A management method, device, equipment and storage medium for safe operation and maintenance

Abstract

This article relates to the field of information security and can be applied to the financial field. It provides a management method, device, equipment and storage medium for secure operation and maintenance, wherein the method, applied to the server, includes: receiving the authentication number of the operation and maintenance personnel; determining the basic authority corresponding to the authentication number according to the authentication number, department authority information table and personnel authority information table; generating a standard password according to the basic authority and / or authentication number, storing the standard password in the password library, and sending the standard password to the operation and maintenance personnel terminal; receiving the authentication password sent by the operation and maintenance personnel terminal, matching the authentication password with the standard password in the password library; if the passwords match successfully, opening the basic authority of the authentication number corresponding to the successfully matched standard password. This article can improve the security of operation and maintenance management.

Description

Technical Field

[0001] The present invention relates to the field of information security, and is particularly applicable to the financial field, and relates to a management method, device, equipment and storage medium for secure operation and maintenance. Background Art

[0002] Operation and maintenance is essentially the operation and maintenance of networks, servers, and services at all stages of their life cycle. As the management of operation and maintenance work is strengthened, the management of operation and maintenance security needs to be enhanced.

[0003] In order to ensure the security of operation and maintenance work in the prior art, the control of daily operation and maintenance permissions has become increasingly strict and meticulous, which has led to operation and maintenance personnel spending a lot of energy on resolving incidents or opening permissions before emergency response. Before entering the operation and maintenance operation area, the operation and maintenance personnel need to fill out a large number of forms for permission opening. After the form is approved, the relevant permissions are immediately opened, and the operation and maintenance personnel can enter the operation area to work within the specified period. However, there is a certain time difference between the opening of permissions and the operation and maintenance personnel entering the operation area to perform operation and maintenance operations, which may lead to dangerous situations in which other people perform operation and maintenance operations based on the approval results of the form. This results in security risks in the operation and maintenance process, and low operation and maintenance security.

[0004] Therefore, there is an urgent need for a safe operation and maintenance management method that can improve the security of operation and maintenance management. Summary of the invention

[0005] The purpose of the embodiments of this article is to provide a management method, device, equipment and storage medium for secure operation and maintenance, which can be applied in the financial field, especially in banking scenarios, but not limited to banking scenarios, to improve the security of operation and maintenance management.

[0006] To achieve the above objectives, on the one hand, the embodiments of this document provide a management method for secure operation and maintenance, which is applied to a server and includes:

[0007] Receive the certification number of the operation and maintenance personnel;

[0008] Determine the basic authority corresponding to the certification number according to the certification number, the department authority information table and the personnel authority information table;

[0009] Generate a standard password according to the basic authority and / or the authentication number, store the standard password in a password library, and send the standard password to the operation and maintenance personnel terminal;

[0010] Receiving an authentication password sent by an operation and maintenance personnel terminal, and matching the authentication password with a standard password in the password library;

[0011] If the password matches successfully, the basic permissions of the authentication number corresponding to the successfully matched standard password will be released.

[0012] Preferably, determining the basic authority corresponding to the certification number according to the certification number, the department authority information table and the personnel authority information table includes:

[0013] According to the certification number, determine the department and person to which the certification number belongs;

[0014] According to the department to which the certification number belongs, querying the corresponding department authority information table to determine the first authority corresponding to the certification number, wherein the department authority information table stores authority information corresponding to each department;

[0015] According to the department authority information table, determining whether the department to which the certification number belongs is associated with a personnel authority information table;

[0016] If so, query the corresponding personnel authority information table according to the personnel to which the certification number belongs, determine the second authority corresponding to the certification number, and determine the first authority and the second authority as the basic authority corresponding to the certification number;

[0017] If not associated, the first authority is determined as the basic authority corresponding to the authentication number.

[0018] Preferably, it also includes:

[0019] If the password matching fails, the operation and maintenance personnel terminal is prompted to resend the authentication password, and the authentication password sent by the operation and maintenance personnel terminal and subsequent steps are received.

[0020] Preferably, it also includes:

[0021] If the password match fails, the number of times the same operator's terminal sends the authentication password within the set time period is counted;

[0022] If the number of times is greater than the set number threshold, a prompt message indicating authentication failure is sent to the operation and maintenance personnel terminal;

[0023] If the number of times is not greater than the set number threshold, the operation and maintenance personnel terminal is prompted to repeat sending the authentication password, and the authentication password sent by the operation and maintenance personnel terminal and subsequent steps are received.

[0024] Preferably, after receiving the authentication password sent by the operation and maintenance personnel terminal and matching the authentication password with the standard password in the password library, the method further includes:

[0025] Receive fingerprint information sent by the operation and maintenance personnel terminal;

[0026] Matching the fingerprint information with information in a fingerprint library;

[0027] If the fingerprint matches successfully and the password matches successfully, the basic permissions of the authentication number corresponding to the successfully matched standard password will be released.

[0028] Preferably, it also includes:

[0029] If the fingerprint match fails, but the password match succeeds, the backup information verification is performed;

[0030] If the backup information is verified, the basic permissions corresponding to the authentication number will be opened.

[0031] Preferably, the backup information verification includes: one or more of face recognition verification, voice recognition verification, handwriting recognition verification or iris recognition verification.

[0032] On the other hand, the embodiment of this invention provides a management device for secure operation and maintenance, the device includes a server, and the server includes:

[0033] Receiving module: receiving the authentication number of the operation and maintenance personnel;

[0034] Permission determination module: determines the basic permissions corresponding to the certification number according to the certification number, the departmental permission information table and the personnel permission information table;

[0035] Password transfer module: generates a standard password according to the basic authority and / or the authentication number, stores the standard password in a password library, and sends the standard password to the operation and maintenance personnel terminal;

[0036] Judgment module: receiving the authentication password sent by the operation and maintenance personnel terminal, and matching the authentication password with the standard password in the password library;

[0037] Open module: If the password matches successfully, the basic permissions of the authentication number corresponding to the successfully matched standard password will be opened.

[0038] On the other hand, the embodiments of the present invention further provide a computer device, including a memory, a processor, and a computer program stored in the memory, wherein when the computer program is executed by the processor, the instructions of any one of the above methods are executed.

[0039] On the other hand, the embodiments of the present invention further provide a computer-readable storage medium having a computer program stored thereon, wherein when the computer program is executed by a processor of a computer device, the computer program executes instructions of any one of the above-described methods.

[0040] It can be seen from the technical solution provided by the above embodiments of the present invention that when the embodiments of the present invention execute the steps through the management method in this article, there is no need to fill out a form or go through the form approval process. Instead, the process of matching and opening permissions is directly performed by the server. Therefore, it is faster and more efficient, greatly shortening or even eliminating the time difference from the opening of permissions to the operation and maintenance personnel entering the operation area, minimizing the probability of dangerous situations in which other people perform operation and maintenance operations based on the approval results, and improving the safety performance in the operation and maintenance process.

[0041] In order to make the above and other purposes, features and advantages of this article more obvious and easy to understand, the following specifically cites preferred embodiments and describes them in detail with reference to the accompanying drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0042] In order to more clearly illustrate the technical solutions in the embodiments of this article or the prior art, the drawings required for use in the embodiments or the prior art descriptions are briefly introduced below. Obviously, the drawings described below are only some embodiments of this article. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0043] Figure 1 A schematic diagram of a process flow of a method for managing security operation and maintenance provided by an embodiment of this document is shown;

[0044] Figure 2 A schematic diagram of a process for determining the basic authority corresponding to the authentication number provided in the embodiment of this document is shown;

[0045] Figure 3 A schematic diagram of a process flow of another method for managing security operation and maintenance provided by an embodiment of this document is shown;

[0046] Figure 4 A schematic diagram of a process flow of another method for managing security operation and maintenance provided by an embodiment of this invention is shown;

[0047] Figure 5 A schematic diagram of a process for fingerprint matching provided in an embodiment of this invention is shown;

[0048] Figure 6 Another schematic diagram of a fingerprint matching process provided in the embodiments of this invention is shown;

[0049] Figure 7 A schematic diagram of the module structure of a management device for secure operation and maintenance provided in an embodiment of this invention is shown;

[0050] Figure 8 A schematic diagram of the structure of a management system for security operation and maintenance provided by an embodiment of this invention is shown;

[0051] Fig. 9 A schematic diagram of the structure of a computer device provided in an embodiment of this invention is shown.

[0052] Description of the accompanying symbols:

[0053] 1. Server side;

[0054] 2. Operation and maintenance personnel terminal;

[0055] 100. receiving module;

[0056] 200. Authority determination module;

[0057] 300, password transmission module;

[0058] 400, judgment module;

[0059] 500, open module;

[0060] 902. Computer equipment;

[0061] 904, processor;

[0062] 906. Memory;

[0063] 908, driving mechanism;

[0064] 910, input / output module;

[0065] 912. Input device;

[0066] 914. Output device;

[0067] 916. Presentation equipment;

[0068] 918. Graphical user interface;

[0069] 920, network interface;

[0070] 922, communication link;

[0071] 924. Communication bus. DETAILED DESCRIPTION

[0072] The following will be combined with the drawings in the embodiments of this article to clearly and completely describe the technical solutions in the embodiments of this article. Obviously, the described embodiments are only part of the embodiments of this article, not all of the embodiments. Based on the embodiments of this article, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of this article.

[0073] In order to ensure the security of operation and maintenance work in the prior art, the control of daily operation and maintenance permissions has become increasingly strict and meticulous, which has led to operation and maintenance personnel spending a lot of energy on resolving incidents or opening permissions before emergency response. Before entering the operation and maintenance operation area, the operation and maintenance personnel need to fill out a large number of forms for permission opening. After the form is approved, the relevant permissions are immediately opened, and the operation and maintenance personnel can enter the operation area to work within the specified period. However, there is a certain time difference between the opening of permissions and the operation and maintenance personnel entering the operation area to perform operation and maintenance operations, which may lead to dangerous situations in which other people perform operation and maintenance operations based on the approval results of the form. This results in security risks in the operation and maintenance process, and low operation and maintenance security.

[0074] In order to solve the above problems, the embodiments of this article provide a management method for secure operation and maintenance, which can ensure the security of the operation and maintenance process. Figure 1 It is a schematic diagram of the steps of a management method for security operation and maintenance provided in the embodiments of this article. This specification provides the method operation steps described in the embodiments or flowcharts, but more or fewer operation steps may be included based on conventional or non-creative labor. The order of steps listed in the embodiments is only one way of executing the order of many steps and does not represent the only execution order. When the actual system or device product is executed, it can be executed in the order of the method shown in the embodiments or drawings or in parallel.

[0075] Reference Figure 1 , a security operation and maintenance management method, applied to the server, including:

[0076] S101: Receive the authentication number of the operation and maintenance personnel;

[0077] S102: Determine the basic authority corresponding to the authentication number according to the authentication number, the department authority information table and the personnel authority information table;

[0078] S103: Generate a standard password according to the basic authority and / or the authentication number, store the standard password in a password library, and send the standard password to the operation and maintenance personnel terminal;

[0079] S104: receiving an authentication password sent by the operation and maintenance personnel terminal, and matching the authentication password with a standard password in the password library;

[0080] S105: If the password matches successfully, the basic permissions of the authentication number corresponding to the successfully matched standard password are released.

[0081] Specifically, the management method is applied to the server, which is a service terminal used to maintain the security of the operation and maintenance area. The operation and maintenance personnel can send the authentication number of the operation and maintenance personnel to the server through the operation and maintenance personnel terminal, which is electrically connected to the server and is a handheld device such as a mobile phone, a tablet computer, or an electronic card; or the operation and maintenance personnel can input the authentication number at the input terminal by setting an input terminal, which is electrically connected to the server and is an input display screen, etc., and the input terminal sends the authentication number to the server.

[0082] After the server determines the basic permissions corresponding to the authentication number, it can generate a random standard password based on the basic permissions. For example, at 8 a.m. on June 1, 2021, a certain authentication number 007 accesses the server, and its basic permission is "query operation". Then, the prefix "202106010800cx007" of the standard password can be generated based on the basic permission and authentication number 007. A random number can be added as a suffix to form a standard password. Of course, in addition to generating standard passwords based on basic permissions and authentication numbers, standard passwords can also be generated based on basic permissions, authentication numbers, or random numbers.

[0083] The standard password is stored in a password library, which is cleared every preset time period. The standard passwords in the password library are different within the preset time period to ensure that the standard password corresponding to any authentication number at a certain time is unique.

[0084] After sending the standard password to the operation and maintenance personnel terminal, you can wait to receive the authentication password sent by the operation and maintenance personnel terminal. After receiving the standard password through the terminal, the operation and maintenance personnel can send the authentication password to the server through the terminal; you can also wait to receive the authentication password sent by the input end. After receiving the standard password through the terminal, the operation and maintenance personnel can send the authentication password to the server through the input end.

[0085] After receiving the authentication password, the server matches the authentication password with the standard password in the password library. If the match is successful, the corresponding basic permissions will be opened.

[0086] Since the management method in this article does not require filling out forms or going through the form approval process, it is a process of matching and opening permissions directly through the server, so it is faster and more efficient, greatly shortening or even eliminating the time difference from the opening of permissions to the operation and maintenance personnel entering the operation area, and minimizing the probability of dangerous situations in which others perform operation and maintenance operations based on the approval results, thereby improving the safety performance during the operation and maintenance process.

[0087] Among them, the authentication number of the operation and maintenance personnel is an authentication number that uniquely corresponds to the operation and maintenance personnel and is used to uniquely identify the identity of the operation and maintenance personnel. It can be an ID number, or an authentication number can be assigned to the operation and maintenance personnel according to actual needs. The department authority information table is a form used to record department authority, and the corresponding authority is different for different departments. The personnel authority information table is a form used to record the authority of the operation and maintenance personnel, and the corresponding authority is different for different operation and maintenance personnel. The basic authority corresponding to the authentication number can be determined based on the authentication number, the department authority information table, and the personnel authority information table.

[0088] Reference Figure 2 In the embodiment of this article, the basic permissions corresponding to the authentication number are determined according to the authentication number, the department permission information table and the personnel permission information table, including:

[0089] S201: Determine the department and person to which the certification number belongs according to the certification number;

[0090] S202: According to the department to which the certification number belongs, query the corresponding department authority information table to determine the first authority corresponding to the certification number, wherein the department authority information table stores authority information corresponding to each department;

[0091] S203: judging, according to the department authority information table, whether the department to which the certification number belongs is associated with a personnel authority information table;

[0092] S204: If there is an association, query the corresponding personnel authority information table according to the personnel to which the certification number belongs, determine the second authority corresponding to the certification number, and determine the first authority and the second authority as the basic authority corresponding to the certification number;

[0093] S205: If not associated, determining the first authority as the basic authority corresponding to the authentication number.

[0094] Specifically, a certification number comparison table may be provided, in which the certification number, the person corresponding to the certification number, and the department to which the person belongs are recorded. The certification number comparison table may be queried according to the certification number to obtain the department to which the certification number belongs and the corresponding person. The department authority information table includes fields such as the department, the authority corresponding to the department, and the person in the department. The first authority corresponding to the certification number may be determined according to the department authority information table.

[0095] For some departmental authority information tables, there is an associated personnel authority information table, while for other departmental authority information tables, there is no associated personnel authority information table. If the departmental authority information table is associated with the personnel authority information table, the personnel authority information table includes fields such as personnel and the authority corresponding to the personnel. The second authority corresponding to the authentication number can be determined based on the personnel authority information table. This method can be used to determine the basic authority corresponding to the authentication number.

[0096] Reference Figure 3 In the embodiment of this article, after step S105, the following steps are also included:

[0097] S106: If the password matching is unsuccessful, the operation and maintenance personnel terminal is prompted to send the authentication password again, and the authentication password sent by the operation and maintenance personnel terminal and subsequent steps are received.

[0098] After step S104, if the password matching fails, it means that the authentication password sent by the operator terminal is incorrect. At this time, the operator terminal can be prompted to send the authentication password again, for example, through voice prompts, text prompts, etc. Then, step S104 to step S106 are executed repeatedly until the password matches successfully and the corresponding basic permissions are opened.

[0099] Reference Figure 4 In another embodiment of the present invention, after step S105, the following steps are further included:

[0100] S107: If the password matching fails, the number of times the same operation and maintenance personnel terminal sends the authentication password within a set time period is counted;

[0101] S108: If the number of times is greater than the set number threshold, a prompt message indicating authentication failure is sent to the operation and maintenance personnel terminal;

[0102] S109: If the number of times is not greater than the set number threshold, prompt the operation and maintenance personnel terminal to repeatedly send the authentication password, and execute receiving the authentication password sent by the operation and maintenance personnel terminal and subsequent steps.

[0103] Different from the above step S106, a set number of thresholds can be set in advance, and the set number of thresholds can be set according to actual conditions, generally 5 times or 3 times, etc. When a password match fails, first count the number of times the same operation and maintenance personnel terminal sends the authentication password within the set time period. If it is less than or equal to the set number of thresholds, you can loop steps S104, S105, S107 to S109. If it is greater than the set number of thresholds, send a prompt message of authentication failure to the operation and maintenance personnel terminal. The specific prompt message can be a voice prompt or a text prompt, etc. At the same time as the prompt message is sent, the authentication password sent by the same operation and maintenance personnel terminal will no longer be received within the set time period. Compared with the previous embodiment, the setting of the set number of thresholds can prevent malicious access attacks, reduce the situation where malicious access occupies running time and storage space, and further ensure the security performance of the system.

[0104] Reference Figure 5In the embodiment of this invention, after receiving the authentication password sent by the operation and maintenance personnel terminal and matching the authentication password with the standard password in the password library, the method further includes:

[0105] S301: receiving fingerprint information sent by an operation and maintenance personnel terminal;

[0106] S302: Matching the fingerprint information with information in a fingerprint database;

[0107] S303: If the fingerprint matches successfully and the password matches successfully, the basic permissions of the authentication number corresponding to the successfully matched standard password are released.

[0108] In addition to password matching, fingerprint matching can also be performed. In the specific process, the server can accept the fingerprint information sent by the operation and maintenance personnel terminal, or it can also collect the fingerprint information of the operation and maintenance personnel through the input terminal and send it to the server. The fingerprint information of all operation and maintenance personnel is entered in advance in the fingerprint library, and the basic permissions are opened only when the fingerprint match is successful and the password match is successful. Of course, the number of thresholds can be set in advance according to the aforementioned embodiments, and multiple password matches can be performed. The increased fingerprint matching can carry out a multi-level and multi-angle security performance layout to improve the security of the operation and maintenance process.

[0109] Reference Figure 6 , in the embodiment of this article, further comprising:

[0110] S401: If the fingerprint match fails, but the password match succeeds, then perform backup information verification;

[0111] S402: If the backup information is verified, the basic authority corresponding to the authentication number is opened.

[0112] In actual situations, fingerprint matching may fail due to injuries to the operator's fingers, etc. In this case, in order to ensure the security of the operation and maintenance process, backup information verification can be performed. Specifically, during the backup information verification process, the server receives the backup information sent by the operator's terminal, and matches the backup information with the information in the backup information library. If the backup information matches successfully, the basic permissions of the corresponding authentication number can be opened.

[0113] Of course, during the fingerprint matching process, you can match multiple times and set the preset number of matches in advance. The preset number of matches can be 5 times or 3 times, etc. When the number of matches is less than the preset number of matches, you can accept the fingerprint information sent by the operation and maintenance personnel terminal again for another fingerprint match. When multiple matches are unsuccessful and the password match is successful, you can perform backup information verification.

[0114] If the password matches successfully, and the fingerprint matches multiple times or the backup information verification still fails, a prompt message indicating that the authentication failed can be sent to the operator's terminal. The specific prompt message can be a voice prompt or a text prompt, etc. When the prompt message is sent, the authentication password sent by the same operator's terminal will no longer be received within the set time period.

[0115] The backup information verification includes: one or more of face recognition verification, voice recognition verification, handwriting recognition verification or iris recognition verification. Taking face recognition verification as an example, the backup information database stores the face information of all operation and maintenance personnel, which can be used to identify the face information.

[0116] In the embodiment of this article, if the fingerprint match is successful and the password match is unsuccessful, the above step S106 or steps S107 to S109 can be executed to match the password multiple times. When the password matches multiple times and still fails, a prompt message of authentication failure can be sent to the operation and maintenance personnel terminal. The specific prompt message can be a voice prompt or a text prompt, etc. At the same time as the prompt message is sent, the authentication password sent by the same operation and maintenance personnel terminal will no longer be received within a set time period.

[0117] If the fingerprint match is unsuccessful and the password match is unsuccessful, the backup information verification can be performed through steps S401 to S402 to replace the fingerprint match, or the fingerprint can be matched multiple times. Of course, the above steps S106 or steps S107 to S109 can also be performed to match the password multiple times. However, when the backup information verification or the fingerprint multiple matches are successful, and the password multiple matches are still unsuccessful, a prompt message of authentication failure can be sent to the operation and maintenance personnel terminal. The specific prompt message can be a voice prompt or a text prompt, etc. At the same time as the prompt message is sent, the authentication password sent by the same operation and maintenance personnel terminal will no longer be received within the set time period.

[0118] The embodiment of the present invention further provides a management method for secure operation and maintenance, which is applied to an operation and maintenance personnel terminal, including:

[0119] Send the operator's authentication number to the server;

[0120] Receive the standard password sent by the server and send the authentication password to the server.

[0121] In another embodiment of this invention, when the operation and maintenance personnel operate the terminal in the operation and maintenance operation area, the facial information of the operation and maintenance personnel is collected in real time; if the facial information is not collected within the set time threshold or the current facial information is inconsistent with the facial information at the previous moment, a voice prompt of failed collection is given. The facial information of the operation and maintenance personnel can be collected in real time through a camera, and the operation and maintenance personnel can be reminded to enter the face into the frame through a voice prompt. The purpose of this practice is to monitor the operation of the operation and maintenance personnel in real time and ensure the safety of the operation and maintenance process. Even if a problem occurs, there is a basis for subsequent accountability.

[0122] In another embodiment of the present invention, the operation and maintenance personnel can apply for advanced permissions on top of the basic permissions. When applying for advanced permissions, the operation and maintenance personnel can submit corresponding advanced permission requests on the server side. When submitting the advanced permission request, the operation and maintenance personnel's authentication number needs to be entered, and then the corresponding advanced permission request is uploaded to the operation side. The management personnel can receive the corresponding request through the operation side and review the request. The operation side sends the review result to the server side. After confirming that the review result is passed, the server side will open the corresponding advanced permissions to the corresponding operation and maintenance personnel.

[0123] Of course, after the operation and maintenance personnel complete the operation, the server can revoke the basic and advanced permissions of the corresponding operation and maintenance personnel to ensure the security of operation and maintenance.

[0124] Based on the above-mentioned management method of a safe operation and maintenance, the embodiments of this article also provide a management device for safe operation and maintenance. The device may include a system (including a distributed system), software (application), module, component, server, client, etc. using the method described in the embodiments of this article and a device combined with necessary implementation hardware. Based on the same innovative concept, the device in one or more embodiments provided in the embodiments of this article is as described in the following embodiments. Since the implementation scheme and method of the device to solve the problem are similar, the implementation of the specific device in the embodiments of this article can refer to the implementation of the aforementioned method, and the repetitions will not be repeated. As used below, the term "unit" or "module" can implement a combination of software and / or hardware with predetermined functions. Although the device described in the following embodiments is preferably implemented in software, the implementation of hardware, or a combination of software and hardware, is also possible and conceived.

[0125] Specifically, Figure 7 This is a schematic diagram of the module structure of an embodiment of a management device for security operation and maintenance provided in the embodiments of this article, referring to Figure 7 As shown, a management device for secure operation and maintenance provided in an embodiment of the present invention includes a server, wherein the server includes: a receiving module 100, an authority determination module 200, a password transmission module 300, a judgment module 400, and an opening module 500.

[0126] Receiving module 100: receiving the authentication number of the operation and maintenance personnel;

[0127] The authority determination module 200: determines the basic authority corresponding to the authentication number according to the authentication number, the department authority information table and the personnel authority information table;

[0128] Password transfer module 300: generates a standard password according to the basic authority and / or the authentication number, stores the standard password in a password library, and sends the standard password to the operation and maintenance personnel terminal;

[0129] Determination module 400: receiving an authentication password sent by an operation and maintenance personnel terminal, and matching the authentication password with a standard password in the password library;

[0130] Open module 500: If the password matches successfully, the basic permissions of the authentication number corresponding to the successfully matched standard password are opened.

[0131] The embodiment of the present invention further provides a management device for secure operation and maintenance, including an operation and maintenance personnel terminal, wherein the operation and maintenance personnel terminal includes: a first sending module and a second sending module.

[0132] The first sending module: sends the authentication number of the operation and maintenance personnel to the server;

[0133] The second sending module: receives the standard password sent by the server and sends the authentication password to the server.

[0134] Reference Figure 8 ,The embodiment of this article also provides a management system for security operation and maintenance, including a server 1 and an operation and maintenance personnel terminal 2;

[0135] The server 1 is used to receive the authentication number of the operation and maintenance personnel; determine the basic authority corresponding to the authentication number according to the authentication number, the department authority information table and the personnel authority information table; generate a standard password according to the basic authority and / or the authentication number, store the standard password in the password library, and send the standard password to the operation and maintenance personnel terminal; receive the authentication password sent by the operation and maintenance personnel terminal, match the authentication password with the standard password in the password library; if the passwords match successfully, open the basic authority of the authentication number corresponding to the successfully matched standard password;

[0136] The operation and maintenance personnel terminal 2 is used to send the operation and maintenance personnel's authentication number to the server; receive the standard password sent by the server, and send the authentication password to the server.

[0137] Reference Fig. 9As shown, based on the above-mentioned management method for security operation and maintenance, a computer device 902 is also provided in one embodiment of this invention, wherein the above-mentioned method is run on the computer device 902. The computer device 902 may include one or more processors 904, such as one or more central processing units (CPUs) or graphics processing units (GPUs), and each processing unit may implement one or more hardware threads. The computer device 902 may also include any memory 906, which is used to store any kind of information such as code, settings, data, etc. In a specific implementation, the computer program on the memory 906 and which can be run on the processor 904, when the computer program is run by the processor 904, can execute instructions according to the above-mentioned method. Non-limitingly, for example, the memory 906 may include any one or more combinations of the following: any type of RAM, any type of ROM, flash memory device, hard disk, optical disk, etc. More generally, any memory may use any technology to store information. Further, any memory may provide volatile or non-volatile retention of information. Further, any memory may represent a fixed or removable component of the computer device 902. In one embodiment, when the processor 904 executes the associated instructions stored in any memory or combination of memories, the computer device 902 can perform any operation of the associated instructions. The computer device 902 also includes one or more drive mechanisms 908 for interacting with any memory, such as a hard disk drive mechanism, an optical disk drive mechanism, etc.

[0138] The computer device 902 may also include an input / output module 910 (I / O) for receiving various inputs (via input devices 912) and for providing various outputs (via output devices 914). A specific output mechanism may include a presentation device 916 and an associated graphical user interface 918 (GUI). In other embodiments, the input / output module 910 (I / O), input device 912, and output device 914 may not be included, and the computer device 902 may be used as a computer device in a network. The computer device 902 may also include one or more network interfaces 920 for exchanging data with other devices via one or more communication links 922. One or more communication buses 924 couple the components described above together.

[0139] The communication link 922 may be implemented in any manner, for example, through a local area network, a wide area network (e.g., the Internet), a point-to-point connection, etc., or any combination thereof. The communication link 922 may include any combination of hardwired links, wireless links, routers, gateway functions, name servers, etc. governed by any protocol or combination of protocols.

[0140] Corresponds to Figure 1-Figure 6The method in this article also provides a computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, the steps of the above method are executed.

[0141] The embodiment of the present invention also provides a computer readable instruction, wherein when the processor executes the instruction, the program therein causes the processor to execute the following Figures 1 to 6 The method shown.

[0142] It should be understood that in the various embodiments of this document, the size of the serial numbers of the above-mentioned processes does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of this document.

[0143] It should also be understood that in the embodiments of this article, the term "and / or" is only a description of the association relationship of the associated objects, indicating that three relationships may exist. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. In addition, the character " / " in this article generally indicates that the associated objects before and after are in an "or" relationship.

[0144] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the composition and steps of each example have been generally described in terms of function in the above description. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this article.

[0145] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0146] In the several embodiments provided herein, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic, for example, the division of the units is only a logical function division, and there may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the mutual coupling or direct coupling or communication connection shown or discussed can be an indirect coupling or communication connection through some interfaces, devices or units, or can be electrical, mechanical or other forms of connection.

[0147] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the embodiments of this article.

[0148] In addition, each functional unit in each embodiment of this invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above integrated unit may be implemented in the form of hardware or in the form of software functional unit.

[0149] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this article is essentially or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions to enable a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of this article. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk and other media that can store program codes.

[0150] Specific embodiments are used in this article to illustrate the principles and implementation methods of this article. The description of the above embodiments is only used to help understand the methods and core ideas of this article. At the same time, for general technicians in this field, according to the ideas of this article, there will be changes in the specific implementation methods and application scopes. In summary, the content of this specification should not be understood as a limitation on this article.

Claims

1. A method for managing safe operation and maintenance, characterized in that: Applied to the server, including: Receive the certification number of the operation and maintenance personnel; According to the certification number, determine the department and person to which the certification number belongs; According to the department to which the certification number belongs, querying the corresponding department authority information table to determine the first authority corresponding to the certification number, wherein the department authority information table stores authority information corresponding to each department; According to the department authority information table, determining whether the department to which the certification number belongs is associated with a personnel authority information table; If so, query the corresponding personnel authority information table according to the personnel to which the certification number belongs, determine the second authority corresponding to the certification number, and determine the first authority and the second authority as the basic authority corresponding to the certification number; If not associated, determining the first permission as the basic permission corresponding to the authentication number; Generate a standard password according to the basic authority and / or the authentication number, store the standard password in a password library, and send the standard password to the operation and maintenance personnel terminal; Receiving an authentication password sent by an operation and maintenance personnel terminal, and matching the authentication password with a standard password in the password library; If the password matches successfully, the basic permissions of the authentication number corresponding to the successfully matched standard password will be released; After receiving the authentication password sent by the operation and maintenance personnel terminal and matching the authentication password with the standard password in the password library, the method further includes: Receive fingerprint information sent by the operation and maintenance personnel terminal; Matching the fingerprint information with information in a fingerprint library; If the fingerprint and password match is successful, the basic permissions of the authentication number corresponding to the successfully matched standard password will be released; If the fingerprint matches successfully, but the password matches unsuccessfully, the password will be matched multiple times; If the fingerprint match fails, but the password match succeeds, the backup information verification is performed; If the backup information is verified, the basic permissions of the corresponding authentication number are opened; If the fingerprint match fails and the password match fails, the fingerprint match is replaced by the backup information verification, or the fingerprint is matched multiple times, or the password is matched multiple times.

2. The method for managing safe operation and maintenance according to claim 1, characterized in that: Also includes: If the password matching fails, the operation and maintenance personnel terminal is prompted to resend the authentication password, and the authentication password sent by the operation and maintenance personnel terminal and subsequent steps are received.

3. The method for managing safe operation and maintenance according to claim 1, characterized in that: Also includes: If the password match fails, the number of times the same operator's terminal sends the authentication password within the set time period is counted; If the number of times is greater than the set number threshold, a prompt message indicating authentication failure is sent to the operation and maintenance personnel terminal; If the number of times is not greater than the set number threshold, the operation and maintenance personnel terminal is prompted to repeat sending the authentication password, and the authentication password sent by the operation and maintenance personnel terminal and subsequent steps are received.

4. The method for managing safe operation and maintenance according to claim 1, characterized in that: The backup information verification includes: one or more of face recognition verification, voice recognition verification, handwriting recognition verification or iris recognition verification.

5. A management device for safe operation and maintenance, characterized in that: The device includes a server, which includes: Receiving module: receiving the authentication number of the operation and maintenance personnel; Authority determination module: determining the department and personnel to which the certification number belongs based on the certification number; According to the department to which the certification number belongs, querying the corresponding department authority information table to determine the first authority corresponding to the certification number, wherein the department authority information table stores authority information corresponding to each department; According to the department authority information table, determining whether the department to which the certification number belongs is associated with a personnel authority information table; If so, query the corresponding personnel authority information table according to the personnel to which the certification number belongs, determine the second authority corresponding to the certification number, and determine the first authority and the second authority as the basic authority corresponding to the certification number; If not associated, determining the first permission as the basic permission corresponding to the authentication number; Password transfer module: generates a standard password according to the basic authority and / or the authentication number, stores the standard password in a password library, and sends the standard password to the operation and maintenance personnel terminal; Judgment module: receiving the authentication password sent by the operation and maintenance personnel terminal, and matching the authentication password with the standard password in the password library; Open module: If the password matches successfully, the basic permissions of the authentication number corresponding to the successfully matched standard password will be opened; After receiving the authentication password sent by the operation and maintenance personnel terminal and matching the authentication password with the standard password in the password library, the method further includes: Receive fingerprint information sent by the operation and maintenance personnel terminal; Matching the fingerprint information with information in a fingerprint library; If the fingerprint and password match is successful, the basic permissions of the authentication number corresponding to the successfully matched standard password will be released; If the fingerprint matches successfully, but the password matches unsuccessfully, the password will be matched multiple times; If the fingerprint match fails, but the password match succeeds, the backup information verification is performed; If the backup information is verified, the basic permissions of the corresponding authentication number are opened; If the fingerprint match fails and the password match fails, the fingerprint match is replaced by the backup information verification, or the fingerprint is matched multiple times, or the password is matched multiple times.

6. A computer device comprising a memory, a processor, and a computer program stored in the memory, characterized in that: When the computer program is executed by the processor, the computer program executes the instructions of the method according to any one of claims 1 to 4.

7. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor of a computer device, the computer program executes the instructions of the method according to any one of claims 1 to 4.

Images