User authority management method and system based on full-automatic operation signal system

Abstract

The application provides a user permission management method and system based on a full-automatic operation signal system, which is applied to a first operation terminal and comprises the following steps: judging whether a current user can execute a user instruction; if yes, obtaining a user control area of an operation object and an authorization check type of the user instruction; judging whether the current user has control right according to the user control area of the operation object and the authorization check type of the user instruction; if yes, sending a control command to a server so that the server performs control right transfer, emergency control and control right sharing according to the control command and a set configuration file; and solving the user permission management problem caused by the flexible user permission management problem caused by the improved automation degree of the FAO signal system, the adjustment of post responsibilities and the flexible control area division, while improving the configuration level, improving the system availability and reducing the maintenance cost.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of full automatic operation signal system of rail transit, and in particular to a user permission management method and system based on a full automatic operation signal system. BACKGROUND

[0002] The automatic train supervision (ATS) is an important subsystem in the signal system of rail transit, and cooperates with other subsystems of the signal system to provide a visual interface display and operation management for metro operation. Operators with different responsibilities such as train dispatchers, train duty officers, and field segment dispatchers use the ATS to monitor the signal devices in the control areas managed by them, and issue necessary device control and operation adjustment commands.

[0003] The ATS of a traditional non-full automatic operation metro line has simple functions, low automation, and is single-user-oriented, with clear division of permissions and clear boundaries of management control areas. Therefore, the user permission management strategy is relatively simple and not flexible. The existing solutions usually configure the operator terminal as a specific node, and the operator can only perform specific operations on specific devices at the specific node. Alternatively, different users are configured in the system, and the operator obtains different device and instruction operation permissions according to the corresponding user type after logging in.

[0004] With the rapid development of full automatic operation (FAO) lines, the automation level of rail transit is getting higher and higher. The existing solution architecture is simple and cannot adapt to the complex and variable operation scenarios under the FAO project. The FAO system is usually highly integrated with external systems such as the integrated monitoring system, passenger information system, and wireless voice system, and the operation terminal is combined and simplified. The existing solution is single and rigid, and cannot meet the needs of post combination under the FAO project. The increase in the operating mileage of the FAO line and the landing of the cross-line joint operation scheme also make the control areas managed by the operators more and more, and the boundaries of the control areas more and more blurred. The signal devices in the existing solution are fixedly attributed to the control areas, and cannot meet the needs of flexible division of the control areas under the FAO project. SUMMARY

[0005] Therefore, the present application aims to provide a user permission management method and system based on a full automatic operation signal system, to solve the user permission management problems caused by the improved automation level of the FAO signal system, the adjustment of post responsibilities, and the flexible division of control areas, while improving the configuration level, improving the system availability, and reducing the maintenance cost.

[0006] In a first aspect, an embodiment of the present application provides a user permission management method based on a full automatic operation signal system, applied to a first operation terminal, and the method comprises:

[0007] determine whether the current user can execute the user instruction;

[0008] if yes, obtain the user control area of the operation object and the authorization check type of the user instruction;

[0009] determine whether the current user has the control right according to the user control area of the operation object and the authorization check type of the user instruction;

[0010] if yes, send a control command to the server to make the server perform control right transfer, emergency control and control right sharing according to the control command and a set configuration file.

[0011] In a second aspect, an embodiment of the present application provides a user permission management system based on a full-automatic operation signal system, applied to a first operation terminal, and the system comprises:

[0012] a first determining module, configured to determine whether a current user can execute a user instruction;

[0013] an obtaining module, configured to, in the case that the current user can execute the user instruction, obtain a user control area of an operation object and an authorization check type of the user instruction;

[0014] a second determining module, configured to determine whether the current user has a control right according to the user control area of the operation object and the authorization check type of the user instruction;

[0015] a control module, configured to, in the case that the current user has the control right, send a control command to a server to make the server perform control right transfer, emergency control and control right sharing according to the control command and a set configuration file.

[0016] In a third aspect, an embodiment of the present application provides an electronic device, comprising a memory and a processor, wherein the memory stores a computer program capable of running on the processor, and the processor implements the method as described above when executing the computer program.

[0017] In a fourth aspect, an embodiment of the present application provides a computer readable medium having non-volatile program codes executable by a processor, wherein the program codes make the processor execute the method as described above.

[0018] The embodiment of the present application provides a user permission management method and system based on a full-automatic operation signal system, which is applied to a first operation terminal and includes the following steps: judging whether a current user can execute a user instruction; if yes, obtaining a user control area of an operation object and an authorization check type of the user instruction; judging whether the current user has control right according to the user control area of the operation object and the authorization check type of the user instruction; if yes, sending a control command to a server so that the server performs control right transfer, emergency control and control right sharing according to the control command and a set configuration file; and solving the user permission management problem caused by the improved automation degree of the FAO signal system, the flexible post responsibility adjustment and the flexible control area division, and meanwhile improving the configuration level, improving the system availability and reducing the maintenance cost.

[0019] Other features and advantages of the present application will be set forth in the following description, and in part will become apparent to those skilled in the art upon examination of the following or can be learned by practice of the present application. The objects and other advantages of the present application can be realized and attained by the structure particularly pointed out in the description, claims and drawings.

[0020] In order to make the above objectives, features and advantages of the present application more apparent, the following preferred embodiments are specifically described with reference to the accompanying drawings. BRIEF DESCRIPTION OF DRAWINGS

[0021] In order to more clearly illustrate the specific embodiments of the present application or the technical solutions in the prior art, the following will briefly introduce the drawings needed to be used in the specific embodiments or the prior art description. Obviously, the drawings described below are some embodiments of the present application, and for those skilled in the art, other drawings can also be obtained without creative labor based on these drawings.

[0022] Figure 1 The user permission management method flow chart based on the full-automatic operation signal system provided by the embodiment one of the present application;

[0023] Figure 2 The user configuration flow chart provided by the embodiment one of the present application;

[0024] Figure 3 The operation terminal interface schematic diagram provided by the embodiment one of the present application;

[0025] Figure 4 The operation command dialog box interface schematic diagram provided by the embodiment one of the present application;

[0026] Figure 5 The software node schematic diagram provided by the embodiment one of the present application;

[0027] Figure 6 The software node configuration schematic diagram provided by the embodiment one of the present application;

[0028] Figure 7 This is a schematic diagram of user group configuration provided in Embodiment 1 of the present invention;

[0029] Figure 8 This is a schematic diagram of the authorization check process provided in Embodiment 1 of the present invention;

[0030] Figure 9 This is a schematic diagram of a user access control system based on a fully automatic operation signal system, provided in Embodiment 2 of the present invention. Detailed Implementation

[0031] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the technical solutions of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0032] To facilitate understanding of this embodiment, the embodiments of the present invention will be described in detail below.

[0033] Example 1:

[0034] Figure 1 The flowchart illustrates the user permission management method based on a fully automatic operation signal system provided in Embodiment 1 of the present invention.

[0035] Reference Figure 1 Applied to a first operating terminal, the method includes the following steps:

[0036] Step S101: Determine whether the current user can execute user commands;

[0037] Step S102: If yes, obtain the user control area of ​​the operation object and the authorization check type of the user instruction;

[0038] Step S103: Determine whether the current user has control rights based on the user control area of ​​the operation object and the authorization check type of the user instruction;

[0039] Step S104: If yes, then send the control command to the server so that the server can perform control transfer, emergency control and control sharing according to the control command and the set configuration file.

[0040] Furthermore, the objects being operated on include static objects, dynamic objects, cross-region objects, and global objects. Step S102 includes:

[0041] Obtain the user control area corresponding to the physical location of static objects; static objects include signals and switches, etc.

[0042] Retrieve the user control area corresponding to the current location of a dynamic object; dynamic objects include trains and movement authorizations, etc.

[0043] Retrieve all user control areas within the scope of the cross-region object; the cross-region object includes long routes;

[0044] Retrieves the user-free or all control areas of the global object. The global object includes system vehicle impoundment and timetable data, among others.

[0045] Furthermore, the authorization check types for user instructions include: operation instructions that do not require permission, operation instructions that require permission to all control areas, operation instructions that require permission to any control area, operation instructions that require permission to the first or last control area, and operation instructions that require permission to all control areas except adjacent control areas.

[0046] Furthermore, refer to Figure 2 Under the user configuration policy, the configured configuration file is obtained in the following ways:

[0047] Configure the route (Guideway_Data) data table based on the route data. The route data table includes route mileage, signal equipment location, and equipment control area. The various equipment control areas do not overlap with each other, and the equipment control area can cover the entire location of the route.

[0048] Configure the ATS configuration (ATS_Data) data table according to user requirements. The ATS configuration data table includes the user control area; the user control area is the area that the user can control, which can be part of one or more device control areas, and can intersect or overlap.

[0049] Configure the ATS node (ATS_Field) data table according to system requirements. The ATS node data table includes the functional allocation of the software nodes.

[0050] Configure the AOA data table according to user needs. The AOA data table includes user groups, user commands, authorization check methods, and user command assignments.

[0051] The line data table, ATS configuration data table, ATS node data table, and AOA data table are converted using a conversion tool to obtain the set configuration file.

[0052] In addition, a series of user groups can be defined according to system requirements. A user group is a collection of users with the same responsibilities, and additional user groups can be added according to user needs.

[0053] A series of software nodes are defined according to system requirements. A software node refers to software with a specific function.

[0054] A series of user commands are defined according to the functional requirements of ATS. User commands refer to the operation instructions that operators can execute. Different user commands can be configured with different authorization check methods.

[0055] Different user commands are assigned to different user groups and software nodes according to system requirements. Different users in the same user group can issue the same user commands, and different users can issue the same user commands when logged into the same software node.

[0056] Users can be added, modified, or deleted online by predefined users or operators. User attributes include: username, password, user group, and user control zone list.

[0057] Furthermore, the control commands include requests for area control commands and control transfer commands, and step S104 includes:

[0058] When a user control area is under the control of any user, a request for area control command is sent to the server, so that the server sends a prompt message to the second operating terminal according to the request for area control command, receives the control transfer command sent by the second operating terminal, and transfers the control of the user control area according to the control transfer command;

[0059] Receive a notification message from the server indicating a transfer of control.

[0060] Furthermore, the control commands include emergency control commands and emergency release commands, and step S104 includes:

[0061] When a user control area is under the control of any user, an emergency control command is sent to the server so that the server can grant emergency control of the user control area to an unauthorized user based on the emergency control command.

[0062] When an unauthorized user acquires emergency control, they send an emergency release command to the server, which then releases the emergency control of the user's domain based on the emergency release command.

[0063] Furthermore, step S104 includes:

[0064] Get the username / password entered by the user;

[0065] After successfully logging in with the username / password, a request for area control command is sent to the server. Based on the request for area control command, a control right prompt message is sent to the second operating terminal, enabling the second operating terminal to share control of the user's control area.

[0066] Specifically, different operators can log in to the same user on different operating terminals. When one operator applies for area control, other operators can also share control of that area on their respective operating terminals.

[0067] In addition, user login / logout can be implemented as follows: the operator logs in on the first operating terminal by entering the correct username / password; after logging in, the operator clicks the logout button to log out; after the first operating terminal with an account already logged in is closed, the user logged in on that terminal will be automatically logged out.

[0068] Control request / release: After logging into the account, the operator sends a request for area control command to the server through the first operating terminal to request control of one or more user control areas that the current user can manage;

[0069] After gaining control, the operator sends a release zone control command to the server through the first operating terminal to release control of one or more control zones currently held.

[0070] Authorization Check: Before an operator executes a command, the ATS performs an authorization check to determine if the operator is authorized to execute the command. This includes checking whether the currently logged-in user has the right to execute the command and whether the currently logged-in user has control over the object being operated on. If the ATS determines that the operator is not authorized, it will prevent the operator from issuing the instruction.

[0071] This application constrains user authorization from multiple aspects, including user groups, user commands, user control zones, and software nodes, and optimizes existing login / application control / emergency control functions. It also adds control transfer / sharing functions to meet complex and ever-changing operational scenarios. User management is highly configurable, allowing for simple and flexible adjustments to users / user groups to meet the complex needs of different roles. Logical user control zones are added to the existing fixed physical device control zones, resulting in fewer restrictions and more flexible control zone division.

[0072] During the implementation of authorization management, the first operating terminal provides authorization management-related operation buttons in the top drop-down menu bar, the top normal toolbar, and the quick menu bar, including: login / logout, apply for / cancel regional control, apply for / cancel emergency control, and transfer of control. (Refer to...) Figure 3 .

[0073] The first operating terminal displays the currently configured user information in the user management view of the main display area, and provides operation buttons such as adding / modifying / deleting users and changing passwords; the authorization management view of the main display area displays the control status of the user control area, and provides operation buttons such as applying for / canceling area control and applying for / canceling emergency control.

[0074] The first operating terminal provides pop-up dialog boxes for various user operation commands, displaying necessary information and options within these dialog boxes. Figure 4 .

[0075] After the first operating terminal software starts, it will automatically load the user configuration files.

[0076] According to the software node definition (e.g.) Figure 5 The first operating terminal will only display pre-configured operation buttons (such as...). Figure 6 );

[0077] Based on the currently logged-in user, only authorized operation buttons (such as...) will be enabled on the first operating terminal. Figure 7 );

[0078] Reference Figure 8 Before an operator executes a user command, the first operating terminal performs an authorization check and enables / disables the corresponding operation instruction. This includes: determining whether the current user can execute the user command, specifically: 1) whether the user is logged in and whether the user group to which the currently logged-in user belongs has the right to execute the user command; 2) determining whether the currently logged-in user has control over the operation object, specifically: obtaining the user control area where the operation object is located; obtaining the authorization check type of the user instruction; and determining whether the current user has control based on the user control area where the operation object is located and the authorization check type.

[0079] Example 2:

[0080] Figure 9 This is a schematic diagram of a user access control system based on a fully automatic operation signal system, provided in Embodiment 2 of the present invention.

[0081] Reference Figure 9 The system, applied to the first operating terminal, includes:

[0082] The first judgment module is used to determine whether the current user can execute user commands;

[0083] The acquisition module is used to acquire the user control area of ​​the operation object and the authorization check type of the user instruction, provided that the current user is able to execute the user instruction.

[0084] The second judgment module is used to determine whether the current user has control rights based on the user control area of ​​the operation object and the authorization check type of the user instruction;

[0085] The control module is used to send control commands to the server when the current user has control, so that the server can perform control transfer, emergency control, and control sharing according to the control commands and the set configuration file.

[0086] This invention provides a user access control method and system based on a fully automated signaling system, applied to a first operating terminal. The method includes: determining whether the current user can execute user commands; if so, obtaining the user control area of ​​the operating object and the authorization check type of the user command; determining whether the current user has control rights based on the user control area of ​​the operating object and the authorization check type of the user command; if so, sending a control command to the server so that the server can perform control transfer, emergency control, and control sharing according to the control command and a set configuration file. This solves the user access control problems caused by the increased automation level of the FAO signaling system, adjustments to job responsibilities, and flexible control area division, while also improving configuration level, increasing system availability, and reducing maintenance costs.

[0087] This invention also provides an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, it implements the steps of the user rights management method based on a fully automatic operation signal system provided in the above embodiments.

[0088] This invention also provides a computer-readable medium having processor-executable non-volatile program code, on which a computer program is stored. When the computer program is run by a processor, it executes the steps of the user rights management method based on a fully automatic operation signal system described above.

[0089] The computer program product provided in this embodiment of the invention includes a computer-readable storage medium storing program code. The instructions included in the program code can be used to execute the methods described in the preceding method embodiments. For specific implementation details, please refer to the method embodiments, which will not be repeated here.

[0090] Those skilled in the art will clearly understand that, for the sake of convenience and brevity, the specific working process of the system and apparatus described above can be referred to the corresponding process in the foregoing method embodiments, and will not be repeated here.

[0091] Furthermore, in the description of the embodiments of the present invention, unless otherwise explicitly specified and limited, the terms "installation," "connection," and "linking" should be interpreted broadly. For example, they can refer to a fixed connection, a detachable connection, or an integral connection; they can refer to a mechanical connection or an electrical connection; they can refer to a direct connection or an indirect connection through an intermediate medium; and they can refer to the internal connection of two components. Those skilled in the art can understand the specific meaning of the above terms in the present invention based on the specific circumstances.

[0092] If the aforementioned functions are implemented as software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this invention, essentially, or the part that contributes to the prior art, or a portion of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of this invention. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0093] In the description of this invention, it should be noted that the terms "center," "upper," "lower," "left," "right," "vertical," "horizontal," "inner," and "outer," etc., indicate the orientation or positional relationship based on the orientation or positional relationship shown in the accompanying drawings. They are used only for the convenience of describing the invention and for simplifying the description, and do not indicate or imply that the device or element referred to must have a specific orientation, or be constructed and operated in a specific orientation. Therefore, they should not be construed as limitations on the invention. Furthermore, the terms "first," "second," and "third" are used for descriptive purposes only and should not be construed as indicating or implying relative importance.

[0094] Finally, it should be noted that the above-described embodiments are merely specific implementations of the present invention, used to illustrate the technical solutions of the present invention, and not to limit it. The scope of protection of the present invention is not limited thereto. Although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that any person skilled in the art can still modify or easily conceive of changes to the technical solutions described in the foregoing embodiments within the technical scope disclosed in the present invention, or make equivalent substitutions for some of the technical features; and these modifications, changes, or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of the present invention, and should all be covered within the scope of protection of the present invention. Therefore, the scope of protection of the present invention should be determined by the scope of the claims.

Claims

1. A user access control method based on a fully automatic operation signal system, characterized in that, Applied to a first operating terminal, the method includes: Determine whether the current user is able to execute user commands; If so, then obtain the user control area of ​​the operation object and the authorization check type of the user instruction; the user control area is the area that the user can control; Based on the user control area of ​​the operation object and the authorization check type of the user instruction, determine whether the current user has control rights; If so, a control command is sent to the server so that the server can perform control transfer, emergency control, and control sharing according to the control command and the set configuration file; The operation objects include static objects, dynamic objects, cross-region objects, and global objects. The user control area of ​​the operation object and the authorization check type of the user command are obtained, including: Obtain the user control area corresponding to the physical location of the static object; the static object includes signals and switches. Obtain the user control area corresponding to the current location of the dynamic object; the dynamic object includes trains and movement authorization. Obtain all user control areas within the scope of the cross-regional object; the cross-regional object includes long routes; Obtain the user-free control zone or all control zones of the global object; the global object includes system vehicle impoundment and timetable. The authorization check types for user instructions include: operation instructions that do not require permission, operation instructions that require permission to all control areas, operation instructions that require permission to any control area, operation instructions that require permission to the first or last control area, and operation instructions that require permission to all control areas except adjacent control areas.

2. The user access control method based on a fully automatic operation signal system according to claim 1, characterized in that, The control commands include a request for area control command and a control transfer command. These control commands are sent to the server, enabling the server to perform control transfer, emergency control, and control sharing based on the control commands and the configured configuration file. When the user control area is under the control of any user, the request for area control command is sent to the server, so that the server sends a prompt message to the second operating terminal according to the request for area control command, receives the control transfer command sent by the second operating terminal, and transfers the control of the user control area according to the control transfer command; Receive a notification message from the server indicating the transfer of control.

3. The user access control method based on a fully automatic operation signal system according to claim 1, characterized in that, The control commands include emergency control commands and emergency release commands. These commands are sent to the server, enabling the server to perform control transfer, emergency control, and control sharing based on the control commands and a configured configuration file. When the user control area is under the control of any user, the emergency control command is sent to the server so that the server can grant emergency control of the user control area to an unauthorized user based on the emergency control command. When the user without permission acquires the emergency control rights, he / she sends the emergency release command to the server, so that the server releases the emergency control rights of the user's control area according to the emergency release command.

4. The user access control method based on a fully automatic operation signal system according to claim 1, characterized in that, Sending control commands to the server, enabling the server to perform control transfer, emergency control, and control sharing based on the control commands and the configured configuration file, including: Get the username / password entered by the user; After successfully logging in with the username / password, a request for area control command is sent to the server. Based on the request for area control command, a control right prompt message is sent to the second operating terminal, enabling the second operating terminal to share control of the user control area.

5. The user access control method based on a fully automatic operation signal system according to claim 1, characterized in that, The configuration file is obtained in the following way: Configure a line data table based on the line data, the line data table including line mileage, signal equipment location and equipment control area; Configure the ATS configuration data table according to user requirements; the ATS configuration data table includes the user control area. Configure the ATS node data table according to system requirements. The ATS node data table includes the functional allocation of software nodes. Configure the AOA data table according to the user requirements. The AOA data table includes user groups, user commands, authorization check methods, and user command assignments. The line data table, the ATS configuration data table, the ATS node data table, and the AOA data table are converted using a conversion tool to obtain the set configuration file.

6. A user access control system based on a fully automatic operation signal system, characterized in that, The system, applied to a first operating terminal, includes: The first judgment module is used to determine whether the current user can execute user commands; The acquisition module is used to acquire the user control area of ​​the operation object and the authorization check type of the user instruction when the current user is able to execute the user instruction; the user control area is the area that the user can control; The second judgment module is used to determine whether the current user has control rights based on the user control area of ​​the operation object and the authorization check type of the user instruction; The control module is used to send control commands to the server when the current user has the control rights, so that the server can perform control transfer, emergency control and control sharing according to the control commands and the set configuration file; The objects to be operated on include static objects, dynamic objects, cross-region objects, and global objects. The acquisition module is specifically used for: Obtain the user control area corresponding to the physical location of the static object; the static object includes signals and switches. Obtain the user control area corresponding to the current location of the dynamic object; the dynamic object includes trains and movement authorization. Obtain all user control areas within the scope of the cross-regional object; the cross-regional object includes long routes; Obtain the user-free control zone or all control zones of the global object; the global object includes system vehicle impoundment and timetable. The authorization check types for user instructions include: operation instructions that do not require permission, operation instructions that require permission to all control areas, operation instructions that require permission to any control area, operation instructions that require permission to the first or last control area, and operation instructions that require permission to all control areas except adjacent control areas.

7. An electronic device comprising a memory and a processor, wherein the memory stores a computer program executable on the processor, characterized in that, When the processor executes the computer program, it implements the method described in any one of claims 1 to 5.

8. A computer-readable medium having processor-executable non-volatile program code, characterized in that, The program code causes the processor to execute the method described in any one of claims 1 to 5.

Images