An intelligent report system and report generation method

Abstract

The present invention discloses an intelligent reporting system and a reporting method, wherein the system comprises data for generating reports and pushing them to applications for display, completing the uploading and issuing of report data between a headquarters data middle station and a provincial data middle station, and a reporting center for full-process management of reports, wherein the reporting center comprises an operation and maintenance operation management unit for providing basic functional application services for system operation and maintenance, a reporting system management unit for performing full life cycle management of reports, a professional reporting process management unit for performing full-process management of report filling, approval, reporting, and rollback, a reporting construction management unit for performing full-process management of report demand initiation, review and evaluation, development verification, and release, and a personal reporting unit for providing a personalized reporting micro-portal tool; the present invention improves the personalized functional modules of the reporting center around the four aspects of authority management system, full-process management of demand, personalized portal, and user experience improvement, and realizes "zero filling" intelligent reports.

Description

Technical Field

[0001] The invention relates to an intelligent report system and a report generating method. Background Art

[0002] The reporting requirements of the power industry are characterized by complex energy interconnection and complex management systems. It is necessary to fill in various financial statements and performance operation indicator reports according to different business and regulatory requirements. The traditional manual filling method requires a lot of manual work, resulting in a waste of human resources, prone to omissions, false reports and other problems. The traditional data analysis method is also difficult to quickly analyze and process massive business data, and quickly and efficiently complete multi-level report submission. Summary of the invention

[0003] Purpose of the invention: The purpose of the present invention is to provide an intelligent reporting system and report generation method that realizes a personalized report authority management system and full-process automated management of demand.

[0004] Technical solution: The intelligent reporting system of the present invention includes a reporting center, which is used to generate report data and push it to applications for display, complete the upload and distribution of report data between the headquarters data center and the provincial data center, and is used for full-process management of reports;

[0005] The report center includes an operation and maintenance management unit, a report system management unit, a professional report process management unit, a report construction management unit and a personal report unit;

[0006] The operation and maintenance management unit is used to provide basic functional application services for system operation and maintenance; the report system management unit is used to manage the entire life cycle of reports; the professional report process management unit is used to manage the entire process of report filling, approval, reporting, and rollback; the report construction management unit is used to manage the entire process of report demand initiation, review and evaluation, development verification, and release; the personal report unit is used to provide a personalized report micro-portal tool.

[0007] Furthermore, the operation and maintenance management unit monitors and manages system status, component resources, platform resources, service resources, requirements and problems, operation indicators, and report publishing, and provides basic functional application services for system operation and maintenance;

[0008] The report system management unit manages the creation and release of report catalogs, definition and revision of report information, and information management of related links in the entire life cycle of reports, thereby achieving full life cycle management of reports;

[0009] The professional report process management unit realizes the functions of viewing reports to be submitted, filling in reports, checking report data, submitting reports for approval, agreeing to submit, rejecting reports, submitting reports, returning reports, applying for unlocking, unlocking reports and archiving report results.

[0010] Furthermore, the report construction management unit realizes the functions of initiating report requirements, reviewing requirements, evaluating requirements, rejecting requirements, transferring to development, applying for resources, applying for indicators, developing data sets, developing reports, verifying reports and applying for release, and realizes the full process management of the initiation, review and evaluation, development verification and release of report requirement development and construction;

[0011] The personal report unit realizes the functions of viewing data sets, sharing reports, subscribing to reports, downloading reports, exploring report rules, and exploring report display.

[0012] Furthermore, the system also includes a business application module for realizing the application of report data in enterprise portals, mobile applications, peer benchmarking, and marketing business;

[0013] The system also includes a grassroots independent innovation module for generating fixed reports, filled reports, multi-dimensional reports or self-service reports using report data.

[0014] Furthermore, the security architecture of the system includes application security; the application security includes:

[0015] Identity authentication and access control, based on the ISC unified permission platform to achieve user login permission authentication;

[0016] Security audit: audit the addition, deletion, and modification of users, user login, and password reset through a unified permission platform; audit user permission configuration, unauthorized access, connection timeout, and logout through data visualization tools; audit the addition, deletion, and modification of business data, data backup, and recovery; save audit logs for a certain period, and back up expired audit logs;

[0017] Communication integrity: Authentication information is encrypted and transmitted by a unified authority platform to ensure storage confidentiality. Important business information is verified by SM3 to generate summary to ensure data integrity during transmission.

[0018] Communication confidentiality: The identification information is encrypted and transmitted by the unified authority platform to ensure storage confidentiality. The maintenance and evaluation business data is encrypted and stored using SM4 to ensure confidentiality.

[0019] Configuration management: The role configuration function of data visualization tools is used to realize configuration management of all users, roles, and permissions;

[0020] Session management: User login information and identity credentials are managed by a unified permission platform, and sensitive session data is not stored in the system session. Session timeout settings are visually configured through data visualization tools, and user sessions are cleared after the session survival time expires or the user logs out.

[0021] Security vulnerabilities: Design and develop the system in accordance with security requirements and coding requirements, and pass third-party security testing before the system goes online;

[0022] Interface authentication: Authentication is performed before the interface data connection is established. The authentication method uses a shared password, user name, password or digital certificate.

[0023] Access control: limit the application scope of the open interface to include only the minimum set of business functions required by the interconnected system, and limit the access system's access rights to the object according to the interface access control policy;

[0024] Log audit: Use event logging to ensure data non-repudiation.

[0025] Furthermore, the security architecture of the system includes data security; the data security includes: login authentication, strict authorization, transmission encryption and real-time backup of key sensitive data; the login authentication adopts a strong authentication method.

[0026] In the report generation method described in the present invention, the report center obtains report indicators in the headquarters data center and / or the provincial data center, manages the entire report process, uploads and sends the report data between the headquarters data center and the provincial data center, generates report data according to the report indicators and pushes it to the application for display.

[0027] Further, the following steps are included:

[0028] (1) Complete the detailed data preparation work in the data center with the support of the standard data set of SG-CIM model table and standard table;

[0029] (2) After the business system adds business logic to the detailed data, a wide table of detailed data from a business perspective is formed;

[0030] (3) In the ODPS of the data center, the business system processes and calculates the detailed data wide table to form a multi-level temporary intermediate data table, and constructs the indicator result table according to the indicator center technical route. The business system is responsible for calculating and managing the data; the temporary intermediate data table or the indicator result table is processed and calculated according to the report business requirements to form a report result table;

[0031] (4) Synchronizing the indicator result table and report result table to the indicator report application space of the data center, and the report center uniformly manages the indicator result table and report result table;

[0032] (5) Service encapsulation is performed on the indicator result table and report result table, and an API is formed through unified data service release. The front-end business application accesses data or displays pages by calling the API interface; the report center provides report filling capabilities, and the filled data is used as one of the indicator sources;

[0033] (6) The headquarters data center and the provincial data center are connected through SG-UEP to upload and distribute report data. The report data includes basic report information, report result data and report template files.

[0034] The electronic device of the present invention comprises a memory, a processor and a computer program stored in the memory and executable on the processor. When the computer program is loaded into the processor, the report generation method is implemented.

[0035] The computer-readable storage medium of the present invention stores a computer program, and the computer program implements the report generation method when executed by a processor.

[0036] Beneficial effects: Compared with the prior art, the advantages of the present invention are: (1) The present invention applies report business activities such as production design, process approval, system management, operation and maintenance, and business applications around conventional reports such as fixed reports, filled reports, and self-service reports, and fully utilizes the capabilities of the report center platform "data" + enterprise-level data middle platform "service" to support the development of core report business; (2) The present invention improves the personalized functional modules of the report center around the four aspects of authority management system, full-process demand management, personalized portal, and user experience improvement, and designs operation and maintenance management unit, report system management unit, professional report process management unit, report construction management unit and personal report unit to realize "zero filling" intelligent report. BRIEF DESCRIPTION OF THE DRAWINGS

[0037] Figure 1 This is the architecture diagram of the intelligent reporting system of the present invention;

[0038] Figure 2 It is a business process architecture diagram of the intelligent reporting system of the present invention;

[0039] Figure 3 This is a security architecture diagram of the intelligent reporting system of the present invention. DETAILED DESCRIPTION

[0040] The technical solution of the present invention is further described below in conjunction with the accompanying drawings.

[0041] like Figure 1As shown, the intelligent reporting system adopts the technical route of "data middle platform + microservice application". The platform data analysis, data calculation and data publishing functions adopt Huawei DWS big data suite, Web services adopt visualization tools provided by the report center, and application development adopts microservices. The system is based on an enterprise-level big data platform, realizes the deep integration of the report center and the enterprise portal, supports the normal operation of the report business, completes the intelligent reporting service capability improvement in five aspects: personalized report authority management system, full-process automation management of requirements, personalized portal, user experience improvement, and commonality set implementation, builds typical application scenarios for reports, manages and standardizes the transformation of report results, improves the shared report market, realizes intelligent classification and grading management of reports, establishes and improves the report application process and specifications, strengthens the support for report automation services, and improves the digital application capabilities of all employees. The "zero-filling" intelligent reporting system includes the following contents:

[0042] 1. Improve the multi-level authority management system of provinces, cities, counties and offices

[0043] In accordance with the multi-level report authority management requirements of provinces, cities, counties and offices, we have built a personalized authority management system for the report center, and improved and deepened the application of core capabilities such as process approval. Users automatically distinguish between regular reports and report data permissions based on their units. According to the role management mechanism, we intelligently adapt to the system operations and business operations of cities and prefectures, support hierarchical report applications and operations management, and realize periodic online filling and step-by-step approval of regular reports.

[0044] The operation and maintenance management unit monitors and manages system status, component resources, platform resources, service resources, requirements and issues, operation indicators, report publishing and review, and provides basic functional application services for system operation and maintenance.

[0045] The report system management unit provides the creation and publication of report catalogs, definition and revision of report information, and information management of related links in the entire life cycle of reports, thus realizing the full life cycle management of reports.

[0046] The professional report process management unit provides functions such as viewing reports to be submitted, filling in reports, checking report data, submitting reports for approval, approving reports, rejecting reports, submitting reports, rolling back reports, applying for unlocking, unlocking reports, and archiving report results, thus realizing the full process management of filling in, approving, submitting, rolling back and rejecting professional reports.

[0047] By applying the above three functional modules, a multi-level reporting application and operation authority management system covering provinces, cities, counties and institutes can be effectively constructed.

[0048] 2. Realize the whole process management of intelligent report requirements

[0049] Support the construction of "zero-reporting" unified report requirements and problem reporting templates, standardize the normal operation process of the report center's business requirements, realize the online settlement of incremental report requirements, online processing of functional requirements, and promote online management and control of the entire process of routine reporting and problem reporting requirements.

[0050] The report construction management unit provides functions such as initiating report requirements, reviewing requirements, evaluating requirements, rejecting requirements, transferring to development, applying for resources, applying for indicators, developing data sets, developing reports, verifying reports, and applying for release, etc., to achieve online management of the entire process of report requirement development and construction, including initiation - review and evaluation - development verification - release, and intelligent management and control of the entire process information of report requirements.

[0051] 3. Support personalized report portal application

[0052] Build a custom report micro-portal application scenario, customize the report portal's display elements, display style, interface layout and report directory navigation, create a personalized report portal, meet the classification management needs of reports for users at different levels, and provide a "one-size-fits-all" report micro-portal tool.

[0053] The personal report unit provides functions such as viewing data sets, sharing reports, subscribing to reports, downloading reports, exploring report rules, and exploring report displays, and provides a personalized report micro-portal tool.

[0054] 4. Improve the user experience of reports at all levels

[0055] Improve the report application and system usage experience of grassroots unit users in the report center, provide report management information expansion, professional report dynamic publishing functions, effectively improve the personalized service capabilities in terms of application convenience and practicality, support multiple people to share and fill in reports online, realize grassroots report self-service, improve user convenience in querying data, and improve the experience of multi-business data acquisition and use. Improve report custom query, support one-click addition of report fields as query conditions, and automatically match editing styles, which can be flexibly selected and set to improve user experience.

[0056] The business application module provides functions such as enterprise portal, mobile application, peer benchmarking, marketing business, etc., which improves the convenience and practicality of system application and personalized service capabilities. The grassroots independent innovation module provides fixed reports, filling reports, multi-dimensional reports, self-service reports and other functions, supports online sharing and filling of reports by multiple people, and realizes self-service services for grassroots reports.

[0057] 5. Carry out big data intelligent reporting applications

[0058] Based on Huawei Cloud Big Data Platform, Spark Streaming streaming computing tools are used to clean, convert, extract and analyze the business data collected from the ODS source layer to ensure data accuracy and consistency. The analysis results are stored in the Hive data warehouse to generate the required indicators and statistical results. The TensorFlow machine learning framework is used to conduct in-depth analysis and mining of the data, build intelligent algorithm models, and realize automatic classification, prediction, and recommendation of data. Finally, with the help of DataWorks data visualization and analysis tools, the processing and analysis results are displayed in the form of visual reports (including various charts, tables, and indicators).

[0059] like Figure 2 As shown in the figure, the business process of the system includes: the report center uses the data aggregation, big data computing and analysis, massive data storage, and custom service capabilities of the data center to generate indicators in the analysis layer by summarizing, calculating, and processing the SG-CIM model tables and standard tables in the shared layer; the associated indicators are calculated and processed to generate reports in the analysis layer, and report access services are provided based on the data center. Based on the State Grid Cloud Platform, services such as report registration, design, query, management, display, and release are provided to the outside world. On the basis of continuing to use the data process of the report center, the two-level network and provincial deployment mode is adopted. The connection between the two levels follows the overall technical route of the data center connection. The data such as the analysis layer indicator result set, report result set, summary result set, and report template between the two levels are exchanged at two levels through the shared layer exchange area. The SG-CIM model tables and standard tables in the shared layer of the data center are summarized, calculated, and processed to generate indicators in the analysis layer. The associated indicators are calculated and processed to generate reports in the analysis layer, providing data service support for business applications and ecological services. The two-level data middle platform realizes data interaction and process connection between the two-level middle platforms through the SG-UEP unified data exchange platform. The detailed application data business process is as follows:

[0060] (1) Complete the detailed data preparation work in the data center with the support of the standard data sets of the SG-CIM model table and the standard table.

[0061] (2) After the business system adds business logic to the detailed data, a wide table of detailed data from a business perspective is formed;

[0062] (3) In the data middle platform ODPS, the business system further processes and calculates the detailed data wide table to form a multi-level temporary intermediate data table, and constructs the indicator result table according to the indicator center technical route. The business system is responsible for calculating and managing the data; according to the report business requirements, the temporary intermediate data table or the indicator result table is further processed and calculated to form a report result table.

[0063] (4) The indicator result table and report result table generated by the summary calculation of the data center ODPS are synchronized to the indicator report application space (technically, the indicator result table and report result table in the Alibaba center Maxcompute are synchronized to the ADB / RDS data storage, or the indicator result table and report result table in the Huawei center DWS are synchronized to DWS). The indicator result table and report result table generated by the summary statistics of the business system are uniformly managed by the indicator report center.

[0064] (5) The indicator result table and report result table are encapsulated as services and published as APIs through unified data services. The front-end business applications access data or display pages by calling API interfaces. The report center provides report filling capabilities, and the reported data can also be used as one of the indicator sources.

[0065] (6) The headquarters and provincial (municipal) company data centers upload and distribute reports through SG-UEP, including basic report information, report result data, report template files, etc.

[0066] The report center data architecture of the system described in the present invention adopts a two-level deployment mode. The connection between the two levels follows the technical route of data connection between the data middle platform. The data such as the analysis layer indicator result set, report result set, summary result set, and report template between the two levels are exchanged at two levels through the shared layer exchange area. The SG-CIM model table and standard table in the shared layer of the data middle platform are summarized, calculated, and processed to generate indicators in the analysis layer. The associated indicators are calculated and processed to generate reports in the analysis layer to provide data service support for business applications and ecological services. The two-level data middle platform realizes data interaction and process connection between the two-level middle platforms through the SG-UEP unified data exchange platform. Following the unified technical route of the data middle platform, based on the cloud platform and the middle platform technical architecture, cloud architecture and microservice design are adopted to realize data management service capability support, make full use of the construction results and capability components of the data middle platform, and the front-end application realizes the decoupling of the middle platform service and the front-end application in the service call mode. The report tool realizes free dragging of the Web end based on OLAP analysis, HTML5, WebGL and other technologies, and supports the rapid construction of business applications with microservices, micro-applications, and service componentization technology architecture systems. The gateway microservice and each application microservice are deployed in the K8S cluster and registered with the CCE built-in registration center so that the microservice can be discovered by other microservices. When the request passes through the unified inlet load balancing ELB, it is mapped to the microservice gateway, and the microservice gateway forwards it to the specific microservice according to the specific microservice name in the request.

[0067] The report generation and other application modes of the system of the present invention include:

[0068] ①Integrate the report center and enterprise portal

[0069] Complete the integration of the report center and the enterprise-level big data platform portal, realize the pending approval process of the report center and the unified single sign-on of the enterprise portal, meet the two-way data interface connection between the data middle platform and the data supermarket application, and through data services and interface integration, realize the data service application of various pending tasks such as report approval, listing, authorization approval, etc. according to the frequency required by business applications.

[0070] ②Fully automatic middle platform data acquisition type report generation

[0071] According to the needs of automated middle-office data acquisition reports for daily reports, focusing on the special task requirements of provincial business departments, focusing on the work of multiple professional departments such as development, marketing, and equipment, and fully considering the needs of the grassroots, based on the report center, it supports the generation of multiple fully automatic middle-office data acquisition type reports, forming results that meet the actual needs of multi-level reports on the provincial side, and according to actual needs, the report construction results of the entire province are managed to the report center to achieve multi-level application promotion across the province.

[0072] ③Semi-automatic mixed backfill type report generation:

[0073] According to the needs of intelligent semi-automatic mixed backfill reports for daily reports, focusing on the special task requirements of provincial business departments, centering on the work of multiple professional departments such as development, marketing, equipment, etc., and fully considering the needs of the grassroots, based on the report center, it supports the generation of multiple semi-automatic mixed backfill reports to form results that meet the actual needs of multi-level reports on the provincial side, and according to actual needs, the report construction results of the whole province are managed to the report center to realize multi-level application promotion across the province.

[0074] ④ Fully manual backfill type report production:

[0075] According to the needs of daily reports for fully manual backfilling of middle-end data acquisition reports, focusing on the work of multiple professional departments such as development, marketing, and equipment, and fully considering the needs of the grassroots, based on the report center, it supports the generation of multiple fully manual backfill reports. On the basis of completing data backfilling at the grassroots level, it automatically realizes the automatic summary and calculation of multi-level report data to form results that meet the actual needs of multi-level reports on the provincial side, and according to actual needs, the report construction results of the whole province are managed to the report center to realize multi-level application promotion across the province.

[0076] ⑤Support intelligent operation of reporting resources:

[0077] Supports automated and intelligent report resource operations, automatically performs report statistical analysis according to application specifications, and intelligently responds to the "zero-filling" report application requirements of various professions. Supports intelligent report quality verification and analysis, and automatically generates report quality problem analysis reports. Supports multi-dimensional analysis such as report popularity and application effectiveness, and publishes monthly reports on the promotion of "zero-filling" for regular reports. According to the various work requirements such as special pilots and inspections arranged by superiors, realize the management and operation of special support and headquarters at two levels, support unified monitoring and management of report tools and resources, report templates and related resources, and support the two-level operation of report resources.

[0078] ⑥Technical support report application:

[0079] It supports hierarchical report applications, supports full business data access for reports, ensures all links of data, maintains the path of grassroots report data models, and ensures smooth channels for report data acquisition and update; provides application support such as data traceability, data processing, and report implementation for multi-level management of provinces, cities, and counties, and assists grassroots units in independently conducting report design and analysis; for report application scenarios, it supports the integration of reports of various business systems and provides technical optimization solutions; supports report authorization and approval, tracks report authorization status, and realizes compliant sharing of report data; at the same time, it supports the report center to provide external training, publicity and other data services, forms relevant documents such as typical report case collections, and further promotes the multi-level application promotion of the report center across the province.

[0080] ⑦Support common business applications:

[0081] Based on the summary of report fields, we extract common data wide tables, standardize the scale and quality of report field summary wide tables, and the data accuracy and statistical authority are verified and approved by the relevant professional departments and filed with the information management department, so as to promote the maximization of online data collection in an orderly manner. Based on the report resource results under management, with high-quality and representative reports as the basis, we intelligently generate common report analysis results, extract reusable typical application scenarios of reports, generate typical professional general templates, form a report case library, and automatically migrate the existing common data sets in the data center to form a reusable report template library to effectively support grassroots and business system applications.

[0082] like Figure 3As shown, the security architecture of the system described in the present invention follows the design of the headquarters data middle platform security architecture, and the overall security protection design is carried out in accordance with the requirements of the level 2 protection system. Follow the security strategy of "zoning and domain, secure access, dynamic perception, and comprehensive protection", design security protection in accordance with the requirements of the data middle platform system, and strengthen the protection of system security in accordance with the continuous improvement of business service data security requirements, to maximize the security, reliability and stable operation of statistical applications. The system security protection framework system complies with the relevant requirements of national and company network security, and focuses on the main security risks faced by the system, focusing on application security, data security, host security, network security, terminal security, security management and other aspects for key protection design, while strengthening security protection. Specifically including:

[0083] 1) Physical security

[0084] Physical security measures and technologies play an important role in the safety of the computer room and access security management. The physical security measures and technologies used in this system include:

[0085] Access control: Implement strict access control to allow only authorized personnel to enter the computer room, and equip it with monitoring and alarm systems;

[0086] Monitoring system: Install a closed-circuit television monitoring system to monitor the inside and outside of the computer room, and equip it with an alarm system;

[0087] Fire alarm and fire extinguishing system: Fire alarms, fire extinguishers and automatic fire extinguishing systems are installed in the computer room to provide timely alarm and fire extinguishing capabilities;

[0088] Safety inspection: Regularly conduct safety inspections in the computer room to ensure the normal operation and updating of safety facilities and measures;

[0089] Power supply and equipment safety: Ensure stable power supply and equipment reliability to prevent power failure and equipment damage from affecting the operation of the computer room.

[0090] 1) Border security:

[0091] Boundary security management protects the security of an organization's information systems by controlling the boundaries of information systems, networks, and applications, as well as the boundaries of users accessing these systems and applications. This system mainly implements boundary security control in the horizontal inter-domain management of information zones, the vertical boundaries of information zones, and the user domain boundaries of Internet zones:

[0092] Horizontal inter-domain management of information zones:

[0093] Security isolation: Establish access control and firewall isolation measures between different information systems and networks to implement security checks and rule controls on the system to ensure that attacks cannot cross domains;

[0094] Security monitoring: Use intrusion detection systems (IDS) to monitor network traffic and data flows between different information systems and detect abnormal behaviors in a timely manner.

[0095] Vertical boundaries of the information zone:

[0096] Access control: Control user login through the access control system to limit the user's access to the organization's information system;

[0097] Security isolation: Establish access control and firewall network isolation measures to separate network segments with different trust levels.

[0098] Internet region user domain boundaries:

[0099] Network access control: Establish network isolation measures to limit Internet users’ access to the organization’s information systems and block the use of VPNs;

[0100] Content filtering: Filter the content accessed by Internet users to prevent malware intrusion and attack behaviors while performing equipment, network content, and personnel monitoring.

[0101] 3) Application Security

[0102] The following technical means are used to comprehensively improve the security of server-side applications and application system interface calls:

[0103] Identity authentication and access control: This application implements user login permission authentication based on the ISC unified permission platform, and implements visual access permission configuration through data visualization tools. User authentication is provided by ISC for the first login verification, and no repeated verification and authentication is required. To prevent the login authentication information from being tampered with during the transmission process;

[0104] Security Audit: System-level events such as user addition, deletion, and modification, user login, and password reset are audited by a unified permission platform. User permission configuration, unauthorized access, connection timeout, and exit are audited visually by data visualization tools. Business-level events such as business data addition, deletion, and modification, as well as system-level events such as data backup and recovery are audited by this system. The audit log is kept for 6 months, and data older than 6 months is manually backed up.

[0105] Communication integrity: Authentication information is encrypted and transmitted by a unified authority platform to ensure storage confidentiality; important business information is verified by SM3-generated summary to ensure data integrity during transmission.

[0106] Communication confidentiality: Identification information is encrypted and transmitted by a unified authority platform to ensure storage confidentiality; important business data such as maintenance and evaluation are encrypted and stored using SM4 to ensure confidentiality.

[0107] Configuration management: The role configuration function of the data visualization tool is used to realize the configuration management of all users, roles and permissions.

[0108] Session management: Important session data such as user login information and identity credentials are managed by the unified permission platform. Sensitive session data such as passwords are not stored in this system session. The session timeout setting is visually configured through the data visualization tool. The session survival time is 30 minutes. After the timeout, the server automatically clears the user session. After the user logs out, the server also automatically clears the user session.

[0109] Security vulnerabilities: The system is designed and developed in accordance with security requirements and coding requirements, and passes third-party security testing before the system goes online.

[0110] Interface authentication: Authentication is performed before the interface data connection is established. The authentication method uses a shared password, username / password, or digital certificate.

[0111] Access control: Limit the application scope of the open interface to include only the minimum set of business functions required by the interconnected system. Limit the access rights of the access system to the object according to the interface access control policy.

[0112] Log audit: Use event logging to ensure data non-repudiation.

[0113] 4) Data security

[0114] Business data is the basis for the normal operation of the system, and it is required to ensure the confidentiality, integrity and availability of business data during storage, processing and transmission. Key sensitive data can be achieved: login authentication, strict authorization, transmission encryption, real-time data backup; authentication adopts strong authentication methods, including digital certificates, one-time passwords, etc.; strict authorization management is adopted to prevent data and programs from arbitrary tampering by unauthorized users; data is encrypted as required during transmission, and the encryption algorithm selects the AES algorithm with a certain strength; data is securely deleted, destroyed or disposed of when it is no longer needed; it can detect whether the integrity of business data is damaged during processing, transmission and storage; data backup and recovery, regular data backup to prevent data loss, and establish appropriate data recovery mechanisms.

[0115] 5) Host security

[0116] Security reinforcement of service operating system: Newly added software and hardware support platforms (such as servers, databases, middleware, etc.) are confirmed to meet the headquarters' security requirements during procurement, and security settings and security reinforcement are carried out before commissioning. During operation, special attention is paid to access control, security auditing and other aspects.

[0117] Database security: The application system adopts a B / S structure. The client accesses the database server through the application server. The database connection pool mechanism is used between the application server and the database server. The application server and the database server are deployed in a protected security area, so that the client can only access the system data through the application running on the application server. The business terminal is prohibited from bypassing the application software to directly access the database. The database server resource usage management strategy is adopted to prevent certain users from overusing server resources for specific business operations. Multiple business modules of the system should correspond to multiple database users respectively to realize the above resource management function. The database users of each module are granted the permission to access database objects such as business data tables, views, and stored procedures through the security function characteristics of the database software. Establish user files and conduct regular audits; for different database systems, perform corresponding security reinforcement according to the security checklist.

[0118] Web server security: By strengthening the web server, it becomes a bastion host that can resist attacks. The web application server middleware provides a comprehensive security architecture, including access control, password-based privacy and user authentication.

[0119] 6) Cybersecurity

[0120] The system is deployed and operated in the information intranet, and the company's unified security protection system and measures are used to protect against external security threats and ensure the security of information channels and network equipment.

[0121] 7) Terminal Security

[0122] The legitimacy authentication of terminal equipment (including office terminals and operation and maintenance terminals) includes network access permission authentication, equipment legitimacy authentication, user legitimacy authentication and authority legitimacy authentication, which effectively ensures the security of equipment during initial network access and daily login.

[0123] Network access permission authentication: Radius is responsible for registering the user's organization, mobile phone number, device type, operating system and version, device IMEI and other information. After the review is passed, the information binding and digital certificate generation are automatically completed. When the user logs in, Radius first authenticates the network access information. After the authentication is passed, DHCP assigns an IP address to the terminal, thereby realizing network access permission.

[0124] Device legitimacy authentication: By binding the digital certificate with the IMEI of the smart mobile terminal, any device that has been replaced or has had its IMEI serial number cloned will be considered an illegal device. The legitimacy of the device is verified by verifying the digital certificate and IMEI.

[0125] User legitimacy authentication: Based on the username and password, the uniqueness of the personal communication number is utilized. Through the user's personal communication number and the authentication information on the server, a dynamic password is sent to the authorized user's communication number each time the user logs into the enterprise portal application to authenticate the user's login identity.

[0126] Permission legitimacy authentication: When using smart mobile terminal applications in the enterprise portal, different business modules are authorized and authenticated separately. The core business modules can be controlled by dynamic passwords and can only be accessed after passing the dynamic password authentication.

[0127] 8) Safety management

[0128] The application system interacts with other business systems in terms of data and processes, and there is a risk of security risks spreading and amplifying at all levels, such as the network, system, data, and application, which may lead to new security vulnerabilities. Therefore, security assessments are first conducted before adding new functions and interface systems during the development and construction phase, and formal operations are allowed only after security reinforcement to avoid lowering the system to be connected. Especially when systems with low security levels are connected, monitoring and protection measures are required at the system boundary. Secondly, during the system operation and maintenance phase, system security management and control are strictly implemented in accordance with information security management specifications to ensure safe and stable operation of the system.

[0129] In the report generation method described in the present invention, the report center obtains report indicators in the headquarters data center and / or the provincial data center, manages the entire report process, uploads and sends the report data between the headquarters data center and the provincial data center, generates report data according to the report indicators and pushes it to the application for display.

[0130] Further, the following steps are included:

[0131] (1) Complete the detailed data preparation work in the data center with the support of the standard data set of SG-CIM model table and standard table;

[0132] (2) After the business system adds business logic to the detailed data, a wide table of detailed data from a business perspective is formed;

[0133] (3) In the ODPS of the data center, the business system processes and calculates the detailed data wide table to form a multi-level temporary intermediate data table, and constructs the indicator result table according to the indicator center technical route. The business system is responsible for calculating and managing the data; the temporary intermediate data table or the indicator result table is processed and calculated according to the report business requirements to form a report result table;

[0134] (4) Synchronizing the indicator result table and report result table to the indicator report application space of the data center, and the report center uniformly manages the indicator result table and report result table;

[0135] (5) Service encapsulation is performed on the indicator result table and report result table, and an API is formed through unified data service release. The front-end business application accesses data or displays pages by calling the API interface; the report center provides report filling capabilities, and the filled data is used as one of the indicator sources;

[0136] (6) The headquarters data center and the provincial data center are connected through SG-UEP to upload and distribute report data. The report data includes basic report information, report result data and report template files.

[0137] The electronic device of the present invention comprises a memory, a processor and a computer program stored in the memory and executable on the processor. When the computer program is loaded into the processor, the report generation method is implemented.

[0138] The computer-readable storage medium of the present invention stores a computer program, and the computer program implements the report generation method when executed by a processor.

[0139] The computer-readable storage media may include RAM, ROM, EEPROM, CD-ROM or other optical disk storage, magnetic disk storage or other magnetic storage devices, flash memory, or any other medium that can be used to store the desired program code in the form of instructions or data structures and that can be accessed by a computer.

[0140] The processor is used to execute the computer program stored in the memory to implement each step of the method involved in the above embodiment.

Claims

1. An intelligent reporting system, characterized in that: The system includes a report center, which is used to generate report data and push it to applications for display, complete the upload and distribution of report data between the headquarters data center and the provincial data center, and is used for full-process management of reports; The report center includes an operation and maintenance management unit, a report system management unit, a professional report process management unit, a report construction management unit and a personal report unit; The operation and maintenance management unit, the report system management unit and the professional report process management unit realize the four-level report management of province, city, county and institute. Users automatically distinguish the routine reports and report data permissions according to their units. According to the role management mechanism, they intelligently adapt to the system operation and business operation roles of the city, support hierarchical report application and operation management, and realize the periodic online filling and step-by-step approval of routine reports; the operation and maintenance management unit is used to provide the basic functional application services of system operation and maintenance; the report system management unit is used to manage the whole life cycle of the report; the professional report process management unit is used to fill in, approve, report and roll back the whole process of the report. The operation and maintenance management unit monitors and manages the system status, component resources, platform resources, service resources, requirements and problems, operation indicators, and report publishing, and provides basic functional application services for system operation and maintenance. The report system management unit manages the creation and publishing of report catalogs, the definition and revision of report information, and the information management of related links in the entire life cycle of reports, so as to achieve the full life cycle management of reports. The professional report process management unit realizes the functions of viewing reports to be submitted, filling in reports, verifying report data, submitting reports for approval, agreeing to submit, rejecting reports, submitting reports, rolling back reports, applying for unlocking, unlocking reports, and archiving report results. The report construction management unit is used to manage the entire process of report demand initiation, review and evaluation, development verification, and release; the personal report unit is used to provide a personalized report micro-portal tool, providing functions such as viewing data sets, report sharing, report subscription, report downloading, report rule exploration, and report display exploration.

2. The intelligent reporting system according to claim 1, characterized in that: The report construction management unit realizes the functions of initiating report requirements, requirement review, requirement evaluation, requirement rejection, transfer to development, application for resources, application for indicators, development data sets, development reports, report verification and application for release, and realizes the full process management of requirement initiation, review and evaluation, development verification and release of report requirement development and construction.

3. The intelligent reporting system according to claim 1, characterized in that: The system also includes a business application module for realizing the application of report data in enterprise portals, mobile applications, peer benchmarking, and marketing business; The system also includes a grassroots independent innovation module for generating fixed reports, filled reports, multi-dimensional reports or self-service reports using report data.

4. The intelligent reporting system according to claim 1, characterized in that: The security architecture of the system includes application security; the application security includes: Identity authentication and access control, based on the ISC unified permission platform to achieve user login permission authentication; Security audit: audit the addition, deletion, and modification of users, user login, and password reset through a unified permission platform; audit user permission configuration, unauthorized access, connection timeout, and logout through data visualization tools; audit the addition, deletion, and modification of business data, data backup, and recovery; save audit logs for a certain period, and back up expired audit logs; Communication integrity: Authentication information is encrypted and transmitted by a unified authority platform to ensure storage confidentiality. Important business information is verified by SM3 to generate summary to ensure data integrity during transmission. Communication confidentiality: The identification information is encrypted and transmitted by the unified authority platform to ensure storage confidentiality. The maintenance and evaluation business data is encrypted and stored using SM4 to ensure confidentiality. Configuration management: The role configuration function of data visualization tools is used to realize configuration management of all users, roles, and permissions; Session management: User login information and identity credentials are managed by a unified permission platform, and sensitive session data is not stored in the system session. Session timeout settings are visually configured through data visualization tools, and user sessions are cleared after the session survival time expires or the user logs out. Security vulnerabilities: Design and develop the system in accordance with security requirements and coding requirements, and pass third-party security testing before the system goes online; Interface authentication: Authentication is performed before the interface data connection is established. The authentication method uses a shared password, user name, password or digital certificate. Access control: limit the application scope of the open interface to include only the minimum set of business functions required by the interconnected system, and limit the access system's access rights to the object according to the interface access control policy; Log audit: Use event logging to ensure data non-repudiation.

5. The intelligent reporting system according to claim 1, characterized in that: The security architecture of the system includes data security; the data security includes: Login authentication, strict authorization, transmission encryption and real-time backup are performed on key sensitive data; the login authentication adopts a strong authentication method.

6. A report generation method based on the system according to any one of claims 1 to 5, characterized in that: The report center obtains report indicators in the headquarters data center and / or the provincial data center, manages the entire report process, uploads and distributes the report data between the headquarters data center and the provincial data center, generates report data based on the report indicators and pushes it to the application for display.

7. The report generation method according to claim 6, characterized in that: The steps include: (1) Complete the detailed data preparation work in the data center with the support of the standard data set of SG-CIM model table and standard table; (2) After the business system adds business logic to the detailed data, a wide table of detailed data from a business perspective is formed; (3) In the ODPS of the data center, the business system processes and calculates the detailed data wide table to form a multi-level temporary intermediate data table, and constructs the indicator result table according to the indicator center technical route. The business system is responsible for calculating and managing the data; the temporary intermediate data table or the indicator result table is processed and calculated according to the report business requirements to form a report result table; (4) Synchronizing the indicator result table and report result table to the indicator report application space of the data center, and the report center uniformly manages the indicator result table and report result table; (5) Service encapsulation is performed on the indicator result table and report result table, and an API is formed through unified data service release. The front-end business application accesses data or displays pages by calling the API interface; the report center provides report filling capabilities, and the filled data is used as one of the indicator sources; (6) The headquarters data center and the provincial data center are connected through SG-UEP to upload and distribute report data. The report data includes basic report information, report result data and report template files.

8. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the computer program is loaded into a processor, the report generation method according to any one of claims 6 to 7 is implemented.

9. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the report generation method according to any one of claims 6 to 7 is implemented.

Images