Dynamic network rights allocation method, device, equipment and medium

Abstract

The present invention discloses a method, device, equipment and medium for dynamic network permission allocation, the method includes analyzing project content, dividing the target project into several project stages; analyzing each project stage to obtain demand indicators for evaluating the corresponding project stage; obtaining attribute data of each user interface to obtain resource data of each user interface; comparing each demand indicator and each resource data one by one to obtain several target user interfaces corresponding to each project stage; in the process of advancing the target project, obtaining the real-time response of each target user interface according to the port sensing technology to obtain the project progress of the target project, and allocating access rights to each user interface. The present invention senses the project progress in real time through the port sensing technology, dynamically adjusts the network access rights of each user interface, ensures the necessary resource information sharing, provides refined access control, and avoids the network security risks caused by excessive openness.

Description

Technical Field

[0001] The present invention relates to the technical field of network authority allocation, and in particular to a method, device, equipment and medium for dynamic network authority allocation. Background Art

[0002] In project management, as the project progresses, the access rights requirements at different stages will change to ensure information security and the smooth progress of the project. This permission management usually involves the role definition, task allocation and data access control of project members.

[0003] In traditional access control technology, the whole network segment is often opened. Although it facilitates resource access and sharing for project participants, it cannot avoid unauthorized access to sensitive information, which poses a great risk to information security. In order to improve network security, there is a permission allocation method for network isolation schemes that sets different permissions for each port of the project according to the project's participating departments or roles. However, this control method is often difficult to adapt to changes in access permission requirements in multi-team collaborative projects, and it is difficult to ensure timely and flexible communication in projects with dynamic requirements.

[0004] It can be seen that how to improve the flexibility of allocating project resource access rights has become a technical problem that technical personnel in this field need to solve urgently. Summary of the invention

[0005] The present invention provides a dynamic network authority allocation method, device, equipment and medium to improve the allocation flexibility of project resource access authority.

[0006] In order to solve the above technical problems, an embodiment of the present invention provides a dynamic network authority allocation method, including:

[0007] The content data of the target project is acquired, content analysis is performed on the content data, and the target project is divided into stages according to the analysis result to obtain a plurality of project stages.

[0008] A demand analysis is performed on each of the project stages to obtain demand indicators for evaluating the corresponding project stages.

[0009] Acquire attribute data of each user interface, and obtain resource data of each user interface according to each attribute data.

[0010] Each of the demand indicators and each of the resource data are compared one by one to obtain a plurality of target user interfaces corresponding to each of the project stages.

[0011] During the advancement of the target project, real-time response data packets of each target user interface are obtained according to port sensing technology, and each real-time response data packet is analyzed to obtain the project progress of the target project, and access rights are allocated to each user interface according to the project progress.

[0012] Furthermore, the acquiring of content data of the target project, performing content analysis on the content data, and dividing the target project into stages according to the analysis results to obtain a number of project stages, including:

[0013] The content data of the target item is acquired, and the content data is divided into text data and image data.

[0014] The text data is subjected to semantic content recognition analysis, and the target project is divided into different stages according to the analysis result.

[0015] The image data is identified and analyzed by an AI image recognition algorithm, and the stage of the target project is adjusted according to the analysis result to obtain several project stages.

[0016] Furthermore, the demand analysis is performed on each of the project stages to obtain demand indicators for evaluating the corresponding project stages, including:

[0017] The stage requirements of each of the project stages are analyzed to obtain demand indicators for evaluating the corresponding project stages, wherein the demand indicators include progress indicators, management indicators and department indicators.

[0018] Furthermore, the demand indicators and resource data are compared one by one to obtain a plurality of target user interfaces corresponding to each project stage, including:

[0019] According to the demand indicators of each project stage, a resource list required for each project stage is generated, and according to each resource list and each resource data, a corresponding user interface is matched for each project stage to obtain a plurality of target user interfaces corresponding to each project stage.

[0020] Furthermore, the method further comprises:

[0021] During the advancement of the target project, the port traffic data of each target user interface is obtained in real time, and a port traffic baseline model is constructed based on the port traffic data.

[0022] If the port traffic data obtained after building the port traffic baseline model deviates from the port traffic baseline model, it is determined that an abnormal access action exists on the corresponding port, and a manual review process is triggered.

[0023] If the port traffic data acquired after the port traffic baseline model is constructed does not deviate from the port traffic baseline model, the corresponding port traffic data is collected to dynamically update the port traffic baseline model.

[0024] Furthermore, in the process of advancing the target project, real-time response data packets of each target user interface are obtained according to the port sensing technology, each real-time response data packet is analyzed to obtain the project progress of the target project, and access rights are allocated to each user interface according to the project progress, including:

[0025] According to each of the target user interfaces corresponding to each of the project stages, a chain-type accessible time interval of each of the target user interfaces to each of the project stages is generated.

[0026] According to the port sensing technology, real-time response data packets of each target user interface are obtained, and each real-time response data packet is analyzed to obtain the project progress of the target project. According to the project progress, network access authorization is performed for each target user interface within the corresponding chain accessible time interval.

[0027] Further, the acquiring of real-time response data packets of each target user interface according to the port sensing technology, and analyzing each of the real-time response data packets to acquire the project progress of the target project, includes:

[0028] Each of the target user interfaces is monitored in real time according to the port sensing technology to obtain a real-time response data packet of each of the target user interfaces.

[0029] The API call data in the real-time response data packet is extracted, and each of the API call data is analyzed to obtain the status information of the corresponding target user interface.

[0030] The project progress of the target project is determined according to the status information of each target user interface.

[0031] Another embodiment of the present invention provides a dynamic network rights allocation device, including:

[0032] The stage division module is used to obtain content data of a target project, perform content analysis on the content data, and divide the target project into stages according to the analysis results to obtain a plurality of project stages.

[0033] The demand analysis module is used to perform demand analysis on each of the project stages to obtain demand indicators for evaluating the corresponding project stages.

[0034] The interface acquisition module is used to acquire the attribute data of each user interface and obtain the resource data of each user interface according to each attribute data.

[0035] The interface allocation module is used to compare each of the demand indicators with each of the resource data one by one to obtain a number of target user interfaces corresponding to each of the project stages.

[0036] The permission allocation module is used to obtain the real-time response data packets of each target user interface according to the port sensing technology during the advancement of the target project, analyze each real-time response data packet to obtain the project progress of the target project, and allocate access rights to each user interface according to the project progress.

[0037] Yet another embodiment of the present invention provides a computer device, including a processor, a memory, and a computer program stored in the memory and configured to be executed by the processor, wherein the processor implements the dynamic network authority allocation method as described above when executing the computer program.

[0038] Yet another embodiment of the present invention provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, wherein when a device where the computer-readable storage medium is located executes the computer program, the dynamic network authority allocation method as described above is implemented.

[0039] Compared with the prior art, the embodiments of the present invention have the following advantages:

[0040] (1) Use port sensing technology to perceive project progress in real time and dynamically adjust network access rights of team members according to the tasks of each team in the project. This can ensure necessary information sharing and efficient collaboration when allocating permissions, while providing refined network isolation and access control, maximizing data security during the project and avoiding network security risks caused by excessive openness.

[0041] (2) During the project, user identities and behaviors are authenticated and monitored to promptly capture abnormal access behaviors. Potential anomalies are identified based on abnormal behavior analysis to promptly prevent network risks. BRIEF DESCRIPTION OF THE DRAWINGS

[0042] Figure 1 A flowchart of the steps of the dynamic network rights allocation method provided by an embodiment of the present invention;

[0043] Figure 2 A structural block diagram of a dynamic network rights allocation device provided by an embodiment of the present invention;

[0044] Figure 3 A structural diagram of a computer device provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0045] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. The purpose of providing these embodiments is to make the disclosure of the present invention more thorough and comprehensive. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0046] In the description of this application, the terms "first", "second", "third", etc. are used for descriptive purposes only and are not to be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Thus, a feature defined as "first", "second", "third", etc. may explicitly or implicitly include one or more of the feature. In the description of this application, unless otherwise specified, "plurality" means two or more.

[0047] In the description of the present application, it should be noted that, unless otherwise clearly specified and limited, the terms "installed", "connected", and "connected" should be understood in a broad sense. For example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection, or it can be indirectly connected through an intermediate medium, or it can be a connection between the two elements. The terms "vertical", "horizontal", "left", "right", "upper", "lower" and similar expressions used herein are only for illustrative purposes, and do not indicate or imply that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as a limitation on the present invention. The term "and / or" used herein includes any and all combinations of one or more related listed items. For those of ordinary skill in the art, the specific meanings of the above terms in this application can be understood according to specific circumstances.

[0048] In the description of this application, it should be noted that, unless otherwise defined, all technical and scientific terms used in the present invention have the same meaning as those commonly understood by those skilled in the art. The terms used in the specification of the present invention are only for the purpose of describing specific embodiments and are not intended to limit the present invention. For those of ordinary skill in the art, the specific meanings of the above terms in this application can be understood by specific circumstances.

[0049] An embodiment of the present invention provides a method for dynamic network authority allocation. For details, see Figure 1 , Figure 1 The flowchart of the method for allocating dynamic network rights in one embodiment of the present invention includes steps S11 to S15:

[0050] Step S11, obtaining content data of a target project, performing content analysis on the content data, and dividing the target project into stages according to the analysis results to obtain a plurality of project stages.

[0051] In a large multi-team collaborative project, due to its complexity, technical difficulty and wide range of stakeholders, the project phase division needs to be more detailed and comprehensive. In a large collaborative project, the project schedule may be divided into multiple phases, and different phases also have more detailed branch phases. For example, in the project launch and demand collection phase, it is necessary to determine the project vision, goals and overall strategy; form a cross-functional project team, including experts in technology, design, marketing, legal affairs, security, etc.; conduct market research to collect user needs and business needs; formulate a project charter to clarify the project scope, goals, budget and key milestones; identify project stakeholders and establish communication channels. In the project planning and design phase, it is necessary to formulate a detailed project plan, including timeline, resource allocation, risk management, etc.; design the network architecture, including front-end, back-end, database, server, network topology, etc.; formulate a technology selection plan, considering the technology stack, development framework, tools, etc.; design the user interface (UI) and user experience (UX); formulate a security strategy and compliance plan; formulate a test plan, including unit testing, integration testing, performance testing, etc. In the system development and construction phase, it is necessary to perform programming and code development according to the design documents; implement database design and data migration strategies; develop API interfaces and third-party service integration; build development and test environments; conduct code reviews and quality assurance activities; iterate development and adjust the design and implementation based on feedback. In the testing and verification phase, it is necessary to execute the test plan, including unit testing, integration testing, system testing, and acceptance testing; fix the defects and problems found; conduct security testing and vulnerability scanning; conduct performance testing to ensure that the system meets performance requirements; and verify that the system meets business and user needs. In the deployment and launch phase, it is necessary to prepare the production environment, including server configuration, network settings, etc.; deploy the system to the production environment; conduct final system testing and user acceptance testing (UAT); formulate an online plan and rollback strategy; formally launch the system and monitor it. In the operation and optimization phase, it is necessary to monitor system performance and stability to ensure the normal operation of the system; collect user feedback, make continuous improvements and optimizations; regularly update the system and software, fix security vulnerabilities; perform performance tuning and capacity planning; and manage backup and disaster recovery plans. During the project closing and evaluation phase, it is necessary to complete the project documentation, including technical documents, user manuals, etc.; hold a project summary meeting to review the project history and summarize lessons learned; evaluate project results, including ROI, customer satisfaction, etc.; release project resources, disband the project team or reorganize the team, etc.

[0052] The above different project stages are not isolated. They overlap and influence each other. Therefore, the resource access permission requirements of the multiple members involved in the project are also different. Therefore, this embodiment reads the content data of the target file based on the target project file imported by the user, and performs content analysis on it to divide the target project into multiple project stages before the project starts.

[0053] Among them, the content data of the target project is divided into text data and image data, and the text data and image data are analyzed and processed separately, and the semantic content of the text data is recognized and analyzed. According to the analysis results, the target project is divided into different stages, and each stage also includes different branch stages.

[0054] In order to further improve the rationality of stage division, the image data of the target project is analyzed through AI image recognition algorithm, and the content of the target project is corrected and adaptively adjusted according to the analysis results, and finally several project stages of the target project are obtained.

[0055] Step S12, performing demand analysis on each of the project stages to obtain demand indicators for evaluating the corresponding project stages.

[0056] During the project promotion process, different stages have different demand indicators. These indicators help the project team monitor project progress, evaluate project performance, and ensure that the project can be completed on time, with quality and quantity. Therefore, it is necessary to analyze the stage requirements of each project stage to obtain the demand indicators for evaluating the corresponding project stages; for example, progress indicators including time plans, time nodes and completion status, management indicators including quality management and personnel management, cost indicators including budget control and risk assessment, and department indicators including task allocation and department correspondence, etc.

[0057] Step S13, acquiring attribute data of each user interface, and obtaining resource data of each user interface according to each attribute data.

[0058] In the actual project process, members of multiple departments are required to collaborate and participate, such as the development department for development and debugging, the finance department for project budgeting and accounting, etc. Therefore, it is necessary to collect and record the data of the user interface devices used by different project members to log in and access the project, and then associate the corresponding resource data list with the corresponding user interface according to the job functions of different members. For example, the user interface of administrative personnel can provide resource data for personnel allocation of resources, coordination of communication resources, etc.

[0059] Step S14, comparing each of the demand indicators with each of the resource data one by one to obtain a plurality of target user interfaces corresponding to each of the project stages.

[0060] According to the demand indicators of each project stage, a list of resources required for each project stage in the process of advancement is generated. According to the list of resources required for each project stage and the job functions of the personnel corresponding to each user interface, several target user interfaces participating in the project are allocated to each stage. For example, the required resources in the first stage of the project include CSharp development, A city docking, and a deadline of five months. Then the user interface corresponding to the personnel with CSharp development functions in A city corresponding to this project stage will be allocated, and the user interface of the personnel who coordinate and deploy process monitoring will be allocated, etc. Finally, several corresponding target user interfaces are matched for each project stage and its branch stages.

[0061] Step S15, during the advancement of the target project, real-time response data packets of each target user interface are obtained according to port sensing technology, each real-time response data packet is analyzed to obtain the project progress of the target project, and access rights are allocated to each user interface according to the project progress.

[0062] In large-scale multi-team collaborative projects, due to the large number of processes and complex branches, there are not only sequentially arranged stages, but also duplications and iterations between many stages. Some project stages also have pre-condition relationships. Therefore, simply generating corresponding times for each stage is difficult to effectively deal with the uncertainty of project progress. Therefore, it is necessary to sort out the relationship between each project stage, and set the chain accessible time between each target user interface according to the relationship between each project stage and branch stage. While reasonably planning the process progress, access rights can also be managed according to the chain relationship between each target user interface.

[0063] Use port sensing technology to monitor each target user interface in real time and obtain the real-time response data packet of each target user interface; the real-time response data packet includes the user interface's IP address, port number, protocol type, API call data, control information, data load, traffic data, timestamp and other extended options.

[0064] Extract traffic data, API call data, timestamp data and other data from the real-time response data packet, analyze the corresponding user interface, obtain the project progress of the entire target project based on the comprehensive analysis results of multiple user interfaces, and perform network access authorization or access permission range adjustment for each target user interface within the corresponding chain accessible time interval based on the obtained project progress.

[0065] Preferably, in order to avoid network security risks caused by the user interface authorized to access resources being contaminated by webshell or other script programs, the embodiment of the present invention further includes:

[0066] During the advancement of the target project, the port traffic data of each target user interface is obtained in real time, and a port traffic baseline model of each port is constructed based on the port traffic data.

[0067] Use the port traffic baseline model to monitor the traffic data of the corresponding user interface. If the newly acquired port traffic data deviates from the port traffic baseline model after the port traffic baseline model is built, it is judged that there is abnormal access action on the corresponding port, and the user interface and its team are temporarily blocked from the network, and the manual review process is triggered.

[0068] If the port traffic data obtained after the port traffic baseline model is constructed does not deviate from the port traffic baseline model, the corresponding port traffic data is recorded as normal data, and the port traffic baseline model is dynamically updated to adjust the port traffic baseline model.

[0069] By building a port traffic baseline model to monitor the traffic of the user interface, we can effectively prevent network attacks such as crawlers and block abnormal user interfaces in a timely manner.

[0070] Preferably, since each user interface is operated and controlled by a corresponding project member, this embodiment designs a two-side verification method to verify the member operating the user interface, specifically including:

[0071] Before logging into the user interface, the user's identity is authenticated by verifying the user's ID, key or portrait recognition. Only after the authentication is passed can the user log in to the corresponding user interface.

[0072] After logging into the user interface, the user's identity is verified regularly through member interaction confirmation. For example, the validity period of the Token can be set. For example, the validity period of the Token can be 18 hours. During the validity period, the user can send an identity authentication request through the user interface. Members of the same team task and direct members with higher authority than the user can receive the verification request. During the validity period of the verification request, if any other member responds to the member's identity and confirms it, the user's Token can be re-authenticated. As an example, the validity period of the verification request can be set to 2 hours.

[0073] The above identity authentication method is designed for project teams with higher network security requirements in this embodiment. The specific validity periods and verification methods can be adjusted according to the actual projects. In the project stage with higher resource openness, you can choose to perform identity authentication only by unilateral verification before login, without any specific restrictions.

[0074] The dynamic network permission allocation method of the present invention uses port sensing technology to perceive the project progress in real time, and dynamically adjusts the network access rights of team members according to the tasks of each team in the project. It can ensure necessary information sharing and efficient collaboration when implementing permission allocation, while providing refined network isolation and access control, maximizing data security during the project process and avoiding network security risks caused by excessive openness. During the project, user identity and behavior are authenticated and monitored, abnormal access behavior is captured in time, and potential anomalies are identified based on abnormal behavior analysis, so as to take timely precautions against network risks.

[0075] The embodiment of the present invention also provides a dynamic network rights allocation device, which is used to execute the dynamic network rights allocation method as described above. Figure 2 This is a structural block diagram of a dynamic network rights allocation device according to an embodiment of the present invention, wherein the device comprises:

[0076] The stage division module 21 is used to obtain content data of a target project, perform content analysis on the content data, and divide the target project into stages according to the analysis results to obtain a number of project stages.

[0077] The demand analysis module 22 is used to perform demand analysis on each of the project stages to obtain demand indicators for evaluating the corresponding project stages.

[0078] The interface acquisition module 23 is used to acquire the attribute data of each user interface, and obtain the resource data of each user interface according to the attribute data.

[0079] The interface allocation module 24 is used to compare each of the demand indicators with each of the resource data one by one to obtain a number of target user interfaces corresponding to each of the project stages.

[0080] The permission allocation module 25 is used to obtain the real-time response data packets of each target user interface according to the port sensing technology during the advancement of the target project, analyze each real-time response data packet to obtain the project progress of the target project, and allocate access rights to each user interface according to the project progress.

[0081] The technical features and technical effects of the device proposed in the embodiment of the present invention are the same as those of the method proposed in the embodiment of the present invention, and are not described in detail here. Each module in the above device can be implemented in whole or in part by software, hardware, and a combination thereof. Each of the above modules can be embedded in or independent of a processor in a computer device in the form of hardware, or can be stored in a memory in a computer device in the form of software, so that the processor can call and execute operations corresponding to each of the above modules.

[0082] An embodiment of the present invention further provides a computer-readable storage medium, which includes a stored computer program; wherein the computer program, when running, controls the device where the computer-readable storage medium is located to execute the dynamic network authority allocation method as described above.

[0083] The embodiment of the present invention further provides a computer device, Figure 3 A structural block diagram of a preferred embodiment of a computer device provided by the present invention, wherein the computer device includes a processor, a memory, and a computer program stored in the memory and configured to be executed by the processor, and the processor implements the dynamic network permission allocation method as described above when executing the computer program.

[0084] Preferably, the computer program can be divided into one or more modules / units (such as computer program 1, computer program 2, ...), and the one or more modules / units are stored in the memory and executed by the processor to complete the present invention. The one or more modules / units can be a series of computer program instruction segments that can complete specific functions, and the instruction segments are used to describe the execution process of the computer program in the computer device.

[0085] The processor may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor may be a microprocessor, or the processor may be any conventional processor. The processor is the control center of the computer device, and various parts of the computer device are connected using various interfaces and lines.

[0086] The memory mainly includes a program storage area and a data storage area, wherein the program storage area can store an operating system, an application required for at least one function, etc., and the data storage area can store related data, etc. In addition, the memory can be a high-speed random access memory, or a non-volatile memory, such as a plug-in hard disk, a smart memory card (SmartMedia Card, SMC), a secure digital (Secure Digital, SD) card, and a flash card (Flash Card), etc., or the memory can also be other volatile solid-state storage devices.

[0087] It should be noted that the above-mentioned computer device may include, but is not limited to, a processor and a memory. Those skilled in the art will understand that Figure 3 The structural block diagram is merely an example of a computer device and does not constitute a limitation of the computer device, and may include more or less components than shown in the figure, or combine certain components, or different components.

[0088] In summary, the dynamic network rights allocation method, apparatus, device, and storage medium provided by the embodiments of the present invention have the following beneficial effects compared to the prior art:

[0089] (1) Use port sensing technology to perceive project progress in real time and dynamically adjust network access rights of team members according to the tasks of each team in the project. This can ensure necessary information sharing and efficient collaboration when allocating permissions, while providing refined network isolation and access control, maximizing data security during the project and avoiding network security risks caused by excessive openness.

[0090] (2) During the project, user identities and behaviors are authenticated and monitored to promptly capture abnormal access behaviors. Potential anomalies are identified based on abnormal behavior analysis to promptly prevent network risks.

[0091] The above-mentioned embodiments only express several implementation methods of the present invention, and the description thereof is relatively specific and detailed, but it cannot be understood as limiting the scope of the patent of the present invention. It should be pointed out that, for ordinary technicians in this field, several variations and improvements can be made without departing from the concept of the present invention, which all belong to the protection scope of the present invention. Therefore, the protection scope of the patent of the present invention shall be subject to the attached claims.

Claims

1. A method for dynamic network authority allocation, characterized in that: include: Acquire content data of a target project, perform content analysis on the content data, and divide the target project into stages according to the analysis results to obtain a plurality of project stages; Conducting a demand analysis on each of the project phases to obtain demand indicators for evaluating the corresponding project phases; specifically, analyzing the phase requirements of each of the project phases to obtain demand indicators for evaluating the corresponding project phases, wherein the demand indicators include progress indicators, management indicators, and department indicators; wherein the progress indicators include time plans, time nodes, and completion status, the management indicators include quality management and personnel management, and the department indicators include task allocation and department correspondence; Acquire attribute data of each user interface, and obtain resource data of each user interface according to each attribute data; Comparing each of the demand indicators and each of the resource data one by one to obtain a number of target user interfaces corresponding to each of the project stages; specifically comprising: generating a resource list required for each of the project stages according to the demand indicators of each of the project stages, matching a corresponding user interface for each of the project stages according to each of the resource lists and each of the resource data, and obtaining a number of target user interfaces corresponding to each of the project stages; In the process of advancing the target project, real-time response data packets of each target user interface are obtained according to the port sensing technology, each real-time response data packet is analyzed to obtain the project progress of the target project, and access rights are allocated to each user interface according to the project progress; specifically including: generating a chain-accessible time interval for each target user interface to each project stage according to each target user interface corresponding to each project stage; real-time monitoring of each target user interface according to the port sensing technology is performed to obtain a real-time response data packet of each target user interface; extracting API call data in the real-time response data packet, analyzing each API call data, and obtaining status information of the corresponding target user interface; judging the project progress of the target project according to the status information of each target user interface; and granting network access to each target user interface within the corresponding chain-accessible time interval according to the project progress.

2. The method for dynamic network rights allocation according to claim 1, characterized in that: The step of acquiring content data of the target project, performing content analysis on the content data, and dividing the target project into stages according to the analysis results to obtain a plurality of project stages includes: Acquire content data of a target item, and divide the content data into text data and image data; Performing semantic content recognition analysis on the text data, and dividing the target project into different stages according to the analysis results; The image data is identified and analyzed by an AI image recognition algorithm, and the stage of the target project is adjusted according to the analysis result to obtain several project stages.

3. The method for dynamic network rights allocation according to claim 1, characterized in that: The method further comprises: In the process of advancing the target project, obtaining port traffic data of each target user interface in real time, and building a port traffic baseline model based on the port traffic data; If the port traffic data obtained after building the port traffic baseline model deviates from the port traffic baseline model, it is determined that there is an abnormal access action on the corresponding port, and a manual review process is triggered; If the port traffic data acquired after the port traffic baseline model is constructed does not deviate from the port traffic baseline model, the corresponding port traffic data is collected to dynamically update the port traffic baseline model.

4. A dynamic network rights allocation device, characterized in that: include: A stage division module is used to obtain content data of a target project, perform content analysis on the content data, and divide the target project into stages according to the analysis results to obtain a number of project stages; The demand analysis module is used to perform demand analysis on each of the project stages to obtain demand indicators for evaluating the corresponding project stages; specifically, the module includes: analyzing the stage requirements of each of the project stages to obtain demand indicators for evaluating the corresponding project stages, wherein the demand indicators include progress indicators, management indicators and department indicators; wherein the progress indicators include time plans, time nodes and completion status, the management indicators include quality management and personnel management, and the department indicators include task allocation and department correspondence; An interface acquisition module, used to acquire attribute data of each user interface, and obtain resource data of each user interface according to each attribute data; The interface allocation module is used to compare each of the demand indicators and each of the resource data one by one to obtain a number of target user interfaces corresponding to each of the project stages; specifically, it includes: generating a resource list required for each of the project stages according to the demand indicators of each of the project stages, matching a corresponding user interface for each of the project stages according to each of the resource lists and each of the resource data, and obtaining a number of target user interfaces corresponding to each of the project stages; The permission allocation module is used to obtain the real-time response data packets of each target user interface according to the port sensing technology during the advancement of the target project, analyze each real-time response data packet to obtain the project progress of the target project, and allocate access rights to each user interface according to the project progress; specifically including: generating a chain-accessible time interval for each target user interface to each project stage according to each target user interface corresponding to each project stage; real-time monitoring of each target user interface according to the port sensing technology to obtain the real-time response data packet of each target user interface; extracting API call data in the real-time response data packet, analyzing each API call data, and obtaining the status information of the corresponding target user interface; judging the project progress of the target project according to the status information of each target user interface; and granting network access authorization to each target user interface within the corresponding chain-accessible time interval according to the project progress.

5. A computer device, characterized in that: The invention comprises a processor, a memory and a computer program stored in the memory and configured to be executed by the processor, wherein the processor implements the dynamic network authority allocation method as claimed in any one of claims 1 to 3 when executing the computer program.

6. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, wherein when the device where the computer-readable storage medium is located executes the computer program, the dynamic network authority allocation method according to any one of claims 1 to 3 is implemented.

Images