if the data transmission request meets the permission mapping relationship comprises: Select a scenario-based workflow template based on a tenant group to which a user sending the data transmission request belongs, determine a transmission strategy; The scenario-based workflow template includes an industrial scenario workflow template, an enterprise scenario template, and a personal scenario template; the scenario-based workflow template corresponds to a corresponding transmission strategy; the transmission strategy includes at least one of a trigger condition of data transmission, a data verification method, a transmission priority, and a compliance filtering strategy.

7. The method of claim 1, wherein, The data transmission based on the transmission strategy further includes: An optimal transmission path is selected from multiple available network paths using a dynamic programming algorithm, and the data block to be transmitted is split into multiple fragments for parallel transmission through multiple relay nodes.

8. The method of claim 1, wherein, The method further includes: Performing a data preprocessing operation at the edge node; the preprocessing operation includes at least one of data compression, feature extraction, and format conversion; Transmit the preprocessed data to the cloud node.

9. A data transmission device based on hierarchical user permissions and hierarchical device cooperation, characterized in that, It includes: The authority management module is used to divide users into multiple user levels, divide devices into multiple device levels, and establish a permission mapping relationship between the user level and the device level; The device security collaborative management module is used for double-factor authentication based on one-time authentication code information and hardware fingerprint information of each device, and issues a device digital certificate for each device after authentication, which represents the device level; The authority verification module is used to verify whether the data transmission request meets the permission mapping relationship based on the device digital certificate of the device sending the data transmission request and the user level of the user sending the data transmission request; The adaptive transmission module is used to determine the transmission strategy corresponding to the data transmission request when the data transmission request meets the permission mapping relationship, and perform data transmission based on the transmission strategy.

10. An electronic device comprising a memory, a processor, and a computer program stored on the memory and running on the processor, characterized in that, The processor executes the computer program to realize the data transmission method based on hierarchical user permissions and hierarchical device collaboration according to any one of claims 1-8.

Images