Strategy publishing method and device of decision engine, storage medium and electronic equipment

Abstract

The present disclosure relates to a policy publishing method and device of a decision engine, a storage medium and an electronic device. The policy publishing method of the decision engine comprises: in response to a policy publishing instruction corresponding to a current target policy, obtaining policy detail information of the current target policy; sequentially sending the policy detail information to a plurality of target operation nodes based on a preset operation flow template, the target operation nodes being nodes with preset operation permissions predefined by the preset operation flow template, the preset operation flow template indicating an operation sequence of the plurality of target operation nodes; receiving operation feedback information of the plurality of target operation nodes for the policy detail information; and publishing the current target policy if the operation feedback information of the plurality of target operation nodes meets a preset publishing condition. The present disclosure can improve the specialization of policy publishing and ensure data security during the policy publishing process.

Description

Technical Field

[0001] The present disclosure relates to the technical field of decision engines, and in particular to a policy publishing method, device, storage medium, and electronic device for a decision engine. Background Art

[0002] The decision engine is the main means to solve complex and changing business needs. Its purpose is to reduce the coupling between business and system, build a low-code platform, improve system reusability, and support rapid response to demand and environmental changes.

[0003] The policy release of existing decision engines is mainly implemented based on a simple release method. There are data security issues in the policy release process and it is impossible to prevent the release operations of irrelevant personnel, resulting in erroneous release operations; and the correctness of the policy content cannot be guaranteed. Abnormal policy content will cause the decision system to crash. Summary of the Invention

[0004] In order to solve at least one of the above-mentioned technical problems, the present disclosure proposes a policy publishing method, device, storage medium and electronic device for a decision engine.

[0005] According to one aspect of the present disclosure, a policy publishing method for a decision engine is provided, comprising:

[0006] In response to a policy issuance instruction corresponding to a current target policy, obtaining policy detail information of the current target policy;

[0007] Sending the policy details information to a plurality of target operation nodes in sequence based on a preset operation flow template, wherein the target operation nodes are nodes with preset operation permissions predefined by the preset operation flow template, and the preset operation flow template indicates the operation sequence of the plurality of target operation nodes;

[0008] receiving operation feedback information of the multiple target operation nodes with respect to the policy detail information;

[0009] If the operation feedback information of the multiple target operation nodes meets the preset release conditions, the current target strategy is released.

[0010] In some possible implementations, before obtaining the policy details information of the current target policy in response to the policy issuance instruction corresponding to the current target policy, the method further includes:

[0011] Obtaining policy configuration information and input parameter information corresponding to the current target policy;

[0012] generating initial policy details information based on the policy configuration information and creation generation information of the policy configuration information;

[0013] Parsing the initial policy details to obtain a script file in a preset format;

[0014] Performing execution verification on the script file to obtain an execution verification result corresponding to the script file;

[0015] In a case where the execution verification result indicates that the execution process of the script file matches the policy detail information and the input parameter information, the initial policy detail information is determined as the policy detail information of the current target policy.

[0016] In some possible implementations, the creation generation information includes policy identification information of the current target policy, the policy details information includes policy version information, and generating the initial policy details information based on the policy configuration information and the creation generation information of the policy configuration information includes:

[0017] determining the policy group to which the current target policy belongs based on the policy identification information;

[0018] The version information of the current target policy is generated based on the policy configuration information and the policy detail information of other target policies in the policy group.

[0019] In some possible implementations, the method further includes:

[0020] In response to a policy revocation instruction for a published target policy, revoking the target policy;

[0021] Update the release status of the target policy to revoked.

[0022] In some possible implementations, after updating the release status of the target policy to a revoked state, the method further includes:

[0023] In response to a policy re-issuing instruction corresponding to the target policy, searching for an exclusive policy corresponding to the target policy, the exclusive policy being another target policy in the policy group to which the target policy belongs, the release status of which is already released;

[0024] If found, cancel the exclusive strategy;

[0025] Publish the current target policy.

[0026] In some possible implementations, the sending the policy details information to multiple target operation nodes in sequence based on a preset operation flow template includes:

[0027] Based on the information sending order corresponding to the preset operation flow template, the policy details information is sent to the target operation node that ranks first in the order;

[0028] In response to the operation feedback information of the first-ranked target operation node indicating that the policy is passed, sequentially sending the policy detail information to the target operation node next to the first-ranked target operation node;

[0029] If the operation feedback information of any target operation node sent in sequence indicates that the policy is not passed, the sending operation of the policy details information is terminated;

[0030] It is determined that the operation feedback information does not meet a preset release condition.

[0031] In some possible implementations, if the operation feedback information of the multiple target operation nodes meets a preset release condition, before releasing the current target policy, the method further includes:

[0032] When the operation feedback information of each of the multiple target operation nodes indicates that the operation is passed, it is determined that the operation feedback information of the multiple target operation nodes meets the preset release condition, and the step of releasing the current target policy is performed.

[0033] According to a second aspect of the present disclosure, a policy issuing device for a decision engine is provided, the device comprising:

[0034] A policy details information acquisition module, configured to acquire policy details information of the current target policy in response to a policy issuance instruction corresponding to the current target policy;

[0035] a target operation node operation module, configured to sequentially send the policy detail information to a plurality of target operation nodes based on a preset operation flow template, wherein the target operation nodes are nodes with preset operation permissions predefined by the preset operation flow template, and the preset operation flow template indicates the operation sequence of the plurality of target operation nodes;

[0036] an operation feedback information receiving module, configured to receive operation feedback information of the plurality of target operation nodes with respect to the policy detail information;

[0037] The current target policy publishing module is configured to publish the current target policy if the operation feedback information of the plurality of target operation nodes meets a preset publishing condition.

[0038] According to a third aspect of the present disclosure, an electronic device is provided, comprising at least one processor and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the at least one processor implements a policy publishing method of a decision engine as described in any one of the first aspects by executing the instructions stored in the memory.

[0039] According to a fourth aspect of the present disclosure, a computer-readable storage medium is provided, in which at least one instruction or at least one program is stored, and the at least one instruction or at least one program is loaded and executed by a processor to implement a policy publishing method of a decision engine as described in any one of the first aspects.

[0040] It is to be understood that both the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the disclosure.

[0041] In response to a policy release instruction corresponding to the current target policy, the policy details of the current target policy are obtained; based on a preset operation flow template, the policy details are sequentially sent to multiple target operation nodes, where the target operation nodes are nodes with preset operation permissions predefined by the preset operation flow template, and the preset operation flow template indicates the operation order of the multiple target operation nodes; before the target policy is released, the policy details are sequentially sent to the target operation nodes with the specified preset operation permissions based on the preset operation flow template to ensure the security of operations during the release of the current target policy; operational feedback information regarding the policy details from the multiple target operation nodes is received; if the operational feedback information from the multiple target operation nodes meets the preset release conditions, the current target policy is released. The current target policy is released based on the feedback information from the multiple target operation nodes to ensure the legitimacy of the release of the current target policy.

[0042] Further features and aspects of the present disclosure will become apparent from the following detailed description of exemplary embodiments with reference to the attached drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0043] In order to more clearly illustrate the technical solutions and advantages of the embodiments of this specification or the prior art, the following is a brief introduction to the drawings required for use in the embodiments or the prior art descriptions. Obviously, the drawings described below are only some embodiments of this specification. For ordinary technicians in this field, other drawings can be obtained based on these drawings without any creative work.

[0044] Figure 1 A flow chart showing a policy publishing method of a decision engine according to an embodiment of the present disclosure is shown;

[0045] Figure 2 A flow chart showing a policy publishing method of a decision engine according to an embodiment of the present disclosure is shown;

[0046] Figure 3 A schematic diagram showing a flow chart of a method for verifying policy details information according to an embodiment of the present disclosure;

[0047] Figure 4A schematic diagram showing a flow chart of a method for generating version information of a current target policy according to an embodiment of the present disclosure;

[0048] Figure 5 A schematic diagram illustrating a flow chart of a target policy reissuing method according to an embodiment of the present disclosure;

[0049] Figure 6 A schematic diagram showing a flow chart of a target policy revocation method according to an embodiment of the present disclosure;

[0050] Figure 7 A schematic diagram showing the structure of a policy publishing management interface according to an embodiment of the present disclosure is shown;

[0051] Figure 8 A schematic diagram illustrating a process of operating a target policy based on a preset operation flow template according to an embodiment of the present disclosure is shown;

[0052] Figure 9 A flow chart illustrating another policy publishing method of a decision engine according to an embodiment of the present disclosure is shown;

[0053] Figure 10 A schematic diagram illustrating a policy release process of a decision engine according to an embodiment of the present disclosure is shown;

[0054] Figure 11 A block diagram of an electronic device according to an embodiment of the present disclosure is shown. DETAILED DESCRIPTION

[0055] The following will be combined with the drawings in the embodiments of this specification to clearly and completely describe the technical solutions in the embodiments of this specification. Obviously, the embodiments described are only part of the embodiments of this specification, not all of the embodiments. Based on the embodiments in this specification, all other embodiments obtained by ordinary technicians in this field without making any creative efforts are within the scope of protection of this invention.

[0056] It should be noted that the terms "first", "second", etc. in the description and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that the numbers used in this way are interchangeable where appropriate so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions. For example, a process, method, system, product or server that includes a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0057] Various exemplary embodiments, features, and aspects of the present disclosure will be described in detail below with reference to the accompanying drawings. The same reference numerals in the accompanying drawings represent elements with the same or similar functions. Although various aspects of the embodiments are shown in the accompanying drawings, the drawings are not necessarily drawn to scale unless otherwise indicated.

[0058] The word “exemplary” is used exclusively herein to mean “serving as an example, example, or illustration.” Any embodiment described herein as “exemplary” is not necessarily to be construed as preferred or advantageous over other embodiments.

[0059] The term "and / or" herein simply describes an association relationship between associated objects, indicating that three relationships can exist. For example, "A and / or B" can represent the existence of three situations: A alone, A and B simultaneously, and B alone. Furthermore, the term "at least one" herein refers to any combination of at least two of any one or more of a plurality of items. For example, "at least one of A, B, and C" can represent any one or more elements selected from the set consisting of A, B, and C.

[0060] See also Figure 1 , Figure 1 This is a schematic diagram of an application environment provided by an embodiment of the present application, such as Figure 1 As shown, the application environment may include a server 100, a first terminal 110, and a second terminal 120. In actual applications, the server 100, the first terminal 110, and the second terminal 120 may be directly or indirectly connected via wired or wireless communication to achieve interaction between the server 100, the first terminal 110, and the second terminal 120, and this application does not impose any limitation thereto.

[0061] In the embodiment of the present application, the server 100 can be an independent physical server, or a server cluster or distributed system composed of multiple physical servers. It can also be a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, CDN (Content Delivery Network), and big data and artificial intelligence platforms. Specifically, the server 100 can include a physical device, which can specifically include a network communication unit, a processor, and a memory, etc. It can also include software running in the physical device, which can specifically include an application program, etc. In the embodiment of the present application, the server 100 can be used to provide network services and data storage services for the first terminal 110 and the second terminal 120.

[0062] In an embodiment of the present application, the first terminal 110 may include a physical device of the type of a smart phone, a desktop computer, a tablet computer, a laptop computer, a digital assistant, an augmented reality (AR) / virtual reality (VR) device, a smart TV, a smart speaker, a smart wearable device, a vehicle-mounted terminal device, etc., and may also include software running in the physical device, such as an application program, etc. Specifically, the first terminal 110 can be used to perform policy verification on the current target policy, and when a policy release instruction corresponding to the current target policy is received, the policy details information corresponding to the current target policy is sent to multiple target operation nodes, where the target operation node is a node running on the second terminal 120, which can be, for example, an operation client or an operation account, etc. When the operation feedback information of the multiple target operation nodes indicates that the policy is passed, the current target policy is released. The execution subject of the present disclosure is the first terminal 110.

[0063] In the embodiment of the present application, the second terminal 120 may include a physical device such as a smartphone, a desktop computer, a tablet computer, a laptop computer, a digital assistant, an augmented reality (AR) / virtual reality (VR) device, a smart TV, a smart speaker, a smart wearable device, or an in-vehicle terminal device. It may also include software running on the physical device, such as an application. Specifically, the second terminal 120 may be used to obtain operational feedback information of policy details corresponding to the current target policy and send it to the first terminal 110.

[0064] In addition, it should be noted that Figure 1 What is shown is merely an application environment of a policy publishing method of a decision engine. The application environment may include more or fewer nodes, and this application does not impose any limitation thereto.

[0065] In addition, numerous specific details are provided in the following detailed description to better illustrate the present disclosure. Those skilled in the art will appreciate that the present disclosure can be practiced without certain specific details. In some instances, methods, means, components, and circuits well known to those skilled in the art are not described in detail in order to highlight the main points of the present disclosure.

[0066] Figure 2 A flow chart showing a policy publishing method of a decision engine according to an embodiment of the present disclosure is shown as follows: Figure 2 As shown, the above method includes:

[0067] S101, in response to a policy release instruction corresponding to a current target policy, obtaining policy details of the current target policy;

[0068] The policy details information is used to represent the specific content information of the current target policy. When the policy management front-end application of the first terminal 110 receives the policy release instruction corresponding to the current target policy, it obtains the policy details information of the current target policy from the database. The policy details information includes the version information of the current target policy.

[0069] In some embodiments, the policy management front-end application of the first terminal 110 receives the policy release instruction corresponding to the current target policy clicked by the user based on the policy release interface, and obtains the policy details information of the current target policy. For example, the policy details information includes policy content and version information. For example, the policy content is "When '0 < amount to be paid <10000', you need to confirm with 'Mobile Verification Code'; when 'Amount to be paid> =10000', "Face Recognition" is required for confirmation.

[0070] S102: Sending policy details to multiple target operation nodes in sequence based on a preset operation flow template, where the target operation nodes are nodes with preset operation permissions predefined by the preset operation flow template, and the preset operation flow template indicates the operation sequence of the multiple target operation nodes;

[0071] The preset operation flow template corresponds to a preset number of target operation nodes, each of which has preset operation permissions. The target operation nodes correspond one-to-one to the preset operation permissions, and different target operation nodes have different preset operation permissions. The preset operation flow template includes operation sequence information, which is used to characterize the operation order of the multiple target operation nodes corresponding to the target policy for the target policy. The multiple target operation nodes can be nodes with preset operation permissions deployed on the same or different terminals. After the policy management front-end application of the first terminal 110 obtains the policy details information of the current target policy from the database, it sends the policy details information in sequence to the multiple target operation nodes corresponding to the preset operation flow template.

[0072] In one embodiment, the preset operation flow template includes but is not limited to the operation template number, form template, operation process, operation result and operation template status. The preset operation flow template is constructed based on user needs. The operation process includes operation nodes, and each operation node has preset operation permissions. For example, the operation process includes three operation nodes. The operation permission of the first target operation node is limited to "business manager", the operation permission of the second target operation node is limited to "strategy personnel", and the operation permission of the third target operation node is limited to "strategy manager". <10000', you need to confirm with 'Mobile Verification Code'; when 'Amount to be paid>=10000', "face recognition" is required for confirmation. "It is sent sequentially to multiple target operation nodes corresponding to the operation process of the preset operation flow template, so that each operation node obtains the operation results of different users based on the preset operation permissions.

[0073] The above technical solution sends the policy details information corresponding to the current target policy to different target operation nodes in sequence, allowing users to review the policy details information based on preset operation permissions, ensuring the legitimacy of the reviewer and the data security of the current target policy.

[0074] S103: Receive operation feedback information of multiple target operation nodes with respect to policy detail information;

[0075] The operation feedback information is used to indicate whether the instruction is issued through the current target policy.

[0076] In some embodiments, the first terminal 110 sequentially receives operation feedback information of multiple target operation nodes regarding policy detail information. Exemplarily, the operation feedback information includes operation feedback information indicating that the policy has not passed and operation feedback information indicating that the policy has passed.

[0077] S104: If the operation feedback information of multiple target operation nodes meets the preset release conditions, the current target strategy is released.

[0078] The preset release condition is used to indicate that each target operation node publishes instructions through the current target policy. When each target operation node publishes the current target policy through the release instructions of the current target policy, the policy details corresponding to the current template policy are parsed to construct an executable operation chain entity flow F low, and the entity flow F low is cached. The entity flow F low includes an executable preset format script for calling when executing the policy.

[0079] In some embodiments, when the operation feedback information of each target operation node corresponding to the preset operation flow template indicates that the current target policy has been approved, the current target policy is published, and the publication content corresponding to the current target policy is displayed based on the policy publishing management interface. The policy details corresponding to the current template policy are parsed into an executable Groovy script and cached. The caching method includes but is not limited to local memory, local file system, and distributed cache. In response to receiving a request to view details of the current target policy, the policy details corresponding to the current target policy are displayed.

[0080] If the operation feedback information of a certain target operation node is in the failed review state, and the operation feedback information of multiple target operation nodes does not meet the preset release conditions, the current target policy release fails. At this time, the version information corresponding to the current target policy is invalid, and the release status of the current target policy stored in the database is updated to the failed state.

[0081] Before the target policy is released, the policy details are sent to the target operation nodes with specified preset operation permissions in sequence based on the preset operation flow template to ensure the security of operations during the current target policy release process. The current target policy is released based on the feedback information of multiple target operation nodes to ensure the legitimacy of the current target policy release.

[0082] See also Figure 3 In some embodiments, in response to the policy release instruction corresponding to the current target policy, before obtaining the policy details information of the current target policy, the method further includes:

[0083] S201. Obtain policy configuration information and input parameter information corresponding to the current target policy;

[0084] S202: Generate initial policy details based on the policy configuration information and the creation and generation information of the policy configuration information;

[0085] S203, parsing the initial policy details to obtain a script file in a preset format;

[0086] S204: Perform execution verification on the script file to obtain an execution verification result corresponding to the script file;

[0087] S205 : When the execution verification result indicates that the execution process of the script file matches the policy detail information and the input parameter information, the initial policy detail information is determined as the policy detail information of the current target policy.

[0088] Based on the policy configuration interface, the policy configuration information and input parameter information of the target policy information entered by the user are obtained. The policy configuration information includes policy feature information, policy execution conditions, and policy operation information. The format of the input parameter information is determined by the policy feature information. Initial policy details are generated based on the policy configuration information and the corresponding creation information. The policy details of the current target policy are stored in a database. The creation information includes the policy identification information corresponding to the policy configuration information, and other information automatically generated as the policy configuration information is created. The initial policy details are parsed to construct an executable operation chain entity flow, F ow, and corresponding executors are defined for different node types. A script executor based on a preset format verifies the script file based on the input parameter information and returns the execution verification result. If the execution verification result matches the policy details and input parameter information, and no exceptions occur during execution, the current policy configuration is determined to be correct, and the initial policy details are determined as the policy details of the current target policy.

[0089] In some embodiments, the policy feature information may be one or more attribute feature names or attribute feature values, wherein the type of the attribute feature value may be a basic data type or a composite feature type, which is not limited here. Exemplarily, the policy feature information is "amount to be paid". The policy execution condition may be one or more judgment conditions for the policy feature information. When the policy feature information meets the policy execution condition, the policy operation information is executed. Exemplarily, the policy execution condition is "amount to be paid > 10,000", the policy operation information is "face recognition", the policy execution condition is "0 < amount to be paid <= 10,000", and the policy operation information is "mobile phone verification code".

[0090] In some embodiments, the entity flow F l ow includes attributes such as the current node flow, the next node flow, parameter definitions, input parameter information, whether to execute all, derived variable parameters, and a script file in a preset format. Exemplarily, the script file in the preset format can be a "Groovy script", and the executor includes a classifier executor, an operation executor, an operation flow executor, a method executor, a derived variable executor, and a script executor. The operation flow executor executes the operation chain, that is, the entity flow F l ow, and recursively calls the operation executor in sequence to execute the Groovy business rules under the current node entity F l ow. The operation executor is mainly responsible for assembling and transmitting the input parameter information and Groovy script in the entity flow F l ow, and finally handing it over to the script executor for execution verification. The script executor is implemented based on the Groovy compiler executor at the bottom layer, and executes according to the incoming Groovy script and input parameter information, and returns the execution verification result of the operation.

[0091] In some embodiments, the policy content of the initial policy details information generated based on the policy configuration information and the creation generation information is "When '0 < amount to be paid <10,000 yuan', you need to confirm with 'Mobile Verification Code'; when 'Amount to be paid>= 10000, 'face recognition' confirmation is required. The initial policy details are parsed into an executable Groovy script, pre-processing other data that may be needed for policy execution. For example, the user's phone number is pre-read. The parsed Groovy script and input parameter information are passed to the script executor, which then obtains the execution verification result. For example, if the input parameter information indicates the payment amount is 500 yuan, the execution verification result indicates that the order verification method is "phone verification code," and a verification code is sent to the pre-read phone number. If the user enters an amount to be paid of 20,000 yuan, the execution verification result indicates that the order verification method is "face recognition," and face recognition verification is initiated with the user. If no exceptions occur during the policy verification process and the execution verification result matches the initial policy details, the initial policy details are verified successfully and are determined as the policy details for the current target policy. If an exception occurs during the policy verification process, or the execution verification result does not match the initial policy details, the initial policy details fail verification and are rejected.

[0092] The above technical solution verifies the policy before it is released, and verifies the corresponding script file of the policy details according to the input parameter information. Only the policy that passes the policy verification can be released. This ensures the correctness of the semantics of the released policy and can be executed normally without causing system abnormalities, avoiding business decision failures, and causing the decision-making system to crash.

[0093] See also Figure 4 In some embodiments, the creation generation information includes policy identification information of the current target policy, and the policy details information includes policy version information. The initial policy details information is generated based on the policy configuration information and the creation generation information of the policy configuration information, including:

[0094] S2021. Determine the policy group to which the current target policy belongs based on the policy identification information;

[0095] S2022: Generate version information of the current target policy based on the policy configuration information and policy details of other target policies in the policy group.

[0096] The version information includes the version number. The policy details information and corresponding version numbers of other target policies in the policy group are queried in the database. If the policy configuration information of the current target policy is inconsistent with the policy details information of other target policies, the maximum version number of other target policies in the policy group is obtained. The version number of the current target policy is the maximum version number plus 1. The creation and generation information corresponding to the current target policy includes but is not limited to policy identification information and updater information. The policy identification information is automatically generated based on the creation or change of the current target policy. The policy identification information is used to represent the group information of the current target policy. The policy details information also includes the version information of the current target policy. The version information is used to represent the number of policy changes. The version information includes the version number. The version number of the target policy in the same policy group is continuously incremented. All historical versions of the policy can be traced back through the version chain, thereby realizing the function of rolling back to the specified version.

[0097] Exemplarily, the group to which the first target policy belongs is "group1", the automatically generated policy identification information is "YXTgroup0151", and the version number is 1. After the first target policy is released, in response to the modification submission instruction corresponding to the first target policy, the policy configuration information and creation generation information corresponding to the second target policy are obtained. Because the second target policy is a derivative policy of the first target policy, the policy identification information of the second target policy is still "YXTgroup0151". Based on the policy identification information, the group to which the second target policy belongs is queried, which is "group1". Based on the policy details information and version information of other target policies in "group1", the version information of the second target policy is determined. The second target policy is modified based on the first target policy. The policy configuration information of the second target policy does not correspond to the policy details information of the first target policy. Therefore, the version number of the second target policy is determined to be 2.

[0098] The above technical solution implements the version control function by adding a chain version number, solving the problem that the strategy cannot be backtracked.

[0099] See also Figure 5 In some embodiments, the method further comprises:

[0100] S301, in response to a policy revocation instruction for a published target policy, revoking the target policy;

[0101] S302: Update the release status of the target policy to a revoked status.

[0102] When the target policy's release status is "Published" and a policy revocation instruction is received for the target policy, the release of the target policy is revoked and the target policy's release status is updated to "Revoked." After the target policy is revoked, the corresponding information of the target policy is not deleted.

[0103] In some embodiments, upon receiving a revoke instruction for a target policy from a user clicked on the policy release management interface, the target policy is revoked. The policy release management interface includes buttons for viewing details, releasing, and revoking release, as well as displaying the operation status and version information corresponding to the target policy. Release statuses include "released," "revoked," and "failed." After the target policy is revoked, the release status is "revoked."

[0104] The above technical solution revokes the currently released target policy to the pending release state, thereby ensuring the flexibility of the target policy release and facilitating the update of the target policy.

[0105] See also Figure 6 In some embodiments, after updating the publication status of the target policy to the revoked state, the method further includes:

[0106] S401: In response to a policy re-issuance instruction corresponding to a target policy, searching for an exclusive policy corresponding to the target policy, wherein the exclusive policy is another target policy in the policy group to which the target policy belongs whose publication status is "published";

[0107] S402: If found, cancel the exclusive strategy;

[0108] S403: Publish the current target policy.

[0109] If a re-release instruction is received for a target policy from a user clicked on the policy release management interface, the system determines whether there are other mutually exclusive policies in the target policy's corresponding policy group that are in the released state. If so, the release of the mutually exclusive policy is revoked, and the release state of the mutually exclusive policy is changed to revoked. The target policy is released simultaneously, and its release state is updated to released. The revoked target policy is re-released, and the target policy's version number remains unchanged. If no mutually exclusive policies exist, the target policy is released directly, and its release state is updated to released.

[0110] In some embodiments, the group to which the first target policy belongs is "group1", the automatically generated policy identification information is "YXTgroup0151", the version number is 1, and the release status is the released status; the group to which the second target policy belongs is "group1", the automatically generated policy identification information is "YXTgroup0151", the version number is 2, and the release status is the revoked status. At this time, a re-release instruction for the second target policy is received, and it is determined that the release status of the first target policy of the same group is the released status. Therefore, the first target policy is revoked, and the release status of the first target policy is changed to the revoked status. At the same time, the second target policy is released, and the release status of the second target policy is changed to the released status. The version numbers of the first target policy and the second target policy remain unchanged.

[0111] See also Figure 7 In some embodiments, the policy group name, policy identification information, version number, release status, effective time, updater, update time, and operations of the target policy are displayed based on the policy release management interface. Operations include a View Details button, a Release / Unrelease button, an Export Operation Group Configuration JSON button, and an Export Operation List button. In response to triggering the View Details button, the policy content of the target policy's policy details is displayed based on the preset interface; in response to triggering the Unrelease button, the target policy is revoked; in response to triggering the Release button, the target policy is released and other released target policies in the policy group are revoked; in response to triggering the Export Operation Group Configuration button, the JSON file of the target policy's operation group configuration is exported; in response to triggering the Export Operation List button, the operation list of the target policy is exported.

[0112] In some embodiments, in response to receiving the version control instruction, historical version information of the current target policy is displayed based on the policy release management interface.

[0113] The above technical solution implements a policy rollback feature, allowing users to view all historical changes to a policy by incrementing its version number. This allows users to roll back a published policy to a specific version for operational errors or business policy rollback scenarios, ensuring greater compatibility with diverse business needs.

[0114] See also Figure 8 In some embodiments, sequentially sending policy details to multiple target operation nodes based on a preset operation flow template includes:

[0115] S1021. Based on the information sending order corresponding to the preset operation flow template, the policy details information is sent to the target operation node that ranks first in the order;

[0116] S1022: In response to the operation feedback information of the first-ranked target operation node indicating that the policy is passed, sending policy detail information to the target operation node next to the first-ranked target operation node in sequence;

[0117] S1023: If the operation feedback information of any target operation node sent in sequence indicates that the policy is not passed, the sending operation of the policy details information is terminated;

[0118] S1024: Determine whether the operation feedback information meets the preset release conditions.

[0119] In some embodiments, if the operation feedback information of multiple target operation nodes meets the preset release conditions, before releasing the current target strategy, the following steps are further included:

[0120] S501: When the operation feedback information of the plurality of target operation nodes all indicates that the operation is successful, determine that the operation feedback information of the plurality of target operation nodes meets a preset release condition, and execute the step of releasing the current target policy.

[0121] In some embodiments, a preset operation flow template is constructed based on the requirements of the policy. The preset operation flow template corresponds to a preset number of target operation nodes, and each target operation node specifies a preset operation permission. The policy detail information corresponding to the target policy is an operation instance. Each operation instance represents a specific operation process. The attributes of the operation instance include but are not limited to the operation instance number, the operation template number, the form content, the operation details of each node, and the operation instance status. The operation template number is used to indicate the preset operation flow template corresponding to the operation instance. The operation sequence of the target operation node has been pre-set. The policy detail information of the current target policy is sent to the first-ranked target operation node in sequence. If the operation feedback information of the first-ranked target operation node indicates that the policy is passed, the policy detail information is sent to the next target operation node of the first-ranked target operation node in sequence. When the operation feedback information of any target operation node of the preset operation flow template sent in sequence indicates that the policy is not passed, the sending of the policy detail information is terminated, and it is determined that the current target policy does not meet the release conditions.

[0122] In some embodiments, the preset operation flow target includes three target operation nodes. The operation authority of the first target operation node is limited to "business manager," the operation authority of the second target operation node is limited to "policy officer," and the operation authority of the third target operation node is limited to "policy manager." Policy details of the current target policy are sent to the first target operation node. Then, the result of the "business manager's" operation on the current target policy is obtained. If the operation result is a review failure, the policy is returned, further sending of policy details is terminated, and the current target policy fails to be published. If the operation result is a review success, the policy details are sent to the second target operation node. Then, the result of the "policy officer's" operation on the current target policy is obtained. If the operation result is a review failure, the policy is returned, further sending of policy details is terminated, and the current target policy fails to be published. If the operation result is a review success, the policy details are sent to the third target operation node. Then, the result of the "policy manager's" operation on the current target policy is obtained. If the operation result is a review failure, the policy is returned, further sending of policy details is terminated, and the current target policy fails to be published. If the operation result is a review success, the current target policy is published.

[0123] The above technical solution, by introducing the operation flow, realizes the operation according to the preset operation flow template. The current operation node will flow to the next operation node only after it passes, ensuring the security of the entire operation process. Each operation node limits the operation authority, solving the data security problem in the operation link.

[0124] See also Figure 9 In some embodiments, the policy publishing process of the decision engine is as follows:

[0125] S1. The policy management front-end application obtains the policy configuration information and input parameter information corresponding to the current target policy;

[0126] S2. The policy management front-end application generates initial policy details based on the policy configuration information;

[0127] The initial policy details include version information, which is used to represent the number of times the policy has been changed. The version information includes a version number, which is continuously incremented. The version number of the current target policy is generated based on the policy configuration information and the policy details of other target policies in the policy group whose release status is revoked or released, and the policy details of the version information target policy.

[0128] S3, storage policy details;

[0129] Save the policy details to the database.

[0130] S4. The policy management front-end application parses the initial policy details and obtains a script file;

[0131] Parse the initial strategy details and construct an executable operation chain entity flow F l ow, which includes input parameter information and Groovy script files.

[0132] S5. The policy management front-end application calls the policy script executor, passes in input parameter information and script file, and performs verification;

[0133] Pass the input parameter information and Groovy script file to the policy script executor for verification.

[0134] S6. Receive the execution verification result;

[0135] The policy management front-end application receives the execution verification result output by the policy script executor.

[0136] S7: If the verification succeeds, the initial policy details are determined as the policy details;

[0137] S8. Receive the policy release instruction corresponding to the current target policy and obtain policy details;

[0138] S9. Based on the preset operation flow template, the policy details are sequentially sent to multiple target operation nodes corresponding to the operation flow;

[0139] S10, receiving operation feedback information;

[0140] S11. The operation feedback information indicates success, and the current target policy is released successfully.

[0141] The above technical solution verifies the accuracy of the policy before release through pre-execution to ensure the correctness of the policy configuration content. By adding operation flows with preset operation permissions, it ensures data security issues in the audit process; and through the chain version number method, it realizes version control function and policy backtracking.

[0142] See also Figure 10 According to a second aspect of the present disclosure, a policy issuing device for a decision engine is provided, the device comprising:

[0143] The policy details information acquisition module 10 is used to obtain the policy details information of the current target policy in response to the policy issuance instruction corresponding to the current target policy;

[0144] The target operation node operation module 20 is configured to sequentially send policy details to a plurality of target operation nodes based on a preset operation flow template. The target operation nodes are nodes with preset operation permissions predefined by the preset operation flow template. The preset operation flow template indicates the operation sequence of the plurality of target operation nodes.

[0145] An operation feedback information receiving module 30 is configured to receive operation feedback information from multiple target operation nodes with respect to policy detail information;

[0146] The current target policy publishing module 40 is configured to publish the current target policy if the operation feedback information of multiple target operation nodes meets a preset publishing condition.

[0147] In some embodiments, the apparatus further comprises:

[0148] The information acquisition module 51 is used to obtain the policy configuration information and input parameter information corresponding to the current target policy;

[0149] An initial policy details information generating module 52 is configured to generate initial policy details information based on the policy configuration information and the creation and generation information of the policy configuration information;

[0150] A script file acquisition module 53 is used to parse the initial policy details information to obtain a script file in a preset format;

[0151] A verification module 54 is configured to perform execution verification on the script file and obtain an execution verification result corresponding to the script file;

[0152] The policy detail information determining module 55 is configured to determine the initial policy detail information as the policy detail information of the current target policy if the execution verification result indicates that the execution process of the script file matches the policy detail information and input parameter information.

[0153] In some embodiments, the creation generation information includes policy identification information of the current target policy, the policy details information includes policy version information, and the initial policy details information generation module includes:

[0154] a policy group determining unit 521, configured to determine the policy group to which the current target policy belongs based on the policy identification information;

[0155] The version information generating unit 522 is configured to generate the version information of the current target policy based on the policy configuration information and the policy details of other target policies in the policy group.

[0156] In some embodiments, the apparatus further comprises:

[0157] a target policy revocation module 61, configured to revoke a target policy in response to a policy revocation instruction for a published target policy;

[0158] The publishing status updating module 62 is configured to update the publishing status of the target policy to a revoked status.

[0159] In some embodiments, the apparatus further comprises:

[0160] An exclusive policy search module 71 is configured to search for an exclusive policy corresponding to the target policy in response to a policy re-issuance instruction corresponding to the target policy, wherein the exclusive policy is another target policy in the policy group to which the target policy belongs whose release status is already released;

[0161] An exclusive strategy revocation module 72 is configured to revoke the exclusive strategy if found;

[0162] The publishing module 73 is configured to publish the current target policy.

[0163] In some embodiments, the target operation node operation module includes:

[0164] A first sending unit 21 is configured to send the policy details information to a target operation node that ranks first based on the information sending ranking corresponding to the preset operation flow template;

[0165] A policy passing processing unit 22 is configured to, in response to the operation feedback information of the first-ranked target operation node indicating that the policy has passed, sequentially send the policy detail information to the target operation node next to the first-ranked target operation node;

[0166] A sending terminating unit 23 is configured to terminate the sending of the policy details information if the operation feedback information of any target operation node sent in sequence indicates that the policy is not passed;

[0167] The operation feedback information determining module 24 is configured to determine whether the operation feedback information does not meet a preset release condition.

[0168] In some embodiments, the apparatus further comprises:

[0169] The execution module 81 is configured to determine that the operation feedback information of the multiple target operation nodes meets a preset release condition when the operation feedback information of each of the multiple target operation nodes indicates that the operation is passed, and execute the step of releasing the current target policy.

[0170] In some embodiments, the functions or modules included in the device provided by the embodiments of the present disclosure can be used to execute the method described in the above method embodiments. The specific implementation can refer to the description of the above method embodiments. For the sake of brevity, it will not be repeated here.

[0171] An embodiment of the present application provides a policy publishing device for a decision engine, which may be a terminal or a server. The policy publishing device for the decision engine includes a processor and a memory, wherein the memory stores at least one instruction or at least one program. The at least one instruction or the at least one program is loaded and executed by the processor to implement the policy publishing method for the decision engine provided in the above-mentioned method embodiment.

[0172] The memory can be used to store software programs and modules. The processor executes various functional applications and data processing by running the software programs and modules stored in the memory. The memory can mainly include a program storage area and a data storage area. The program storage area can store the operating system, application programs required for functions, etc.; the data storage area can store data created based on the use of the device, etc. In addition, the memory can include high-speed random access memory and non-volatile memory, such as at least one disk storage device, flash memory device, or other volatile solid-state storage device. Accordingly, the memory can also include a memory controller to provide the processor with access to the memory.

[0173] The method embodiments provided in the embodiments of the present application can be executed in electronic devices such as mobile terminals, computer terminals, servers or similar computing devices. Figure 11 This is a hardware structure diagram of an electronic device for a decision engine policy release method provided by an embodiment of the present application. Figure 11 As shown, the electronic device 900 may have relatively large differences due to different configurations or performances, and may include one or more central processing units (CPUs) 910 (the processor 910 may include but is not limited to a processing device such as a microprocessor MCU or a programmable logic device FPGA), a memory 930 for storing data, and one or more storage media 920 (such as one or more mass storage devices) for storing application programs 923 or data 922. Among them, the memory 930 and the storage medium 920 can be temporary storage or permanent storage. The program stored in the storage medium 920 may include one or more modules, each of which may include a series of instruction operations on the electronic device. Furthermore, the central processing unit 910 may be configured to communicate with the storage medium 920 to execute a series of instruction operations in the storage medium 920 on the electronic device 900. The electronic device 900 may also include one or more power supplies 960, one or more wired or wireless network interfaces 950, one or more input and output interfaces 940, and / or one or more operating systems 921, such as Windows Server™, Mac OS X™, Unix™, Linux™, FreeBSD™, etc.

[0174] The input / output interface 940 can be used to receive or send data via a network. Specific examples of the aforementioned network may include a wireless network provided by a communications provider of the electronic device 900. In one embodiment, the input / output interface 940 includes a network interface controller (NIC), which can be connected to other network devices via a base station to enable communication with the Internet. In another embodiment, the input / output interface 940 can be a radio frequency (RF) module for wireless communication with the Internet.

[0175] It can be understood by those skilled in the art that Figure 11 The structure shown is only for illustration and does not limit the structure of the above electronic device. Figure 11 More or fewer components than shown, or with Figure 11 Different configurations shown.

[0176] An embodiment of the present application also provides a computer-readable storage medium, which can be set in an electronic device to store at least one instruction or at least one program related to a policy issuance method of a decision engine in a method embodiment. The at least one instruction or the at least one program is loaded and executed by the processor to implement the policy issuance method of the decision engine provided by the above-mentioned method embodiment.

[0177] Optionally, in this embodiment, the storage medium may be located in at least one of a plurality of network servers in a computer network. Optionally, in this embodiment, the storage medium may include, but is not limited to, various media capable of storing program code, such as a USB flash drive, a read-only memory (ROM), a random access memory (RAM), a mobile hard disk, a magnetic disk, or an optical disk.

[0178] According to one aspect of the present application, a computer program product or computer program is provided, the computer program product or computer program including computer instructions stored in a computer-readable storage medium. A processor of a computer device reads the computer instructions from the computer-readable storage medium and executes the computer instructions, causing the computer device to perform the methods provided in the various optional implementations described above.

[0179] As can be seen from the embodiments of the policy publishing method, apparatus, device, terminal, server, storage medium, or computer program for the decision engine provided by the present application, the present application obtains policy details of the current target policy in response to a policy publishing instruction corresponding to the current target policy; sequentially sends the policy details to multiple target operation nodes based on a preset operation flow template, where the target operation nodes are nodes with preset operation permissions predefined by the preset operation flow template, and the preset operation flow template indicates the operation order of the multiple target operation nodes; before the target policy is released, sequentially sends the policy details to the target operation nodes designated with preset operation permissions based on the preset operation flow template to ensure the security of operations during the release of the current target policy; receives operational feedback information from the multiple target operation nodes regarding the policy details; and releases the current target policy if the operational feedback information from the multiple target operation nodes meets preset release conditions. The current target policy is released based on the feedback information from the multiple target operation nodes, ensuring the legitimacy of the release of the current target policy.

[0180] It should be noted that the order of the embodiments of the present application described above is for descriptive purposes only and does not represent the superiority or inferiority of the embodiments. The above description is of specific embodiments of the present application. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps described in the claims can be performed in an order different from that in the embodiments and still achieve the desired results. In addition, the processes depicted in the accompanying drawings do not necessarily require the specific order or continuous order shown to achieve the desired results. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.

[0181] The various embodiments in this application are described in a progressive manner. Similar portions between the various embodiments can be referred to in conjunction with each other. Each embodiment focuses on the differences between the other embodiments. In particular, the device, equipment, and storage medium embodiments are generally similar to the method embodiments, so their descriptions are relatively simple. For relevant portions, refer to the descriptions of the method embodiments.

[0182] Those skilled in the art will understand that all or part of the steps to implement the above embodiments may be accomplished by hardware, or may be accomplished by instructing the relevant hardware through a program, and the program may be stored in a computer-readable storage medium, and the above-mentioned storage medium may be a read-only memory, a disk, or an optical disk, etc.

[0183] The above description is only a preferred embodiment of the present application and is not intended to limit the present application. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present application should be included in the scope of protection of the present application.

Claims

1. A decision engine policy publishing method, characterized in that: The method comprises: Get the policy configuration information and input parameter information corresponding to the current target policy; generating initial policy details information based on the policy configuration information and creation generation information of the policy configuration information; Parsing the initial policy details to obtain a script file in a preset format; Performing execution verification on the script file to obtain an execution verification result corresponding to the script file; In the case where the execution verification result indicates that the execution process of the script file matches the policy detail information and the input parameter information, the initial policy detail information is determined as the policy detail information of the current target policy; In response to a policy issuance instruction corresponding to a current target policy, obtaining policy detail information of the current target policy; Sending the policy details information to a plurality of target operation nodes in sequence based on a preset operation flow template, wherein the target operation nodes are nodes with preset operation permissions predefined by the preset operation flow template, and the preset operation flow template indicates the operation sequence of the plurality of target operation nodes; receiving operation feedback information of the multiple target operation nodes with respect to the policy detail information; If the operation feedback information of the multiple target operation nodes meets the preset release conditions, the current target strategy is released.

2. The method according to claim 1, characterized in that The creation generation information includes the policy identification information of the current target policy, the policy details information includes policy version information, and the generation of the initial policy details information based on the policy configuration information and the creation generation information of the policy configuration information includes: determining the policy group to which the current target policy belongs based on the policy identification information; The version information of the current target policy is generated based on the policy configuration information and the policy detail information of other target policies in the policy group.

3. The method according to claim 1, characterized in that The method further comprises: In response to a policy revocation instruction for a published target policy, revoking the target policy; Update the release status of the target policy to revoked.

4. The method according to claim 3, characterized in that After updating the release status of the target policy to a revoked state, the method further includes: In response to a policy re-issuing instruction corresponding to the target policy, searching for an exclusive policy corresponding to the target policy, the exclusive policy being another target policy in the policy group to which the target policy belongs, the release status of which is already released; If found, cancel the exclusive strategy; Publish the current target policy.

5. The method according to claim 1, wherein The sending of the policy details information to multiple target operation nodes in sequence based on a preset operation flow template includes: Based on the information sending order corresponding to the preset operation flow template, the policy details information is sent to the target operation node that ranks first in the order; In response to the operation feedback information of the first-ranked target operation node indicating that the policy is passed, sequentially sending the policy detail information to the target operation node next to the first-ranked target operation node; If the operation feedback information of any target operation node sent in sequence indicates that the policy is not passed, the sending operation of the policy details information is terminated; It is determined that the operation feedback information does not meet a preset release condition.

6. The method according to claim 1, characterized in that If the operation feedback information of the multiple target operation nodes meets the preset release condition, before releasing the current target strategy, the method further includes: When the operation feedback information of each of the multiple target operation nodes indicates that the operation is passed, it is determined that the operation feedback information of the multiple target operation nodes meets the preset release condition, and the step of releasing the current target policy is performed.

7. A policy publishing device for a decision engine, characterized in that: The device comprises: The information acquisition module is used to obtain the policy configuration information and input parameter information corresponding to the current target policy; An initial policy details information generating module, configured to generate initial policy details information based on the policy configuration information and creation information of the policy configuration information; A script file acquisition module, configured to parse the initial policy details information and obtain a script file in a preset format; A verification module, configured to perform execution verification on the script file and obtain an execution verification result corresponding to the script file; a policy details information determination module for determining the initial policy details information as the policy details information of the current target policy when the execution verification result indicates that the execution process of the script file matches the policy details information and the input parameter information; A policy details information acquisition module, configured to acquire policy details information of the current target policy in response to a policy issuance instruction corresponding to the current target policy; a target operation node operation module, configured to sequentially send the policy detail information to a plurality of target operation nodes based on a preset operation flow template, wherein the target operation nodes are nodes with preset operation permissions predefined by the preset operation flow template, and the preset operation flow template indicates the operation sequence of the plurality of target operation nodes; an operation feedback information receiving module, configured to receive operation feedback information of the plurality of target operation nodes with respect to the policy detail information; The current target policy publishing module is configured to publish the current target policy if the operation feedback information of the plurality of target operation nodes meets a preset publishing condition.

8. A computer-readable storage medium, characterized in that The computer-readable storage medium stores at least one instruction or at least one program, and the at least one instruction or at least one program is loaded and executed by the processor to implement the policy issuance method of the decision engine according to any one of claims 1 to 6.

9. An electronic device, characterized in that: It includes at least one processor and a memory communicatively connected to the at least one processor; wherein the memory stores instructions that can be executed by the at least one processor, and the at least one processor implements the policy issuance method of the decision engine as described in any one of claims 1 to 6 by executing the instructions stored in the memory.

Images