A data management method, a data management device and a readable storage medium

Abstract

The application discloses a data management method, a data management device and a computer readable storage medium. The method comprises the following steps: receiving user information collected by an access control terminal; obtaining service data associated with the user information in a service database; when the service data comprises a red list identifier, sending a red list user access instruction to the access control terminal, and controlling the access control terminal to perform a private access action. The technical problem that the related art does not support access management of data restricted disclosure personnel is solved, and the access of the data restricted disclosure personnel is managed.

Description

TECHNICAL FIELD

[0001] The present application relates to the field of intelligent security and protection, and in particular to a data management method, a data management device and a computer readable storage medium. BACKGROUND

[0002] With the rapid development of society and the progress of technology, intelligent security and protection systems are widely used in communities and other places. People have higher requirements for living environment and safety, and need to have the ability to perceive changes in community living environment and safety. In order to meet the functional requirements of modern residential communities, intelligent security and protection systems are indispensable and have become a basic supporting facility of modern residential communities and one of the means to improve the living quality of modern residential communities.

[0003] In related technologies, traditional security and protection systems support blacklisted personnel and whitelisted personnel. Whitelisted personnel refers to trusted personnel, and the platform or system does not generate an alarm or early warning for personnel in the whitelist. Blacklisted personnel refers to untrusted personnel, and the platform or system generates an alarm for personnel in the blacklist. Face recognition is used to manage the entry and exit of personnel.

[0004] However, the traditional security and protection system only supports management of black list and white list data, and cannot well protect the privacy of users with specific needs, nor can it manage data-restricted public personnel.

[0005] The above content is only used to assist in understanding the technical solutions of the present application and does not represent the acknowledgement of the above content as prior art. SUMMARY

[0006] The embodiments of the present application provide a data management method, a data management device, a data management system and a computer readable storage medium, which solve the technical problem that the related art cannot well protect the privacy of users with specific needs and does not support management of data-restricted public personnel or motor vehicles, and achieve the technical effect of protecting user privacy and supporting management of data-restricted public personnel or motor vehicles.

[0007] The embodiments of the present application provide a data management method, which comprises:

[0008] receiving user information collected by an access control terminal;

[0009] obtaining service data associated with the user information in a service database;

[0010] when the service data includes a red list identifier, sending a red list user access instruction to the access control terminal to control the access control terminal to perform a private access action.

[0011] Optionally, before the step of acquiring the service data associated with the user information in the service database, the method further comprises:

[0012] Upon detecting the red list update action, determining the update content corresponding to the update action;

[0013] Determining the target data corresponding to the update content in the service database;

[0014] Updating the red list identifier associated with the target data according to the update content.

[0015] Optionally, before the step of updating the red list identifier associated with the target data according to the update content, the method further comprises:

[0016] When the update action is a data deletion action, determining the target data corresponding to the update content according to a pre-stored association relationship;

[0017] The step of updating the red list identifier associated with the target data according to the update content comprises:

[0018] Deleting the red list identifier associated with the target data.

[0019] Optionally, after the step of updating the red list identifier associated with the target data according to the update content, the method further comprises:

[0020] When the update action is a data addition action, establishing an association relationship between the update content and the target data, and saving the association relationship into a preset database;

[0021] When the update action is a data deletion action, deleting the association relationship between the update content and the target data saved in the preset database.

[0022] Optionally, before the step of acquiring the service data associated with the user information in the service database, the method further comprises:

[0023] Upon detecting a service data update action, determining the update content corresponding to the update action;

[0024] When the update action is a data addition action, determining the target data corresponding to the update content in the red list library;

[0025] Updating the red list identifier associated with the update content;

[0026] Establishing an association relationship between the update content and the target data, and saving the association relationship into a preset database;

[0027] When the update action is a data deletion action, the association between the update content and the target data saved in the preset database is deleted.

[0028] Optionally, after the step of sending the red list user access instruction to the access control terminal and controlling the access control terminal to perform the private access action, the method further comprises:

[0029] Updating the access record associated with the user information.

[0030] Saving the communication record and the red list identifier in association.

[0031] Optionally, the data management method further comprises:

[0032] Upon receiving a data viewing instruction, determining target data corresponding to the data viewing instruction, wherein the target data comprises the access record, red list data, and the service data;

[0033] When the target data has an associated red list identifier, determining a query authority corresponding to the communication record viewing instruction;

[0034] When the query authority meets the authority requirement, outputting the access record;

[0035] Otherwise, outputting prompt information that the query authority is not available.

[0036] Optionally, the data management method further comprises:

[0037] Presetting an update time, and periodically updating the association for each red list data based on the update time;

[0038] The step of updating the association comprises:

[0039] Determining data content of the red list data;

[0040] Determining target data corresponding to the data content in the service database;

[0041] Updating the red list identifier associated with the target data;

[0042] Establishing an association between the data content and the target data, and saving the association in a preset database.

[0043] In addition, the present application also proposes a data management device, which comprises a memory, a processor, and a data management program stored in the memory and executable on the processor, wherein the processor implements the steps of the data management method as described above when executing the data management program.

[0044] In addition, the application further provides a computer readable storage medium, wherein the computer readable storage medium stores a data management program, and the data management program is executed by a processor to implement the steps of the data management method.

[0045] The one or more technical solutions provided in the embodiments of the application have at least the following technical effects or advantages:

[0046] 1. Since the red list library and the business database are independently stored, and the access rights of the red list data and the business data with the red list identifier are set, the technical problem that the user privacy cannot be well protected in the related art is effectively solved, and the privacy of the user with specific needs is protected.

[0047] 2. Since the one-to-many multi-dimensional collision of the red list data and the business data is performed, the red list identifier is added to the business data with the collision success, and the association relationship between the business data with the collision success and the red list data is established and stored, the technical problem that the association between the restricted public data and the business data is not supported in the related art is effectively solved, and the association between the red list data and the business data is established.

[0048] 3. Since the multi-dimensional collision of the changed data is performed when the red list data or the business data is added, deleted or modified, the time interval is set, the red list data and the business data are collided at regular intervals, and the association between the business data and the red list data is constructed in full, the technical problem that the restricted public data and the business data are not supported in the related art is effectively solved, and the restricted public data and the business data are managed.

[0049] 4. Since the user information collected by the access control terminal is received, the business data associated with the user information in the business database is obtained, when the red list identifier is included in the business data, the red list user access instruction is sent to the access control terminal, and the private access action of the access control terminal is controlled, the technical problem that the data restricted public personnel is not supported in the related art is effectively solved, and the user privacy is protected when the data restricted public personnel accesses. BRIEF DESCRIPTION OF DRAWINGS

[0050] Figure 1 The flowchart of the data management method embodiment one of the application is shown in the figure.

[0051] Figure 2 The flowchart of the data management method embodiment two of the application is shown in the figure.

[0052] Figure 3 The flowchart of the data management method embodiment five of the application is shown in the figure.

[0053] Figure 4 Flowchart for the process after step S302 of the sixth embodiment of the data management method of the present application;

[0054] Figure 5 Hardware structure diagram related to the data management device embodiment of the present application. DETAILED DESCRIPTION

[0055] In the related art, the traditional security system only supports management of blacklist and whitelist data, and cannot well protect the privacy of users with specific needs, nor can it manage data-restricted public personnel, motor vehicles, etc. The main technical solution adopted by the embodiments of the present application is: matching the user information collected by the access control end with the business data, if the business data has a red list identifier, a private communication action is performed; the red list data and the business data are respectively independently stored, and access permissions are set for the red list data and the business data with the red list identifier; a one-to-many multi-dimensional collision is performed on the red list data and the business data, a red list identifier is added to the business data that succeeds in the collision, and an association relationship is established and stored between the business data that succeeds in the collision and the red list data. Thus, the data-restricted public personnel are managed in passing, and the privacy of the user is protected when passing.

[0056] In order to better understand the above technical solutions, the exemplary embodiments of the present application will be described in more detail below with reference to the accompanying drawings. Although the exemplary embodiments of the present application are shown in the drawings, it should be understood that the present application can be implemented in various forms and should not be limited by the embodiments described herein. On the contrary, these embodiments are provided so that the present application can be more thoroughly understood and the scope of the present application can be fully conveyed to those skilled in the art.

[0057] Embodiment one

[0058] Embodiment one of the present application discloses a data management method, referring to Figure 1 , the data management method comprises:

[0059] Step S10, receiving user information collected by the access control end;

[0060] The access control end can be a passing inspection port, including a blocking part and an information collection part, wherein the blocking part can be a barrier driven by a gate, or a double-sided sliding induction door, or a rotating door driven by a gate. The information collection part can be an optical camera, or a fingerprint collector, or a access card sensor, and the present application embodiment does not specifically limit the form of the blocking part and the information collection part. The user information can be face information, license plate number, vehicle color, access card number, fingerprint, etc.

[0061] As an optional implementation, when the user is located at the access control end in the waiting area, the access control end collects the corresponding user information in the waiting area and sends it to the management system.

[0062] For example, the user is in the waiting area in front of the double-side sliding induction door, and the access control end optical camera can collect clear images in this area. At this time, the access control end collects the user's portrait information and sends it to the management system. Among them, the access control end only collects the closest portrait information, and if there are multiple portraits in the image frame, the other users are prompted to wait outside the waiting area.

[0063] For example, the vehicle stops in front of the barrier driven by the gate machine, and the barrier can rotate around one end, which can be driven by a motor. The barrier allows only one vehicle to pass through each time it is lifted and lowered. At this time, the vehicle is in the waiting area in this area, and the access control end optical camera can collect clear images. At this time, the access control end collects the image information of the vehicle and sends it to the management system. Among them, the image information parses the license plate number. Or, the image information parses the license plate number and the vehicle color. Among them, the image information parsing can be completed at the access control end or at the management system.

[0064] Step S20, obtaining service data associated with the user information in the service database;

[0065] The service database stores service data used to compare user information, wherein the service data includes personnel data, vehicle data, and access card data. The personnel data includes face pictures, face features, names, certificate types, certificate numbers, contact numbers, etc. The vehicle data includes license plate numbers, vehicle pictures, vehicle features, vehicle brands, vehicle models, vehicle identification codes, engine numbers, vehicle owner names, vehicle owner certificate types, vehicle owner certificate numbers, vehicle owner contact numbers, etc. The access card data includes access card numbers, houses / owners associated with the access card, cardholder face pictures, cardholder names, cardholder certificate types, cardholder certificate numbers, and cardholder contact numbers. Each piece of service data has a unique id.

[0066] As an optional implementation, when the user is located at the access control end in the waiting area, the access control end collects the corresponding user information in the waiting area and sends it to the management system.

[0067] For example, when the user passes through the access control, the face image sent by the access control end is received, the face features are parsed from the face image, and the face picture and face features of the personnel data in the service database are compared to determine a piece of personnel data that can simultaneously match the face picture and face features.

[0068] Exemplarily, when the person passes through the access control terminal, the fingerprint image sent by the access control terminal is received, the fingerprint image is analyzed to obtain the fingerprint feature value, the fingerprint image and the fingerprint feature value of the person data in the business database are compared, and one piece of person data capable of matching the fingerprint image and the fingerprint feature value at the same time is determined.

[0069] As another optional implementation, when the vehicle passes through the access control terminal, the user information sent by the access control terminal is received, and the user information is compared with the vehicle data in the business database to determine the vehicle data matching the user information.

[0070] Exemplarily, when the vehicle passes through the access control terminal, the vehicle image sent by the access control terminal is received, the vehicle image is analyzed to obtain the license plate number, and the license plate number of the vehicle data in the business database is compared to determine the vehicle data matching the vehicle image.

[0071] Exemplarily, when the vehicle passes through the access control terminal, the vehicle image sent by the access control terminal is received, the vehicle image is analyzed to obtain the license plate number, the vehicle color and the vehicle brand, and the license plate number, the vehicle color and the vehicle brand of the vehicle data in the business database are compared to determine the vehicle data matching the vehicle image.

[0072] In step S30, when the business data includes a red list identifier, a red list user passing instruction is sent to the access control terminal to control the access control terminal to perform a private passing action.

[0073] The red list is data subject to restricted disclosure, that is, private data. Only users or administrators with permissions are allowed to operate and query the red list data. Other data associated with the red list data cannot be queried by users without permissions, and the red list data and the business data are respectively stored on independent memories. The red list identifier is a field of a piece of data, which is used to identify that the business data is associated with the red list data, but does not contain specific red list data information. That is, the red list identifier is only a marker, and the specific red list data cannot be traced back through the red list identifier. When the red list associated with the business data is deleted, the red list flag of the business data is cleared. The data with the red list identifier and the red list data are only open to query for users with permissions, and the user can only query the data associated with himself.

[0074] As an optional implementation, when the determined business data has a red list identifier, that is, the business data matches the user information at this time, and on this basis the business data has a red list identifier, the access control terminal is controlled to release, but the user information is not displayed.

[0075] Exemplarily, in the personnel passing scenario, the face information of the user is collected, compared with the business data, and the personnel data is determined. If the personnel data has a red list identifier, it means that the user to be passed is a red list member. The access control end is controlled to open the door to pass, and the information of the user is not displayed on the display screen, and no information is broadcasted.

[0076] Exemplarily, in the vehicle passing scenario, the vehicle information is collected, compared with the business data, and the vehicle data is determined. If the vehicle data has a red list identifier, it means that the vehicle to be passed is a vehicle recorded in the red list. The access control end is controlled to raise the barrier or open the garage door, and the vehicle information is not displayed on the display screen, and no information related to the vehicle is broadcasted.

[0077] The application discloses a data management method, and the technical scheme in the embodiment of the application has at least the following technical effects or advantages:

[0078] Since the user information collected by the access control end is received, the business data associated with the user information in the business database is obtained, and when the red list identifier is included in the business data, the red list user passing instruction is sent to the access control end to control the access control end to perform the private passing action, the technical problem that the related art does not support the passing management of the data limited public personnel is effectively solved, and the user privacy is protected when the data limited public personnel passes.

[0079] Based on the same inventive concept, the embodiment of the application also provides a management method of the business data and the red list data in the first embodiment, which is seen in the second embodiment.

[0080] Embodiment two

[0081] Reference Figure 2 The data management method disclosed by the application further comprises the following steps before step S20:

[0082] Step S40, when the red list update action is detected, determining the update content corresponding to the update action;

[0083] The red list database stores red list data, wherein the red list data includes personnel data, vehicle data, and access card data. The personnel data includes a face picture, a face feature, a name, a certificate type, a certificate number, a contact number, and the like. The vehicle data includes a license plate number, a vehicle picture, a vehicle feature, a vehicle brand, a vehicle model, a vehicle identification code, an engine number, a vehicle owner name, a vehicle owner certificate type, a vehicle owner certificate number, a vehicle owner contact number, and the like. The access card data includes an access card number, a house / owner associated with the access card, a face picture of a card holder, a card holder name, a card holder certificate type, a card holder certificate number, a card holder contact number, and the like. Each piece of data has a unique id identifier, and each field of each piece of data does not necessarily have data content. For example, a piece of red list personnel data has a face picture and a name. The red list update actions include adding data, deleting data, and modifying data, wherein the modifying data is to delete data and then add data. The update content includes changed fields and corresponding data content in the data.

[0084] As an optional implementation, when it is detected that the red list data is changed, the content of the changed data is obtained, and non-empty fields in the changed data and data content corresponding to the fields are determined. Here, the non-empty fields do not refer to the field attribute being non-empty, but refer to the fields in the changed data that have data content.

[0085] For example, when it is detected that the red list database adds red list data, it is determined that the non-empty fields in the added data are a data id, a face picture, and a face feature, and the above fields and corresponding content of each field are determined.

[0086] For example, when it is detected that the red list database deletes red list data, it is determined that the non-empty fields in the deleted red list data are a data id, a face picture, and a face feature, and the above fields and corresponding content of each field are determined.

[0087] In step S50, the target data corresponding to the update content in the business database is determined.

[0088] According to the change content, the business data associated with the change content in the business database is determined. The target data is not limited to one piece, but can be multiple pieces. However, the target data needs to meet the condition that, in addition to the data id, the data content corresponding to the same field as the change content is also the same.

[0089] As an optional implementation, when the red list data is added, a multi-dimensional collision method is used to determine the target data in the business database corresponding to the update content. The multi-dimensional collision is not limited to one field of data, and compares not only the face features, but also the identification information, contact number, etc. Meanwhile, the multi-dimensional collision is not limited to comparing one entity data. For example, the red list personnel collides with the business personnel library, and at the same time collides with the business vehicle library, the business access card library, etc.

[0090] For example, for the face picture attribute of the red list personnel, a 1-to-N face comparison technology is used to collide with all business data containing face pictures. For the identification information attribute of the red list personnel, the identification information of the personnel library, the owner identification information of the vehicle library, and the card holder identification information of the access card library are compared. For the contact number attribute of the red list personnel, the contact number of the personnel library, the owner contact number of the vehicle library, and the card holder contact number of the access card library are compared.

[0091] In step S60, the red list identifier associated with the target data is updated according to the update content.

[0092] According to the type of the update action, the red list identifier of the determined target data is changed. That is, when the data is added, the red list identifier is added to the determined target data; when the data is deleted, the red list identifier of the determined target data has been added, and the red list identifier of the target data is deleted.

[0093] As an optional implementation, when the red list data is added, the red list identifier is added to the determined target data.

[0094] As another optional implementation, when the red list data is deleted, the red list identifier of the target data is deleted.

[0095] The technical solutions in the embodiments of the present application have at least the following technical effects or advantages:

[0096] Because the red list data and the business data are subjected to one-to-many multi-dimensional collision, the red list identifier is added to the business data that collides successfully, and an association relationship is established between the business data that collides successfully and the red list data and is stored, so that the technical problem that the association between the restricted public data and the business data is not supported in the related art is effectively solved, and the association between the red list data and the business data is established.

[0097] Embodiment Three

[0098] Based on Embodiment Two, the present application discloses a data management method, before step S60, further comprising:

[0099] Step S100, when the update action is a data deletion action, determining the target data corresponding to the update content according to the pre-stored association relationship;

[0100] Step S200, the step of updating the red list identifier associated with the target data according to the update content comprises:

[0101] deleting the red list identifier associated with the target data.

[0102] As an optional implementation, when it is detected that the red list data has a data deletion, the deleted red list data is determined, denoted as data 1. The data content corresponding to the field is determined in the data 1, except for the data id. In the pre-stored database, the corresponding association relationship is found in the preset database according to the data id of the deleted data, the data id of the target data is determined according to the association relationship, the corresponding business data is found in the business database according to the data id of the target data, and the target data is denoted as target data. The red list identifier of the target data is deleted.

[0103] The technical solutions in the embodiments of the present application have at least the following technical effects or advantages:

[0104] Since the target data in the business database is determined according to the association relationship in the pre-stored database when the red list data has a data deletion, and the red list identifier of the target data is deleted, the technical problem that the red list data cannot be associated and managed with the business data in the security field in the related art is effectively solved, and the business data is synchronously managed when the red list data is deleted in the case that the red list data and the business data are independently stored.

[0105] Embodiment Four

[0106] Based on Embodiment Three, the present application discloses a data management method, after step S60, further comprising:

[0107] Step S300, when the update action is a data addition action, establishing an association relationship between the update content and the target data, and saving the association relationship into a preset database;

[0108] Step S400, when the update action is a data deletion action, deleting the association relationship between the update content and the target data saved in the preset database.

[0109] The association relationship is stored in a preset database, and the association relationship associated with the data id can be determined according to the data id of the red list data or the data id of the business data. In the embodiment, the role of the association relationship is to determine the business data associated with the red list data through the data id of the red list data, or to determine the red list data associated with the business data through the data id of the business data.

[0110] As an optional implementation, when it is detected that the red list data is added, the target data is determined in the business database, the data id of the red list data and the data id of the target data are stored in a piece of data, and the data is stored in the preset database. When it is detected that the red list data is deleted, the corresponding association relationship is found in the preset database according to the data id of the deleted data, and the association relationship is deleted.

[0111] For example, the preset database, the red list database and the business database are respectively stored in independent storage media. One association relationship is a piece of data, and the data has two fields: red list data id and business data id.

[0112] For example, the preset database, the red list database and the business database are respectively stored in independent storage media. One association relationship is a piece of data, and the data has two fields: red list data id and business data id.

[0113] For example, the preset database, the red list database and the business database are respectively stored in independent storage media. One association relationship is a piece of data, and the data has four fields: red list data id, business data id, red list data library serial number and business data library serial number.

[0114] As another optional implementation, modifying the red list database data is to delete the red list data and then add the red list data.

[0115] The technical solutions in the embodiments of the present application have at least the following technical effects or advantages:

[0116] Since the data id of the red list data and the corresponding business data is stored in the preset database as an association relationship, the technical problem that data synchronization cannot be performed when the red list database and the business database are independently stored in the related art is effectively solved. Further, the data of the business database is synchronously managed when the red list database data is added, deleted or modified.

[0117] Embodiment five

[0118] Reference Figure 3 The present application discloses a data management method, before step S20, further comprising:

[0119] Step S001, when detecting a service data update action, determining the update content corresponding to the update action;

[0120] Step S002, when the update action is a data addition action, determining the target data corresponding to the update content in the red list library;

[0121] Step S003, updating the red list identifier associated with the update content;

[0122] Step S004, establishing an association between the update content and the target data, and saving the association to a preset database;

[0123] Step S005, when the update action is a data deletion action, deleting the association between the update content and the target data saved in the preset database.

[0124] When it is detected that the business database has changed, and the change is the addition of business data, the content of the changed data is obtained, and the non-empty fields in the changed data and the data content corresponding to the fields are determined. Here, the non-empty field does not refer to the field attribute being non-empty, i.e., the non-empty field refers to the field in the changed data that has data content.

[0125] As an optional implementation, a multi-dimensional collision method is used to determine the target data corresponding to the update content in the red list database. Multi-dimensional collision is not limited to one field of data, but compares facial features, identification information, contact numbers, etc. Meanwhile, multi-dimensional collision is not limited to comparing one entity data. For example, a business personnel collides with the red list personnel library, and also collides with the red list vehicle library, the red list access card library, etc.

[0126] For example, for the facial picture attribute of the business data, a 1-to-N facial comparison technology is used to collide with all red list data containing facial pictures. For the identification information attribute of the business data, the identification, vehicle owner identification, and card holder identification of the red list data in various personnel libraries, vehicle libraries, and access card libraries are compared. For the contact number attribute of the business data, the contact numbers of the red list data in various personnel libraries, the contact numbers of the vehicle owners in the vehicle library, and the contact numbers of the card holders in the access card library are compared.

[0127] After determining the red list data matching the business data, the red list data is recorded as target data, the red list identifier is added to the business data, and the data id of the business data and the data id of the target data are combined into a piece of data as the association between the business data and the target data, and saved to a preset database.

[0128] When detecting that the service database has changed and the change is deletion of service data, a corresponding association relationship in the preset database is found according to the data id of the deleted data, and the association relationship is deleted.

[0129] As another optional implementation, modifying the service database data comprises deleting the service database data and adding the service database data.

[0130] The technical solutions in the embodiments of the present application have at least the following technical effects or advantages:

[0131] Since the update content of the added data is determined when detecting that the service data is added, the target data in the red list database is determined according to the update content, the red list identifier is added to the added data, and the association relationship between the service data and the target data is established; when detecting that the service data is deleted, the corresponding association relationship in the preset database is determined according to the data id of the deleted data, and the association relationship is deleted. Therefore, the technical problem that the red list database is not provided in the related art and the red list database and the service database cannot be synchronously managed is effectively solved, and the red list database data is synchronously managed when the service database is added, deleted or modified.

[0132] Embodiment six

[0133] The present application discloses a data management method, after step S30, further comprising:

[0134] Step S301, updating the pass record associated with the user information;

[0135] Step S302, saving the communication record and the red list identifier.

[0136] As an optional implementation, after completing one pass, the information of the pass is recorded and saved as a pass record in the pass record database. If the pass is a private pass, the red list identifier is added to the pass record. In this embodiment, the pass record is one data. The pass record can be classified into a face snapshot record, an access card record and a vehicle record according to the type of the pass.

[0137] For example, the face snapshot record has the following fields: event ID, device ID, personnel ID, face picture address, background picture address, event time, face feature algorithm, face feature value, red list flag, creation time and update time.

[0138] For example, the access card record has the following fields: event ID, device ID, access card number, personnel ID, face picture address, background picture address, event time, face feature algorithm, face feature value, red list flag, creation time and update time.

[0139] Exemplarily, the vehicle record has fields including: event ID, device ID, license plate number, vehicle brand, vehicle body color, vehicle picture address, background picture address, event time, motor vehicle feature algorithm, motor vehicle feature value, red list flag, creation time, and update time.

[0140] As another optional implementation, the access control terminal collects information once and saves a passage record to the passage record database, and adds an un-passed flag to the un-passed passage record.

[0141] Referring to Figure 4 After the step S302, the method further includes:

[0142] S303, when receiving the data viewing instruction, determining target data corresponding to the data viewing instruction, wherein the target data includes the passage record, the red list data, and the business data;

[0143] S304, when the target data has an associated red list flag, determining a query authority corresponding to the communication record viewing instruction;

[0144] S305, when the query authority meets the authority requirement, outputting the passage record;

[0145] S306, otherwise, outputting prompt information that the user does not have the query authority.

[0146] In the embodiment, the passage data with the red list flag, the business data with the red list flag, and the red list data are only open to users with the query authority, i.e., the management system or the user without the authority cannot access the above data without authorization. The users with the query authority include the personnel in the red list personnel library and the administrator of all databases.

[0147] As an optional implementation, the query mode is a webpage query or an application program query. The application program does not limit the running environment, and can be a mobile terminal, a large-screen interactive terminal, a computer, or other terminals. The user logs in the data query page through an account password. After logging in, the user can only view the red list data of the user, the business data of the user, and the passage record associated with the business data.

[0148] Exemplarily, the user enters the data query website and inputs an account password or a mobile phone number for verification. The encryption verification form is not specifically limited. After entering the information display interface, the user can only view the red list data, the business data, and the passage record associated with the account. The user can also add, delete, or modify the red list data and the business data.

[0149] As another optional implementation, the user performs data query in the data query interface. When the target data corresponding to the input data keyword does not have the red list identifier, the business data or the pass record is output. When the target data corresponding to the input data keyword has the red list identifier, a prompt information is output, prompting that the user does not have the query right and needs to obtain the right before continuing to query.

[0150] As another optional implementation, the user performs data query in the data query interface. The data query includes accurate query and range query. When the accurate query is performed, the input content includes data content corresponding to a single field such as a person name, a face picture, and a license plate number. When the range query is performed, the input content includes but is not limited to a time range.

[0151] For example, the user without the right performs accurate query in the data query interface and inputs a license plate number. When the target data corresponding to the license plate number has the red list identifier, the query interface does not display the data. When the target data corresponding to the license plate number does not have the red list identifier, the query interface displays the target data.

[0152] For example, the user without the right performs range query in the data query interface and inputs a query time range. The input method can be to select a time interval or to input a start time and an end time. The query interface displays the target data without the red list identifier in the time range.

[0153] As another optional implementation, the association relationship between the red list data and the business data is established when the red list data and the business data are newly added. A construction time can be preset. After each construction time node, each red list data and business data are collided once in 1:N, the association between the business data and the red list is reconstructed in full amount, and the red list flag of the pass record corresponding to the business data with the red list identifier is updated.

[0154] The technical solutions in the embodiments of the present application have at least the following technical effects or advantages:

[0155] Since the query right is set for the red list data, the business data with the red list identifier, and the pass record with the red list identifier, the technical problem that there is no red list management in the security field in the related art is effectively solved, and the privacy of the red list user is protected.

[0156] The present application also provides a data management device. Referring to Figure 5 , Figure 5 The data management device structure schematic diagram of the hardware running environment related to the embodiments of the present application.

[0157] AsFigure 5 As shown in the figure, the data management device can include a processor 1001, such as a central processing unit (CPU), a communication bus 1002, a user interface 1003, a network interface 1004, and a memory 1005. The communication bus 1002 is used to realize the connection and communication between the components. The user interface 1003 can include a display, an input unit such as a keyboard, and can also include a standard wired interface, a wireless interface. The network interface 1004 can optionally include a standard wired interface, a wireless interface (such as a wireless fidelity (WIreless-FIdelity, WI-FI) interface). The memory 1005 can be a high-speed random access memory (RAM) memory, or a stable non-volatile memory (Non-Volatile Memory, NVM), such as a disk memory. The memory 1005 can also be a storage device independent of the aforementioned processor 1001.

[0158] Those skilled in the art can understand that Figure 5 The structure shown in the figure does not constitute a limitation on the data management device, and can include more or fewer components than the figure, or combine certain components, or different component arrangements.

[0159] Optionally, the memory 1005 is electrically connected with the processor 1001, and the processor 1001 can be used to control the operation of the memory 1005, and can also read the data in the memory 1005 to realize data management.

[0160] Optionally, as Figure 5 As a storage medium, the memory 1005 can include an operating system, a data storage module, a network communication module, a user interface module, and a data management program.

[0161] Optionally, in the data management device shown in Figure 5 The network interface 1004 is mainly used for data communication with other devices; the user interface 1003 is mainly used for data interaction with the user; the processor 1001 and the memory 1005 in the data management device of the present application can be arranged in the data management device.

[0162] As Figure 5 The data management device calls the data management program stored in the memory 1005 through the processor 1001, and executes the related step operations of the data management method provided by the embodiments of the present application:

[0163] Receiving user information collected by the access control terminal;

[0164] acquire service data associated with the user information in a service database;

[0165] when the red list identifier is included in the service data, send a red list user access instruction to the access control terminal, and control the access control terminal to perform a private communication action.

[0166] Optionally, the processor 1001 can call the data management program stored in the memory 1005, and further perform the following operations:

[0167] when a red list update action is detected, determine the update content corresponding to the update action;

[0168] determine target data corresponding to the update content in the service database;

[0169] Optionally, the processor 1001 can call the data management program stored in the memory 1005, and further perform the following operations:

[0170] when the update action is a data deletion action, determine the target data corresponding to the update content according to the pre-stored association relationship;

[0171] The step of updating the red list identifier associated with the target data according to the update content comprises:

[0172] delete the red list identifier associated with the target data.

[0173] Optionally, the processor 1001 can call the data management program stored in the memory 1005, and further perform the following operations: when the update action is a data addition action, establish an association relationship between the update content and the target data, and save the association relationship in a preset database;

[0174] when the update action is a data deletion action, delete the association relationship between the update content and the target data saved in the preset database.

[0175] Optionally, the processor 1001 can call the data management program stored in the memory 1005, and further perform the following operations:

[0176] when a service data update action is detected, determine the update content corresponding to the update action;

[0177] when the update action is a data addition action, determine target data corresponding to the update content in the red list library;

[0178] update the red list identifier associated with the update content;

[0179] establishing an association between the update content and the target data, and saving the association into a preset database;

[0180] when the update action is a data deletion action, deleting the association between the update content and the target data saved in the preset database.

[0181] Optionally, the processor 1001 can invoke the data management program stored in the memory 1005, and further perform the following operations:

[0182] updating the access record associated with the user information;

[0183] saving the communication record and the blacklist identifier in association.

[0184] Optionally, the processor 1001 can invoke the data management program stored in the memory 1005, and further perform the following operations:

[0185] when the update action is a data deletion action, deleting the association between the update content and the target data saved in the preset database.

[0186] when the target data has the associated blacklist identifier, determining the query authority corresponding to the communication record query instruction;

[0187] when the query authority meets the authority requirement, outputting the access record;

[0188] otherwise, outputting prompt information that does not have the query authority.

[0189] Optionally, the processor 1001 can invoke the data management program stored in the memory 1005, and further perform the following operations:

[0190] presetting an update time, and periodically updating the association based on the update time;

[0191] the step of updating the association includes:

[0192] determining the data content of the blacklist data;

[0193] determining the target data corresponding to the data content in the business database;

[0194] updating the blacklist identifier associated with the target data;

[0195] establishing an association between the data content and the target data, and saving the association into a preset database.

[0196] In addition, the embodiment of the present application further provides a computer readable storage medium, wherein the computer readable storage medium stores a data management program, and the data management program is executed by a processor to implement the related steps of any one of the data management methods.

[0197] Those skilled in the art should understand that the embodiments of the present application can be provided as a method, a system, or a computer program product. Therefore, the present application can take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. In addition, the present application can take the form of a computer program product implemented on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROMs, optical storage, etc.) containing computer-usable program code.

[0198] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each flow and / or block in the flowcharts and / or block diagrams, and the combination of the flows and / or blocks in the flowcharts and / or block diagrams can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing apparatus to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing apparatus generate a means for implementing the functions specified in the flowcharts and / or block diagrams. Figure 1 one or more flows and / or blocks Figure 1 an apparatus that performs the functions specified in one or more flows and / or blocks.

[0199] These computer program instructions can also be stored in a computer readable memory that can direct a computer or other programmable data processing apparatus to work in a specific manner, so that the instructions stored in the computer readable memory produce a manufacture product including an instruction apparatus that implements the functions specified in the flowcharts and / or block diagrams. Figure 1 one or more flows and / or blocks Figure 1 an apparatus that performs the functions specified in one or more flows and / or blocks.

[0200] These computer program instructions can also be loaded into a computer or other programmable data processing apparatus, so that a series of operation steps are performed on the computer or other programmable data processing apparatus to produce a computer-implemented process, so that the instructions executed on the computer or other programmable data processing apparatus provide a process for implementing the functions specified in the flowcharts and / or block diagrams. Figure 1 one or more flows and / or blocks Figure 1 Figure 1 an apparatus that performs the functions specified in one or more flows and / or blocks.

[0201] It should be noted that any reference signs placed between parentheses in the claims should not be construed as limiting the claims. The word "comprising" does not exclude the presence of components or steps not listed in the claims. The word "a" or "an" preceding a component does not exclude the presence of a plurality of such components. This application can be implemented by means of hardware comprising several different components and by means of a suitably programmed computer. In a unit claim enumerating several means, several of these means may be embodied by the same item of hardware. The use of the words first, second, and third, etc., does not indicate any order. These words can be interpreted as names.

[0202] Although preferred embodiments of this application have been described, those skilled in the art, upon learning the basic inventive concept, can make other changes and modifications to these embodiments. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments as well as all changes and modifications falling within the scope of this application.

[0203] Obviously, those skilled in the art can make various modifications and variations to this application without departing from the spirit and scope of this application. Therefore, if such modifications and variations fall within the scope of the claims of this application and their equivalents, this application also intends to include such modifications and variations.

Claims

1. A data management method, characterized in that, The data management method includes: Receive user information collected by the access control terminal; When a red list update action is detected, the update content corresponding to the update action is determined; When the update action is a data deletion action, the target data corresponding to the update content in the business database is determined according to the pre-stored association relationship; Delete the red list identifier associated with the target data; When the update action is a data addition action, an association is established between the updated content and the target data, and the association is saved to a preset database; When the update action is a data deletion action, the association between the updated content and the target data stored in the preset database is deleted; Retrieve business data associated with the user information from the business database; When the business data includes a red list identifier, a red list user access instruction is sent to the access control terminal to control the access control terminal to perform a private access operation.

2. The data management method as described in claim 1, characterized in that, Before the step of obtaining the business data associated with the user information from the business database, the method further includes: When a business data update action is detected, the update content corresponding to the update action is determined; When the update action is a data addition action, determine the target data corresponding to the update content in the red list database; Update the red list identifier associated with the updated content; Establish a relationship between the updated content and the target data, and save the relationship to a preset database; When the update action is a data deletion action, the association between the updated content and the target data stored in the preset database is deleted.

3. The data management method as described in claim 1, characterized in that, After the step of sending a red-list user access command to the access control terminal and controlling the access control terminal to perform a private access action, the method further includes: Update the access records associated with the user information; The passage records and the red list identifier are stored together.

4. The data management method as described in claim 3, characterized in that, The data management method also includes: Upon receiving a data viewing instruction, the target data corresponding to the data viewing instruction is determined, wherein the target data includes the access records, the red list data, and the business data; When the target data has an associated red list identifier, determine the query permission corresponding to the access record viewing instruction; When the query permission meets the permission requirements, the passage record is output.

5. The data management method as described in claim 1, characterized in that, The data management method also includes: A preset update time is used, and the association relationship for each red list data is periodically updated based on the preset update time; The steps for updating the association include: Determine the data content of the red list; Determine the target data corresponding to the data content in the business database; Update the red list identifier associated with the target data; Establish the association between the data content and the target data, and save the association to a preset database.

6. A data management device, characterized in that, The system includes a memory, a processor, and a data management program stored in the memory and executable on the processor, wherein the processor, when executing the data management program, implements the steps of the data management method as described in any one of claims 1 to 5.

7. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a data management program, which, when executed by a processor, implements the steps of the data management method as described in any one of claims 1 to 5.

Images