A method and system for access control authority management based on associated production business

Abstract

The present invention discloses a method and system for managing access rights based on production-related services, the method comprising the following steps: obtaining the start time, end time and personnel list of a preset production service; obtaining the authority association relationship of each person in the personnel list during the execution of the preset production service; writing the access rights of each person in the personnel list into the access control system based on the obtained start time of the preset production service and the authority association relationship of each person in the personnel list; eliminating the access rights of each person in the personnel list in the access control system based on the obtained end time of the preset production service and the authority association relationship of each person in the personnel list. In the method of the present invention, the access rights are directly associated with the production service, which can realize the automatic change of the access rights, increase the convenience of work, and also avoid safety hazards to a certain extent.

Description

Technical Field

[0001] The present invention belongs to the field of access control technology, and in particular relates to an access control authority management method and system based on associated production services. Background Art

[0002] In today's thermal power plant personnel structure, outsourced personnel have accounted for a considerable proportion, and the business they are involved in has become increasingly broad, no longer limited to cleaning, catering, civil engineering, etc., but has extended to fuel, equipment maintenance and repair, and even unit operation control. Outsourced personnel include not only long-term contract outsourced personnel of long-term contract units, but also short-term contract personnel and temporary workers.

[0003] At present, for the access control management of outsourced personnel, whether they are long-term or short-term employees, they need to be granted corresponding access control permissions in advance according to work needs; when there are changes in the work area, it is necessary to contact the administrator in time to adjust the access control permissions.

[0004] The existing access control management model is not only labor-intensive and cumbersome to handle, but also may affect the normal development of production business and may even leave safety hazards if the access control rights of personnel are not increased or revoked in a timely manner.

[0005] In summary, there is an urgent need for a new access control authority management method and system based on associated production services. Summary of the invention

[0006] The purpose of the present invention is to provide a method and system for managing access control rights based on production-related services to solve one or more of the above-mentioned technical problems. In the method of the present invention, the access control rights are directly associated with the production services, which can realize the automatic change of the access control rights, increase the convenience of work, and also avoid safety hazards to a certain extent.

[0007] In order to achieve the above object, the present invention adopts the following technical solutions:

[0008] A method for managing access rights based on associated production services of the present invention comprises the following steps:

[0009] Get the start time, end time and personnel list of the preset production business;

[0010] Obtaining the authority association relationship of each person in the personnel list during the execution of the preset production business;

[0011] Based on the obtained start time of the preset production business and the authority association relationship between each person in the personnel list, the access control authority of each person in the personnel list is written into the access control system; based on the obtained end time of the preset production business and the authority association relationship between each person in the personnel list, the access control authority of each person in the personnel list is eliminated in the access control system.

[0012] A further improvement of the present invention is that the preset production business includes one or more of a work ticket, a measure ticket, an operation ticket, a regular test, a regular switch, a patrol inspection and a spot check.

[0013] A further improvement of the present invention is that the pre-step of writing the access control rights of each person in the personnel list into the access control system or removing the access control rights of each person in the personnel list into the access control system further includes:

[0014] Add the characteristic identification information data of the corresponding personnel to the access control system.

[0015] A further improvement of the present invention is that the feature recognition information data includes one or more of face information, fingerprint information and ID information.

[0016] A further improvement of the present invention is that the authority association relationship is an association relationship between personnel, business, equipment function location code and door.

[0017] A further improvement of the present invention is that in the authority association relationship, personnel and business are associated many-to-many; business and equipment function location code are associated many-to-many; equipment function location code and door in the access control system are associated many-to-one.

[0018] A further improvement of the present invention is that the doors in the access control system are hierarchically divided into one or more layers, each layer containing one or more doors; the access control system is represented as one or more tree structures;

[0019] Among them, one can enter the lower door only after entering each upper door, and can exit the upper door only after exiting each lower door; if there are multiple doors at the same level, and the areas within the multiple doors are interconnected, then the multiple doors at this level are merged into the same door node in the tree structure; when the device function location code is associated with the door in the access control system, if the same device function location is within the scope of multiple preset doors, then the door with the lowest level among the multiple preset doors is taken as the associated door of the device function location code.

[0020] A further improvement of the present invention is that the step of writing the access control rights of each person in the personnel list into the access control system based on the acquired start time of the preset production business and the authority association relationship of each person in the personnel list; and the step of eliminating the access control rights of each person in the personnel list in the access control system based on the acquired end time of the preset production business and the authority association relationship of each person in the personnel list specifically includes:

[0021] Based on the obtained start time of the preset production service and the authority association relationship of each person in the personnel list, the doors granted access rights include the doors directly corresponding to the association relationship between the personnel, production service, equipment function location code, and door, as well as all upper doors required to enter the directly corresponding door;

[0022] Based on the end time of the preset production business and the authority association relationship of each person in the personnel list, the set of doors whose access rights are revoked is XY, where X represents the set of doors associated with the terminated production business and all upper doors thereof, and Y represents the set of doors associated with other unterminated production businesses in which the personnel participate and all upper doors thereof.

[0023] The present invention provides a door access authority management system based on associated production services, comprising:

[0024] The first acquisition module is used to obtain the start time, end time and personnel list of the preset production business;

[0025] A second acquisition module is used to obtain the authority association relationship of each person in the personnel list during the execution of the preset production business;

[0026] The authority update module is used to write the access control permissions of each person in the personnel list into the access control system based on the obtained start time of the preset production business and the permission association relationship between each person in the personnel list; and is used to eliminate the access control permissions of each person in the personnel list in the access control system based on the obtained end time of the preset production business and the permission association relationship between each person in the personnel list.

[0027] Compared with the prior art, the present invention has the following beneficial effects:

[0028] In the method of the present invention, the access control authority is directly associated with the production business, which can realize the automatic change of the access control authority, increase the convenience of work, and avoid safety hazards to a certain extent. Specifically, the present invention directly associates the access control authority with the production business in which it participates, and through the interconnection between the production system and the access control system, it is realized that when the production business starts or ends, the personnel in the member list of the production business are automatically granted or withdrawn the access control access rights of the corresponding work area, which greatly reduces the workload of access control authority maintenance and avoids the safety hazards that may be caused by human factors. BRIEF DESCRIPTION OF THE DRAWINGS

[0029] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art; obviously, the drawings described below are some embodiments of the present invention, and for ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0030] Figure 1 is a tree structure diagram of a door access control system in an embodiment of the present invention;

[0031] Figure 2 It is a schematic diagram of a collection of doors whose access control rights are reclaimed through production services in an embodiment of the present invention;

[0032] Figure 3 It is a business and process diagram of a thermal power plant intelligent access control method for outsourced personnel in an embodiment of the present invention. DETAILED DESCRIPTION

[0033] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0034] It should be noted that the terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0035] The present invention is further described in detail below in conjunction with the accompanying drawings:

[0036] In the embodiment of the present invention, the technical problem to be solved is to provide a method for intelligent access control authority management of thermal power plants mainly for outsourced personnel, which directly links the access control authority of outsourced personnel to enter and exit different areas with production business. When the production business starts, the access control authority of the corresponding work area is automatically granted to the outsourced personnel. When the production business ends, the access control authority of the corresponding area is automatically withdrawn, thereby standardizing the activity area of ​​the outsourced personnel according to business needs, realizing automatic change of access control authority, increasing work convenience, and also avoiding safety hazards that may be caused by human factors.

[0037] See also Figures 1 to 3 , a method for managing access control rights based on associated production services according to an embodiment of the present invention comprises the following steps:

[0038] Get the start time, end time and personnel list of the preset production business;

[0039] Obtaining the authority association relationship of each person in the personnel list during the execution of the preset production business;

[0040] Based on the obtained start time of the preset production business and the authority association relationship between each person in the personnel list, the access control authority of each person in the personnel list is written into the access control system; based on the obtained end time of the preset production business and the authority association relationship between each person in the personnel list, the access control authority of each person in the personnel list is eliminated in the access control system.

[0041] In the method provided in the embodiment of the present invention, the access control authority is directly associated with the production business, which can realize the automatic change of the access control authority, increase the convenience of work, and also avoid safety hazards to a certain extent.

[0042] In an embodiment of the present invention, the preset production business includes one or more of work tickets, measure tickets, operation tickets, regular tests, regular switching, patrol inspections and spot checks. The pre-step of writing the access control rights of each person in the personnel list into the access control system or eliminating the access control rights of each person in the personnel list in the access control system also includes: adding feature identification information data of the corresponding person into the access control system. Among them, the feature identification information data includes one or more of face information, fingerprint information and ID information. The authority association relationship is the association relationship between personnel, business, equipment function location code and door.

[0043] In the embodiment of the present invention, in the permission association relationship, personnel and services are associated many-to-many; services and equipment function location codes are associated many-to-many; equipment function location codes are associated many-to-one with doors in the access control system. For example, the same person can enter the work member range of multiple services at the same time, and the work members of a service can include multiple personnel; a service can include work tasks at multiple equipment function locations, and the same equipment function location can generate work tasks for multiple services; each equipment function location code uniquely corresponds to a door in the access control system, but a door in the access control system can correspond to multiple equipment function location codes.

[0044] In a preferred embodiment of the present invention, the doors in the access control system are hierarchically divided into one or more layers, each layer containing one or more doors; the access control system is represented as one or more tree structures; wherein, only after entering each upper door can one enter the lower door, and only after exiting each lower door can one exit the upper door; if there are multiple doors at the same level, and the areas within the multiple doors are interconnected, then the multiple doors at the level are merged into the same door node in the tree structure; when the device function location code is associated with the door in the access control system, if the same device function location is within the range of multiple preset doors, then the door with the lowest level among the multiple preset doors is taken as the associated door for the device function location code. Exemplarily, Figure 1 The access control system in is divided into three layers. A and B are the first-layer door nodes, which are also root nodes. The areas under the jurisdiction of A and B are not interoperable. A complete tree structure is formed from A and B nodes downward. C~G are the second-layer door nodes, and H~L are the third-layer door nodes. To enter the H gate, you must first enter the A and C gates in sequence. If the current personnel are in the area under the jurisdiction of the K gate and want to exit the B gate, they must first exit the K and G gates in sequence. If a certain device is in the area under the jurisdiction of the J gate, it is obvious that the device is also in the jurisdiction of the E and A gates. When the functional location code of the device is associated with the door in the access control system, the lowest-level door among J, E, and A, the J gate, needs to be taken as the associated door of the functional location code of the device.

[0045] In an embodiment of the present invention, the step of writing the access control rights of each person in the personnel list in the access control system based on the obtained start time of the preset production service and the authority association relationship of each person in the personnel list; and the step of eliminating the access control rights of each person in the personnel list in the access control system based on the obtained end time of the preset production service and the authority association relationship of each person in the personnel list specifically includes: based on the obtained start time of the preset production service and the authority association relationship of each person in the personnel list, the doors to which access rights are granted include the doors directly corresponding to the association relationship of the personnel, the production service, the equipment function location code, and the doors, and all upper doors required to enter the directly corresponding doors, that is, in the tree structure of the access control system, the parent node of the directly corresponding door, the parent node of the parent node, etc., extend all the way to the root node of the first layer; based on the obtained end time of the preset production service and the authority association relationship of each person in the personnel list, the set of doors whose access rights are revoked is XY, where X represents the set of doors associated with the terminated production service and all upper doors thereof, and Y represents the set of doors associated with other unterminated production services in which the personnel participate and all upper doors thereof. For example, Figure 2 As shown, the left ellipse X represents the set of doors and all upper doors associated with the terminated production business, and the right ellipse Y represents the set of doors and all upper doors associated with other unterminated production businesses participated in by the person, XY is Figure 2 The blank area without background pattern within the X range represents the set of doors and all outer doors associated with the terminated production business, but not the set of doors and all outer doors associated with other unterminated production business. Figure 2 The oblique line background pattern area in , namely X∩Y, represents the set of doors shared by the terminated production business and the unterminated production business. Figure 2 The grid background pattern area in , namely YX, represents the set of doors that belong to unterminated production business but not to terminated production business.

[0046] At the preset production start time, The access control permissions required by personnel are written to the access control system through the data interface from the production business system. At the preset end time of the production business, Access control permissions that are not currently required by personnel are withdrawn from the production business system through the data interface in the access control system.

[0047] The following are device embodiments of the present invention, which can be used to perform method embodiments of the present invention. For details not disclosed in the device embodiments, please refer to the method embodiments of the present invention.

[0048] An access control authority management system based on associated production services according to an embodiment of the present invention includes:

[0049] The first acquisition module is used to obtain the start time, end time and personnel list of the preset production business;

[0050] A second acquisition module is used to obtain the authority association relationship of each person in the personnel list during the execution of the preset production business;

[0051] The authority update module is used to write the access control permissions of each person in the personnel list into the access control system based on the obtained start time of the preset production business and the permission association relationship between each person in the personnel list; and is used to eliminate the access control permissions of each person in the personnel list in the access control system based on the obtained end time of the preset production business and the permission association relationship between each person in the personnel list.

[0052] In summary, the present invention relates to the field of access control technology, and in particular to a method and system for access control authority management based on associated production services, including: obtaining the start time, end time and personnel list of a preset production service; obtaining the authority association relationship of each person in the personnel list during the execution of the preset production service; writing the access control authority of each person in the personnel list into the access control system based on the obtained start time of the preset production service and the authority association relationship of each person in the personnel list; eliminating the access control authority of each person in the personnel list in the access control system based on the obtained end time of the preset production service and the authority association relationship of each person in the personnel list. Through the interconnection between the production system and the access control system, the automatic granting or withdrawal of access control access authority of personnel in the corresponding work area when the production service starts or ends is realized, so that the activity area of ​​the outsourced personnel of the thermal power plant can be standardized according to business requirements, and the automatic change of access control authority can be realized, which greatly reduces the workload of access control authority maintenance, and also avoids the potential safety hazards caused by human factors.

[0053] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the above embodiments, ordinary technicians in the relevant field should understand that the specific implementation methods of the present invention can still be modified or replaced by equivalents. Any modification or equivalent replacement that does not depart from the spirit and scope of the present invention should be covered within the scope of protection of the claims of the present invention.

Claims

1. A method for managing access rights based on associated production services, characterized in that: The following steps are involved: Get the start time, end time and personnel list of the preset production business; Obtaining the authority association relationship of each person in the personnel list during the execution of the preset production business; wherein the authority association relationship is the association relationship between personnel, business, equipment function location code and door; in the authority association relationship, personnel and business are many-to-many associated; business and equipment function location code are many-to-many associated; equipment function location code and door in the access control system are many-to-one associated; Based on the obtained start time of the preset production business and the authority association relationship between each person in the personnel list, the access control authority of each person in the personnel list is written into the access control system; based on the obtained end time of the preset production business and the authority association relationship between each person in the personnel list, the access control authority of each person in the personnel list is eliminated in the access control system; The doors in the access control system are hierarchically divided into one or more layers, each layer containing one or more doors; the access control system is represented as one or more tree structures; Among them, after entering each upper door, you can enter the lower door, and after exiting each lower door, you can exit the upper door; if there are multiple doors at the same level, and the areas within the multiple doors are interconnected, then the multiple doors at this level are merged into the same door node in the tree structure; when the device function location code is associated with the door in the access control system, if the same device function location is within the belonging range of multiple preset doors, then the door with the lowest level among the multiple preset doors is taken as the associated door of the device function location code; The steps of writing the access control rights of each person in the personnel list into the access control system based on the acquired start time of the preset production service and the authority association relationship of each person in the personnel list; and removing the access control rights of each person in the personnel list in the access control system based on the acquired end time of the preset production service and the authority association relationship of each person in the personnel list specifically include: Based on the obtained start time of the preset production service and the authority association relationship of each person in the personnel list, the doors granted access rights include the doors directly corresponding to the association relationship between the personnel, production service, equipment function location code, and door, as well as all upper doors required to enter the directly corresponding door; Based on the end time of the preset production business and the authority association relationship of each person in the personnel list, the set of doors whose access rights are revoked is XY, where X represents the set of doors associated with the terminated production business and all upper doors thereof, and Y represents the set of doors associated with other unterminated production businesses in which the personnel participate and all upper doors thereof.

2. A method for managing access control rights based on associated production services according to claim 1, characterized in that: The preset production business includes one or more of a work ticket, a measure ticket, an operation ticket, a regular test, a regular switch, a patrol inspection and a spot check.

3. A method for managing access control rights based on associated production services according to claim 1, characterized in that: The pre-step of writing the access control rights of each person in the personnel list into the access control system or removing the access control rights of each person in the personnel list in the access control system also includes: Add the characteristic identification information data of the corresponding personnel to the access control system.

4. A method for managing access control rights based on associated production services according to claim 3, characterized in that: The feature recognition information data includes one or more of face information, fingerprint information and ID information.

5. A door access control authority management system based on associated production business, characterized in that: include: The first acquisition module is used to obtain the start time, end time and personnel list of the preset production business; The second acquisition module is used to obtain the authority association relationship of each person in the personnel list during the execution of the preset production business; wherein the authority association relationship is the association relationship between personnel, business, equipment function location code and door; in the authority association relationship, personnel and business are many-to-many associations; business and equipment function location code are many-to-many associations; equipment function location code and door in the access control system are many-to-one associations; The permission updating module is used to write the access control permissions of each person in the personnel list into the access control system based on the acquired start time of the preset production business and the permission association relationship of each person in the personnel list; and is used to eliminate the access control permissions of each person in the personnel list in the access control system based on the acquired end time of the preset production business and the permission association relationship of each person in the personnel list; The doors in the access control system are hierarchically divided into one or more layers, each layer containing one or more doors; the access control system is represented as one or more tree structures; Among them, after entering each upper door, you can enter the lower door, and after exiting each lower door, you can exit the upper door; if there are multiple doors at the same level, and the areas within the multiple doors are interconnected, then the multiple doors at this level are merged into the same door node in the tree structure; when the device function location code is associated with the door in the access control system, if the same device function location is within the belonging range of multiple preset doors, then the door with the lowest level among the multiple preset doors is taken as the associated door of the device function location code; The steps of writing the access control rights of each person in the personnel list into the access control system based on the acquired start time of the preset production service and the authority association relationship of each person in the personnel list; and removing the access control rights of each person in the personnel list in the access control system based on the acquired end time of the preset production service and the authority association relationship of each person in the personnel list specifically include: Based on the obtained start time of the preset production service and the authority association relationship of each person in the personnel list, the doors granted access rights include the doors directly corresponding to the association relationship between the personnel, production service, equipment function location code, and door, as well as all upper doors required to enter the directly corresponding door; Based on the end time of the preset production business and the authority association relationship of each person in the personnel list, the set of doors whose access rights are revoked is XY, where X represents the set of doors associated with the terminated production business and all upper doors thereof, and Y represents the set of doors associated with other unterminated production businesses in which the personnel participate and all upper doors thereof.

Images