Business data sharing method and device, computer equipment, readable storage medium and program product

Abstract

The invention relates to the technical field of big data, and particularly discloses a business data sharing method and device, computer equipment, a readable storage medium and a program product. The method comprises the following steps: in response to an information viewing request of a user account for a resource interaction object, obtaining a user role identifier configured by the user account in a resource interaction system; the resource interaction system comprises a plurality of subsystems associated with resource interaction channels. Determining a data access type allowing user account access according to the user role identifier; sending the data acquisition request to a content distribution network; the data acquisition request is used for indicating the content distribution network to return resource interaction data matched with the data access type; the resource interaction data is obtained by adjusting the original resource interaction data by the resource interaction system according to the data display demand information of the first client; and displaying the resource interaction data returned by the content distribution network. By adopting the method, the business data sharing efficiency can be improved.

Description

Technical Field

[0001] The present application relates to the field of big data technology, and in particular to a method, apparatus, computer equipment, readable storage medium and program product for sharing business data. Background Art

[0002] With the rapid development of big data technology, data sharing technology is becoming more and more widely used in various industries. The main purpose of data sharing technology is to efficiently and securely transfer and access data between different users and systems to support business decision-making and operational management. Enterprises usually need to efficiently process and share a large amount of business data in order to respond to users' data access needs in a timely manner.

[0003] In traditional data sharing methods, data is usually stored in a central server, and users access the required data by sending requests. However, when faced with a large number of concurrent requests and massive amounts of data, the load on the central server will increase dramatically, resulting in longer system response time and even possible system crashes, which prevents users from accessing the shared business data in the central server in a timely manner, resulting in low business data sharing efficiency. Summary of the invention

[0004] Based on this, it is necessary to provide a business data sharing method, apparatus, computer equipment, computer-readable storage medium and computer program product that can improve the sharing efficiency of business data in response to the above technical problems.

[0005] In a first aspect, the present application provides a method for sharing business data, including:

[0006] In response to a user account's request for viewing information on a resource interaction object, obtaining a user role identifier configured by the user account in a resource interaction system; the resource interaction system includes a plurality of subsystems associated with resource interaction channels;

[0007] Determining, based on the user role identifier, a data access type that the user account is allowed to access;

[0008] Sending a data acquisition request to a content distribution network; the data acquisition request is used to instruct the content distribution network to return resource interaction data matching the data access type; the resource interaction data is obtained by adjusting the original resource interaction data by the resource interaction system according to the data display demand information of the first client; the original resource interaction data is the resource interaction data for the resource interaction object shared in the resource interaction system; the first client is the client that initiates the information viewing request;

[0009] The resource interaction data returned by the content distribution network is displayed.

[0010] In one embodiment, the original resource interaction data is resource interaction data after end-to-end encryption and transport layer security encryption by the second client; the second client is a client that uploads the original resource interaction data to the resource interaction system; and the display of the resource interaction data returned by the content distribution network includes:

[0011] Performing transport layer security decryption on the resource interaction data returned by the content distribution network to obtain the resource interaction data after transport layer security decryption;

[0012] Performing end-to-end decryption on the resource interaction data after the transport layer security decryption to obtain the end-to-end decrypted resource interaction data;

[0013] The end-to-end decrypted resource interaction data is displayed.

[0014] In one embodiment, determining the data access type that the user account is allowed to access based on the user role identifier includes:

[0015] Determining the user rights assigned by the resource interaction system to the user account according to the user role identifier;

[0016] Acquire context information of the first client; the context information includes at least one of location information, device information, access time information, and access behavior information of the client that initiates the information viewing request;

[0017] Adjusting the user rights according to the context information to obtain adjusted user rights;

[0018] According to the adjusted user rights, a data access type that the user account is allowed to access is determined.

[0019] In one embodiment, adjusting the user rights according to the context information to obtain adjusted user rights includes:

[0020] If it is determined according to the context information that the user account has abnormal access, an authentication screen is output; the authentication screen is used for the user account to input at least two authentication information;

[0021] Sending an authentication request to the resource interaction system; the authentication request includes the at least two types of authentication information;

[0022] Receiving an authentication result returned by the resource interaction system according to the at least two types of authentication information;

[0023] The user rights are adjusted according to the authentication result to obtain adjusted user rights.

[0024] In one embodiment, the content distribution network includes a plurality of node servers connected to a central server configuring the resource interaction system; sending a data acquisition request to the content distribution network includes:

[0025] Determine a target node server from the multiple node servers according to the response time impact information of the multiple node servers; the response time impact information includes at least one of a physical distance between the node server and the client that initiates the information viewing request, a network status between the node server and the first client, and a load status of the node server;

[0026] Send a data acquisition request to the target node server.

[0027] In one embodiment, determining the data access type that the user account is allowed to access based on the user role identifier includes:

[0028] In a case where the user role identifier is an audit role identifier, determining that the data access type allowed to be accessed by the user account is log record;

[0029] The log record is used to record desensitizing operation information, and the desensitizing operation information includes original resource interaction data and resource interaction data obtained by desensitizing sensitive data in the original resource interaction data.

[0030] In a second aspect, the present application also provides a device for sharing business data, including:

[0031] A response module, for responding to a user account's request for viewing information on a resource interaction object, and obtaining a user role identifier configured by the user account in a resource interaction system; the resource interaction system includes a plurality of subsystems associated with resource interaction channels;

[0032] A determination module, configured to determine the data access type that the user account is allowed to access based on the user role identifier;

[0033] A sending module, used for sending a data acquisition request to a content distribution network; the data acquisition request is used to instruct the content distribution network to return resource interaction data matching the data access type; the resource interaction data is obtained by adjusting the original resource interaction data by the resource interaction system according to the data display demand information of the first client; the original resource interaction data is the resource interaction data for the resource interaction object shared in the resource interaction system; the first client is the client that initiates the information viewing request;

[0034] A display module is used to display the resource interaction data returned by the content distribution network.

[0035] In one of the embodiments, the original resource interaction data is the resource interaction data after end-to-end encryption and transport layer security encryption by the second client; the second client is the client that uploads the original resource interaction data to the resource interaction system; the display module is used to perform transport layer security decryption on the resource interaction data returned by the content distribution network to obtain the resource interaction data after transport layer security decryption; perform end-to-end decryption on the resource interaction data after transport layer security decryption to obtain end-to-end decrypted resource interaction data; and display the end-to-end decrypted resource interaction data.

[0036] In one of the embodiments, the determination module is used to determine the user rights assigned to the user account by the resource interaction system based on the user role identifier; obtain context information of the first client; the context information includes at least one of the location information, device information, access time information, and access behavior information of the client that initiates the information viewing request; adjust the user rights based on the context information to obtain adjusted user rights; and determine the data access type allowed for the user account based on the adjusted user rights.

[0037] In one of the embodiments, the determination module is used to output an authentication screen if it is determined that the user account has abnormal access based on the context information; the authentication screen is used for the user account to input at least two authentication information; send an authentication request to the resource interaction system; the authentication request includes the at least two authentication information; receive an authentication result returned by the resource interaction system based on the at least two authentication information; and adjust the user rights based on the authentication result to obtain adjusted user rights.

[0038] In one embodiment, the content distribution network includes multiple node servers connected to a central server configuring the resource interaction system; the sending module is used to determine a target node server from the multiple node servers based on response time impact information of the multiple node servers; the response time impact information includes at least one of the physical distance between the node server and the client initiating the information viewing request, the network status between the node server and the first client, and the load status of the node server; and a data acquisition request is sent to the target node server.

[0039] In one embodiment, the determination module is used to determine that the data access type allowed to the user account is log record when the user role identifier is an audit role identifier; wherein the log record is used to record desensitizing operation information, and the desensitizing operation information includes original resource interaction data and resource interaction data obtained by desensitizing sensitive data in the original resource interaction data.

[0040] In a third aspect, the present application further provides a computer device, including a memory and a processor, wherein the memory stores a computer program, and the processor implements the steps of the above method when executing the computer program.

[0041] In a fourth aspect, the present application further provides a computer-readable storage medium having a computer program stored thereon, wherein the computer program implements the steps of the above method when executed by a processor.

[0042] In a fifth aspect, the present application also provides a computer program product, including a computer program, which implements the steps of the above method when executed by a processor.

[0043] The above-mentioned business data sharing method, device, computer equipment, readable storage medium and program product obtain the user role identification configured by the user account in the resource interaction system by responding to the user account's information viewing request for the resource interaction object, wherein the resource interaction system includes a plurality of subsystems associated with resource interaction channels; based on the user role identification, determine the data access type allowed to the user account; send a data acquisition request to the content distribution network for instructing the content distribution network to return resource interaction data matching the data access type, wherein the resource interaction data is obtained by adjusting the original resource interaction data by the resource interaction system according to the data display requirement information of the client that initiates the information viewing request, and the original resource interaction data is the resource interaction data for the resource interaction object shared in the resource interaction system; and display the resource interaction data sent by the content distribution network. The method can efficiently determine the data access type that a user account can access through a user role identifier configured in a resource interaction system; send a data acquisition request to a content distribution network through a first client to obtain resource interaction data shared by subsystems associated with multiple resource interaction channels in the resource interaction system through the content distribution network, thereby solving the load problem of a traditional centralized server when facing a large number of concurrent requests, avoiding the risk of prolonged system response time or crash, and improving the sharing efficiency of business data; in addition, the resource interaction system can adjust the original resource interaction data according to the data display requirements of the first client to meet the data display requirements of different clients, and achieve efficient display of resource interaction data in a targeted manner, so that resource interaction data can be efficiently shared in subsystems associated with multiple resource interaction channels in the resource interaction system, thereby improving the sharing efficiency of business data. BRIEF DESCRIPTION OF THE DRAWINGS

[0044] In order to more clearly illustrate the technical solutions in the embodiments of the present application or related technologies, the drawings required for use in the embodiments of the present application or related technical descriptions will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0045] FIG1 is an application environment diagram of a method for sharing business data in one embodiment;

[0046] FIG2 is a schematic diagram of a flow chart of a method for sharing business data in one embodiment;

[0047] FIG3 is a schematic diagram of the architecture of a resource interaction system in one embodiment;

[0048] FIG4 is a schematic diagram of a flow chart of a method for sharing business data in another embodiment;

[0049] FIG5 is a structural block diagram of a device for sharing business data in one embodiment;

[0050] FIG. 6 is a diagram showing the internal structure of a computer device in one embodiment. DETAILED DESCRIPTION

[0051] In order to make the purpose, technical solutions and advantages of the present application clearer, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application. It should be noted that in the embodiments of the present application, certain software, groups, models and other existing solutions in the industry may be mentioned, which should be considered as exemplary, and their purpose is only to illustrate the feasibility of the implementation of the technical solution of the present application, but it does not mean that the applicant has or will necessarily use the solution.

[0052] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with relevant regulations. The acquisition, storage, use, and processing of data in the technical solution of this application are in compliance with relevant provisions of national laws and regulations.

[0053] The method for sharing business data provided in the embodiment of the present application can be applied in the application environment shown in FIG. 1. The terminal 102 communicates with the server 104 through the network. The data storage system can store the data that the server 104 needs to process. The data storage system can be integrated on the server 104, or it can be placed on the cloud or other network servers. The terminal 102 responds to the user account's information viewing request for the resource interaction object, and obtains the user role identification configured by the user account in the resource interaction system; the resource interaction system includes a plurality of subsystems associated with resource interaction channels; the terminal 102 determines the data access type allowed to the user account according to the user role identification; the terminal 102 sends a data acquisition request to the content distribution network; the data acquisition request is used to indicate that the content distribution network returns the resource interaction data matching the data access type; the resource interaction data is obtained by adjusting the original resource interaction data by the resource interaction system according to the data display demand information of the first client; the original resource interaction data is the resource interaction data for the resource interaction object shared in the resource interaction system; the first client is the client that initiates the information viewing request; the terminal 102 displays the resource interaction data returned by the content distribution network. The terminal 102 may be, but is not limited to, various personal computers, laptops, smart phones, tablet computers, IoT devices, and portable wearable devices. The IoT devices may be smart speakers, smart TVs, smart air conditioners, smart car devices, projection devices, etc. Portable wearable devices may be smart watches, smart bracelets, head-mounted devices, etc. Head-mounted devices may be virtual reality (VR) devices, augmented reality (AR) devices, smart glasses, etc. The server 104 may be an independent physical server, a server cluster or distributed system consisting of multiple physical servers, or a cloud server that provides cloud computing services.

[0054] In an exemplary embodiment, as shown in FIG. 2 , a method for sharing service data is provided, which is described by taking the method applied to the terminal 102 in FIG. 1 as an example, and includes:

[0055] Step S202: In response to a user account's request for viewing information on a resource interaction object, a user role identifier configured by the user account in the resource interaction system is obtained.

[0056] Among them, the resource interaction system includes subsystems associated with multiple resource interaction channels.

[0057] Resource interaction system can refer to a comprehensive information management platform that can efficiently and securely process and share data related to resource interaction business, such as data related to resource collection business, resource allocation business, resource transaction business, etc. Resource interaction system can integrate multiple subsystems associated with resource interaction channels, each subsystem corresponding to specific resource interaction activities and related data management. Resource interaction system can be configured on the server to centrally manage and process all resource interaction related data and requests.

[0058] The multiple subsystems included in the resource interaction system can be responsible for a specific resource interaction channel respectively. The resource interaction channel can refer to the path or method of resource interaction. Exemplarily, in the resource collection scenario, taking the resource interaction system as the resource collection system and the resource interaction channel as the resource collection channel as an example, the subsystems included in the resource interaction system can represent the subsystems corresponding to the three resource interaction channels of banks, creditors and collection agencies. For example, the bank subsystem can manage the collection activities of the bank channel, record and manage the information of the collection objects conducted by the bank through its system (such as online banking or bank applications); the creditor subsystem can handle the collection activities conducted by creditors through their systems (such as creditor portals or bondholder mobile applications), and ensure that the collection data managed by creditors is properly processed and shared; the collection agency subsystem can be responsible for managing the collection activities conducted by the collection agency (a company specializing in handling collection matters) through its system (such as a collection management system or a collection application), including the sending, receiving and recording of collection notices.

[0059] The terminal obtains a user role identifier configured by the user account in the resource interaction system in response to a request for viewing information of the resource interaction object by the user account.

[0060] The resource interaction object may refer to an object that participates in resource interaction activities. For example, in a resource collection scenario, the resource collection object refers to an object that is overdue in the collection process, such as a debtor and a debtor.

[0061] The information viewing request is a request initiated by the terminal to the resource interaction system for accessing relevant data of the resource interaction object.

[0062] For example, taking the resource collection scenario as an example, a bank needs to manage and collect a large number of overdue loans. Bank employees can log in to their user accounts through the terminal's online banking platform and select a resource interaction object on the online banking platform. The terminal responds to the user account's information viewing request for the resource interaction object and obtains the user role identifier configured by the user account in the resource interaction system.

[0063] The user role identifier is an identifier used to represent the role of a user account in the resource interaction system. The resource interaction system can define different roles according to the user's responsibilities and needs. Different roles correspond to different user permissions. The resource interaction system can define a user role identifier for each user account, thereby assigning different user permissions to each user account.

[0064] In a specific implementation, the user role identifier may include the user role name, such as administrator, auditor, debt collector, etc.

[0065] Step S204: Determine the data access type that the user account is allowed to access based on the user role identifier.

[0066] The terminal determines the user rights configured for the user account by the resource interaction system according to the user role identifier. Optionally, the user rights may include the data access type and the data access scope allowed to be accessed by the user account.

[0067] Data access type can refer to the specific data category and data range that a user can access in the resource interaction system according to the user role identification. For example, in the resource collection scenario, the collector can access the collection pictures related to the collection task through the resource interaction system, and the auditor can access the system operation log and system monitoring record.

[0068] Step S206: sending a data acquisition request to a content distribution network.

[0069] The data acquisition request is used to instruct the content distribution network to return resource interaction data that matches the data access type.

[0070] Among them, the Content Delivery Network (CDN) is a distributed network system that optimizes data transmission speed and reliability, reduces network latency, and improves user access experience by caching and distributing content in multiple nodes around the world. In specific implementation, the resource interaction system can be configured in a central server to centrally manage and process data related to resource interaction. It can be responsible for user identity authentication, permission management, data processing and generation, and can send processed data to the content distribution network for caching and distribution; the content distribution network is responsible for caching and fast data transmission, and does not directly manage or process data related to resource interaction, but provides data transmission and distribution services. After receiving the data processed by the resource interaction system, the content distribution network can cache it to multiple nodes around the world to achieve efficient and secure data access and transmission.

[0071] In a specific implementation, the terminal can send a data acquisition request to the content distribution network, and the content distribution network can find a node that caches resource interaction data that matches the data access type, and return the resource interaction data that matches the data access type through the node; if no node in the entire content distribution network caches resource interaction data that matches the data access type, the content distribution network can request the content from the central server of the resource interaction system, cache the content returned by the resource interaction system to the node, and send it to the terminal through the node. The content distribution network is used to accelerate data transmission and ensure that terminals in different geographical locations can quickly access data. The content distribution network caches data on multiple nodes distributed around the world, which can reduce the load on the central server.

[0072] Optionally, in a resource collection scenario, resource interaction data may include personal information (such as name, address), debt information (number of overdue resources, overdue time), bank card account information, repayment records (historical repayment records and current repayment status), collection tasks (task assignment and task progress), collection records (contact records, collection results), collection pictures, system logs (user operation logs, system access logs, security event logs), system monitoring records, audit records, etc.

[0073] Among them, the original resource interaction data is the resource interaction data for the resource interaction object shared in the resource interaction system. The original resource interaction data can be the resource interaction data directly uploaded to the resource interaction system by the client of each resource interaction channel and not processed by the resource interaction system. Since the resource interaction data needs to be shared among different resource interaction channels, the client of any resource interaction channel can obtain the original resource interaction data uploaded by the client of other resource interaction channels in the resource interaction system, thereby realizing the efficient sharing of resource interaction data.

[0074] Among them, the resource interaction data is obtained by adjusting the original resource interaction data by the resource interaction system according to the data display demand information of the first client. The first client is the client that initiates the information viewing request. The client can refer to a software application or system running on a terminal, and the terminal can communicate with the server through the client and request services. The terminal can request access to the resource interaction data shared in the resource interaction system through the first client. For example, in a resource collection scenario, the collector can apply this client through the bank platform, connect to the central server corresponding to the resource interaction system through the network, and send requests or transmit data to the central server.

[0075] In a specific implementation, when the terminal determines the data access type of the user account based on the user role identifier configured in the resource interaction system, the terminal can send a data acquisition request to the content distribution network through the first client to obtain resource interaction data shared by subsystems associated with multiple resource interaction channels in the resource interaction system through the content distribution network.

[0076] In a specific implementation, the data display requirement information may include device information and network conditions of the first client. The device information may include screen size and resolution of the first client, and the network conditions may include download speed, upload speed, and the like.

[0077] In a specific implementation, a data acquisition request may carry data access type and data display requirement information. The first client sends a data acquisition request to a content distribution network. When the content distribution network detects the data display requirement information, it may forward the data acquisition request to the central server of the resource interaction system. The central server of the resource interaction system may adjust the original resource interaction data that matches the data access type according to the data display requirement information, obtain resource interaction data that matches the data access type, and return the adjusted resource interaction data to the content distribution network, which is then sent to the first client through the nodes of the content distribution network. Therefore, the resource interaction system may dynamically adjust the original resource interaction data according to the device information and network conditions of the client, thereby meeting the data display requirements of different clients and realizing the efficient display of business data in a targeted manner.

[0078] Step S208: display resource interaction data returned by the content distribution network.

[0079] The resource interaction data returned by the content distribution network can be displayed in a variety of forms such as charts, tables, and texts on the terminal to ensure that the resource interaction data is clear and readable, and the efficiency of data browsing can be improved through paging, filtering, sorting and other functions, thereby sharing the resource interaction data on the resource interaction system through the terminal.

[0080] In the above-mentioned business data sharing method, by responding to the user account's information viewing request for a resource interaction object, the user role identifier configured by the user account in the resource interaction system is obtained, wherein the resource interaction system includes a plurality of subsystems associated with resource interaction channels; based on the user role identifier, the data access type allowed to the user account is determined; a data acquisition request for instructing the content distribution network to return resource interaction data matching the data access type is sent to the content distribution network, wherein the resource interaction data is obtained by adjusting the original resource interaction data by the resource interaction system according to the data display demand information of the client that initiates the information viewing request, and the original resource interaction data is the resource interaction data for the resource interaction object shared in the resource interaction system; and the resource interaction data sent by the content distribution network is displayed. The method can efficiently determine the data access type that a user account can access through a user role identifier configured in a resource interaction system; send a data acquisition request to a content distribution network through a first client to obtain resource interaction data shared by subsystems associated with multiple resource interaction channels in the resource interaction system through the content distribution network, thereby solving the load problem of a traditional centralized server when facing a large number of concurrent requests, avoiding the risk of prolonged system response time or crash, and improving the sharing efficiency of business data; in addition, the resource interaction system can adjust the original resource interaction data according to the data display requirements of the first client to meet the data display requirements of different clients, and achieve efficient display of resource interaction data in a targeted manner, so that resource interaction data can be efficiently shared in subsystems associated with multiple resource interaction channels in the resource interaction system, thereby achieving the beneficial effect of improving the sharing efficiency of business data.

[0081] To facilitate the understanding of those skilled in the art, a schematic diagram of the architecture of a resource interaction system is exemplarily provided in Figure 3. It can be seen that the resource interaction system includes a central server, a content distribution network (node), subsystems associated with multiple resource interaction channels, and their respective corresponding terminals.

[0082] In an exemplary embodiment, the original resource interaction data is the resource interaction data after end-to-end encryption and transport layer security encryption by the second client; the second client is a client that uploads the original resource interaction data to the resource interaction system; the terminal displays the resource interaction data returned by the content distribution network, including: performing transport layer security decryption on the resource interaction data returned by the content distribution network to obtain the resource interaction data after transport layer security decryption; performing end-to-end decryption on the resource interaction data after transport layer security decryption to obtain end-to-end decrypted resource interaction data; and displaying the end-to-end decrypted resource interaction data.

[0083] Among them, end-to-end encryption (E2EE) can refer to encrypting data on the sender's device and then sending it directly to the receiver's device, where it is decrypted. Even if the data is intercepted during transmission, the third party cannot interpret the data content. End-to-end encryption is an encrypted communication method in which only the two ends of the communication (sender and receiver) can decrypt and read the information. During the entire transmission process, the data always remains encrypted, and even if it passes through an intermediate server or network node, the data cannot be decrypted, ensuring the privacy and security of the data. In specific implementation, encryption can be performed using a strong encryption algorithm, such as the Advanced Encryption Standard (AES). The end-to-end encryption process requires reasonable key management to ensure that only the two communicating parties have the decryption key.

[0084] Among them, Transport Layer Security (TLS) is an encryption protocol used to securely transmit data on the Internet. It provides encryption when data is transmitted from one network to another, protecting the data from third-party attacks. In specific implementation, before transmitting data, a series of handshake operations are performed between the client and the server to establish a secure connection. During this process, both parties negotiate encryption algorithms and exchange keys.

[0085] In the specific implementation, the second client encrypts the data that needs to be uploaded to the resource interaction system through end-to-end encryption, and then when the end-to-end encrypted data is transmitted through the network, the end-to-end encrypted data is encrypted by TLS to obtain the original resource interaction data, and it is uploaded to the resource interaction system, which can ensure that the data is protected from network-level attacks during transmission. The first client sends a data acquisition request to the content distribution network, and can request access to the original resource interaction data uploaded to the resource interaction system by the second client; the resource interaction system can adjust the original resource interaction data according to the data display demand information of the first client, and return it to the first client through the content distribution network; after the first client obtains the resource interaction data returned by the content distribution network, it first decrypts the transmission encryption of the resource interaction data through transport layer security decryption, and then decrypts it using the end-to-end encryption key to obtain the decrypted resource interaction data.

[0086] The above method combines end-to-end encryption and transport layer security encryption to ensure that data is protected both during transmission and at rest. While improving security, it also ensures the efficiency and reliability of data transmission, achieving the beneficial effect of improving the security of resource interactive data sharing.

[0087] In an exemplary embodiment, the terminal determines the type of data access allowed to the user account based on the user role identifier, including: determining the user rights assigned to the user account by the resource interaction system based on the user role identifier; obtaining context information of the first client; the context information includes at least one of the location information, device information, access time information, and access behavior information of the client that initiates the information viewing request; adjusting the user rights based on the context information to obtain adjusted user rights; and determining the type of data access allowed to the user account based on the adjusted user rights.

[0088] Optionally, the resource interaction system can manage user permissions through a role-based access control (RBAC) model, where permissions are associated with roles, and roles are also associated with user accounts. The role-based access control model is a "user-role-permission" authorization model, where a user account can have several roles, and each role can be assigned several permissions. In the resource interaction system, different user accounts correspond to different user role identifiers, and different user role identifiers correspond to different user permissions.

[0089] The terminal determines the initial user rights assigned to the user account by the resource interaction system based on the user role identifier, and the user rights are determined based on the user's role and responsibilities; the terminal (first client) obtains context information, which may include location information (user geographic location), device information (device type and device configuration), access time information (time of accessing data) and access behavior information (user behavior patterns and operation characteristics).

[0090] The terminal uses a decision engine to dynamically adjust user permissions based on contextual information collected in real time. For example, access to data from an unauthorized location may be restricted or require additional authentication; for another example, access to data may be restricted when the user accesses data during non-working hours or in a remote environment. The terminal ultimately determines the type of data access that the user account can access based on the adjusted user permissions, ensuring the security and compliance of data access when the user accesses data in different contexts.

[0091] The terminal can also use the access control method of Attribute-Based Access Control (ABAC) to adjust user permissions by evaluating user attributes (such as role, identity, department), resource attributes (such as type, classification), environment attributes (such as time, location) and operation attributes (such as read, write, delete), and obtain the adjusted user permissions, thereby dynamically deciding whether to allow the user account to access resources, thereby achieving more fine-grained and dynamic permission management.

[0092] The above method is based on user role identification. By configuring user role identification, it ensures that different user accounts can only access corresponding data types according to their roles, thereby improving the accuracy and security of data access, ensuring that only authorized users can access and share resource interaction data, and can dynamically adjust permissions based on context information to achieve intelligent permission management, thereby achieving the beneficial effect of improving the flexibility, security and efficiency of business data sharing.

[0093] In an exemplary embodiment, the terminal adjusts user rights according to context information to obtain adjusted user rights, including: if it is determined according to the context information that the user account has abnormal access, an authentication screen is output; the authentication screen is used for the user account to input at least two authentication information; an authentication request is sent to a resource interaction system; the authentication request includes at least two authentication information; receiving an authentication result returned by the resource interaction system based on the at least two authentication information; according to the authentication result, the user rights are adjusted to obtain adjusted user rights.

[0094] In a specific implementation, abnormal access situations may include abnormal login attempts or abnormal data access behaviors, such as access at abnormal times, access from abnormal locations, access using unregistered or uncommon devices, access from unsecured or public networks, etc.

[0095] In the specific implementation, if the terminal determines that the user account has abnormal access based on the context information, the user rights can be adjusted, such as restricting access or notifying the administrator, so that the user rights can be dynamically adjusted according to the user's behavior pattern and risk assessment; or, the user account can be required to perform multi-factor authentication (Multi-Factor Authentication, MFA), which requires the user account to provide two or more independent authentication information to confirm its identity, in order to increase the security of the system and prevent unauthorized access. In addition, when the data access type requested by the user account is a critical and confidential data access type, the user account can also be required to complete multi-factor authentication.

[0096] If the terminal determines that there is abnormal access to the user account based on the context information, it outputs an authentication screen for the user account to enter at least two authentication information, where the authentication information may include but is not limited to knowledge factors (such as passwords), holding factors (such as mobile phones or tokens), and biometric factors (such as fingerprints or facial recognition), etc., and sends an authentication request including at least two authentication information to the resource interaction system; the resource interaction system confirms whether the user account has passed multi-factor authentication based on the at least two authentication information, and returns the corresponding authentication result; the terminal adjusts the user rights based on the authentication result, for example, if the authentication is passed, the initial user rights are maintained; if the authentication is not passed, the initial user rights are restricted.

[0097] The above method determines that there is abnormal access to the user account based on the context information, and can perform multi-factor authentication, thereby achieving the beneficial effect of improving the security of business data sharing.

[0098] Optionally, the resource interaction system can authorize the terminal to access user resources through a third-party application without exposing the user's credentials (such as passwords) to the third party. This is mainly used for the authorization process, allowing the user to authenticate through a third-party service and grant the application access to its resources; or further, the resource interaction system can add a user authentication function based on the authorization function, allowing the terminal to verify the user's identity through a third-party application and obtain the user's basic information (such as user name, email, etc.), such as using open standard protocols Open Authorization (OAuth) and OpenIDConnect (OIDC) for unified user authentication and authorization, which can safely perform user authentication and authorization, and in order to further increase security, a multi-factor authentication mechanism can be integrated. The resource interaction system can implement a central authentication service that can be used to handle login and permission verification for all platforms, and can be used to implement shared technologies that support multiple operating systems and devices, achieve cross-platform compatibility and universality, and improve user experience and the security of shared data.

[0099] The resource interaction system can provide cloud services to store and synchronize data. An application programming interface (API) can be designed to allow different clients to access and synchronize data, ensuring that the API can handle requests from different devices and operating systems. For example, the Representational State Transfer REST (Representational State Transfer) API allows clients to access and manipulate data through Hypertext Transfer Protocol HTTP requests.

[0100] Optionally, the resource interaction system can implement centralized log management to record detailed log content, such as recording key events, including user authentication, data access, file upload / download, permission changes, etc. Integrate logging functions in all important system components to ensure that the log content is detailed enough to track user behavior and system events. Logging can be used to obtain user behavior data, so as to analyze abnormal access based on user behavior data.

[0101] In a specific implementation, the terminal can analyze user behavior through machine learning and artificial intelligence technology to identify whether there is abnormal access to the user account. Optionally, the terminal can collect user behavior data from multiple sources such as system log records, user operation records, access logs, etc., extract key features of user behavior from them, such as login time, access frequency, device information, geographic location, etc., select machine learning models, such as supervised learning models such as logistic regression, decision tree, support vector machine, random forest, or unsupervised learning models such as clustering algorithm, principal component analysis, isolation forest, etc., use the key features extracted from historical user behavior data to train the machine learning model to obtain a trained machine learning model, and input real-time user behavior data into the trained machine learning model to analyze and detect user behavior in real time, and identify whether there is abnormal access to the user account based on the deviation between real-time user behavior and normal mode user behavior. Optionally, the resource interaction system can also configure a monitoring system to monitor key performance indicators and potential security events, set alarm thresholds and conditions, and trigger alarms when these conditions are met, such as triggering alarms when abnormal access is detected.

[0102] Therefore, monitoring data sharing activities through logging and anomaly detection mechanisms can protect data sharing activities and identify potential security threats in a timely manner to ensure compliance.

[0103] In an exemplary embodiment, a content distribution network includes multiple node servers connected to a central server that configures a resource interaction system; a terminal sends a data acquisition request to the content distribution network, including: determining a target node server from multiple node servers based on response time impact information of the multiple node servers; the response time impact information includes at least one of the physical distance between the node server and the first client, the network status between the node server and the first client, and the load status of the node server; and sending a data acquisition request to the target node server.

[0104] The content distribution network may include multiple node servers distributed in different geographical locations and connected to a central server that configures the resource interaction system. The node servers are used to cache and distribute data to improve data transmission speed and efficiency. The terminal sends a data acquisition request to the content distribution network through the client, and can request access to specific resource interaction data.

[0105] Among them, the response time influencing information may refer to factors that affect the response time of the node server, including the physical distance between the node server and the first client, the network status between the node server and the first client, and the load status of the node server. This information can be used to evaluate the performance of each node server and help select the best node server. The physical distance may refer to the geographical distance between the node server and the first client. The closer the physical distance, the lower the delay in data transmission. The network status may refer to the quality of the network connection between the node server and the first client, including bandwidth, delay, packet loss rate, etc. The better the network status, the higher the speed and reliability of data transmission. The load status may refer to the number of requests currently processed by the node server and the resource usage. Servers with lower load status are usually able to process new data acquisition requests faster.

[0106] The terminal determines the target node server from multiple node servers according to the response time impact information of multiple node servers, and selects an optimal server from multiple node servers to process the data acquisition request, ensuring that the selected node server can provide the fastest response time.

[0107] The above method can optimize the process of data acquisition request through the content distribution network, ensuring that the terminal can quickly and efficiently obtain data from the resource interaction system. The terminal sends the data acquisition request to the target node server, ensuring that the request is processed by the node server with the fastest response time, thereby achieving the beneficial effect of improving the sharing efficiency of business data.

[0108] In addition, the central server of the resource interaction system can provide a highly reliable and secure cloud storage service. Each client can upload resource interaction data to the central server, which can increase or decrease storage capacity according to demand and has scalability. It also provides data backup and recovery solutions to enhance data persistence and availability. It also provides encryption and access control to improve the security of data sharing. The cloud service and content distribution network of the central server are combined to optimize the storage and rapid distribution of resource interaction data, improve data access speed and reliability, and reduce local storage and maintenance costs.

[0109] In an exemplary embodiment, the resource interaction data is obtained by the resource interaction system performing character recognition on the original resource interaction data, obtaining sensitive data in the original resource interaction data, and desensitizing the sensitive data.

[0110] In a specific implementation, after the original resource interaction data is uploaded to the resource interaction system, the resource interaction system can identify and read the text content in the original resource interaction data through optical character recognition (OCR), and analyze the text content to obtain sensitive data in the original resource interaction data, such as personal identity information (such as name, address), financial data and other sensitive data, and then mark the sensitive information area that needs to be desensitized based on the identified sensitive data, and desensitize the sensitive information area through image processing tools, such as blurring, pixelating, and covering the sensitive data in the sensitive information area; at the same time, keep the non-sensitive data in the original resource interaction data unchanged to maintain the use value of the original resource interaction data.

[0111] The above method automatically detects and desensitizes sensitive information before resource interaction data sharing, protects personal privacy, complies with data protection regulations, and improves the security of business data sharing.

[0112] In an exemplary embodiment, the terminal determines the type of data access allowed to the user account based on the user role identifier, including: when the user role identifier is an audit role identifier, determining that the type of data access allowed to the user account is a log record; wherein the log record is used to record desensitizing operation information, and the desensitizing operation information includes original resource interaction data and resource interaction data obtained by desensitizing sensitive data in the original resource interaction data.

[0113] User accounts with audit roles can access and view log records generated by the resource interaction system for auditing and supervision. The resource interaction system logs all desensitization processing activities to ensure that all desensitization operations are recorded, and the log records include the storage location of the original resource interaction data and the resource interaction data obtained by desensitizing the sensitive data in the original resource interaction data, providing audit tracking and compliance checks, so that auditors can regularly review and process log records to ensure that all desensitization processing activities meet data protection standards and regulatory requirements, and achieve the beneficial effect of ensuring compliance of business data sharing.

[0114] In summary, this application can provide a safe, efficient, highly compatible, high-performance, and user-friendly business data sharing method. Under the premise of ensuring data security and complying with laws and regulations, efficient and flexible business data sharing is very important for business areas involving the exchange of a large amount of sensitive information.

[0115] FIG. 4 is another method for sharing service data according to an exemplary embodiment. As shown in FIG. 4 , the method is applied to the terminal 102 in FIG. 1 as an example for description, and includes the following steps:

[0116] Step S402: In response to a user account's request for viewing information on a resource interaction object, a user role identifier configured by the user account in the resource interaction system is obtained.

[0117] The resource interaction system includes multiple subsystems associated with resource interaction channels.

[0118] Step S404: determining the user rights assigned to the user account by the resource interaction system according to the user role identifier.

[0119] As an example, based on the user role identifier, the data access type allowed to the user account is determined, including: when the user role identifier is an audit role identifier, the data access type allowed to the user account is determined to be a log record; wherein the log record is used to record desensitizing operation information, and the desensitizing operation information includes the original resource interaction data and the resource interaction data obtained by desensitizing the sensitive data in the original resource interaction data.

[0120] Step S406: Acquire context information of the first client.

[0121] The context information includes at least one of location information, device information, access time information, and access behavior information of the client that initiates the information viewing request.

[0122] Step S408: If it is determined according to the context information that there is abnormal access to the user account, an authentication screen is output.

[0123] The authentication screen is used for the user account to enter at least two authentication information.

[0124] Step S410: sending an authentication request to the resource interaction system.

[0125] The authentication request includes at least two types of authentication information.

[0126] Step S412: receiving an authentication result returned by the resource interaction system based on at least two authentication information.

[0127] Step S414: adjusting the user rights according to the authentication result to obtain adjusted user rights.

[0128] Step S416: Determine the data access type that the user account is allowed to access based on the adjusted user rights.

[0129] Step S418: determining a target node server from the multiple node servers according to the response time impact information of the multiple node servers.

[0130] The response time influencing information includes at least one of the physical distance between the node server and the client that initiates the information viewing request, the network status between the node server and the first client, and the load status of the node server.

[0131] The data acquisition request is used to instruct the content distribution network to return resource interaction data that matches the data access type; the resource interaction data is obtained by the resource interaction system adjusting the original resource interaction data based on the data display demand information of the first client; the original resource interaction data is the resource interaction data for the resource interaction object shared in the resource interaction system; the first client is the client that initiates the information viewing request.

[0132] The content distribution network includes a plurality of node servers connected to a central server configuring a resource interaction system.

[0133] Step S420: Send a data acquisition request to the target node server.

[0134] Step S422, performing transport layer security decryption on the resource interaction data returned by the content distribution network to obtain the resource interaction data after transport layer security decryption.

[0135] The original resource interaction data is the resource interaction data after end-to-end encryption and transport layer security encryption by the second client; the second client is the client that uploads the original resource interaction data to the resource interaction system.

[0136] Step S424, performing end-to-end decryption on the resource interaction data after transport layer security decryption to obtain the end-to-end decrypted resource interaction data.

[0137] Step S426, displaying the resource interaction data after end-to-end decryption.

[0138] The resource interaction data is obtained by the resource interaction system performing character recognition on the original resource interaction data, obtaining sensitive data in the original resource interaction data, and desensitizing the sensitive data.

[0139] It should be noted that the specific limitations of the above steps can be found in the specific limitations of a business data sharing method mentioned above, which will not be repeated here.

[0140] It should be understood that, although the various steps in the flowcharts involved in the above-mentioned embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps does not have a strict order restriction, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above-mentioned embodiments can include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily to be carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0141] Based on the same inventive concept, the embodiment of the present application also provides a business data sharing device for implementing the business data sharing method involved above. The implementation solution provided by the device to solve the problem is similar to the implementation solution recorded in the above method, so the specific limitations in the embodiments of one or more business data sharing devices provided below can refer to the limitations of the business data sharing method above, and will not be repeated here.

[0142] In an exemplary embodiment, as shown in FIG5 , a device for sharing business data is provided, including:

[0143] The response module 510 is used to respond to the user account's information viewing request for the resource interaction object and obtain the user role identifier configured by the user account in the resource interaction system; the resource interaction system includes a plurality of subsystems associated with resource interaction channels.

[0144] The determination module 520 is used to determine the data access type that the user account is allowed to access according to the user role identifier.

[0145] Sending module 530 is used to send a data acquisition request to a content distribution network; the data acquisition request is used to instruct the content distribution network to return resource interaction data matching the data access type; the resource interaction data is obtained by the resource interaction system adjusting the original resource interaction data according to the data display demand information of the first client; the original resource interaction data is the resource interaction data for the resource interaction object shared in the resource interaction system; the first client is the client that initiates the information viewing request.

[0146] The display module 540 is used to display the resource interaction data returned by the content distribution network.

[0147] In one embodiment, the original resource interaction data is the resource interaction data after end-to-end encryption and transport layer security encryption by the second client; the second client is the client that uploads the original resource interaction data to the resource interaction system; the display module 540 is used to perform transport layer security decryption on the resource interaction data returned by the content distribution network to obtain the resource interaction data after transport layer security decryption; perform end-to-end decryption on the resource interaction data after transport layer security decryption to obtain end-to-end decrypted resource interaction data; and display the end-to-end decrypted resource interaction data.

[0148] In one embodiment, the determination module 520 is used to determine the user rights assigned to the user account by the resource interaction system based on the user role identifier; obtain context information of the first client; the context information includes at least one of the location information, device information, access time information, and access behavior information of the client that initiates the information viewing request; adjust the user rights based on the context information to obtain adjusted user rights; and determine the data access type allowed for the user account based on the adjusted user rights.

[0149] In one embodiment, the determination module 520 is used to output an authentication screen if it is determined that the user account has abnormal access based on the context information; the authentication screen is used for the user account to input at least two authentication information; send an authentication request to the resource interaction system; the authentication request includes the at least two authentication information; receive an authentication result returned by the resource interaction system based on the at least two authentication information; and adjust the user rights based on the authentication result to obtain adjusted user rights.

[0150] In one embodiment, the content distribution network includes multiple node servers connected to a central server configuring the resource interaction system; the sending module 530 is used to determine a target node server from the multiple node servers based on response time impact information of the multiple node servers; the response time impact information includes at least one of the physical distance between the node server and the client initiating the information viewing request, the network status between the node server and the first client, and the load status of the node server; and send a data acquisition request to the target node server.

[0151] In one embodiment, the determination module 520 is used to determine that the data access type allowed to the user account is log record when the user role identifier is an audit role identifier; wherein the log record is used to record desensitizing operation information, and the desensitizing operation information includes original resource interaction data and resource interaction data obtained by desensitizing sensitive data in the original resource interaction data.

[0152] Each module in the above-mentioned business data sharing device can be implemented in whole or in part by software, hardware or a combination thereof. Each module can be embedded in or independent of a processor in a computer device in the form of hardware, or can be stored in a memory in a computer device in the form of software, so that the processor can call and execute the operations corresponding to each module above.

[0153] In an exemplary embodiment, a computer device is provided, which may be a terminal, and its internal structure diagram may be shown in FIG6. The computer device includes a processor, a memory, an input / output interface, a communication interface, a display unit, and an input device. The processor, the memory, and the input / output interface are connected via a system bus, and the communication interface, the display unit, and the input device are connected to the system bus via the input / output interface. The processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The input / output interface of the computer device is used to exchange information between the processor and an external device. The communication interface of the computer device is used to communicate with an external terminal in a wired or wireless manner, and the wireless manner may be implemented through WIFI, a mobile cellular network, near field communication (NFC) or other technologies. When the computer program is executed by the processor, a method for sharing business data is implemented. The display unit of the computer device is used to form a visually visible picture, which may be a display screen, a projection device, or a virtual reality imaging device. The display screen can be a liquid crystal display screen or an electronic ink display screen, and the input device of the computer device can be a touch layer covering the display screen, or a button, trackball or touchpad set on the computer device shell, or an external keyboard, touchpad or mouse.

[0154] Those skilled in the art will understand that the structure shown in FIG. 6 is merely a block diagram of a partial structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than shown in the figure, or combine certain components, or have a different arrangement of components.

[0155] In one embodiment, a computer device is provided, including a memory and a processor, wherein the memory stores a computer program, and when the computer program is executed by the processor, the processor executes the steps of the above-mentioned method for sharing business data. The steps of the method for sharing business data here may be the steps of the method for sharing business data in each of the above-mentioned embodiments.

[0156] In one embodiment, a computer-readable storage medium is provided, which stores a computer program. When the computer program is executed by a processor, the processor executes the steps of the above-mentioned method for sharing business data. The steps of the method for sharing business data here can be the steps of the method for sharing business data in each of the above-mentioned embodiments.

[0157] In one embodiment, a computer program product is provided, including a computer program, which, when executed by a processor, causes the processor to execute the steps of the above-mentioned method for sharing business data. The steps of the method for sharing business data here may be the steps of the method for sharing business data in each of the above-mentioned embodiments.

[0158] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties.

[0159] A person of ordinary skill in the art can understand that all or part of the processes in the above-mentioned embodiment method can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in the present application can include at least one of non-volatile memory and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, an artificial intelligence (AI) processor, etc., but are not limited to this.

[0160] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this application.

[0161] The above-described embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A method for sharing business data. It is characterized in that The method comprises: In response to a user account's request for viewing information on a resource interaction object, obtaining a user role identifier configured by the user account in a resource interaction system; the resource interaction system includes a plurality of subsystems associated with resource interaction channels; Determining, based on the user role identifier, a data access type that the user account is allowed to access; Sending a data acquisition request to a content distribution network; the data acquisition request is used to instruct the content distribution network to return resource interaction data matching the data access type; the resource interaction data is obtained by adjusting the original resource interaction data by the resource interaction system according to the data display demand information of the first client; the original resource interaction data is the resource interaction data for the resource interaction object shared in the resource interaction system; the first client is the client that initiates the information viewing request; The resource interaction data returned by the content distribution network is displayed.

2. The method according to claim 1, It is characterized in that The original resource interaction data is the resource interaction data after end-to-end encryption and transport layer security encryption by the second client; the second client is the client that uploads the original resource interaction data to the resource interaction system; The displaying of the resource interaction data returned by the content distribution network includes: Performing transport layer security decryption on the resource interaction data returned by the content distribution network to obtain the resource interaction data after transport layer security decryption; Performing end-to-end decryption on the resource interaction data after the transport layer security decryption to obtain the end-to-end decrypted resource interaction data; The end-to-end decrypted resource interaction data is displayed.

3. The method according to claim 1, It is characterized in that The determining, according to the user role identifier, the data access type that the user account is allowed to access includes: Determining the user rights assigned by the resource interaction system to the user account according to the user role identifier; Acquire context information of the first client; the context information includes at least one of location information, device information, access time information, and access behavior information of the client that initiates the information viewing request; Adjusting the user rights according to the context information to obtain adjusted user rights; According to the adjusted user rights, a data access type that the user account is allowed to access is determined.

4. The method according to claim 3, It is characterized in that The step of adjusting the user rights according to the context information to obtain adjusted user rights includes: If it is determined according to the context information that the user account has abnormal access, an authentication screen is output; the authentication screen is used for the user account to input at least two authentication information; Sending an authentication request to the resource interaction system; the authentication request includes the at least two types of authentication information; Receiving an authentication result returned by the resource interaction system according to the at least two types of authentication information; The user rights are adjusted according to the authentication result to obtain adjusted user rights.

5. The method according to any one of claims 1 to 4, It is characterized in that The content distribution network includes a plurality of node servers connected to a central server configuring the resource interaction system; The sending of the data acquisition request to the content distribution network includes: Determine a target node server from the multiple node servers according to the response time impact information of the multiple node servers; the response time impact information includes at least one of a physical distance between the node server and the client that initiates the information viewing request, a network status between the node server and the first client, and a load status of the node server; Send a data acquisition request to the target node server.

6. The method according to claim 1, It is characterized in that The determining, according to the user role identifier, the data access type that the user account is allowed to access includes: In a case where the user role identifier is an audit role identifier, determining that the data access type allowed to be accessed by the user account is log record; The log record is used to record desensitizing operation information, and the desensitizing operation information includes original resource interaction data and resource interaction data obtained by desensitizing sensitive data in the original resource interaction data.

7. A device for sharing business data, It is characterized in that The device comprises: A response module, for responding to a user account's request for viewing information on a resource interaction object, and obtaining a user role identifier configured by the user account in a resource interaction system; the resource interaction system includes a plurality of subsystems associated with resource interaction channels; A determination module, configured to determine the data access type that the user account is allowed to access based on the user role identifier; A sending module, used for sending a data acquisition request to a content distribution network; the data acquisition request is used to instruct the content distribution network to return resource interaction data matching the data access type; the resource interaction data is obtained by adjusting the original resource interaction data by the resource interaction system according to the data display demand information of the first client; the original resource interaction data is the resource interaction data for the resource interaction object shared in the resource interaction system; the first client is the client that initiates the information viewing request; A display module is used to display the resource interaction data returned by the content distribution network.

8. The device according to claim 7, It is characterized in that The original resource interaction data is the resource interaction data after end-to-end encryption and transport layer security encryption by the second client; the second client is the client that uploads the original resource interaction data to the resource interaction system; The display module is used to perform transport layer security decryption on the resource interaction data returned by the content distribution network to obtain the resource interaction data after transport layer security decryption; Perform end-to-end decryption on the resource interaction data after the transport layer security decryption to obtain the end-to-end decrypted resource interaction data; and display the end-to-end decrypted resource interaction data.

9. The device according to claim 7, It is characterized in that The determination module is used to determine the user authority assigned to the user account by the resource interaction system according to the user role identifier; Acquire context information of the first client; the context information includes at least one of location information, device information, access time information, and access behavior information of the client that initiates the information viewing request; adjust the user rights according to the context information to obtain adjusted user rights; According to the adjusted user rights, a data access type that the user account is allowed to access is determined.

10. The device according to claim 9, It is characterized in that The determination module is used to output an authentication screen if it is determined according to the context information that the user account has abnormal access; the authentication screen is used for the user account to input at least two authentication information; Sending an authentication request to the resource interaction system; the authentication request includes the at least two authentication information; receiving an authentication result returned by the resource interaction system according to the at least two authentication information; adjusting the user authority according to the authentication result to obtain adjusted user authority.

11. The device according to any one of claims 7 to 10, It is characterized in that The content distribution network includes a plurality of node servers connected to a central server configuring the resource interaction system; the sending module is used to determine a target node server from the plurality of node servers according to the response time impact information of the plurality of node servers; The response time influencing information includes at least one of the physical distance between the node server and the client initiating the information viewing request, the network status between the node server and the first client, and the load status of the node server; a data acquisition request is sent to the target node server.

12. The device according to claim 7, It is characterized in that The determination module is used to determine that the data access type allowed to the user account is log record when the user role identifier is an audit role identifier; wherein the log record is used to record desensitizing operation information, and the desensitizing operation information includes original resource interaction data and resource interaction data obtained by desensitizing sensitive data in the original resource interaction data.

13. A computer device comprising a memory and a processor, wherein the memory stores a computer program. It is characterized in that When the processor executes the computer program, the steps of the method according to any one of claims 1 to 6 are implemented.

14. A computer-readable storage medium having a computer program stored thereon, It is characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

15. A computer program product comprising a computer program, It is characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

Images