A confidential information monitoring and management system and method

Abstract

The present invention relates to the technical field of information monitoring and management, and discloses a confidential information monitoring and management system and method, comprising: respectively dividing authority levels and business confidentiality levels for all employees and businesses within the system, dividing personnel confidentiality levels for all employees within the system, forming adjustment data according to personnel level information and work status, and resigned personnel handing over businesses in different ways according to different business confidentiality levels. The confidential information monitoring and management system and method automatically divide authority levels and confidentiality levels for employees and businesses, and automatically divide confidentiality levels for employees according to their authority levels and confidentiality levels of businesses involved, automatically adjust employees' confidentiality levels according to their work units before or after they join the company, and automatically limit the person, equipment and time for approval and confirmation of work handover for resigned employees, thereby reducing the risk of leakage of confidential information and improving the security of confidential information.

Description

Technical Field

[0001] The present invention relates to the technical field of information monitoring management, and in particular to a confidential information monitoring management system and method. Background Art

[0002] Confidential information monitoring and management system and method refers to a system and operating method for monitoring and managing confidential information, usually composed of software and hardware, and is designed to identify, monitor, record and manage the transmission and storage of confidential information within or across organizations, including: data collection, data analysis, review and filtering, access control, log recording, reporting and analysis, etc., to help organizations effectively protect and manage confidential information, prevent information leakage and data security incidents, and require the comprehensive use of technical means, institutional norms and management measures to ensure information security and compliance;

[0003] The system obtains data on the flow of confidential information through various means and channels. The system uses data analysis technology and algorithms to monitor and analyze the collected data in real time, identify possible confidential information and make alarms or records. The system reviews and filters the identified information according to the preset confidential information standards and rules to determine whether it is really confidential information to reduce the false alarm rate. The system sets access control measures to limit the access and transmission of confidential information to ensure information security. The system records the flow and access of confidential information in detail, including who, when and where the confidential information was operated, so as to conduct subsequent tracking and auditing. The system generates reports and analysis results, and provides real-time monitoring and statistical data to managers to help them make decisions and adjust regulatory strategies;

[0004] Existing confidential information monitoring and management systems and methods cannot automatically classify employees' confidentiality levels and authority levels according to the business they are involved in, cannot automatically adjust employees' confidentiality levels according to their work units before or after they join the company, and cannot automatically limit the equipment and time for work handover for employees who leave the company. Their practicality has certain limitations. Summary of the invention

[0005] The present invention provides a confidential information monitoring and management system and method for promoting the solution of the problems mentioned in the background technology.

[0006] The present invention provides the following technical solution: a method for monitoring and managing confidential information, comprising:

[0007] Through the level classification strategy, all employees and businesses within the system are divided into authority levels and business confidentiality levels;

[0008] According to each employee's authority level and business confidentiality level, all employees in the system are divided into confidentiality levels through personnel classification strategies;

[0009] Integrate the authority level, personnel confidentiality level and business confidentiality level into level information;

[0010] Get the work status of each employee;

[0011] The level information includes the target personnel's authority level, personnel confidentiality level, and business confidentiality level;

[0012] The working status includes being employed and leaving the company;

[0013] According to the personnel's level information and work status, the data adjustment strategy is used to form adjustment data to adjust the personnel confidentiality level of employees with job changes;

[0014] According to the adjusted data, the departing personnel will use the resignation handover strategy to hand over the business in different ways according to the different levels of business confidentiality.

[0015] As a confidential information monitoring and management method described in the present invention, the level classification strategy is specifically:

[0016] Obtaining all employee information within the system, including the employee name and position level of each employee;

[0017] Setting job grade thresholds;

[0018] If the employee's position level is less than or equal to the position level threshold, the employee is deemed to be at the second authority level;

[0019] If the employee's position level is greater than the position level threshold, the employee is deemed to be at the first authority level;

[0020] Integrate the permission levels corresponding to all employee information into an employee permission data set;

[0021] Get all the business inside the system;

[0022] Get the number of participants in each business and define it as the number of participants;

[0023] Setting a first participation threshold and a second participation threshold;

[0024] If the number of participants is less than or equal to the first participation threshold, the business is deemed to be classified as the first business confidentiality level;

[0025] If the number of participants is greater than the first participation threshold, and the number of participants is less than or equal to the second participation threshold, the business is deemed to be classified as the second business confidentiality level;

[0026] If the number of participants is greater than the second participation threshold, the business is deemed to be classified as the third business confidentiality level;

[0027] Integrate the confidentiality levels corresponding to all businesses into a business level data set.

[0028] As a confidential information monitoring and management method described in the present invention, the personnel classification strategy is specifically:

[0029] Obtain employee authority data set and business level data set;

[0030] Get the business that each employee participates in and define it as employee business;

[0031] Extract the number of employee transactions of each employee and set it as the total number of transactions;

[0032] Extract the number of employee businesses with the first confidentiality level from each employee's employee businesses and define it as the first business quantity;

[0033] Extract the number of employee businesses with the second confidentiality level from each employee's employee businesses and define it as the second business quantity;

[0034] Extract the number of employee businesses with the third-level confidentiality level from each employee's employee businesses and define it as the third-level business quantity;

[0035] Calculate the first proportion, second proportion and third proportion of each employee respectively. The first proportion = the first business quantity / the total business quantity, the second proportion = the second business quantity / the total business quantity, and the third proportion = the third business quantity / the total business quantity;

[0036] If an employee is at the first level of authority, and the first percentage of the employee's business is greater than 60%, then the employee is deemed to be at the first level of confidentiality;

[0037] If an employee is at the first level of authority and the second percentage of the employee's business is greater than 60%, the employee is deemed to be at the second level of confidentiality;

[0038] If an employee is at the first level of authority, and the third level accounts for more than 60% of the employee's business, the employee is deemed to be at the third level of confidentiality;

[0039] If the employee is at the second level of authority, and the first level accounts for more than 60% of the employee's business, the employee is considered to be at the second level of confidentiality;

[0040] If the employee is at the second level of authority, and the second level accounts for more than 60% of the employee's business, the employee is considered to be at the third level of confidentiality;

[0041] If an employee is at the second level of authority and the third level accounts for more than 60% of the employee's business, the employee is deemed to be at the fourth level of confidentiality;

[0042] Integrate the confidentiality levels corresponding to all employee information into a personnel level data set.

[0043] As a confidential information monitoring and management method described in the present invention, the data adjustment strategy is specifically:

[0044] Obtaining historical work information of each employee, the historical work information including historical work units and historical resignation dates;

[0045] If the employee does not have a historical resignation date, the employee's confidentiality level will not be adjusted;

[0046] If the employee has a historical resignation date, obtain the employee's historical work unit and current work unit, set them as the target historical unit and target current unit respectively, and set the employee as the target adjustment employee;

[0047] The employee businesses corresponding to the target adjustment employees in the target historical unit and the target current unit are extracted and defined as the historical businesses and the current businesses respectively;

[0048] The business types to which the historical business and the current business belong are extracted respectively, and are defined as the historical business type and the current business type respectively;

[0049] If the historical business type is inconsistent with the current business type, the confidentiality level of the target employee will not be adjusted;

[0050] If the historical business type is consistent with the current business type, the target employee will be identified as a downgraded employee and the downgraded employee's confidentiality level will be adjusted;

[0051] Extract the confidentiality level of the demoted employees and set it as the target level;

[0052] If the target level is the First Personnel Confidential Level, the Second Personnel Confidential Level, or the Third Personnel Confidential Level, the target level of the demoted employee will be lowered by one level;

[0053] If the target level is the fourth personnel confidentiality level, the confidentiality level of the demoted employee will not be adjusted;

[0054] The confidentiality levels of all employees after the adjustment are updated to the personnel level data set to form a new personnel level data set.

[0055] As a confidential information monitoring and management method described in the present invention, wherein: the data adjustment strategy also includes:

[0056] Obtaining the current work information of each employee, wherein the current work information includes the current work unit and the current leaving date;

[0057] If the employee does not have a current resignation date, the employee's confidentiality level will not be adjusted;

[0058] If the employee has a current resignation date, obtain the employee's changed work unit and identify the employee as a resigned employee;

[0059] If the resigned employee does not change his / her work unit, the confidentiality level of the resigned employee shall be extracted and determined as the resignation level;

[0060] If the resignation grade is the First Personnel Confidentiality Grade, the Second Personnel Confidentiality Grade, or the Third Personnel Confidentiality Grade, the resignation grade of the resigning employee will be lowered by one level;

[0061] If the resignation level is the fourth personnel confidentiality level, the confidentiality level of the resigning employee will not be adjusted;

[0062] If the resigned employee changes his / her work unit, his / her resignation level will be adjusted to the fourth personnel confidentiality level;

[0063] A sub-dataset is formed in the personnel grade data set, which is defined as the resigned personnel data set;

[0064] Move the authority level, employee business, confidentiality level of employee business and confidentiality level of resigned employees in the personnel level data set to the resigned personnel data set;

[0065] Implement departure handover strategies for departing employees;

[0066] When the target first business, the target second business, and the target third business are all handed over, the time point of handover completion is obtained and determined as the handover time point;

[0067] Get the duration of confidentiality determination;

[0068] Calculate the time of resignation, which is the time of handover + the duration of confidentiality determination;

[0069] When the resignation time is reached, the resigning employee confirms the resignation.

[0070] As a confidential information monitoring and management method described in the present invention, the resignation handover strategy is specifically:

[0071] The business with the first level of confidentiality shall be designated as the first business;

[0072] The business with the second level of confidentiality shall be classified as the second business;

[0073] Classify the third business as the third business;

[0074] Obtain all the business of the resigned employees and define it as the resigned business;

[0075] Get the target handover personnel;

[0076] If there is a first business among the resigned business of the resigned employee, the first business is set as the target first business;

[0077] The resigning employee will hand over the target first business through the first handover strategy;

[0078] If there is a second business in the resigned business of the resigned employee, the second business is set as the target second business;

[0079] The resigned employee will hand over the target second business through the second handover strategy;

[0080] If there is a third business among the resigned business of the resigned employee, the third business shall be set as the target third business;

[0081] Get the working hours and working equipment of the current work unit;

[0082] The superior in charge of the resigned employee is selected as the first superior;

[0083] The resigning employee hands over the target third business to the target handover personnel through the work equipment during working hours, and initiates the handover confirmation to the first superior;

[0084] When the first superior confirms that the handover is correct, the handover of the target third business is completed.

[0085] As a confidential information monitoring and management method described in the present invention, wherein: the first handover strategy is specifically:

[0086] Extract all personnel involved in the first target business and define them as target participants;

[0087] Get the first superior;

[0088] The superior in charge of the first superior is selected as the second superior;

[0089] The superior in charge of the second superior is selected as the third superior;

[0090] Integrate the first parent, the second parent and the third parent into a parent set, wherein the order of elements in the parent set is the first parent, the second parent and the third parent;

[0091] Get the working hours and working equipment of the current work unit;

[0092] Get the target handover personnel;

[0093] The resigning employee hands over the target first business to the target handover personnel through the work equipment during the working hours, and initiates the handover confirmation to all target participants;

[0094] When all the target participants have confirmed that the handover is correct, the resigned employee will initiate handover confirmation to the personnel in the superior set in turn according to the arrangement order of the elements in the superior set;

[0095] When all personnel in the superior group confirm that the handover is correct, the handover of the target first business is completed.

[0096] As a confidential information monitoring and management method described in the present invention, the second handover strategy is specifically:

[0097] Get the parent collection, the working hours and working equipment of the current work unit;

[0098] Get the target handover personnel;

[0099] The resigning employee hands over the target first business to the target handover personnel through the work device during the working hours, and initiates the handover confirmation to the personnel in the superior set in turn according to the arrangement order of the elements in the superior set;

[0100] When all personnel in the superior group confirm that the handover is correct, the handover of the target second business is completed.

[0101] The present invention also discloses a system for executing a method for monitoring and managing confidential information, which includes:

[0102] Preliminary classification module: through the classification strategy, the authority level and business confidentiality level of all employees and businesses within the system are divided respectively;

[0103] Integrated classification module: According to each employee's authority level and business confidentiality level, all employees in the system are classified into confidentiality levels through personnel classification strategies, and the authority level, personnel confidentiality level and business confidentiality level are integrated into level information;

[0104] Information collection module: obtain the work status of each employee;

[0105] Grade adjustment module: Based on the grade information and work status of personnel, data adjustment strategies are used to form adjustment data;

[0106] Handover monitoring module: Based on the adjustment data, the resigned personnel will use the resignation handover strategy to hand over the business in different ways according to the different business confidentiality levels.

[0107] The present invention has the following beneficial effects:

[0108] 1. The confidential information monitoring and management system and method automatically divides the authority level of employees by obtaining the employee's position level, automatically divides the confidentiality level of the business by obtaining the number of participants in the business, and automatically divides the confidentiality level of employees according to the employee's authority level and the confidentiality level of the business in which the employee participates, thereby reducing the risk of leakage of confidential information and improving the security of confidential information.

[0109] 2. The confidential information monitoring and management system and method obtains the employee's work unit and business type before or after joining or leaving the company, and determines whether the business types involved in the employee's two work units are consistent. If the business types are consistent, it means that the employee has a certain leakage risk, and the employee's confidentiality level is automatically lowered. If the business types are inconsistent, it means that the business conflicts between the two work units of the employee are small and the employee's leakage risk is low, and the employee's confidentiality level is not adjusted, thereby reducing the leakage risk of confidential information and improving the security of confidential information.

[0110] 3. The confidential information monitoring and management system and method automatically lowers the confidentiality level of employees who leave, and by obtaining the confidentiality level of the business in which the resigned employee participates, automatically limits the approval confirmation person, equipment and time for the work handover of the resigned employee, so that the resigned employee needs to use specific equipment at a specific time to hand over the work, and after the resigned employee hands over the business to the target handover person, according to the different confidentiality levels of the business, the handover confirmation is automatically initiated to different personnel until all the approval confirmation persons confirm that the handover is correct and confirm the resignation, thereby reducing the risk of leakage of confidential information and improving the security of confidential information. BRIEF DESCRIPTION OF THE DRAWINGS

[0111] Figure 1 This is a flow chart of the confidential information monitoring and management method of the present invention;

[0112] Figure 2 The system block diagram of the confidential information monitoring and management method implemented by the present invention. DETAILED DESCRIPTION

[0113] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0114] Embodiment 1, a method for monitoring and managing confidential information, see Figure 1-Figure 2 ,include:

[0115] Through the level classification strategy, all employees and businesses within the system are divided into authority levels and business confidentiality levels;

[0116] According to each employee's authority level and business confidentiality level, all employees in the system are divided into confidentiality levels through personnel classification strategies;

[0117] Integrate the authority level, personnel confidentiality level and business confidentiality level into level information;

[0118] Get the work status of each employee;

[0119] The level information includes the target personnel's authority level, personnel confidentiality level, and business confidentiality level;

[0120] The working status includes being employed and leaving the company;

[0121] According to the personnel's level information and work status, the data adjustment strategy is used to form adjustment data to adjust the personnel confidentiality level of employees with job changes;

[0122] According to the adjusted data, the departing personnel will use the resignation handover strategy to hand over the business in different ways according to the different levels of business confidentiality.

[0123] Through the above method, employees and businesses are automatically divided into authority levels and confidentiality levels, and employees are automatically divided into confidentiality levels according to their authority levels and the confidentiality levels of the businesses they participate in. The confidentiality levels of employees are automatically adjusted according to their work units before or after they join the company, and the approval confirmation person, equipment and time for work handovers of employees who leave the company are automatically limited, thereby reducing the risk of leakage of confidential information and improving the security of confidential information.

[0124] Embodiment 2: This embodiment is an improvement made on the basis of embodiment 1. The confidential information monitoring and management method, the level classification strategy, is specifically:

[0125] Obtaining all employee information within the system, including the employee name and position level of each employee;

[0126] Setting a position level threshold, which is a threshold for determining the employee's authority level. If the employee's position level is greater than the position level threshold, it means that the employee has a higher position and the business that the employee can participate in requires higher confidentiality. If the employee's position level is less than the position level threshold, it means that the employee has a lower position and the business that the employee can participate in requires lower confidentiality.

[0127] If the employee's position level is less than or equal to the position level threshold, the employee is deemed to be at the second authority level;

[0128] If the employee's position level is greater than the position level threshold, the employee is deemed to be at the first authority level;

[0129] Wherein, the first permission level is higher than the second permission level;

[0130] Integrate the permission levels corresponding to all employee information into an employee permission data set;

[0131] Get all the business inside the system;

[0132] Get the number of participants in each business and define it as the number of participants;

[0133] A first participation threshold and a second participation threshold are set, wherein the first participation threshold and the second participation threshold are thresholds for determining the number of participants of a business confidentiality level. The more participants there are in a business, the worse the confidentiality is and the lower the confidentiality level is; the fewer participants there are in a business, the stronger the confidentiality is and the higher the confidentiality level is. The first participation threshold is smaller than the second participation threshold;

[0134] If the number of participants is less than or equal to the first participation threshold, the business is deemed to be classified as the first business confidentiality level;

[0135] If the number of participants is greater than the first participation threshold, and the number of participants is less than or equal to the second participation threshold, the business is deemed to be classified as the second business confidentiality level;

[0136] If the number of participants is greater than the second participation threshold, the business is deemed to be classified as the third business confidentiality level;

[0137] Among them, the first business confidentiality level is higher than the second business confidentiality level, and the second business confidentiality level is higher than the third business confidentiality level;

[0138] Integrate the confidentiality levels corresponding to all businesses into a business level data set.

[0139] This embodiment also provides that the personnel classification strategy is specifically:

[0140] Obtain employee authority data set and business level data set;

[0141] Get the business that each employee participates in and define it as employee business;

[0142] Extract the number of employee transactions of each employee and set it as the total number of transactions;

[0143] Extract the number of employee businesses with the first confidentiality level from each employee's employee businesses and define it as the first business quantity;

[0144] Extract the number of employee businesses with the second confidentiality level from each employee's employee businesses and define it as the second business quantity;

[0145] Extract the number of employee businesses with the third-level confidentiality level from each employee's employee businesses and define it as the third-level business quantity;

[0146] Calculate the first proportion, second proportion and third proportion of each employee respectively. The first proportion = the first business quantity / the total business quantity, the second proportion = the second business quantity / the total business quantity, and the third proportion = the third business quantity / the total business quantity;

[0147] If an employee is at the first level of authority, and the first percentage of the employee's business is greater than 60%, then the employee is deemed to be at the first level of confidentiality;

[0148] If an employee is at the first level of authority and the second percentage of the employee's business is greater than 60%, the employee is deemed to be at the second level of confidentiality;

[0149] If an employee is at the first level of authority, and the third level accounts for more than 60% of the employee's business, the employee is deemed to be at the third level of confidentiality;

[0150] If the employee is at the second level of authority, and the first level accounts for more than 60% of the employee's business, the employee is considered to be at the second level of confidentiality;

[0151] If the employee is at the second level of authority, and the second level accounts for more than 60% of the employee's business, the employee is considered to be at the third level of confidentiality;

[0152] If an employee is at the second level of authority and the third level accounts for more than 60% of the employee's business, the employee is deemed to be at the fourth level of confidentiality;

[0153] Among them, the first person's confidentiality level is higher than the second person's confidentiality level, the second person's confidentiality level is higher than the third person's confidentiality level, and the third person's confidentiality level is higher than the fourth person's confidentiality level;

[0154] Integrate the confidentiality levels corresponding to all employee information into a personnel level data set.

[0155] Embodiment 3: This embodiment is an improvement made on the basis of Embodiment 2. In this embodiment, the data adjustment strategy is specifically as follows:

[0156] Obtaining historical work information of each employee, the historical work information including historical work units and historical resignation dates;

[0157] If the employee does not have a historical resignation date, the employee's confidentiality level will not be adjusted;

[0158] If the employee has a historical resignation date, obtain the employee's historical work unit and current work unit, set them as the target historical unit and target current unit respectively, and set the employee as the target adjustment employee;

[0159] The employee businesses corresponding to the target adjustment employees in the target historical unit and the target current unit are extracted and defined as the historical businesses and the current businesses respectively;

[0160] The business types to which the historical business and the current business belong are extracted respectively, and are defined as the historical business type and the current business type respectively;

[0161] If the historical business type is inconsistent with the current business type, the confidentiality level of the target employee will not be adjusted;

[0162] If the historical business type is consistent with the current business type, the target employee will be identified as a downgraded employee and the downgraded employee's confidentiality level will be adjusted;

[0163] Extract the confidentiality level of the demoted employees and set it as the target level;

[0164] If the target level is the first person's confidential level, the second person's confidential level or the third person's confidential level, the target level of the demoted employee will be lowered by one level. If the target level of the demoted employee is the second person's confidential level, then after lowering by one level, the target level of the demoted employee will be the third person's confidential level.

[0165] If the target level is the fourth personnel confidentiality level, the confidentiality level of the demoted employee will not be adjusted;

[0166] The confidentiality levels of all employees after the adjustment are updated to the personnel level data set to form a new personnel level data set.

[0167] This embodiment also provides that the data adjustment strategy further includes:

[0168] Obtaining the current work information of each employee, wherein the current work information includes the current work unit and the current leaving date;

[0169] If the employee does not have a current resignation date, the employee's confidentiality level will not be adjusted;

[0170] If the employee has a current resignation date, the employee's changed work unit is obtained, and the employee is identified as a resigned employee, where the changed work unit is the unit where the resigned employee works after resignation;

[0171] If the resigned employee does not change his / her work unit, the confidentiality level of the resigned employee shall be extracted and determined as the resignation level;

[0172] If the resignation grade is the first personnel confidentiality grade, the second personnel confidentiality grade or the third personnel confidentiality grade, the resignation grade of the resigning employee shall be downgraded by one level. If the resignation grade of the resigning employee is the second personnel confidentiality grade, after downgrading by one level, the resignation grade of the resigning employee shall be the third personnel confidentiality grade;

[0173] If the resignation level is the fourth personnel confidentiality level, the confidentiality level of the resigning employee will not be adjusted;

[0174] If the resigned employee changes his / her work unit, his / her resignation level will be adjusted to the fourth personnel confidentiality level;

[0175] A sub-dataset is formed in the personnel grade data set, which is defined as the resigned personnel data set;

[0176] Move the authority level, employee business, confidentiality level of employee business and confidentiality level of resigned employees in the personnel level data set to the resigned personnel data set;

[0177] Implement departure handover strategies for departing employees;

[0178] When the target first business, the target second business, and the target third business are all handed over, the time point of handover completion is obtained and determined as the handover time point;

[0179] Obtaining the confidentiality determination duration, where the confidentiality determination duration is the confidentiality duration of the last target first business in which the resigned employee participated;

[0180] Calculate the time of resignation, which is the time of handover + the duration of confidentiality determination;

[0181] When the resignation time is reached, the resigning employee confirms the resignation.

[0182] The resignation handover strategy is specifically as follows:

[0183] The business with the first level of confidentiality shall be designated as the first business;

[0184] The business with the second level of confidentiality shall be classified as the second business;

[0185] Classify the third business as the third business;

[0186] Obtain all the business of the resigned employees and define it as the resigned business;

[0187] Get the target handover personnel;

[0188] If there is a first business among the resigned business of the resigned employee, the first business is set as the target first business;

[0189] The resigning employee will hand over the target first business through the first handover strategy;

[0190] If there is a second business in the resigned business of the resigned employee, the second business is set as the target second business;

[0191] The resigned employee will hand over the target second business through the second handover strategy;

[0192] If there is a third business among the resigned business of the resigned employee, the third business shall be set as the target third business;

[0193] Get the working hours and working equipment of the current work unit;

[0194] The superior in charge of the resigned employee is selected as the first superior;

[0195] The resigning employee hands over the target third business to the target handover personnel through the work equipment during working hours, and initiates the handover confirmation to the first superior;

[0196] When the first superior confirms that the handover is correct, the handover of the target third business is completed.

[0197] The first handover strategy is specifically:

[0198] Extract all personnel involved in the first target business and define them as target participants;

[0199] Get the first superior;

[0200] The superior in charge of the first superior is selected as the second superior;

[0201] The superior in charge of the second superior is selected as the third superior;

[0202] Integrate the first parent, the second parent and the third parent into a parent set, wherein the order of elements in the parent set is the first parent, the second parent and the third parent;

[0203] Get the working hours and working equipment of the current work unit;

[0204] Get the target handover personnel;

[0205] The resigning employee hands over the target first business to the target handover personnel through the work equipment during the working hours, and initiates the handover confirmation to all target participants;

[0206] When all the target participants have confirmed that the handover is correct, the resigned employee will initiate handover confirmation to the personnel in the superior set in turn according to the arrangement order of the elements in the superior set;

[0207] When all personnel in the superior group confirm that the handover is correct, the handover of the target first business is completed.

[0208] The second handover strategy is specifically:

[0209] Get the parent collection, the working hours and working equipment of the current work unit;

[0210] Get the target handover personnel;

[0211] The resigning employee hands over the target first business to the target handover personnel through the work device during the working hours, and initiates the handover confirmation to the personnel in the superior set in turn according to the arrangement order of the elements in the superior set;

[0212] When all personnel in the superior group confirm that the handover is correct, the handover of the target second business is completed.

[0213] Embodiment 4: This embodiment further discloses a system for executing a method for monitoring and managing confidential information, including:

[0214] Preliminary classification module: through the classification strategy, the authority level and business confidentiality level of all employees and businesses within the system are divided respectively;

[0215] Integrated classification module: According to each employee's authority level and business confidentiality level, all employees in the system are classified into confidentiality levels through personnel classification strategies, and the authority level, personnel confidentiality level and business confidentiality level are integrated into level information;

[0216] Information collection module: obtain the work status of each employee;

[0217] Grade adjustment module: Based on the grade information and work status of personnel, data adjustment strategies are used to form adjustment data;

[0218] Handover monitoring module: Based on the adjustment data, the resigned personnel will use the resignation handover strategy to hand over the business in different ways according to different business confidentiality levels.

[0219] This embodiment automatically divides employees and businesses into authority levels and confidentiality levels, and automatically divides employees into confidentiality levels based on their authority levels and the confidentiality levels of the businesses they participate in. It automatically adjusts the confidentiality levels of employees based on their work units before or after they join the company, and automatically limits the person, equipment, and time for approval and confirmation of work handovers for employees who have left the company, thereby reducing the risk of leakage of confidential information and improving the security of confidential information.

Claims

1. A method for monitoring and managing confidential information, characterized in that: include: Through the level classification strategy, all employees and businesses within the system are divided into authority levels and business confidentiality levels; According to each employee's authority level and business confidentiality level, all employees in the system are divided into confidentiality levels through personnel classification strategies; Integrate the authority level, personnel confidentiality level and business confidentiality level into level information; Get the work status of each employee; The working status includes being employed and leaving the company; According to the personnel's level information and work status, the data adjustment strategy is used to form adjustment data to adjust the personnel confidentiality level of employees with job changes; According to the adjustment data, the resigned personnel will hand over the business in different ways according to the different business confidentiality levels through the resignation handover strategy; The data adjustment strategy is specifically as follows: Obtaining historical work information of each employee, the historical work information including historical work units and historical resignation dates; If the employee does not have a historical resignation date, the employee's confidentiality level will not be adjusted; If the employee has a historical resignation date, obtain the employee's historical work unit and current work unit, set them as the target historical unit and target current unit respectively, and set the employee as the target adjustment employee; The employee businesses corresponding to the target adjustment employees in the target historical unit and the target current unit are extracted and defined as the historical businesses and the current businesses respectively; The business types to which the historical business and the current business belong are extracted respectively, and are defined as the historical business type and the current business type respectively; If the historical business type is inconsistent with the current business type, the confidentiality level of the target employee will not be adjusted; If the historical business type is consistent with the current business type, the target employee will be identified as a downgraded employee and the downgraded employee's confidentiality level will be adjusted; The data adjustment strategy also includes: Obtaining the current work information of each employee, wherein the current work information includes the current work unit and the current leaving date; If the employee does not have a current resignation date, the employee's confidentiality level will not be adjusted; If the employee has a current resignation date, obtain the employee's changed work unit and identify the employee as a resigned employee; If the resigned employee does not change his / her work unit, the confidentiality level of the resigned employee shall be extracted and determined as the resignation level; If the resignation grade is the First Personnel Confidentiality Grade, the Second Personnel Confidentiality Grade, or the Third Personnel Confidentiality Grade, the resignation grade of the resigning employee will be lowered by one level; If the resignation level is the fourth personnel confidentiality level, the confidentiality level of the resigning employee will not be adjusted; If the resigned employee changes his / her work unit, his / her resignation level will be adjusted to the fourth personnel confidentiality level; A sub-dataset is formed in the personnel grade data set, which is defined as the resigned personnel data set; The authority levels, employee businesses, confidentiality levels of employee businesses, and confidentiality levels of resigned employees in the personnel level data set are moved to the resigned personnel data set.

2. A confidential information monitoring and management method according to claim 1, characterized in that: The grading strategy is specifically as follows: Obtaining all employee information within the system, including the employee name and position level of each employee; Setting job grade thresholds; If the employee's position level is less than or equal to the position level threshold, the employee is deemed to be at the second authority level; If the employee's position level is greater than the position level threshold, the employee is deemed to be at the first authority level; Integrate the permission levels corresponding to all employee information into an employee permission data set; Get all the business inside the system; Get the number of participants in each business and define it as the number of participants; Setting a first participation threshold and a second participation threshold; If the number of participants is less than or equal to the first participation threshold, the business is deemed to be classified as the first business confidentiality level; If the number of participants is greater than the first participation threshold, and the number of participants is less than or equal to the second participation threshold, the business is deemed to be classified as the second business confidentiality level; If the number of participants is greater than the second participation threshold, the business is deemed to be classified as the third business confidentiality level; Integrate the confidentiality levels corresponding to all businesses into a business level data set.

3. A confidential information monitoring and management method according to claim 1, characterized in that: The personnel classification strategy is specifically as follows: Obtain employee authority data set and business level data set; Get the business that each employee participates in and define it as employee business; Extract the number of employee transactions of each employee and set it as the total number of transactions; Extract the number of employee businesses with the first confidentiality level from each employee's employee businesses and define it as the first business quantity; Extract the number of employee businesses with the second confidentiality level from each employee's employee businesses and define it as the second business quantity; Extract the number of employee businesses with the third-level confidentiality level from each employee's employee businesses and define it as the third-level business quantity; Calculate the first proportion, second proportion and third proportion of each employee respectively. The first proportion = the first business quantity / the total business quantity, the second proportion = the second business quantity / the total business quantity, and the third proportion = the third business quantity / the total business quantity; If an employee is at the first level of authority, and the first percentage of the employee's business is greater than 60%, then the employee is deemed to be at the first level of confidentiality; If an employee is at the first level of authority and the second percentage of the employee's business is greater than 60%, the employee is deemed to be at the second level of confidentiality; If an employee is at the first level of authority, and the third level accounts for more than 60% of the employee's business, the employee is deemed to be at the third level of confidentiality; If the employee is at the second level of authority, and the first level accounts for more than 60% of the employee's business, the employee is considered to be at the second level of confidentiality; If the employee is at the second level of authority, and the second level accounts for more than 60% of the employee's business, the employee is considered to be at the third level of confidentiality; If an employee is at the second level of authority and the third level accounts for more than 60% of the employee's business, the employee is deemed to be at the fourth level of confidentiality; Integrate the confidentiality levels corresponding to all employee information into a personnel level data set.

4. A method for monitoring and managing confidential information according to claim 1, characterized in that: The data adjustment strategy is specifically as follows: Extract the confidentiality level of the demoted employees and set it as the target level; If the target level is the First Personnel Confidential Level, the Second Personnel Confidential Level, or the Third Personnel Confidential Level, the target level of the demoted employee will be lowered by one level; If the target level is the fourth personnel confidentiality level, the confidentiality level of the demoted employee will not be adjusted; The confidentiality levels of all employees after the adjustment are updated to the personnel level data set to form a new personnel level data set.

5. A method for monitoring and managing confidential information according to claim 4, characterized in that: The data adjustment strategy is specifically as follows: Implement departure handover strategies for departing employees; When the target first business, the target second business, and the target third business are all handed over, the time point of handover completion is obtained and determined as the handover time point; Get the duration of confidentiality determination; Calculate the time of resignation, which is the time of handover + the duration of confidentiality determination; When the resignation time is reached, the resigning employee confirms the resignation.

6. A method for monitoring and managing confidential information according to claim 5, characterized in that: The resignation handover strategy is specifically as follows: The business with the first level of confidentiality shall be designated as the first business; The business with the second level of confidentiality shall be classified as the second business; Classify the third business as the third business; Obtain all the business of the resigned employees and define it as the resigned business; Get the target handover personnel; If there is a first business among the resigned business of the resigned employee, the first business is set as the target first business; The resigning employee will hand over the target first business through the first handover strategy; If there is a second business in the resigned business of the resigned employee, the second business is set as the target second business; The resigned employee will hand over the target second business through the second handover strategy; If there is a third business among the resigned business of the resigned employee, the third business shall be set as the target third business; Get the working hours and working equipment of the current work unit; The superior in charge of the resigned employee is selected as the first superior; The resigning employee hands over the target third business to the target handover personnel through the work equipment during working hours, and initiates the handover confirmation to the first superior; When the first superior confirms that the handover is correct, the handover of the target third business is completed.

7. A method for monitoring and managing confidential information according to claim 6, characterized in that: The first handover strategy is specifically: Extract all personnel involved in the first target business and define them as target participants; Get the first superior; The superior in charge of the first superior is selected as the second superior; The superior in charge of the second superior is selected as the third superior; Integrate the first parent, the second parent and the third parent into a parent set, wherein the order of elements in the parent set is the first parent, the second parent and the third parent; Get the working hours and working equipment of the current work unit; Get the target handover personnel; The resigning employee hands over the target first business to the target handover personnel through the work equipment during the working hours, and initiates the handover confirmation to all target participants; When all the target participants have confirmed that the handover is correct, the resigned employee will initiate handover confirmation to the personnel in the superior set in turn according to the order of the elements in the superior set; When all personnel in the superior group confirm that the handover is correct, the handover of the target first business is completed.

8. A method for monitoring and managing confidential information according to claim 7, characterized in that: The second handover strategy is specifically: Get the parent collection, the working hours and working equipment of the current work unit; Get the target handover personnel; The resigning employee hands over the target first business to the target handover personnel through the work device during the working hours, and initiates the handover confirmation to the personnel in the superior set in turn according to the arrangement order of the elements in the superior set; When all personnel in the superior group confirm that the handover is correct, the handover of the target second business is completed.

9. A system for executing the confidential information monitoring and management method according to claim 1, characterized in that: include: Preliminary classification module: through the classification strategy, the authority level and business confidentiality level of all employees and businesses within the system are divided respectively; Integrated classification module: According to each employee's authority level and business confidentiality level, all employees in the system are classified into confidentiality levels through personnel classification strategies, and the authority level, personnel confidentiality level and business confidentiality level are integrated into level information; Information collection module: obtain the work status of each employee; Grade adjustment module: Based on the grade information and work status of personnel, data adjustment strategies are used to form adjustment data; Handover monitoring module: Based on the adjustment data, the resigned personnel will use the resignation handover strategy to hand over the business in different ways according to different business confidentiality levels.

Images