A digital enterprise information management method and management system

Abstract

The present invention provides a digital-based enterprise information management method and management system, which belongs to the field of information management technology. The method includes: obtaining login information of each login party based on an enterprise information management platform; performing security protection on the login information based on the login party's slicing requirements and verification requirements, and granting the login party the lowest and highest authority levels; opening the first access function related to the lowest authority level to the login party, and at the same time, pushing the corresponding lowest authority to the login party; obtaining the remaining access functions excluding the first access function from the second access function related to the highest authority level; setting flexible access rights for each remaining access function in combination with the auxiliary information of the login party by the enterprise information management platform and pushing it to the login party; and realizing enterprise information management based on all push permissions of each login party. Improving the flexibility of management under the condition of clarifying management authority effectively avoids the abuse of authority, thereby improving management efficiency.

Description

Technical Field

[0001] The present invention relates to the technical field of information management, and in particular to a digital-based enterprise information management method and management system. Background Art

[0002] Existing enterprise information management is generally based on manual management, that is, each department performs its own duties to achieve artificial management of the enterprise. However, in this management process, there may be problems such as unclear allocation of responsibilities, resulting in inadequate management. Or even if the management responsibilities of certain personnel are clear but the responsibilities are fixed, in the management process, the uniqueness of the personnel's responsibilities may lead to the abuse of authority, resulting in reduced management efficiency.

[0003] Therefore, the present invention proposes an enterprise information management method based on digitization. Summary of the invention

[0004] The present invention provides a digital-based enterprise information management method and management system, which is used to securely protect login information based on slicing requirements and verification requirements to flexibly push corresponding management permissions to the login party, improve management flexibility and effectively avoid abuse of permissions while clarifying management permissions, thereby improving management efficiency.

[0005] The present invention provides a digital enterprise information management method, comprising:

[0006] Step 1: Obtain the login information of each login party based on the enterprise information management platform, wherein the login information includes: the login account and login password of the login party;

[0007] Step 2: Based on the slicing requirements of the login party and the verification requirements of the enterprise information management platform for the slicing requirements, the login information is securely protected, and the minimum and maximum authority levels are assigned to the login party;

[0008] Step 3: Opening a first access function associated with a minimum permission level to the login party, and at the same time, pushing the corresponding minimum permission to the login party;

[0009] Step 4: Obtain the remaining access functions excluding the first access functions from the second access functions associated with the highest authority level;

[0010] Step 5: Combine the auxiliary information of the login party with the enterprise information management platform to set flexible access rights for each remaining access function and push it to the login party;

[0011] Step 6: Implement enterprise information management based on all push permissions of each logged-in party.

[0012] Preferably, determining the minimum permission level and the maximum permission level of the login party includes:

[0013] Compare and analyze the slicing requirements and the verification requirements to establish a requirement comparison table, wherein the requirement comparison table includes a verification comparison subtable for each slicing requirement and a verification weight for each verification element in the verification comparison subtable;

[0014] Determine the intensity coefficient m1 required for each slice according to the verification reference subtable;

[0015] Perform m1+1 important iteration analysis on each slice requirement of the login party, and construct a coefficient sequence group after iteration, wherein m1 is the strong coefficient of the login party's requirement for the corresponding slice, and m1 is a variable, and its value is a positive integer;

[0016] Remove the first coefficients to obtain the first sequence group, and at the same time, remove the last The coefficients are used to obtain the second sequence group, [] is a rounding down symbol, and m represents the number of slices required;

[0017] For each first coefficient in the first sequence group Perform the first operation, and at the same time, for each second coefficient in the second sequence group, Perform a second operation, wherein Xi1 is the i 1th first coefficient in the first sequence group; Xi2 is the i 2th second coefficient in the second sequence group;

[0018] Constructing a high-level security key and a low-level security key according to the first operation result, the second operation result and the minimum security threshold;

[0019] The login information is securely protected based on the high-level security key and the low-level security key respectively, and the lowest authority level and the highest authority level of the login party are obtained.

[0020] Preferably, obtaining the minimum permission level and the maximum permission level of the login party includes:

[0021] Inputting the high-level security key and the login information into a security protection model to obtain a first security protection level;

[0022] At the same time, the low-level security key and the login information are input into a security protection model to obtain a second security protection level;

[0023] The highest authority level matching the first security protection level and the lowest authority level matching the second security protection level are obtained in sequence from the level-level comparison table.

[0024] Preferably, constructing a high-level security key and a low-level security key includes:

[0025] Extracting a post-operation array under the same slice requirement from the first operation result and the second operation result;

[0026] Extracting a first array having one operation value in the array after the operation, and extracting a second array having two operation values ​​in the array after the operation;

[0027] Constructing the real part of the key based on the position difference and the numerical difference of the two operation values ​​in each second array based on the first operation result and the second operation result, and constructing the imaginary part of the key based on all the first arrays;

[0028] constructing a low-level security key based on the imaginary part of the key and in combination with the minimum security threshold;

[0029] A high-level security key is constructed based on the real part of the key, the imaginary part of the key and the low-level security key.

[0030] Preferably, obtaining the remaining access functions excluding the first access functions from the second access functions associated with the highest authority level includes:

[0031] Acquire all second access functions that meet the highest authority level from the function database of the enterprise information management platform;

[0032] Functions that are completely consistent with the first access function are eliminated from all second access functions to obtain remaining access functions.

[0033] Preferably, the enterprise information management platform sets flexible access rights for each remaining access function in combination with the auxiliary information of the login party, including:

[0034] Decomposing the auxiliary information according to multiple condition settings to obtain a plurality of decomposed sub-information, and converting each decomposed sub-information into a corresponding character string, wherein each condition setting corresponds to a category character string;

[0035] Record the continuous login time of the login party based on the enterprise information management platform and set an update interval Tg in combination with the minimum authority level and the maximum authority level;

[0036] When the update interval Tg is reached, each character string is randomly sorted, and a character is randomly extracted from each sorted character string, and a new character string is generated by combining the first position of the randomly extracted character before the sorting and the second position after the sorting;

[0037] According to the ratio of the continuous login time to the update interval Tg, an integer zb;

[0038] If the ratio integer zb is less than or equal to the total number zs of all new character strings, then the number of new character strings consistent with the ratio integer zb is extracted from all new character strings for random combination;

[0039] Otherwise, from A new integer zx is randomly selected from the , and the number of new strings consistent with the new integer zx is extracted from all new strings for random combination;

[0040] Based on all character categories included in the random combination, matching a first permission list from a category database, and at the same time, matching a first function list from a string database according to each new character string in the random combination;

[0041] The remaining access functions are matched once with the first function list and the first function list is matched twice with the first permission list, and flexible access rights are set for the corresponding remaining access functions.

[0042] Preferably, setting the update interval Tg includes:

[0043]

[0044] Among them, ΔT(Q Dg , Q Dd ) represents the minimum permission Q based on the minimum permission level Dd Dd And the highest authority Q based on the highest authority level Dg Dg The interval sets the threshold; Tc represents the continuous login time; ln represents the logarithmic function sign.

[0045] Preferably, based on all push permissions of each logged-in party, enterprise information management is implemented, including:

[0046] Assigning a time tag to each push permission of the registrant, and constructing a tag list and pushing it to the registrant, so that the registrant can manage the enterprise information within a set time based on the tag list;

[0047] The tag list changes with the update interval Tg.

[0048] The present invention provides a digital enterprise information management system, comprising:

[0049] An information acquisition module, used to acquire the login information of each login party based on the enterprise information management platform, wherein the login information includes: the login account and login password of the login party;

[0050] An information analysis module, used to perform security protection on the login information based on the slicing requirements of the login party and the verification requirements of the enterprise information management platform for the slicing requirements, and to grant the login party a minimum authority level and a maximum authority level;

[0051] A minimum permission module, used to open a first access function related to a minimum permission level to the login party, and push the corresponding minimum permission to the login party;

[0052] A remaining acquisition module, used for acquiring remaining access functions excluding the first access functions from the second access functions related to the highest authority level;

[0053] A flexible setting module, used to set flexible access rights for each remaining access function in combination with the auxiliary information of the login party by the enterprise information management platform and push it to the login party;

[0054] The information management module is used to implement enterprise information management based on all push permissions of each logged-in party.

[0055] Compared with the prior art, the present invention has the following beneficial effects:

[0056] Based on the slicing requirements and verification requirements, the login information is securely protected to flexibly push the corresponding management permissions to the login party. While clarifying the management permissions, the flexibility of management is improved to effectively avoid the abuse of permissions, thereby improving management efficiency.

[0057] Other features and advantages of the present invention will be described in the following description, and partly become apparent from the description, or understood by practicing the present invention. The purpose and other advantages of the present invention can be realized and obtained by the structures particularly pointed out in the written description and the accompanying drawings.

[0058] The technical solution of the present invention is further described in detail below through the accompanying drawings and embodiments. BRIEF DESCRIPTION OF THE DRAWINGS

[0059] The accompanying drawings are used to provide a further understanding of the present invention and constitute a part of the specification. Together with the embodiments of the present invention, they are used to explain the present invention and do not constitute a limitation of the present invention. In the accompanying drawings:

[0060] Figure 1 This is a flow chart of a digital-based enterprise information management method in an embodiment of the present invention;

[0061] Figure 2 This is a structural diagram of a digital enterprise information management system in an embodiment of the present invention. DETAILED DESCRIPTION

[0062] The preferred embodiments of the present invention are described below in conjunction with the accompanying drawings. It should be understood that the preferred embodiments described herein are only used to illustrate and explain the present invention, and are not used to limit the present invention.

[0063] The present invention provides a digital enterprise information management method, such as Figure 1 As shown, including:

[0064] Step 1: Obtain the login information of each login party based on the enterprise information management platform, wherein the login information includes: the login account and login password of the login party;

[0065] Step 2: Based on the slicing requirements of the login party and the verification requirements of the enterprise information management platform for the slicing requirements, the login information is securely protected, and the minimum and maximum authority levels are assigned to the login party;

[0066] Step 3: Opening a first access function associated with a minimum permission level to the login party, and at the same time, pushing the corresponding minimum permission to the login party;

[0067] Step 4: Obtain the remaining access functions excluding the first access functions from the second access functions associated with the highest authority level;

[0068] Step 5: Combine the auxiliary information of the login party with the enterprise information management platform to set flexible access rights for each remaining access function and push it to the login party;

[0069] Step 6: Implement enterprise information management based on all push permissions of each logged-in party.

[0070] In this embodiment, the enterprise information management platform refers to a combination of different departments involved in an enterprise and is built based on a big data platform. The construction of the platform belongs to the existing technology and can be implemented on various apps and mini-programs.

[0071] In this embodiment, the login account and login password are the account and password that the login party needs to enter into the platform, and are registered in advance.

[0072] In this embodiment, the slice requirement refers to the functional requirements of the login party for management, such as the requirements for managing the personnel of department 1, the requirements for managing the financial information of department 2, etc.

[0073] In this embodiment, the verification requirement refers to the information required to verify the slice of the logging party. For example, the verification of the requirements for managing the personnel of Department 1 includes name verification, gender verification, age verification, etc. of the personnel of Department 1.

[0074] In this embodiment, security protection is to assign a key to the login information to ensure the security of the account and the management authority that can be obtained after logging into the account, wherein the minimum authority level and the maximum authority level refer to the corresponding management level of the login party, for example, the minimum authority level is 1, and the maximum authority level is 3. At this time, the first access function can be matched based on the minimum authority level. For example, the first access function is a function for managing personnel in department 1. That is, only after the login information is securely protected can the authority be granted, thereby ensuring the reliability of the authority grant.

[0075] In this embodiment, the second access function corresponding to the highest authority level includes, for example: the function of managing the financial information of Department 2, and the function of managing the personnel of Department 1. It should be noted that the functions under the highest authority level include the functions under the lowest authority level. At this time, the remaining access functions obtained are: the function of managing the financial information of Department 2. It should also be noted that the second access function corresponding to the highest authority level is the function included in the platform, including but not limited to the functions related to the slicing requirements proposed by the login party.

[0076] In this embodiment, the auxiliary information refers to the evaluation of the login party by the enterprise information management platform, including: the evaluation of the work ability of different work tasks under the work part involved in the enterprise and the evaluation of the character, to further ensure that it can be more adaptable when granting permissions later.

[0077] In this embodiment, the purpose of setting flexible access rights is to set access time for the remaining access functions, so as to limit the management time period, in order to ensure management flexibility and avoid abuse of rights.

[0078] The beneficial effects of the above technical solution are: based on the slicing requirements and verification requirements, the login information is securely protected to flexibly push the corresponding management authority to the login party, and the flexibility of management is improved while clarifying the management authority to effectively avoid the abuse of authority, thereby improving management efficiency.

[0079] The present invention provides a digital enterprise information management method, which determines the minimum authority level and the maximum authority level of the login party, including:

[0080] Compare and analyze the slicing requirements and the verification requirements to establish a requirement comparison table, wherein the requirement comparison table includes a verification comparison subtable for each slicing requirement and a verification weight for each verification element in the verification comparison subtable;

[0081] Determine the intensity coefficient m1 required for each slice according to the verification reference subtable;

[0082] Perform m1+1 important iteration analysis on each slice requirement of the login party, and construct a coefficient sequence group after iteration, wherein m1 is the strong coefficient of the login party's requirement for the corresponding slice, and m1 is a variable, and its value is a positive integer;

[0083] Remove the first coefficients to obtain the first sequence group, and at the same time, remove the last The coefficients are used to obtain the second sequence group, [] is a rounding down symbol, and m represents the number of slices required;

[0084] For each first coefficient in the first sequence group Perform the first operation, and at the same time, for each second coefficient in the second sequence group, Perform a second operation, wherein Xi1 is the i 1th first coefficient in the first sequence group; Xi2 is the i 2th second coefficient in the second sequence group;

[0085] Constructing a high-level security key and a low-level security key according to the first operation result, the second operation result and the minimum security threshold;

[0086] The login information is securely protected based on the high-level security key and the low-level security key respectively, and the lowest authority level and the highest authority level of the login party are obtained.

[0087] In this embodiment, after determining the slicing requirement, the element points that need to be verified for the slicing requirement can be directly obtained from the requirement-verification comparison table, and then a verification comparison subtable for the slicing requirement can be obtained. That is, one slicing requirement corresponds to one verification requirement, and each verification requirement contains at least one verification element. The requirement-verification comparison table contains different slicing requirements and pre-planned verification comparison subtables for the slicing requirements. All verification comparison subtables constitute the requirement comparison table. For example, the verification weight for name verification of personnel in department 1 is 0.3, the verification weight for gender verification is 0.2, the verification weight for age verification is 0.1, and so on.

[0088] In this embodiment, the intensity coefficient m=ceiling (the cumulative sum of the verification weights of each verification factor in the corresponding verification reference subtable×the average usage frequency of the corresponding verification reference subtable in different specified periods+1), and ceiling is a round-up symbol.

[0089] In this embodiment, the important iterative analysis refers to the iterative analysis of the intensity coefficient, which is convenient for providing a basis for the subsequent key setting, wherein the iteration threshold is: (the actual usage frequency of the corresponding verification reference sub-table in different specified periods / the variance of the maximum usage frequency) × (the cumulative sum / average usage frequency of the corresponding verification reference sub-table).

[0090] In this embodiment, the iteration is obtained by performing attenuation m+1 times according to the iteration threshold.

[0091] In this embodiment, the iterative coefficient sequence group = [iterative coefficient of slice requirement 1, iterative coefficient of slice requirement 2, ..., iterative coefficient of slice requirement m].

[0092] In this embodiment, At this time, each coefficient in the sequence is considered to be the first coefficient.

[0093] In this embodiment, At this time, each coefficient in the sequence is considered to be the second coefficient.

[0094] The beneficial effect of the above technical solution is: by establishing a requirement comparison table to obtain the strong coefficient based on the requirements of each slice, and then conducting important iterative analysis to construct a sequence group, and then by removing the front and back of the sequence group, a new sequence group is constructed and a key is constructed in combination with the calculation process, thereby achieving security protection of login information and determination of authority levels, and providing a basis for the subsequent login party to flexibly manage information according to authority.

[0095] The present invention provides a digital enterprise information management method, which obtains the minimum authority level and the maximum authority level of the login party, including:

[0096] Inputting the high-level security key and the login information into a security protection model to obtain a first security protection level;

[0097] At the same time, the low-level security key and the login information are input into a security protection model to obtain a second security protection level;

[0098] The highest authority level matching the first security protection level and the lowest authority level matching the second security protection level are obtained in sequence from the level-level comparison table.

[0099] In this embodiment, the security protection model is pre-set and is obtained by training the neural network model based on samples of different keys and login information, as well as the expert's judgment on the security protection level of the combination. Therefore, the protection level for high-level security keys and low-level security keys can be directly obtained.

[0100] In this embodiment, the level-level comparison table includes different security protection levels and levels based on matching the levels, which are pre-planned and can be directly obtained.

[0101] The beneficial effect of the above technical solution is: by analyzing the key and login information based on the security protection model, and combining the level-grade comparison table, the permission level can be effectively determined, providing a basis for the login party to set permissions.

[0102] The present invention provides a digital-based enterprise information management method, which constructs a high-level security key and a low-level security key, including:

[0103] Extracting a post-operation array under the same slice requirement from the first operation result and the second operation result;

[0104] Extracting a first array having one operation value in the array after the operation, and extracting a second array having two operation values ​​in the array after the operation;

[0105] Constructing the real part of the key based on the position difference and the numerical difference of the two operation values ​​in each second array based on the first operation result and the second operation result, and constructing the imaginary part of the key based on all the first arrays;

[0106] constructing a low-level security key based on the imaginary part of the key and in combination with the minimum security threshold;

[0107] A high-level security key is constructed based on the real part of the key, the imaginary part of the key and the low-level security key.

[0108] In this embodiment, since the first sequence group and the second sequence group may have the same slicing requirement, after extracting the operation results according to the same slicing requirement, a first array with 1 operation value and a second array with 2 operation values ​​can be obtained.

[0109] In this embodiment, the position difference refers to that the same slice is required to appear at different positions in the two sequences. In this case, for example, the slice appears at position a1 in the first sequence group and at position b1 in the second sequence group. In this case, position a1 and position b1 are regarded as position differences.

[0110] And also because the first sequence group and the second sequence group correspond to are different, so the calculation results under the same slice requirement will have numerical differences.

[0111] In this embodiment, the real part of the key is obtained based on: matching the double difference-real part comparison table, which contains real parts corresponding to different position differences and numerical difference combinations, which are all planned in advance, and the real part of the key can be represented by representative characters, such as R1. Similarly, the method of obtaining the imaginary part of the key is similar to the method of obtaining the real part of the key, and will not be repeated here, such as jR2, j represents the imaginary part symbol.

[0112] In this embodiment, the low-level security key is obtained based on the imaginary part-threshold-key comparison table.

[0113] The high-level security key is obtained based on the real part-imaginary part-threshold-key comparison table.

[0114] Among them, these two comparison tables are pre-planned and can be used directly for matching.

[0115] The beneficial effect of the above technical solution is: by determining the number of operation values ​​of the operation result to construct the real part and the imaginary part, and combining the minimum security threshold, it is convenient to effectively obtain the security key to ensure the security protection of the login password.

[0116] The present invention provides a digital enterprise information management method, which obtains the remaining access functions excluding the first access functions from the second access functions related to the highest authority level, including:

[0117] Acquire all second access functions that meet the highest authority level from the function database of the enterprise information management platform;

[0118] Functions that are completely consistent with the first access function are eliminated from all second access functions to obtain remaining access functions.

[0119] In this embodiment, the function database contains various management functions related to different authority levels.

[0120] The beneficial effect of the above technical solution is: the second access function is obtained from the database and the remaining access functions are obtained after eliminating the first access function, so as to facilitate and flexibly set the access rights.

[0121] The present invention provides a digital-based enterprise information management method, which combines the enterprise information management platform to set flexible access rights for each remaining access function based on the auxiliary information of the login party, including:

[0122] Decomposing the auxiliary information according to multiple condition settings to obtain a plurality of decomposed sub-information, and converting each decomposed sub-information into a corresponding character string, wherein each condition setting corresponds to a category character string;

[0123] Record the continuous login time of the login party based on the enterprise information management platform and set an update interval Tg in combination with the minimum authority level and the maximum authority level;

[0124] When the update interval Tg is reached, each character string is randomly sorted, and a character is randomly extracted from each sorted character string, and a new character string is generated by combining the first position of the randomly extracted character before the sorting and the second position after the sorting;

[0125] According to the ratio of the continuous login time to the update interval Tg, an integer zb;

[0126] If the ratio integer zb is less than or equal to the total number zs of all new character strings, then the number of new character strings consistent with the ratio integer zb is extracted from all new character strings for random combination;

[0127] Otherwise, from Randomly select a new integer zx, and extract the number of new strings consistent with the new integer zx from all new strings for random combination;

[0128] Based on all character categories included in the random combination, matching a first permission list from a category database, and at the same time, matching a first function list from a string database according to each new character string in the random combination;

[0129] The remaining access functions are matched once with the first function list and the first function list is matched twice with the first permission list, and flexible access rights are set for the corresponding remaining access functions.

[0130] Preferably, setting the update interval Tg includes:

[0131]

[0132] Among them, ΔT(Q Dg , Q Dd ) represents the minimum permission Q based on the minimum permission level Dd Dd And the highest authority Q based on the highest authority level Dg Dg The interval sets the threshold; Tc represents the continuous login time; ln represents the logarithmic function sign.

[0133] In this embodiment, the multi-condition setting includes ability setting, character setting, efficiency setting, etc. Therefore, the auxiliary information can be disassembled according to the corresponding settings to obtain disassembled sub-information for each setting.

[0134] In this embodiment, character conversion is implemented based on an information conversion model, which is obtained by training a neural network model based on different disassembled sub-information and expert character settings of the sub-information as samples. Therefore, a character string can be directly obtained, and each set condition corresponds to a category character string, in order to facilitate the distinction of sub-information.

[0135] In this embodiment, the continuous login time refers to the time recorded after the login party enters the platform without logging out midway.

[0136] In this embodiment, the character strings are shuffled and the permissions are reconfigured each time the update interval is reached, which ensures management flexibility and avoids abuse of permissions.

[0137] In this embodiment, for example, the character string before scrambling is: p1op2p3w1w2y, and the character string after scrambling is: p2p1oyp3w2w1. At this time, a character randomly extracted is: w1, and the first position is position 5, and the second position is position 7. The new character string obtained is: w157.

[0138] In this embodiment, zb=[continuous login time / update interval Tg]+1, where [] is a rounding symbol.

[0139] In this embodiment, the total number of new character strings is consistent with the number of multiple condition settings.

[0140] In this embodiment, if zb is 2 and zs is 3, then 2 new character strings are randomly extracted from the 3 new character strings and randomly combined.

[0141] In this embodiment,

[0142] In this embodiment, the category database includes permission lists matching different combinations of character categories, which are pre-planned;

[0143] The string database contains the function of matching new strings of different combinations, which is also pre-planned.

[0144] In this embodiment, the first permission list corresponds to the first function list. At this time, the required access rights can be obtained based on the remaining access functions and the matching of the two tables. For example, the remaining access function u0 corresponds to the function e1 in the first function list, and the function e1 corresponds to the permission q1 in the first permission list. At this time, the permission q1 is granted to the remaining access function u0.

[0145] The beneficial effects of the above technical solution are: information decomposition and character conversion are performed through multi-condition settings, and the permission settings are flexibly changed in combination with subsequent update intervals. After the update interval is reached, the security of new string construction is effectively guaranteed by randomly shuffling and randomly extracting the strings. Further, through random combination of new strings and two matches, flexible setting of permissions for functions is effectively achieved, ensuring management flexibility and effectively avoiding the abuse of permissions.

[0146] The present invention provides a digital enterprise information management method, which implements enterprise information management based on all push permissions of each login party, including:

[0147] Assigning a time tag to each push permission of the login party respectively, and constructing a tag list and pushing it to the login party, so that the login party can manage the enterprise information based on the tag list within a set time;

[0148] The tag list changes with the update interval Tg.

[0149] In this embodiment, the time tag is used to provide the login party with the management time for the permission.

[0150] In this embodiment, the tag list is a statistics of all time tags.

[0151] In this embodiment, the set time is generally consistent with the update interval Tg.

[0152] In this embodiment, the administrator can manage the first access function all the time without any time limit unless the administrator cancels the account from the platform.

[0153] The beneficial effect of the above technical solution is: by assigning time tags and pushing in the form of a list, it is easy to intuitively understand the permissions available at the relevant time and achieve effective management.

[0154] The present invention provides a digital enterprise information management system, such as Figure 2 As shown, including:

[0155] An information acquisition module, used to acquire the login information of each login party based on the enterprise information management platform, wherein the login information includes: the login account and login password of the login party;

[0156] An information analysis module, used to perform security protection on the login information based on the slicing requirements of the login party and the verification requirements of the enterprise information management platform for the slicing requirements, and to grant the login party a minimum authority level and a maximum authority level;

[0157] A minimum permission module, used to open a first access function related to a minimum permission level to the login party, and push the corresponding minimum permission to the login party;

[0158] A remaining acquisition module, used for acquiring remaining access functions excluding the first access functions from the second access functions related to the highest authority level;

[0159] A flexible setting module, used to set flexible access rights for each remaining access function in combination with the auxiliary information of the login party by the enterprise information management platform and push it to the login party;

[0160] The information management module is used to implement enterprise information management based on all push permissions of each logged-in party.

[0161] The beneficial effects of the above technical solution are: based on the slicing requirements and verification requirements, the login information is securely protected to flexibly push the corresponding management authority to the login party, and the flexibility of management is improved while clarifying the management authority to effectively avoid the abuse of authority, thereby improving management efficiency.

[0162] Obviously, those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalents, the present invention is also intended to include these modifications and variations.

Claims

1. A digital-based enterprise information management method, characterized in that: include: Step 1: Obtain the login information of each login party based on the enterprise information management platform, wherein the login information includes: the login account and login password of the login party; Step 2: Based on the slicing requirements of the login party and the verification requirements of the enterprise information management platform for the slicing requirements, the login information is securely protected, and the minimum and maximum authority levels are assigned to the login party; Step 3: Opening a first access function associated with a minimum permission level to the login party, and at the same time, pushing the corresponding minimum permission to the login party; Step 4: Obtain the remaining access functions excluding the first access functions from the second access functions associated with the highest authority level; Step 5: Set flexible access rights for each remaining access function in combination with the auxiliary information of the login party by the enterprise information management platform and push it to the login party, wherein the auxiliary information refers to the evaluation of the login party by the enterprise information management platform, including: the evaluation of the work ability of different work tasks under the work part involved in the enterprise and the evaluation of the character; Step 6: Implement enterprise information management based on all push permissions of each logged-in party.

2. The digital-based enterprise information management method according to claim 1, characterized in that: Determining the minimum and maximum permission levels of the login party includes: Compare and analyze the slicing requirements and the verification requirements to establish a requirement comparison table, wherein the requirement comparison table includes a verification comparison subtable for each slicing requirement and a verification weight for each verification element in the verification comparison subtable; Determine the intensity coefficient m1 required for each slice according to the verification reference subtable; Perform m1+1 important iteration analysis on each slice requirement of the login party, and construct a coefficient sequence group after iteration, wherein m1 is the strong coefficient of the login party's requirement for the corresponding slice, and m1 is a variable, and its value is a positive integer; Remove the first coefficients to obtain the first sequence group, and at the same time, remove the last The coefficients are used to obtain the second sequence group, [] is a rounding down symbol, and m represents the number of slices required; Based on each first coefficient in the first sequence group and according to Perform the first operation, and at the same time, based on each second coefficient in the second sequence group and according to Perform a second operation, wherein Xi1 is the i 1th first coefficient in the first sequence group; Xi2 is the i 2th second coefficient in the second sequence group; Constructing a high-level security key and a low-level security key according to the first operation result, the second operation result and the minimum security threshold; The login information is securely protected based on the high-level security key and the low-level security key respectively, to obtain the lowest authority level and the highest authority level of the login party; Among them, the intensity coefficient m1=ceiling (the cumulative sum of the verification weights of each verification element in the corresponding verification reference subtable×the average usage frequency of the corresponding verification reference subtable in different specified periods+1), and ceiling is the rounding symbol.

3. The digital-based enterprise information management method according to claim 2 is characterized in that: Obtaining the minimum and maximum authority levels of the login party, including: Inputting the high-level security key and the login information into a security protection model to obtain a first security protection level; At the same time, the low-level security key and the login information are input into a security protection model to obtain a second security protection level; The highest authority level matching the first security protection level and the lowest authority level matching the second security protection level are obtained in sequence from the level-level comparison table.

4. The digital-based enterprise information management method according to claim 2, characterized in that: Construct high-level security keys as well as low-level security keys, including: Extracting a post-operation array under the same slice requirement from the first operation result and the second operation result; Extracting a first array having one operation value in the array after the operation, and extracting a second array having two operation values ​​in the array after the operation; Constructing the real part of the key based on the position difference and the numerical difference of the two operation values ​​in each second array based on the first operation result and the second operation result, and constructing the imaginary part of the key based on all the first arrays; constructing a low-level security key based on the imaginary part of the key and in combination with the minimum security threshold; A high-level security key is constructed based on the real part of the key, the imaginary part of the key and the low-level security key.

5. The digital-based enterprise information management method according to claim 1, characterized in that: Obtaining the remaining access functions excluding the first access functions from the second access functions related to the highest authority level, including: Acquire all second access functions that meet the highest authority level from the function database of the enterprise information management platform; Functions that are completely consistent with the first access function are eliminated from all second access functions to obtain remaining access functions.

6. The digital-based enterprise information management method according to claim 1, characterized in that: In combination with the auxiliary information of the login party by the enterprise information management platform, flexible access rights are set for each remaining access function, including: Decomposing the auxiliary information according to multiple condition settings to obtain a plurality of decomposed sub-information, and converting each decomposed sub-information into a corresponding character string, wherein each condition setting corresponds to a category character string; Record the continuous login time of the login party based on the enterprise information management platform and set an update interval Tg in combination with the minimum authority level and the maximum authority level; When the update interval Tg is reached, each character string is randomly sorted, and a character is randomly extracted from each sorted character string, and a new character string is generated by combining the first position of the randomly extracted character before the sorting and the second position after the sorting; According to the ratio of the continuous login time to the update interval Tg, an integer zb; If the ratio integer zb is less than or equal to the total number zs of all new character strings, then the number of new character strings consistent with the ratio integer zb is extracted from all new character strings for random combination; Otherwise, from Randomly select a new integer zx, and extract the number of new strings consistent with the new integer zx from all new strings for random combination; Based on all character categories included in the random combination, matching a first permission list from a category database, and at the same time, matching a first function list from a string database according to each new character string in the random combination; The remaining access functions are matched once with the first function list and the first function list is matched twice with the first permission list, and flexible access rights are set for the corresponding remaining access functions.

7. The digital-based enterprise information management method according to claim 6, characterized in that: Set the update interval Tg, including: Among them, ΔT(Q Dg ,Q Dd ) represents the minimum permission Q based on the minimum permission level Dd Dd And the highest authority Q based on the highest authority level Dg Dg The interval sets the threshold; Tc represents the continuous login time; ln represents the logarithmic function sign.

8. The digital-based enterprise information management method according to claim 7, characterized in that: Based on all push permissions of each logged-in party, enterprise information management is realized, including: Assigning a time tag to each push permission of the login party respectively, and constructing a tag list and pushing it to the login party, so that the login party can manage the enterprise information within a set time based on the tag list; The tag list changes with the update interval Tg.

9. A digital enterprise information management system, characterized in that: include: An information acquisition module, used to acquire the login information of each login party based on the enterprise information management platform, wherein the login information includes: the login account and login password of the login party; An information analysis module, used to perform security protection on the login information based on the slicing requirements of the login party and the verification requirements of the enterprise information management platform for the slicing requirements, and to grant the login party a minimum authority level and a maximum authority level; A minimum permission module, used to open a first access function related to a minimum permission level to the login party, and push the corresponding minimum permission to the login party; A remaining acquisition module, used for acquiring remaining access functions excluding the first access functions from the second access functions related to the highest authority level; A flexible setting module, used to set flexible access rights for each remaining access function in combination with the auxiliary information of the login party by the enterprise information management platform and push it to the login party, wherein the auxiliary information refers to the evaluation of the login party by the enterprise information management platform, including: the evaluation of the work ability of different work tasks under the work part involved in the enterprise and the evaluation of the character; The information management module is used to implement enterprise information management based on all push permissions of each logged-in party.

Images