Data display processing method, device, computer equipment and storage medium

By constructing a data dictionary in data display processing and comparing the visitor permission levels, the problems of complex data processing and low security are solved, and efficient and secure data display is achieved.

CN113378203BActive Publication Date: 2025-03-28CHINA PING AN PROPERTY INSURANCE CO LTD
View PDF 2 Cites 0 Cited by

Patent Information

Application Number
CN202110730731.1
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2021-06-29
Publication Date
2025-03-28
Estimated Expiration
2041-06-29

AI Technical Summary

Technical Problem

During the data display processing, the prior art leads to complex data processing and high error rate, which makes it easy to display data to users who do not have access rights, resulting in data leakage and low data security.

Method used

By constructing a data dictionary based on the database, determining the visitor information and data set identification based on the data access request, comparing the data level with the permission level, and displaying data based on the results to ensure that only users with access rights can view the target data.

Benefits of technology

It simplifies the data processing process, reduces the error rate, avoids data leakage, ensures data security, and meets the needs of data display in actual applications.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN113378203B_ABST
    Figure CN113378203B_ABST
Patent Text Reader

Abstract

The present invention relates to a data display processing method, device, computer equipment and storage medium. The method includes: constructing a data dictionary based on a database; determining visitor information corresponding to the data access request and a data set identifier corresponding to the data access request according to a data access request; comparing the data set identifier with the data dictionary to determine whether there is at least one target data corresponding to the data set identifier in the data dictionary; if the target data exists, obtaining the data level of the target data and the authority level corresponding to the visitor information from the data dictionary; comparing the data level with the authority level, and displaying the data according to the comparison result. The method of the present application has a simple data processing process and a low error rate. Data will not be displayed to users who do not have access rights, avoiding data leakage problems, ensuring high data security, and meeting the needs of data display in practical applications.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present invention relates to the field of data processing, and in particular to a data display processing method, device, computer equipment and storage medium. Background Art

[0002] With the development of computer network technology, users can easily apply to access data in various company systems, such as insurance company systems. Users can be employees of the company, and different employees have different data access rights. The inventors found that because different users have different permissions, when a user logs in to the company's system to access data, the front end of the system determines which fields need to be displayed and which fields need to be blocked on the current web page based on the permissions of the current logged-in user, and needs to process a large amount of permission-related data. At the same time, the background of the system needs to cooperate accordingly, resulting in a more complicated data processing process and a higher error rate. It is easy to display data to users who do not have access rights, resulting in data leakage and low data security. Summary of the invention

[0003] Based on this, it is necessary to provide a data display processing method, device, computer equipment and storage medium to address the problems that when performing data display processing, the data processing process is complicated, the error rate is high, and data is easily displayed to users who do not have access rights, resulting in data leakage and low data security.

[0004] A data display processing method, comprising:

[0005] Build a data dictionary based on the database;

[0006] Determine, according to the data access request, visitor information corresponding to the data access request and a data set identifier corresponding to the data access request;

[0007] Compare the data set identifier with the data dictionary to determine whether there is at least one target data corresponding to the data set identifier in the data dictionary;

[0008] If the target data exists, obtaining the data level of the target data and the permission level corresponding to the visitor information from the data dictionary;

[0009] The data level is compared with the permission level, and data is displayed according to the comparison result.

[0010] In one embodiment, constructing a data dictionary based on a database includes:

[0011] Classify and mark the data fields in the database according to preset permission level rules to obtain marked data fields;

[0012] Analyze all the marked data fields to determine whether there is an inheritance relationship between any two of the marked data fields;

[0013] Finding the source of any two of the marked data fields having the inheritance relationship, and determining the data flow between any two of the marked data fields having the inheritance relationship according to the source;

[0014] The data dictionary is constructed according to the data stream.

[0015] In one embodiment, analyzing all the marked data fields to determine whether there is an inheritance relationship between any two of the marked data fields includes:

[0016] Analyze the marked data fields and calculate the similarity between any two marked data fields;

[0017] Whether there is an inheritance relationship between any two of the marked data fields is determined according to whether the similarity reaches a preset similarity threshold.

[0018] In one embodiment, the any two marked data fields include a first data field and a second data field; and the analyzing the marked data fields to calculate the similarity between any two marked data fields includes:

[0019] Respectively obtaining the character string and enumeration value of the first data field and the character string and enumeration value of the second data field;

[0020] Calculating a string similarity index, a string length similarity index, and an enumeration value number similarity index between the first data field and the second data field;

[0021] The weighted average of the string similarity index, the enumeration value number similarity index and the enumeration value length similarity index is calculated, and the weighted average is used to represent the similarity between the arbitrary two data fields.

[0022] In one embodiment, determining whether there is an inheritance relationship between any two of the marked data fields according to whether the similarity reaches a preset similarity threshold includes:

[0023] If the similarity does not reach the preset similarity threshold, determining that there is no inheritance relationship between the two marked data fields;

[0024] If the similarity reaches the preset similarity threshold but does not reach 100%, it is determined that there is an inheritance relationship between the two marked data fields;

[0025] If the similarity is 100%, it is determined that there is no inheritance relationship between the two marked data fields.

[0026] In one embodiment, the data display according to the comparison result includes:

[0027] If the comparison result is that there is a data level that is consistent with the permission level, then the target permission data is displayed; wherein the target permission data is the target data whose data level is consistent with the permission level;

[0028] Otherwise, a message indicating that the visitor does not have access rights is displayed.

[0029] A data display processing device, comprising:

[0030] Building module, used to build data dictionary based on database;

[0031] A determination module, configured to determine, according to a data access request, visitor information corresponding to the data access request and a data set identifier corresponding to the data access request;

[0032] A comparison module, used for comparing the data set identifier with the data dictionary to determine whether there is at least one target data corresponding to the data set identifier in the data dictionary;

[0033] an acquisition module, configured to acquire the data level of the target data and the authority level corresponding to the visitor information from the data dictionary if the target data exists;

[0034] The display module is used to compare the data level with the permission level and display the data according to the comparison result.

[0035] In one embodiment, the building blocks include:

[0036] A marking unit, used to classify and mark the data fields in the database according to a preset permission level rule to obtain marked data fields;

[0037] An analyzing unit, configured to analyze all the marked data fields to determine whether there is an inheritance relationship between any two of the marked data fields;

[0038] A searching unit, configured to search for a source of any two of the marked data fields having the inheritance relationship, and determine a data flow between any two of the marked data fields having the inheritance relationship according to the source;

[0039] A construction unit is used to construct the data dictionary according to the data stream.

[0040] A computer device includes a memory and a processor, wherein the memory stores computer-readable instructions, and when the computer-readable instructions are executed by the processor, the processor executes the steps of the above-mentioned data display processing method.

[0041] A storage medium storing computer-readable instructions, when the computer-readable instructions are executed by one or more processors, causes the one or more processors to execute the steps of the data display processing method described above.

[0042] The above-mentioned data display processing method, device, computer equipment and storage medium build a data dictionary based on a database, determine the visitor information corresponding to the data access request and the data set identifier corresponding to the data access request according to the data access request, compare the data set identifier with the data dictionary, and determine whether there is at least one target data corresponding to the data set identifier in the data dictionary. If the target data exists, the data level of the target data and the permission level corresponding to the visitor information are obtained from the data dictionary, and the data level is compared with the permission level. Data is displayed according to the comparison result. The data processing process is simple and the error rate is low. Data will not be displayed to users who do not have access rights, which avoids data leakage problems, can ensure high data security, and can well meet the needs of data display in practical applications. BRIEF DESCRIPTION OF THE DRAWINGS

[0043] Figure 1 is a block diagram of the internal structure of a computer device in one embodiment;

[0044] Figure 2 A flowchart of a data display processing method provided in one embodiment;

[0045] Figure 3 A flowchart of building a data dictionary based on a database in one embodiment;

[0046] Figure 4 A flowchart of the steps of analyzing all marked data fields and determining whether there is an inheritance relationship between any two data fields in one embodiment;

[0047] Figure 5 A flowchart of analyzing the marked data fields and calculating the similarity between any two marked data fields in one embodiment;

[0048] Figure 6 A schematic diagram of displaying information indicating that a visitor does not have access rights on a web page in an embodiment;

[0049] Figure 7It is a structural block diagram of a data display processing device in one embodiment;

[0050] Figure 8 A structural block diagram of a building block in an embodiment;

[0051] Fig. 9 is a structural block diagram of an analysis unit in one embodiment;

[0052] Fig.10 is a structural block diagram of an analysis subunit in one embodiment;

[0053] Fig.11 A schematic diagram of a storage medium storing computer-readable instructions in accordance with one embodiment. DETAILED DESCRIPTION

[0054] In order to make the purpose, technical solution and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not intended to limit the present invention.

[0055] It is understood that the terms "first", "second", "third", etc. are only used to distinguish descriptions and should not be understood to indicate or imply relative importance. It should also be understood that although the terms "first", "second", "third", etc. are used in the text to describe various elements in some embodiments of the present application, these elements should not be limited by these terms. These terms are only used to distinguish various elements.

[0056] With the rapid development of network technology, the business systems of large insurance companies integrate a lot of business data. When users request access to data through terminals, these business data are pushed to user terminals in different ways to provide data services to users. Users are usually employees of the company, and different users can only access part of the data in the company system. User terminals can access the business data of the business system. In order to improve data security and avoid data leakage, the embodiment of the present application provides a data display processing method, which configures different permissions for different data visitors, and displays business data of different permission levels to visitors with different permissions to ensure data security.

[0057] The method of the embodiment of the present application can be implemented on a computer device, such as Figure 1As shown, the computer device includes a processor, a non-volatile storage medium, a memory and a network interface connected via a system bus. Among them, the non-volatile storage medium of the computer device stores an operating system, a database and computer-readable instructions. The database may store a control information sequence. When the computer-readable instructions are executed by the processor, the processor can implement a gesture testing method. The processor of the computer device is used to provide computing and control capabilities to support the operation of the entire computer device. The memory of the computer device may store computer-readable instructions. When the computer-readable instructions are executed by the processor, the processor can execute a gesture testing method. The network interface of the computer device is used to connect and communicate with a terminal. Those skilled in the art can understand that Figure 1 The structure shown in the figure is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0058] like Figure 2 As shown, in one embodiment, a data display processing method provided by an embodiment of the present application includes the following steps:

[0059] S10. Build a data dictionary based on the database.

[0060] The data dictionary is the content information stored according to the confidentiality requirements of the functional departments of the insurance company. The data dictionary is the definition and description of the data items, data structure, data flow, data storage and processing logic of the data in each database. It is a collection of information describing the data and a collection of definitions of all data elements used in the system. The content information in the data dictionary can include text information, data information, image information and other information.

[0061] The database data dictionary is not only the center of each database, but also very important information for each user. The data dictionary is a collection of descriptions of data objects or items in the data model. Building a data dictionary facilitates data management and query, and facilitates user access to data. The data dictionary can make the insurance company's business system more flexible, respond to customer and market needs in a timely manner, improve the flexibility and versatility of the system, reduce the coupling between subjects and attributes, simplify the business logic of the subject class, reduce changes to system programs, and make databases, programs and pages more stable. Especially when the amount of data is large, it can greatly reduce the development workload, make the database table structure and program structure clearer and easier to understand, and have advantages in developability, scalability, maintainability, and system robustness.

[0062] like Figure 3As shown, in some embodiments, step S10 includes:

[0063] S101. Classify and mark data fields in a database according to preset permission level rules to obtain marked data fields.

[0064] In certain embodiments, the fields in the database are classified and labeled to obtain labeled data fields, including: labeling various types of data model fields in each database according to preset permission level rules, dividing the data into different levels, corresponding to different labels for data of different levels, and classifying by level labels to obtain labeled data fields. When the background interface processes the business logic and returns to the front end, it only needs to obtain the user level to automatically filter the data, and the front end does not need to perform various shielding processes. For example, in the database of an insurance company, the inquiry and underwriting system has high requirements for data security. The data that can be seen by salesmen or underwriters at different levels is different. Labels can be added to various data model fields, and the data that can be seen by people at different levels can be classified by labels.

[0065] In some implementations, the preset permission level rules may include, for example:

[0066] Employees in each department can only access data within their department, and employees at each level can only access data at that level or below.

[0067] For example, Table 1 shows how the different levels of employees in some departments of an insurance company are divided

[0068] Table 1

[0069]

[0070] As shown in Table 1, the chairman has the highest authority level, A01, and can view and access the data of the entire insurance company. The authority level of the general manager of each branch is A02, and they can view and access all the data of their branch. Employees in each department can view the data of the corresponding level and below in the department according to their level. For example, the manager of the claims department can view the data of the claims department at level B02 and below.

[0071] Table 1 only lists a relatively simple way of dividing authority levels. In reality, the authority level division method of insurance companies is more complicated, and the authority division plan can be set according to actual needs.

[0072] In some implementations, the system user customizes the field label category through annotations, first classifies the data and configures it, then reads the configuration to get what category the field in the current model belongs to, the levels returned by different categories in different interfaces are implemented through annotations, and then the data fields are filtered through a global interceptor. The advantage is that the display status of the field can be easily controlled, a lot of redundant code is avoided, the code style is concise, and more attention is paid to the realization of business functions. At the same time, such unified processing is also beneficial to the maintenance of later codes.

[0073] The marked data field is a data field that has been processed by classification and marking. An insurance company may include multiple databases, and the data names in these databases may be the same or partially similar but different. When data is needed, in order to avoid the data obtained from the system according to the data name not being the data actually needed, resulting in data usage errors and unnecessary losses to the insurance company, this embodiment needs to build a data dictionary so that the correct data can be found according to the data dictionary and the data can be processed.

[0074] At this time, to build a data dictionary for the original system, it is necessary to obtain all data fields from all databases of the insurance company system, for example, sampling the data fields according to time intervals.

[0075] S103: Analyze all marked data fields to determine whether there is an inheritance relationship between any two marked data fields.

[0076] The terminal device can analyze any two marked data fields to determine whether there is an inheritance relationship between the two marked data fields. The inheritance relationship may include a relationship in which a data field is processed for business purposes to obtain another data field, or a relationship in which a data field is modified to obtain another data field, etc. There is a strong correlation between the two data fields that have an inheritance relationship, that is, there is an association relationship between the two data fields.

[0077] like Figure 4 As shown, in some embodiments, the step of analyzing all marked data fields to determine whether there is an inheritance relationship between any two data fields may include:

[0078] S1031. Analyze the marked data fields and calculate the similarity between any two marked data fields.

[0079] Any two of the marked data fields include a first data field and a second data field; Figure 5 As shown, step S1031 includes the following steps:

[0080] S10311. Obtain the character string and enumeration value of the first data field and the character string and enumeration value of the second data field respectively.

[0081] String and enumeration value related attribute parameters, such as the length of the string, or the number and types of enumeration values, can be used to determine the similarity between data fields.

[0082] S10312. Calculate a string similarity index, a string length similarity index, and an enumeration value number similarity index between the first data field and the second data field.

[0083] The formula for calculating the string similarity index between the first data field and the second data field is as follows:

[0084]

[0085] Among them, S1 represents a string similarity index, simN represents the number of identical strings in the first data field and the second data field, SHT represents the string length of the shorter field in the first data field and the second data field, L represents the string length of the longer field in the first data field and the second data field, and α is an adjustment parameter for controlling the influence of the string on the similarity. The first preset threshold, the second preset threshold and α can be set according to actual needs.

[0086] The formula for calculating the string length similarity index of the first data field and the second data field is as follows:

[0087]

[0088] S2 represents a similarity index of the string length of the first data field and a similarity index of the second data field.

[0089] The formula for calculating the similarity index of the number of enumeration values ​​of the first data field and the second data field is as follows:

[0090]

[0091] S3 represents the similarity index of the number of enumeration values ​​of the first data field and the second data field; min represents the number of enumeration values ​​of the field with fewer enumeration values ​​in the first data field and the second data field, and max represents the number of enumeration values ​​of the field with more enumeration values ​​in the first data field and the second data field.

[0092] S10313. Calculate the weighted average of the string similarity index, the enumeration value number similarity index, and the enumeration value length similarity index, and use the weighted average to represent the similarity between the two arbitrary data fields. The larger the weighted average, the higher the similarity.

[0093] The calculation formula of similarity S is:

[0094] S = (α1S1+α2S2+α3S3);

[0095] Among them, α1, α2 and α3 are all greater than 0 and less than 1, and satisfy α1+α2+α3=1.

[0096] S1032: Determine whether there is an inheritance relationship between any two marked data fields according to whether the similarity reaches a preset similarity threshold.

[0097] Specifically, the step of determining whether there is an inheritance relationship includes: if the similarity does not reach a preset similarity threshold, determining that there is no inheritance relationship between the two marked data fields; if the similarity reaches a preset similarity threshold and does not reach 100%, determining that there is an inheritance relationship between the two marked data fields; if the similarity is 100%, determining that the two marked data fields are exactly the same data fields and there is no inheritance relationship.

[0098] The data fields with inheritance relationships are extracted to determine the data flow.

[0099] The similarity can be determined based on relevant information of the data field, for example, important information such as system information of the data field, such as the system name of the system from which the data field comes. By analyzing the acquired data field, the similarity of the data field can be determined, thereby determining whether the two data fields have an inheritance relationship. The preset similarity threshold can be set according to actual experience, for example, it can be set to 45%.

[0100] S104: Find the source of any two of the marked data fields that have the inheritance relationship, and determine the data stream between any two of the marked data fields that have the inheritance relationship according to the source.

[0101] If there is an inheritance relationship between two data fields, all data fields with the inheritance relationship will be extracted, and the artificial intelligence model will be used to find the source of the data fields in the corresponding system to determine the data flow between the data fields.

[0102] The source of the data field may be, for example, which system the data field comes from. For example, for *** Insurance Branch and ### Insurance Branch included in *** Insurance Head Office, it may be determined which insurance branch's corresponding system the data field comes from. Alternatively, it may refer to which data fields the data field is derived from.

[0103] A data stream is an ordered sequence of bytes with a start point and an end point, including input streams and output streams.

[0104] S105. Construct a data dictionary according to the data stream.

[0105] The data dictionary can represent the system information and evolution information of the data field. After determining whether there is an inheritance relationship between any two data fields, determine the data flow, and build a data dictionary based on the data flow. The data fields with inheritance relationships can be linked together. When searching, all data fields with inheritance relationships can be found at the same time, which improves the search accuracy.

[0106] In some implementations, S105 includes: the terminal device displays the data stream, and constructs a data dictionary according to feedback information for the data stream, wherein the feedback information may be confirmation information or data stream supplementary information.

[0107] For example, when displaying the data flow, the staff can determine whether the direction of the data flow is correct and whether the inheritance relationship needs to be supplemented. If the direction of the data flow is correct and the inheritance relationship does not need to be supplemented, the staff triggers a confirmation message on the terminal device, and the terminal device builds a data dictionary based on the confirmation information (feedback information).

[0108] If the direction of the data flow is incorrect, or the inheritance relationship between data fields needs to be supplemented, the staff triggers supplementary information on the terminal device, which is used to supplement the inheritance relationship or correct the direction. The terminal device builds a data dictionary based on the supplementary information (feedback information).

[0109] The supplementary information may be obtained by judging the data fields whose relationships cannot be analyzed through manual experience and verifying the data.

[0110] The backend system will then look up relevant data based on the inheritance relationship in the data dictionary to determine whether the data dictionary is correct, perform a final verification, and obtain the data dictionary of the insurance company system.

[0111] When a new system needs to be developed, developers only need to find the fields they need, such as the fields to be searched. The terminal device will determine the corresponding target data dictionary based on the fields to be searched, so as to determine which system is most convenient for calling the fields to be searched and what processing should be done on the obtained fields to be searched based on the system information and evolution information of each data field in the target data dictionary, thereby improving efficiency and accuracy.

[0112] If the field to be searched is not found in the data dictionary, that is, the target data dictionary corresponding to the field to be searched is not determined, the field to be searched is supplemented in the data dictionary. That is, if the staff finds that the field they searched does not exist in the data dictionary through the search results, they can add the information of their own newly added fields to supplement the field to be searched in the data dictionary, which is convenient for future staff to search and supplement, form a unified system standard, and continuously improve the data dictionary.

[0113] S20: Determine visitor information corresponding to the data access request and a data set identifier corresponding to the data access request according to the data access request. The visitor information includes the visitor's authority level.

[0114] Among them, visitor information refers to the label information of the user who issues a data access request, for example, it can be the account registration information used by the visitor to access a database by logging in with an account. The data set identifier refers to the label of the data set that the visitor requests to access by making a data access request, and the data set includes at least one data.

[0115] Generally, the account string in the account registration information contains the visitor's permission level. For example, the account string of the claims department director is B01××××001, where B01 is his permission level, B stands for the claims department, and permission level B01 represents the highest permission level in the claims department, which means that the claims department director has the permission to access all data in the entire claims department.

[0116] The data access request may be issued by a user clicking a control on a web page with a computer cursor, by touching a control on a web page on a touch screen smartphone screen, or by a visitor entering a search keyword.

[0117] For example, the data dictionary may pre-store data including table LIST1 and table LIST2. The data access request issued by the visitor through the terminal is to obtain the data in table LIST1. In this case, LIST1 can be used as a data set identifier. The visitor can issue a data access request by entering the "LIST1" keyword on the terminal, or by clicking the "LIST1" control on the terminal.

[0118] Specifically, when a visitor uses a terminal to access data, an access request can be sent through the terminal. After receiving the data access request, the terminal can determine the data set identifier corresponding to the data access request and obtain the visitor's account registration information as visitor information.

[0119] The account registration information of each visitor with access rights is stored in the data dictionary. Unregistered visitors cannot make data access requests. Specifically, only the staff of the insurance company have account registration information, so non-insurance company staff cannot access the insurance company's data.

[0120] S30: Compare the data set identifier with the data dictionary to determine whether there is at least one target data corresponding to the data set identifier in the data dictionary.

[0121] By comparing the data set identifier with the data dictionary, it can be determined whether the data requested by the visitor exists in the data dictionary. If so, it is determined as the target data corresponding to the data set identifier.

[0122] Since the data dictionary is constructed based on the data flow, and the data flow is determined based on the data fields with inheritance relationships, if one data is determined as the target data, the data with an inheritance relationship with the target data will also be determined as the target data. This greatly increases the accuracy and comprehensiveness of data search and avoids missing relevant data.

[0123] In some cases, such as when a user issues a data access request by entering keywords, the visitor sometimes enters incorrect data request information due to input errors and other reasons. The data set identifier determined based on the erroneous data request information does not exist in the data dictionary. After comparison, if the corresponding data set identifier does not exist in the data dictionary, a message can be displayed to prompt the visitor that the requested data does not exist.

[0124] The data dictionary is the content information stored according to the confidentiality requirements of the functional departments of the insurance company. When there is data in the request data that is consistent with the data dictionary, it is determined as the target data.

[0125] Each data in the data dictionary is matched with a preset data level, and the data level is also stored in the data dictionary.

[0126] S40: If there is at least one target data corresponding to the data set identifier, the data level of the target data and the authority level corresponding to the visitor information are obtained from the data dictionary.

[0127] The permission level refers to the scope of access rights to data that matches the visitor information.

[0128] For example, table LIST1 may include 50 data items, of which the first 20 items correspond to data level A, items 21 to 35 correspond to data level B, items 36 to 50 correspond to data level C, and so on.

[0129] Different visitors can have different permission levels or the same permission level. The correspondence between visitors and permission levels can be pre-set.

[0130] For example, the permission level that matches visitor A is permission level A, the permission level that matches visitor B is B, the permission level that matches visitor C is permission level C, and the permission level that matches visitor D is A, etc.

[0131] Specifically, the data level of the target data is determined, and the permission level corresponding to the visitor information is found from the data dictionary, that is, if the visitor is visitor A, and visitor A has permission level A, then visitor A can access all target data with data level A.

[0132] If the target data corresponding to the data set identifier does not exist in the data dictionary, it indicates that there is no data corresponding to the data access request, and it is directly displayed that there is no data corresponding to the data access request to inform the visitor.

[0133] S50: Compare the data level with the authority level to determine whether there is a data level that is consistent with the authority level, and display the data according to the comparison result.

[0134] Specifically, the data level is compared with the permission level to determine whether there is a data level that is consistent with the permission level; if the comparison result shows that there is a data level that is consistent with the permission level, the target permission data is displayed, otherwise, the information that the visitor has no access rights is displayed. The target permission data is the target data whose data level is consistent with the permission level.

[0135] Displays information that the visitor does not have access rights, such as Figure 6 As shown, for example, a dialog box 2 may be displayed on a web page 1, wherein the dialog box 2 contains the words "Sorry, you do not have access rights to this data".

[0136] That is, when the data level is consistent with the visitor's permission level, the target data corresponding to the data level consistent with the visitor's permission level is displayed, otherwise it is not displayed.

[0137] The terminal may find at least one target data whose data level matches the permission level from the target data, and display it.

[0138] For example, if the permission level of visitor A is C, then the target data is searched to see whether there is target data with data level C. If so, the target data with data level C is displayed. If not, a message is displayed to remind visitor A that he does not have access rights.

[0139] The data display processing method provided by the present application can display different target data according to the different permissions of different visitors when a visitor requests to access data. The target data will only be displayed to visitors with permissions, and unauthorized visitors can be prohibited from obtaining the target data, which can further improve the security of the data.

[0140] The data display processing method of the embodiment of the present application has a simple data processing process and a low error rate. Data will not be displayed to users who do not have access rights, thus avoiding data leakage problems, ensuring high data security, and meeting the needs of data display in practical applications.

[0141] like Figure 7 As shown, in one embodiment, a data display processing device is proposed, the data display processing device comprising:

[0142] A construction module 10 is used to construct a data dictionary based on the database;

[0143] A determination module 20, configured to determine, according to a data access request, visitor information corresponding to the data access request and a data set identifier corresponding to the data access request;

[0144] A comparison module 30, configured to compare the data set identifier with the data dictionary to determine whether there is at least one target data corresponding to the data set identifier in the data dictionary;

[0145] An acquisition module 40, configured to acquire the data level of the target data and the authority level corresponding to the visitor information from the data dictionary if the target data exists;

[0146] The display module 50 is used to compare the data level with the permission level and display the data according to the comparison result.

[0147] like Figure 8 As shown, in one embodiment, the building block 10 includes:

[0148] The marking unit 101 is used to classify and mark the data fields in the database according to the preset permission level rules to obtain marked data fields;

[0149] An analyzing unit 102 is used to analyze all the marked data fields to determine whether there is an inheritance relationship between any two of the marked data fields;

[0150] A searching unit 103 is used to search for the source of any two of the marked data fields having the inheritance relationship, and determine the data flow between any two of the marked data fields having the inheritance relationship according to the source;

[0151] The constructing unit 104 is configured to construct the data dictionary according to the data stream.

[0152] like Fig. 9 As shown, in one embodiment, the analysis unit 102 includes:

[0153] An analysis subunit 1021 is used to analyze the marked data fields and calculate the similarity between any two marked data fields;

[0154] The determination subunit 1022 is configured to determine whether there is an inheritance relationship between any two of the marked data fields according to whether the similarity reaches a preset similarity threshold.

[0155] like Fig.10 As shown, in one embodiment, the any two marked data fields include a first data field and a second data field; the analysis subunit 1021 includes:

[0156] An acquiring subunit 10211 is used to respectively acquire the character string and the enumeration value of the first data field and the character string and the enumeration value of the second data field;

[0157] A first calculation subunit 10212 is used to calculate a string similarity index, a string length similarity index, and an enumeration value number similarity index between the first data field and the second data field;

[0158] The second calculation subunit 10213 is used to calculate the weighted average of the string similarity index, the enumeration value number similarity index and the enumeration value length similarity index, and use the weighted average to represent the similarity between the arbitrary two data fields.

[0159] In one embodiment, the determining subunit 1022 includes:

[0160] A first subunit, configured to determine that there is no inheritance relationship between the two marked data fields if the similarity does not reach the preset similarity threshold;

[0161] A second subunit is configured to determine that there is an inheritance relationship between the two marked data fields if the similarity reaches the preset similarity threshold but does not reach 100%;

[0162] The third subunit is configured to determine that there is no inheritance relationship between the two marked data fields if the similarity is 100%.

[0163] In one embodiment, the display module 50 includes a display unit 501 for displaying data according to the comparison result, and the display unit 501 includes:

[0164] A first subunit is configured to display target authority data if the comparison result shows that there is a data level that is consistent with the authority level; wherein the target authority data is target data whose data level is consistent with the authority level;

[0165] The second subunit is used to display the information that the visitor has no access rights otherwise.

[0166] The data display processing device provided in the embodiment of the present application and the data display processing method provided in the embodiment of the present application are based on the same inventive concept and have the same beneficial effects as the methods adopted, run or implemented therein.

[0167] In one embodiment, a computer device is provided, the computer device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the computer program, the following steps are implemented:

[0168] Build a data dictionary based on the database;

[0169] Determine, according to the data access request, visitor information corresponding to the data access request and a data set identifier corresponding to the data access request;

[0170] Compare the data set identifier with the data dictionary to determine whether there is at least one target data corresponding to the data set identifier in the data dictionary;

[0171] If the target data exists, obtaining the data level of the target data and the permission level corresponding to the visitor information from the data dictionary;

[0172] The data level is compared with the permission level, and data is displayed according to the comparison result.

[0173] In one embodiment, the step of constructing a data dictionary based on a database performed by the processor when executing the computer program includes:

[0174] Classify and mark the data fields in the database according to preset permission level rules to obtain marked data fields;

[0175] Analyze all the marked data fields to determine whether there is an inheritance relationship between any two of the marked data fields;

[0176] Finding the source of any two of the marked data fields having the inheritance relationship, and determining the data flow between any two of the marked data fields having the inheritance relationship according to the source;

[0177] The data dictionary is constructed according to the data stream.

[0178] In one embodiment, the step of analyzing all the marked data fields and determining whether there is an inheritance relationship between any two of the marked data fields when the processor executes the computer program includes:

[0179] Analyze the marked data fields and calculate the similarity between any two marked data fields;

[0180] Whether there is an inheritance relationship between any two of the marked data fields is determined according to whether the similarity reaches a preset similarity threshold.

[0181] In one embodiment, the any two marked data fields include a first data field and a second data field; the step of analyzing the marked data fields and calculating the degree of similarity between any two marked data fields performed by the processor when executing the computer program includes:

[0182] Respectively obtaining the character string and enumeration value of the first data field and the character string and enumeration value of the second data field;

[0183] Calculating a string similarity index, a string length similarity index, and an enumeration value number similarity index between the first data field and the second data field;

[0184] The weighted average of the string similarity index, the enumeration value number similarity index and the enumeration value length similarity index is calculated, and the weighted average is used to represent the similarity between the arbitrary two data fields.

[0185] In one embodiment, the step of determining whether there is an inheritance relationship between any two of the marked data fields according to whether the similarity reaches a preset similarity threshold performed by the processor when executing the computer program includes:

[0186] If the similarity does not reach the preset similarity threshold, determining that there is no inheritance relationship between the two marked data fields;

[0187] If the similarity reaches the preset similarity threshold but does not reach 100%, it is determined that there is an inheritance relationship between the two marked data fields;

[0188] If the similarity is 100%, it is determined that there is no inheritance relationship between the two marked data fields.

[0189] In one embodiment, the step of displaying data according to the comparison result performed by the processor when executing the computer program includes:

[0190] If the comparison result is that there is a data level that is consistent with the permission level, then the target permission data is displayed; wherein the target permission data is the target data whose data level is consistent with the permission level;

[0191] Otherwise, a message indicating that the visitor does not have access rights is displayed.

[0192] The computer device provided in the embodiment of the present application and the method provided in the embodiment of the present application are based on the same inventive concept and have the same beneficial effects as the method adopted, operated or implemented by them.

[0193] In one embodiment, a storage medium storing computer-readable instructions is provided. When the computer-readable instructions are executed by one or more processors, the one or more processors perform the following steps:

[0194] Build a data dictionary based on the database;

[0195] Determine, according to the data access request, visitor information corresponding to the data access request and a data set identifier corresponding to the data access request;

[0196] Compare the data set identifier with the data dictionary to determine whether there is at least one target data corresponding to the data set identifier in the data dictionary;

[0197] If the target data exists, obtaining the data level of the target data and the permission level corresponding to the visitor information from the data dictionary;

[0198] The data level is compared with the permission level, and data is displayed according to the comparison result.

[0199] In one embodiment, the step of building a data dictionary based on a database performed by the one or more processors when executing the computer-readable instructions includes:

[0200] Classify and mark the data fields in the database according to preset permission level rules to obtain marked data fields;

[0201] Analyze all the marked data fields to determine whether there is an inheritance relationship between any two of the marked data fields;

[0202] Finding the source of any two of the marked data fields having the inheritance relationship, and determining the data flow between any two of the marked data fields having the inheritance relationship according to the source;

[0203] The data dictionary is constructed according to the data stream.

[0204] In one embodiment, in one embodiment, the step of analyzing all the marked data fields and determining whether there is an inheritance relationship between any two of the marked data fields when the one or more processors execute the computer-readable instructions includes:

[0205] Analyze the marked data fields and calculate the similarity between any two marked data fields;

[0206] Whether there is an inheritance relationship between any two of the marked data fields is determined according to whether the similarity reaches a preset similarity threshold.

[0207] In one embodiment, the any two marked data fields include a first data field and a second data field; in one embodiment, the step of analyzing the marked data fields and calculating the degree of similarity between any two marked data fields performed by the one or more processors when executing the computer-readable instructions includes:

[0208] Respectively obtaining the character string and enumeration value of the first data field and the character string and enumeration value of the second data field;

[0209] Calculating a string similarity index, a string length similarity index, and an enumeration value number similarity index between the first data field and the second data field;

[0210] The weighted average of the string similarity index, the enumeration value number similarity index and the enumeration value length similarity index is calculated, and the weighted average is used to represent the similarity between the arbitrary two data fields.

[0211] In one embodiment, in one embodiment, the step of determining whether there is an inheritance relationship between any two of the marked data fields according to whether the similarity reaches a preset similarity threshold performed by the one or more processors when executing the computer-readable instructions includes:

[0212] If the similarity does not reach the preset similarity threshold, determining that there is no inheritance relationship between the two marked data fields;

[0213] If the similarity reaches the preset similarity threshold but does not reach 100%, it is determined that there is an inheritance relationship between the two marked data fields;

[0214] If the similarity is 100%, it is determined that there is no inheritance relationship between the two marked data fields.

[0215] In one embodiment, in one embodiment, the step of displaying data according to the comparison result performed by the one or more processors when executing the computer-readable instructions includes:

[0216] If the comparison result is that there is a data level that is consistent with the permission level, then the target permission data is displayed; wherein the target permission data is the target data whose data level is consistent with the permission level;

[0217] Otherwise, a message indicating that the visitor does not have access rights is displayed.

[0218] The storage medium provided in the above-mentioned embodiments of the present application and the method provided in the embodiments of the present application are based on the same inventive concept and have the same beneficial effects as the method adopted, run or implemented by the application program stored therein.

[0219] like Fig.11 As shown, the storage medium shown is a CD 60 on which computer-readable instructions (ie, program products) are stored. When the computer-readable instructions are executed by a processor, the method provided by any of the aforementioned embodiments will be executed.

[0220] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiments can be implemented by instructing the relevant hardware through a computer program, and the computer program can be stored in a computer-readable storage medium. When the program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, the aforementioned storage medium can be a non-volatile storage medium such as a disk, an optical disk, a read-only memory (ROM), or a random access memory (RAM).

[0221] The technical features of the above-described embodiments may be arbitrarily combined. To make the description concise, not all possible combinations of the technical features in the above-described embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0222] The above-mentioned embodiments only express several implementation methods of the present invention, and the description thereof is relatively specific and detailed, but it cannot be understood as limiting the scope of the patent of the present invention. It should be pointed out that, for ordinary technicians in this field, several variations and improvements can be made without departing from the concept of the present invention, which all belong to the protection scope of the present invention. Therefore, the protection scope of the patent of the present invention shall be subject to the attached claims.

Claims

1. A data display processing method, characterized in that: include: Build a data dictionary based on the database; Determine, according to the data access request, visitor information corresponding to the data access request and a data set identifier corresponding to the data access request; Compare the data set identifier with the data dictionary to determine whether there is at least one target data corresponding to the data set identifier in the data dictionary; If the target data exists, obtaining the data level of the target data and the permission level corresponding to the visitor information from the data dictionary; Compare the data level with the permission level, and display the data according to the comparison result; The data dictionary constructed based on the database includes: Classify and mark the data fields in the database according to preset permission level rules to obtain marked data fields; Analyze all the marked data fields to determine whether there is an inheritance relationship between any two of the marked data fields; Finding the source of any two of the marked data fields having the inheritance relationship, and determining the data flow between any two of the marked data fields having the inheritance relationship according to the source; Constructing the data dictionary according to the data stream; The analyzing all the marked data fields to determine whether there is an inheritance relationship between any two of the marked data fields includes: Analyze the marked data fields and calculate the similarity between any two marked data fields; Determining whether there is an inheritance relationship between any two of the marked data fields according to whether the similarity reaches a preset similarity threshold; The determining whether there is an inheritance relationship between any two of the marked data fields according to whether the similarity reaches a preset similarity threshold comprises: If the similarity does not reach the preset similarity threshold, determining that there is no inheritance relationship between the two marked data fields; If the similarity reaches the preset similarity threshold but does not reach 100%, it is determined that there is an inheritance relationship between the two marked data fields; If the similarity is 100%, it is determined that there is no inheritance relationship between the two marked data fields.

2. The data display processing method according to claim 1, characterized in that: The any two marked data fields include a first data field and a second data field; the analyzing the marked data fields to calculate the similarity between any two marked data fields includes: Respectively obtaining the character string and enumeration value of the first data field and the character string and enumeration value of the second data field; Calculating a string similarity index, a string length similarity index, and an enumeration value number similarity index between the first data field and the second data field; A weighted average of the string similarity index, the enumeration value number similarity index, and the enumeration value length similarity index is calculated, and the weighted average is used to represent the similarity between the first data field and the second data field.

3. The data display processing method according to claim 1, characterized in that: The data display according to the comparison result includes: If the comparison result is that there is a data level that is consistent with the permission level, then the target permission data is displayed; wherein the target permission data is the target data whose data level is consistent with the permission level; Otherwise, a message indicating that the visitor does not have access rights is displayed.

4. A data display processing device, characterized in that: include: Building module, used to build data dictionary based on database; A determination module, configured to determine, according to a data access request, visitor information corresponding to the data access request and a data set identifier corresponding to the data access request; A comparison module, used for comparing the data set identifier with the data dictionary to determine whether there is at least one target data corresponding to the data set identifier in the data dictionary; an acquisition module, configured to acquire the data level of the target data and the authority level corresponding to the visitor information from the data dictionary if the target data exists; A display module, used to compare the data level with the permission level and display the data according to the comparison result; The building blocks include: A marking unit, used to classify and mark the data fields in the database according to a preset permission level rule to obtain marked data fields; An analyzing unit, configured to analyze all the marked data fields to determine whether there is an inheritance relationship between any two of the marked data fields; A searching unit, configured to search for a source of any two of the marked data fields having the inheritance relationship, and determine a data flow between any two of the marked data fields having the inheritance relationship according to the source; A construction unit, configured to construct the data dictionary according to the data stream; The analysis unit comprises: An analysis subunit, configured to analyze the labeled data fields and calculate the similarity between any two labeled data fields; a determination subunit, configured to determine whether there is an inheritance relationship between any two of the marked data fields according to whether the similarity reaches a preset similarity threshold; The determining subunit comprises: A first subunit, configured to determine that there is no inheritance relationship between the two marked data fields if the similarity does not reach the preset similarity threshold; A second subunit is configured to determine that there is an inheritance relationship between the two marked data fields if the similarity reaches the preset similarity threshold but does not reach 100%; The third subunit is configured to determine that there is no inheritance relationship between the two marked data fields if the similarity is 100%.

5. A computer device, comprising a memory and a processor, wherein the memory stores computer-readable instructions, and when the computer-readable instructions are executed by the processor, the processor executes the steps of the data display processing method according to any one of claims 1 to 3.

6. A storage medium storing computer-readable instructions, wherein when the computer-readable instructions are executed by one or more processors, the one or more processors execute the steps of the data presentation processing method according to any one of claims 1 to 3.

Citation Information

Patent Citations

  • Method for preventing data leakage, server and storage medium

    CN110889121A

  • Display content permission setting method and system and storage medium

    CN112487477A