A data sharing method and system for cloud service platform

Abstract

The present invention relates to the technical field of electronic digital data processing, and in particular to a data sharing method and system for a cloud service platform, comprising: obtaining a file to be shared in a cloud database, and obtaining the original authorization system of each user from a linked cloud platform. For any file to be shared, a temporary confidentiality index of the file to be shared is calculated based on its content integrity factor in similar content files and the file association index of the same project. According to the temporary confidentiality index of the file to be shared and the original authorization system, an authorization library containing permission files and temporary permission files of the original authorization system is opened to visitors. The present invention displays the required content to visitors who need to know the content of the file while ensuring that the important content in the original file is not leaked, thereby effectively ensuring the confidentiality of the file content and not affecting the overall layout of the enterprise.

Description

Technical Field

[0001] The present invention relates to the technical field of electronic digital data processing, and in particular to a data sharing method and system for a cloud service platform. Background Art

[0002] Data sharing refers to a method or technology of exchanging or sharing data between different applications, services and devices; and a cloud service platform is a platform that provides computing resources, storage resources, applications and other resources to users through the Internet based on cloud computing and other technologies. Therefore, data sharing for cloud service platforms refers to the use of cloud infrastructure and services such as cloud computing to enable multiple users or devices to share, access and manage data resources stored in the cloud. This data sharing model is based on the characteristics and advantages of the cloud platform, providing users with a more flexible, efficient and secure way of data management and sharing. However, the introduction of related technologies such as cloud platforms has put forward higher requirements for security and privacy protection in traditional data sharing solutions.

[0003] To solve the above problems, existing researchers have proposed solutions based on distributed systems and cloud computing, such as distributed file systems and distributed databases, and introduced encryption algorithms and access control technologies to ensure the security and privacy of data during sharing. However, the above methods are too rigid in setting data encryption and user authority division, that is, either the user has sufficient authority to view the entire content of the file, or the user has insufficient authority and cannot view the file and related content. However, in reality, those with insufficient authority need to understand the company's project arrangements and make some corresponding preparations based on these. Due to the existing authority and encryption mechanism, they cannot make corresponding arrangements. Summary of the invention

[0004] In order to solve the technical problem of low data sharing efficiency, the purpose of the present invention is to provide a data sharing method and system for a cloud service platform. The technical solutions adopted are as follows:

[0005] According to one aspect of the present invention, a data sharing method for a cloud service platform is provided, comprising:

[0006] Get the files to be shared in the cloud database and obtain the original authorization system of each user from the linked cloud platform;

[0007] For any of the files to be shared, a temporary confidentiality index of the file to be shared is calculated according to its content integrity factor in similar content files and a file association index of the same project;

[0008] According to the temporary confidentiality index of the file to be shared and the original authorization system, an authorization library including the authority file and temporary permission file of the original authorization system is opened to the visitor.

[0009] In an optional manner, the method for calculating the file association index includes:

[0010] For each pair of files α and δ that need to be compared, extract their respective titles or headers and convert them into corresponding word vectors to obtain the word vector of the i-th item of file α and the word vector of the i-th item in the document δ ;

[0011] The cosine similarity measure is used to calculate the similarity between the word vectors of the i-th title or header content of the file α and the file δ;

[0012] Count the number of identical characters between file α and file δ in the i-th title or header content , and count the total number of words in the i-th item of the two ;according to exist The percentage in gets the text overlap;

[0013] For each title or header content, the single item relevance is calculated according to the similarity of its word vectors and the text overlap;

[0014] Take the average of the single item associations of all items to get the average association between file α and file δ .

[0015] In an optional manner, the method for calculating the content integrity factor includes:

[0016] For the target file α, count the total number of headers contained in its internal directory ;

[0017] For different versions of file j with the same title as file α, count the number of titles contained in its directory , and find the maximum number of titles in the different versions of the file ;

[0018] According to the total number of titles of file α With the maximum value The ratio of , calculates the weighting factor of title completeness;

[0019] For each title k in file α, count the number of characters in its corresponding content At the same time, for different versions of file j with the same title k as file α, count the number of characters in its corresponding content ;

[0020] Find the maximum number of characters in the content of the same title k among all different versions of file j ;

[0021] For each title k in the file α, calculate the ratio of the number of characters in its content to the corresponding maximum value, and add the ratios to obtain a measure of content completeness;

[0022] According to the weighted factor of the title integrity and the measure of the content integrity, the content integrity factor of file α is obtained. .

[0023] In an optional manner, the calculation method of the temporary confidentiality index of the file to be shared includes:

[0024] According to the content integrity factor of the document α in the set of similar content documents , calculate the file association index with all associated files δ ;

[0025] Count the total number of files associated with file α , the file association index of file α and each associated file δ Add them together to get the total correlation;

[0026] Factor the content completely The weighted sum of the associations is multiplied by the sum of the associations to obtain the weighted sum of the associations, and the weighted sum of the associations is processed by a positive proportional normalization function to obtain the temporary confidentiality index of the file α. .

[0027] In an optional manner, the step of opening the authorization library including the permission file and the temporary permission file of the original authorization system to the visitor according to the temporary confidentiality index of the file to be shared and the original authorization system further comprises:

[0028] For each of the visitors, according to the original authorization system, the files within the visitor's authority are opened;

[0029] By using the newly constructed temporary confidentiality index, the corresponding temporary license file is screened to obtain the visitor's authorization library;

[0030] Among them, if the visitor accesses other files that are not within the scope of permission, the temporary confidentiality index is used to analyze whether the visitor has temporary access rights; if the visitor has temporary access rights, the temporary license file is retrieved, wherein the permission of the temporary license file is limited to reading, and does not include downloading and changing operations.

[0031] In an optional manner, the screening of the corresponding temporary license file further includes:

[0032] Obtaining a temporary permission index of the visitor, and screening the temporary permission index by a preset threshold;

[0033] For any file, if the temporary permission index of the visitor is greater than or equal to the preset threshold, the file is marked as a temporary permission file of the visitor.

[0034] In an optional manner, the calculation method of the temporary permission index includes:

[0035] For Visitors | In Project activities in the project and determine their project determinants ;

[0036] Get the permission level of visitor γ in the category where file α is located , and the permission level required to open the file α ;

[0037] According to the project determining factors , the permission level of visitor γ in the category where file α is located and the permission level required to open the file α Differences between, and cross-domain indicators , and obtain the comprehensive factor;

[0038] Divide the comprehensive factor by the temporary confidentiality index of file α , and normalize it in direct proportion to obtain the temporary permission index .

[0039] In an optional manner, the visitor In the file The calculation method of the permission level of the category includes:

[0040] Select one or more reference users r and determine their permission levels in the category where the file δ is located And in the project to which the file belongs Project Determinants ;

[0041] Using the weighted average function Calculate the permission level of reference user r and its project determinants The weighted average of the visitor γ in the same category And its projects Project Determinants The comprehensive difference between visitor γ and reference user r in terms of authority and project determination factors is obtained by comparing the product of γ and r.

[0042] The comprehensive difference value is normalized in positive proportion by using the softsign function. In the file The permission level of the category .

[0043] In an optional manner, the method for calculating the project determination factor of the visitor in the project includes:

[0044] Count the number of people who have a higher or equal position than visitor γ in project p and the number of people with a lower job title than the visitor , and according to and The ratio of evaluates the relative authority level of visitor γ in the project group;

[0045] Determine the length of the task chain in which the visitor γ is involved , and find the shortest length of all task chains in project p ;

[0046] Calculating task chain length The number of tasks that can be replaced by the tasks that visitor γ is responsible for in project p The effective length of the task chain is obtained by multiplying the reciprocals of

[0047] According to the multiplication of the ratio and the effective length of the task chain, the project determination factor of visitor γ in project p is obtained. .

[0048] In an optional manner, the step of obtaining the to-be-shared file in the cloud database and obtaining the original authorization system of each user from the linked cloud platform further includes:

[0049] Obtain the files to be shared in the cloud database and the corresponding uploader, upload time, and access permission level;

[0050] The original authorization system of each user and the files to be shared uploaded and downloaded within a preset time period are obtained from the linked cloud platform.

[0051] According to another aspect of the present invention, a data sharing system for a cloud service platform is provided, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the steps of the data sharing method for the cloud service platform when executing the computer program.

[0052] The present invention has the following beneficial effects:

[0053] The present invention constructs the confidentiality level of the derived file by analyzing the authority of the original file and its importance to the enterprise, combined with the content displayed by the derived file; it can display part of the required content to the visitor who needs to know the content of the file while ensuring that the important content in the original file is not leaked, which can effectively ensure the confidentiality of the file content, and also does not affect the overall layout of the enterprise, and improves the efficiency of data sharing. In addition, by analyzing the authority of the visitor and his work content, a temporary confidentiality level is given to him; without adjusting the original authority of the user, it can effectively determine whether it is necessary for him to understand the necessity of a higher authority file, which can effectively ensure that the user can view the files that he can or needs to understand in time, and ensure that the file content is not known by others, that is, the security of the file content is guaranteed. BRIEF DESCRIPTION OF THE DRAWINGS

[0054] In order to more clearly illustrate the technical solutions and advantages in the embodiments of the present invention or the prior art, the drawings required for use in the embodiments or the prior art descriptions are briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0055] Figure 1 A schematic diagram showing a flow chart of a data sharing method for a cloud service platform according to an embodiment of the present invention;

[0056] Figure 2 A schematic diagram showing a flow chart of a data sharing method for a cloud service platform according to another embodiment of the present invention;

[0057] Figure 3 A schematic diagram showing the structure of a data sharing device for a cloud service platform according to an embodiment of the present invention is shown;

[0058] Figure 4 A schematic diagram of the structure of a computing device according to an embodiment of the present invention is shown. DETAILED DESCRIPTION

[0059] In order to further explain the technical means and effects adopted by the present invention to achieve the predetermined invention purpose, the following is a detailed description of a data sharing method and system for a cloud service platform proposed by the present invention, its specific implementation method, structure, features and effects, in combination with the accompanying drawings and preferred embodiments. In the following description, different "one embodiment" or "another embodiment" does not necessarily refer to the same embodiment. In addition, specific features, structures or characteristics in one or more embodiments may be combined in any suitable form.

[0060] Unless defined otherwise, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs.

[0061] The following is a detailed description of a data sharing method and system for a cloud service platform provided by the present invention in conjunction with the accompanying drawings.

[0062] See also Figure 1 , which shows a flow chart of a data sharing method for a cloud service platform provided by an embodiment of the present invention. It includes the following steps:

[0063] Step S101, obtaining the file to be shared in the cloud database, and obtaining the original authorization system of each user from the linked cloud platform.

[0064] In this embodiment, the files to be shared and the corresponding uploaders, upload times, and access permission levels are obtained from the cloud database, and the original authorization system of each user and the files to be shared uploaded and downloaded within a preset time period (such as 3 months) are obtained from the linked cloud platform.

[0065] Step S102: for any file to be shared, a temporary confidentiality index of the file to be shared is calculated according to its content integrity factor in similar content files and a file association index of the same project.

[0066] In order to better organize and preserve files and archives, companies often number each project and file, and have certain standardized requirements for file names and internal formats, that is, the project name or identifier is clearly marked in the title, header or footer. Moreover, since the two files are files under the same project, although the two files may have different contents, they are always centered around the same project, that is, the core content of the two files will always overlap. Figure 2As shown, according to the integrity and lag of the file content and the importance of the file, a temporary access level of the file is constructed (step S202). The process of constructing the authorization rule is: constructing the temporary level of the file; analyzing the visitor, combining the temporary level of the file with the original authority level, and constructing an authorization mechanism for the visitor. In an enterprise, many files involve customer information, financial data, strategic layout, etc. Based on confidentiality and information security considerations, the enterprise will classify employees and files, and each employee has different functions in the enterprise, and the types of files they need to know are also different. In addition, the level of employees is different, and the amount of information they can access is also different. For example, the external sales market and other departments need product performance files and market research files, and the technical department needs technical specifications and related development files. Based on these, the enterprise has built corresponding permissions and authorization systems for many employees and files. (Step S201 has been collected) The permissions are that each type of file has a corresponding permission level, and each person has a different permission level in each category.

[0067] In this embodiment, Figure 2 As shown, all files to be shared are traversed and the temporary confidentiality index of each file is calculated. According to the preset threshold, files with higher temporary confidentiality index are regarded as important files and require stricter access control. For visitors, according to their original permissions and temporary confidentiality index, their authorization library is dynamically built to allow them to access files within the authorization scope. If the visitor needs to access files outside the scope of permission, the temporary confidentiality index and temporary authorization mechanism are used to determine whether they have temporary access rights.

[0068] The calculation method for constructing the temporary confidentiality level of the file includes:

[0069] For each pair of files α and δ that need to be compared, extract their respective titles or headers and convert them into corresponding word vectors to obtain the word vector of the i-th item of file α and the word vector of the i-th item in the document δ ;

[0070] The cosine similarity measure is used to calculate the similarity between the word vectors of the i-th title or header content of the file α and the file δ;

[0071] Count the number of identical characters between file α and file δ in the i-th title or header content , and count the total number of words in the i-th item of the two ;according to exist The percentage in gets the text overlap;

[0072] For each title or header content, the single item relevance is calculated based on the similarity of its word vectors and the degree of text overlap;

[0073] Take the average of the single item associations of all items to get the average association between file α and file δ .

[0074] Among them, the file With file File association indicators The calculation formula is:

[0075]

[0076] in, [] is the mean content similarity of all files, For File Title or header content The corresponding word vector; For File Title or header content The corresponding word vector; For File With file Middle The number of identical words in the item title or header content; For File With file Middle The number of words in the item title or header content; For vector and The closer the cosine similarity is to 1, the more similar the two vectors are; the closer it is to 0, the less similar the two vectors are. is the text overlap ratio of the i-th title or header content in file α and file δ, that is, the ratio of the number of identical characters in the two files to the total number of characters in this part of the two files. The higher the ratio, the more similar the contents of the two files in this part are. With file File association indicators When decreases, the association between file α and file δ decreases, indicating that the difference or dissimilarity in the contents of the two files increases.

[0077] In this embodiment, the word vector is constructed by constructing the corresponding word vector of the corresponding content according to the Skip-gram model in Word2Vec. This model is selected because it can be quickly trained when facing massive data. Indicates in the file and Middle The number of identical words in the item title or header content, each occurrence of the word counts + 1. The above titles are the titles of each level in the file detailed directory, because the titles of each level in the file are a high-level summary of its content.

[0078] Then, traverse all the files to calculate the correlation index between the files, and use the threshold Filter related indicators and preset thresholds , if the correlation index between the two files is greater than or equal to the threshold , then the two are considered to be files about the same project, and the two files are marked as related files. In addition, in the project, there are different versions of the same document, some are detailed, some are rough, and because of their different audiences, such as for the top management of the company, the documents are more overview documents on basic concepts, strategic impacts, etc., and for project team members, the documents are more detailed documents on technical implementation plans, etc. In addition, for the purpose of risk management, the company will save all files at different time points in the project. Most of the early files are rough plans for various aspects of the project. As time goes by, each file will produce a more detailed and specific version to explore in depth the implementation details of each link, technical solutions and other details. Based on this, the calculation file Content integrity factor in similar content files In this embodiment, the method for calculating the content integrity factor includes:

[0079] For the target file α, count the total number of headers contained in its internal directory ;

[0080] For different versions of file j with the same title as file α, count the number of titles contained in its directory , and find the maximum number of titles in the different versions of the file ;

[0081] According to the total number of titles of file α With the maximum value The ratio of , calculates the weighting factor of title completeness;

[0082] For each title k in file α, count the number of characters in its corresponding content At the same time, for different versions of file j with the same title k as file α, count the number of characters in its corresponding content ;

[0083] Find the maximum number of characters in the content of the same title k among all different versions of file j ;

[0084] For each title k in the file α, calculate the ratio of the number of characters in its content to the corresponding maximum value, and add the ratios to obtain a measure of content completeness;

[0085] According to the weighted factor of the title integrity and the measure of the content integrity, the content integrity factor of file α is obtained. .

[0086] Among them, the content integrity factor of file α The calculation formula is:

[0087]

[0088] in, For File The number of titles contained in the internal catalog; For files Different versions of the same topic The number of titles contained in the catalog; Indicates taking different files The maximum value of the corresponding function; For File Medium Title The number of characters in the corresponding content below; For File Medium Title The number of characters in the corresponding content below; Indicates taking different files The corresponding function maximum value. The value of decreases, indicating that file α is not as complete as other versions of files in terms of content integrity, that is, the content integrity of file α is relatively low. Measures the completeness of the number of titles of file α relative to the number of titles of other versions of the file with the same title. If the number of titles of file α is close to or equal to the maximum value among these versions, it indicates that file α is relatively complete in terms of the number of titles. Calculate the average ratio of the number of characters in the content under each title in file α to the number of characters in the content under the same title in other versions of the file. If the number of characters in the content under a certain title in file α is close to or exceeds the maximum value in other versions, the contribution of the content under this title to the overall completeness will increase. Indirectly by affecting the number of titles relative to completeness , if the number of titles and the number of characters in the content of file α are both relatively high, and these values ​​are close to or exceed those of other versions, then A higher value indicates that file α performs well in terms of content completeness. The level of The size of α also depends on the number of headers in file α relative to the other versions of the file. The value indicates that the file α is relatively complete in structure and content, while a lower A value of α indicates that file α has fewer titles.

[0089] In this embodiment, Indicates taking different files The maximum value of the corresponding function is used to select the latest and most complete file of the content, that is, the file with the same content theme and more levels of titles in the directory. The more titles a file has, the more complete it is relative to other files. Indicates taking different files The maximum value of the corresponding function is used to select the latest and most complete file of the content, that is, under the same title, there are more files that describe and explain the content of its title. The more characters under the title, the clearer the explanation of the title.

[0090] Step S103, according to the temporary confidentiality index of the file to be shared and the original authorization system, the authorization library including the authority file and the temporary permission file of the original authorization system is opened to the visitor.

[0091] In this embodiment, for each visitor, the files within the visitor's authority are opened according to the original authorization system; the corresponding temporary license files are screened by the newly constructed temporary confidentiality index to obtain the visitor's authorization library; wherein, if the visitor accesses other files not within the scope of authority, the temporary confidentiality index is used to analyze whether the visitor has temporary access rights; if the visitor has temporary access rights, the temporary license file is retrieved, wherein the authority of the temporary license file is limited to reading, and does not include downloading and changing operations.

[0092] For example, for a visitor, traverse all files and obtain the corresponding temporary permission index, passing the threshold Filter temporary license indicators, preset , if the visitor's temporary permission index for a file is greater than or equal to the threshold , it is considered that the user needs to know the content of the file, and these files are marked and recorded as the temporary permission file of the visitor. Otherwise, it is considered that the visitor does not need to know the file.

[0093] For each visitor, first open the files within their original permissions according to their original permissions, and then select the corresponding temporary license files through the newly constructed temporary confidentiality and temporary authorization mechanism. These files together constitute the authorization library of the visitor. If the visitor needs to access other files that are not within the scope of this permission, the established temporary authorization mechanism is used to analyze whether the visitor has temporary access rights, that is, whether the file he accesses is the visitor's temporary license file. If the visitor has temporary access rights, he can access the file, but it is limited to reading, and other operations such as downloading and changing cannot be performed.

[0094] In an enterprise, the more important a project is, the more attention it will receive from the enterprise. And because important projects are generally more responsible, various relevant documents will be signed from the beginning of the project to ensure that all parties have clear responsibilities and tasks. That is, the more important the document, the more related documents it will have. In addition, even for the same document, there are differences such as detailed description and overview. But in general, the more detailed the document, the higher the requirements for viewing permissions. Based on this, the calculation file Temporary confidentiality index In this embodiment, the file Temporary confidentiality index The calculation methods include:

[0095] According to the content integrity factor of the document α in the set of similar content documents , calculate the file association index with all associated files δ ;

[0096] Count the total number of files associated with file α , the file association index of file α and each associated file δ Add them together to get the total correlation;

[0097] Factor the content completely The weighted sum of the associations is multiplied by the sum of the associations to obtain the weighted sum of the associations, and the weighted sum of the associations is processed by a positive proportional normalization function to obtain the temporary confidentiality index of the file α. .

[0098] Among them, the temporary confidentiality index of file α The calculation formula is:

[0099]

[0100] in, For File Content integrity factor in similar content files; For File With file The file association index measures the degree of association between file α and file δ. The higher the value of , the closer the association between file α and file δ is; For files The total number of associated files; is a positive proportional normalization function. Measures the degree to which file α needs to be protected in terms of content integrity and relevance to other files. The smaller it is, the lower the content integrity and the degree of correlation between file α and other files are. In other words, file α is less important, sensitive or needs protection.

[0101] In this embodiment, Represents a file Content integrity factor in similar content files, used to describe the file Whether the content is complete and detailed enough. Represents a file With file The correlation index is used to describe the closeness and correlation degree between two files.

[0102] In addition, some projects involve cross-departmental cooperation, which requires close cooperation between different departments or teams. Although each department is still responsible for its own related tasks, it is necessary to better coordinate related work, understand the progress of the project, and understand the overall goals of the project. For example, the technical department, marketing department, and sales department need to work together to improve a product. At this time, the technical department needs various feedback from the market on the product. At this time, it is necessary to adjust the temporary permissions of the technical department employees so that they can view the corresponding market data. Based on this, build a visitor To file Temporary permission indicator, in this embodiment, the visitor To file The calculation method of the temporary license index includes:

[0103] Select one or more reference users r and determine their permission levels in the category where the file δ is located And in the project to which the file belongs Project Determinants ;

[0104] Using the weighted average function Calculate the permission level of reference user r and its project determinants The weighted average of the visitor γ in the same category And its projects Project Determinants The comprehensive difference between visitor γ and reference user r in terms of authority and project determination factors is obtained by comparing the product of γ and r.

[0105] The comprehensive difference value is normalized in positive proportion by using the softsign function. In the file The permission level of the category .

[0106] Among them, visitors In the file The permission level of the category The calculation formula is:

[0107]

[0108] in, For Visitors In the project The project determinants in reflect the role, contribution or influence of the visitor γ in the project, thus affecting his authority on the file α; For Visitors In the file The permission level of the category; To open the file The required level of authority; For Visitors For cross-domain files The cross-domain indicator reflects the risk of a visitor γ when accessing documents α that are not directly related to his or her professional field. The higher the value, the greater the risk of cross-domain access; Used to adjust the permission level of γ to reflect the risk of cross-domain access; is a positive proportional normalization function; For file files Temporary confidentiality index; is a positive proportional normalization function. The smaller it is, the lower the actual permission level of visitor γ in the category where file α is located. A lower permission level means that γ's access to file α will be more restricted.

[0109] In this embodiment, Indicates visitor In the project The item determining factor in the file is used to describe the visitor's The importance of the position and tasks you are responsible for in the project. Indicates visitor Cross-domain files Cross-domain metrics describing visitors Is it necessary to view relevant data that they have no authority to retrieve?

[0110] When a person plays a leading role in a project, or is responsible for overall planning, he needs to understand the relevant information of all parties, and then make relatively accurate judgments based on this information. However, he only needs to understand the relevant task progress, materials required for each task stage, and many other information. As for more detailed information about the project, he should not view it. For cross-domain files Cross-domain indicators , i.e. visitor In the file The permission level of the category is calculated using the following methods:

[0111] Select one or more reference users r and determine their permission levels in the category where the file δ is located And in the project to which the file belongs Project Determinants ;

[0112] Using the weighted average function Calculate the permission level of reference user r and its project determinants The weighted average of the visitor γ in the same category And its projects Project Determinants The comprehensive difference between visitor γ and reference user r in terms of authority and project determination factors is obtained by comparing the product of γ and r.

[0113] The comprehensive difference value is normalized in positive proportion by using the softsign function. In the file The permission level of the category .

[0114] Among them, visitors In the file The permission level of the category The calculation formula is:

[0115]

[0116] in, For users In the file The permission level in the category. For users In the file Projects The item determining factor in reflects the user r's role, contribution or influence in is the weighted average function of different user permissions, which is used to calculate the comprehensive permission level of user r in the file δ classification, where the weight is the project determination factor ; For Visitors In the file The level of authority within the category; For Visitors In the project Item determinants in ; is a positive proportional normalization function. Reflects the level of permission of visitor γ relative to user r in the file δ category. The smaller it is, the higher the permission level of visitor γ is than that of user r in the category where file δ is located.

[0117] In this embodiment, Indicates user In the file Projects The project determinant in is used to describe the importance of the user in the project; Represents a weighted average function for calculating different user permissions, where the weight is the project determining factor , that is, weighting the user's authority in the corresponding category according to the importance of each user in the task project; the user Refers to visitors The more authority categories other people who participate in the same task have, the more information in more field classifications the task needs to refer to. For normalization of positive proportion, this is because the function We can consider the case where there are negative numbers in the independent variable, and then This is to quantize the normalized function in proportion to superior.

[0118] In a project, for the sake of specialization and efficiency, the enterprise will subdivide the tasks of the entire project into multiple specific tasks and assign them to different team members, so that each person and team can clearly determine their responsibilities and work priorities; this also results in different roles and tasks for each person in the project, and the other auxiliary information they need to know is also different; that is, the team leader responsible for a task needs to know the progress of other tasks more than the team members to ensure that the task he is responsible for can be completed within the scheduled time. Based on this, calculate the number of visitors In the project Project Determinants , the calculation method includes:

[0119] Count the number of people who have a higher or equal position than visitor γ in project p and the number of people with a lower job title than the visitor , and according to and The ratio of evaluates the relative authority level of visitor γ in the project group;

[0120] Determine the length of the task chain in which the visitor γ is involved , and find the shortest length of all task chains in project p ;

[0121] Calculating task chain length The number of tasks that can be replaced by the tasks that visitor γ is responsible for in project p The effective length of the task chain is obtained by multiplying the reciprocals of

[0122] According to the multiplication of the ratio and the effective length of the task chain, the project determination factor of visitor γ in project p is obtained. .

[0123] Among them, the project determinant of visitor γ in project p is The calculation formula is:

[0124]

[0125] in, For the project Chinese and Belgian visitors The total number of people with higher or equal positions; For the project Chinese and Belgian visitors The total number of people with low positions; Used to judge visitors The authority hierarchy within the project team; For Visitors The length of the task chain in which the task is involved; For Project Medium Task Chain Length; () is a minimum function, which is used to obtain the shortest task chain among many task chains; For the project Replaceable visitor The number of tasks for which you are responsible; is the effective length of the task chain. The larger the effective length of the task chain, the easier it is for visitor γ's task to be replaced by others, thereby reducing the importance of visitor γ on the task. It is used to quantitatively evaluate the determining factor of visitor γ in project p. The smaller it is, the lower the level of authority of visitor γ in project p, or his task is important but easily replaced, or there are other very efficient task chains in the project that make visitor γ's task chain no longer important.

[0126] In this embodiment, Indicates that in the project Chinese and Belgian visitors The total number of people with higher or equal positions, that is, how many people in the entire project team have higher authority than the visitor The permissions are higher or the same. Indicates visitor The length of the task chain in which the task is involved, which is the length of the task chain in which the project is divided into two parts through the work breakdown structure (WBS) combined with the "top-level split method" or "bottom-level split method" The task chain is formed in the process of splitting into multiple subtasks. The length refers to the number of tasks in the task chain. Indicates that in the project Replaceable visitor The number of tasks that you are responsible for, that is, the task ( ) has between its upper-level task and its lower-level task, where the upper-level task and the lower-level task are the tasks in the task chain that are related to the task ( ) Tasks that are adjacent to each other. The effective length of the task chain of the task is constructed, that is, the more substitute tasks the task has, the lower the core degree of the task chain is, and the task is relatively unimportant.

[0127] The solution provided by the above embodiment of the present invention obtains the files to be shared in the cloud database and obtains the original authorization system of each user from the linked cloud platform. For any of the files to be shared, the temporary confidentiality index of the files to be shared is calculated according to the content integrity factor in the similar content files and the file association index of the same project. According to the temporary confidentiality index of the files to be shared and the original authorization system, the authorization library containing the authority files and temporary license files of the original authorization system is opened to the visitor. The present invention constructs the confidentiality of the derivative files by analyzing the authority of the original files and their importance to the enterprise, combined with the content displayed by the derivative files; under the condition that the important content in the original files is not leaked, the visitors who need to know the content of the files can show part of the content they need, which can effectively ensure the confidentiality of the content of the files, and also does not affect the overall layout of the enterprise, and improves the efficiency of data sharing. And, by analyzing the permissions of the visitors and their work content, the temporary confidentiality level is given to them; under the condition that the original permissions of the users are not adjusted, it can be effectively judged whether it is necessary for them to know the necessity of files with higher permissions, which can effectively ensure that the users can view the files they can or need to know in time, and ensure that the content of the files is not known by others, that is, the security of the content of the files is guaranteed.

[0128] According to another aspect of the present invention, a data sharing system for a cloud service platform is provided, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the steps of the data sharing method for the cloud service platform when executing the computer program.

[0129] Figure 3 The schematic diagram of the structure of the data sharing device for cloud service platform according to the embodiment of the present invention is shown. The data sharing device 300 for cloud service platform comprises:

[0130] The information collection module 310 is used to obtain the files to be shared in the cloud database and to obtain the original authorization system of each user from the linked cloud platform.

[0131] The temporary confidentiality level calculation module 320 is used to calculate the temporary confidentiality level index of any file to be shared according to its content integrity factor in similar content files and the file association index of the same project.

[0132] The authorization library construction module 330 is used to open the authorization library including the permission file and temporary permission file of the original authorization system to the visitor according to the temporary confidentiality index of the file to be shared and the original authorization system.

[0133] Figure 4A schematic diagram of the structure of an embodiment of a computing device of the present invention is shown. The specific embodiment of the present invention does not limit the specific implementation of the computing device.

[0134] like Figure 4 As shown, the computing device may include: a processor (processor) 402 , a communication interface (Communications Interface) 404 , a memory (memory) 406 , and a communication bus 408 .

[0135] The processor 402, the communication interface 404, and the memory 406 communicate with each other via the communication bus 408. The communication interface 404 is used to communicate with other devices such as a client or other server network elements. The processor 402 is used to execute the program 410, which can specifically execute the relevant steps in the above-mentioned data sharing method embodiment for the cloud service platform.

[0136] Specifically, the program 410 may include program codes, which include computer operation instructions.

[0137] The processor 402 may be a central processing unit (CPU) or a GPU, or an application-specific integrated circuit (ASIC), or one or more integrated circuits configured to implement the embodiments of the present invention. The one or more processors included in the computing device may be processors of the same type, such as one or more CPUs; or processors of different types, such as one or more CPUs and one or more ASICs.

[0138] The memory 406 is used to store the program 410. The memory 406 may include a high-speed RAM memory, and may also include a non-volatile memory (non-volatile memory), such as at least one disk memory.

[0139] It should be noted that the sequence of the above embodiments of the present invention is only for description and does not represent the advantages and disadvantages of the embodiments. The processes depicted in the accompanying drawings do not necessarily require the specific order or continuous order shown to achieve the desired results. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.

[0140] The various embodiments in this specification are described in a progressive manner, and the same or similar parts between the various embodiments can be referenced to each other, and each embodiment focuses on the differences from other embodiments.

Claims

1. A data sharing method for a cloud service platform, characterized in that: The method comprises: Get the files to be shared in the cloud database and obtain the original authorization system of each user from the linked cloud platform; For any of the files to be shared, a temporary confidentiality index of the file to be shared is calculated according to its content integrity factor in similar content files and a file association index of the same project; According to the temporary confidentiality index of the file to be shared and the original authorization system, the authorization library including the authority file and the temporary permission file of the original authorization system is opened to the visitor; The calculation method of the file association index includes: For each pair of files α and δ that need to be compared, extract their respective titles or headers and convert them into corresponding word vectors to obtain the word vector of the i-th item of file α and the word vector of the i-th item in the document δ ; The cosine similarity measure is used to calculate the similarity between the word vectors of the i-th title or header content of the file α and the file δ; Count the number of identical characters between file α and file δ in the i-th title or header content , and count the total number of words in the i-th item of the two ;according to exist The percentage in gets the text overlap; For each title or header content, the single item relevance is calculated according to the similarity of its word vectors and the text overlap; Take the average of the single item associations of all items to get the average association between file α and file δ ; The calculation method of the content integrity factor includes: For the target file α, count the total number of headers contained in its internal directory ; For different versions of file j with the same title as file α, count the number of titles contained in its directory , and find the maximum number of titles in the different versions of the file ; According to the total number of titles of file α With the maximum value The ratio of , calculates the weighting factor of title completeness; For each title k in file α, count the number of characters in its corresponding content At the same time, for different versions of file j with the same title k as file α, count the number of characters in its corresponding content ; Find the maximum number of characters in the content of the same title k among all different versions of file j ; For each title k in the file α, calculate the ratio of the number of characters in its content to the corresponding maximum value, and add the ratios to obtain a measure of content completeness; According to the weighted factor of the title integrity and the measure of the content integrity, the content integrity factor of file α is obtained. ; The calculation method of the temporary confidentiality index of the file to be shared includes: According to the content integrity factor of the document α in the set of similar content documents , calculate the file association index with all associated files δ ; Count the total number of files associated with file α , the file association index of file α and each associated file δ Add them together to get the total correlation; Factor the content completely The weighted sum of the associations is multiplied by the sum of the associations to obtain the weighted sum of the associations, and the weighted sum of the associations is processed by a positive proportional normalization function to obtain the temporary confidentiality index of the file α. ; The step of opening the authorization library including the permission file and the temporary permission file of the original authorization system to the visitor according to the temporary confidentiality index of the file to be shared and the original authorization system further comprises: For each of the visitors, according to the original authorization system, the files within the visitor's authority are opened; By using the newly constructed temporary confidentiality index, the corresponding temporary license file is screened to obtain the visitor's authorization library; Among them, if the visitor accesses other files that are not within the scope of permission, the temporary confidentiality index is used to analyze whether the visitor has temporary access rights; if the visitor has temporary access rights, the temporary license file is retrieved, wherein the permission of the temporary license file is limited to reading, and does not include downloading and changing operations.

2. The data sharing method for a cloud service platform according to claim 1, characterized in that: The screening of the corresponding temporary license file further includes: Obtaining a temporary permission index of the visitor, and screening the temporary permission index by a preset threshold; For any file, if the temporary permission index of the visitor is greater than or equal to the preset threshold, the file is marked as a temporary permission file of the visitor.

3. The data sharing method for a cloud service platform according to claim 2, characterized in that: The calculation method of the temporary permission index includes: For Visitors | In Project activities in the project and determine their project determinants ; Get the permission level of visitor γ in the category where file α is located , and the permission level required to open the file α ; According to the project determining factors , the permission level of visitor γ in the category where file α is located and the permission level required to open the file α Differences between, and cross-domain indicators , and obtain the comprehensive factor; Divide the comprehensive factor by the temporary confidentiality index of file α , and normalize it in direct proportion to obtain the temporary permission index .

4. The data sharing method for a cloud service platform according to claim 3, characterized in that: The visitor In the file The calculation method of the permission level of the category includes: Select one or more reference users r and determine their permission levels in the category where the file δ is located And in the project to which the file belongs Project Determinants ; Using the weighted average function Calculate the permission level of reference user r and its project determinants The weighted average of the visitor γ in the same category And its projects Project Determinants The comprehensive difference between visitor γ and reference user r in terms of authority and project determination factors is obtained by comparing the product of γ and r. The comprehensive difference value is normalized in positive proportion by using the softsign function. In the file The permission level of the category .

5. The data sharing method for a cloud service platform according to claim 4, characterized in that: The calculation method of the project determination factor of the visitor in the project includes: Count the number of people who have a higher or equal position than visitor γ in project p and the number of people with a lower job title than the visitor , and according to and The ratio of evaluates the relative authority level of visitor γ in the project group; Determine the length of the task chain in which the visitor γ is involved , and find the shortest length of all task chains in project p ; Calculating task chain length The number of tasks that can be replaced by the tasks that visitor γ is responsible for in project p The effective length of the task chain is obtained by multiplying the reciprocals of According to the multiplication of the ratio and the effective length of the task chain, the project determination factor of visitor γ in project p is obtained. .

6. A data sharing system for a cloud service platform, characterized in that: It comprises a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the computer program, the steps of the data sharing method for a cloud service platform as claimed in any one of claims 1 to 5 are implemented.

Images