Operation and maintenance right control method and related device

Abstract

The invention provides an operation and maintenance authority control method and a related device, and the method comprises the steps: dividing an operation and maintenance operation into a plurality of operation and maintenance scenes in advance, dividing the plurality of operation and maintenance scenes into at least two risk levels, and configuring an authority corresponding relation between a user and the operation and maintenance scenes and a corresponding relation between the risk levels and an operation and maintenance management and control flow; according to the invention, authority control is carried out on different operation and maintenance scenes, different operation and maintenance management and control processes are used for different risk levels, different levels of risk control are ensured to be carried out on operation and maintenance operations of different risk levels, and the safety of the operation and maintenance operations is improved.

Description

Technical Field

[0001] The present invention relates to the field of computer technology, and more specifically, to an operation and maintenance authority control method and related devices. Background Art

[0002] Operation and maintenance refers to the operation and maintenance of networks, servers, and services at all stages of their life cycle, and plays a very important role in the production environment.

[0003] At present, the system status or database is generally operated directly using the preset operation and maintenance interface. When an incorrect operation occurs, it will have a bad impact on the production environment and is difficult to troubleshoot. Therefore, it is very necessary to control the operation and maintenance permissions. Summary of the invention

[0004] In view of this, the present invention provides an operation and maintenance authority control method and related devices to realize authority control for different operation and maintenance scenarios, and use different operation and maintenance management and control processes for different risk levels, thereby improving the security of operation and maintenance operations.

[0005] In order to achieve the above-mentioned invention object, the specific technical solution provided by the present invention is as follows:

[0006] In a first aspect, an embodiment of the present invention provides an operation and maintenance authority control method, comprising:

[0007] In response to an operation and maintenance operation request initiated by a target user, obtaining a target operation and maintenance scenario carried in the operation and maintenance operation request;

[0008] According to the pre-configured permission correspondence between users and operation and maintenance scenarios, it is determined whether the target user has the permission to perform the operation and maintenance operation corresponding to the target operation and maintenance scenario;

[0009] If the target user has the authority to perform the operation and maintenance operation corresponding to the target operation and maintenance scenario, the target operation and maintenance control process corresponding to the target operation and maintenance scenario is determined according to the pre-configured risk level of the target operation and maintenance scenario and the correspondence between the risk level and the operation and maintenance control process, and the pre-configured multiple operation and maintenance scenarios are divided into at least two risk levels;

[0010] Execute the target operation and maintenance control process;

[0011] If the target user passes the target operation and maintenance control process, the operation and maintenance operation interface is displayed.

[0012] In some embodiments, it also includes:

[0013] If the target user does not have the authority to perform the operation and maintenance operation corresponding to the target operation and maintenance scenario, it is prompted that the target user does not have the operation authority;

[0014] If the target user does not pass the target operation and maintenance control process, it is prompted that the target user does not have the operation authority.

[0015] In some embodiments, if the risk level of the target operation and maintenance scenario is the first level, executing the target operation and maintenance control process includes:

[0016] Obtain the target operation selected by the target user;

[0017] Determine whether the target operation and the target scenario match;

[0018] If the target operation and maintenance operation match the target operation and maintenance scenario, determining that the target user has passed the target operation and maintenance control process;

[0019] If the target operation and maintenance operation do not match the target operation and maintenance scenario, it is determined that the target user has not passed the target operation and maintenance control process.

[0020] In some embodiments, if the risk level of the target operation and maintenance scenario is the second level, executing the target operation and maintenance control process includes:

[0021] Obtain the target operation selected by the target user;

[0022] Determine whether the target operation and the target scenario match;

[0023] If the target operation and maintenance operation do not match the target operation and maintenance scenario, determining that the target user has not passed the target operation and maintenance control process;

[0024] If the target operation and maintenance operation match the target operation and maintenance scenario, prompt the target user to enter a work order number;

[0025] Verifying the target operation and maintenance operation according to the work order information corresponding to the work order number;

[0026] If the verification is successful, it is determined that the target user has passed the target operation and maintenance control process;

[0027] If the verification fails, it is determined that the target user has not passed the target operation and maintenance control process.

[0028] In some embodiments, if the risk level of the target operation and maintenance scenario is the third level, executing the target operation and maintenance control process includes:

[0029] Obtain the target operation selected by the target user;

[0030] Determine whether the target operation and the target scenario match;

[0031] If the target operation and maintenance operation do not match the target operation and maintenance scenario, determining that the target user has not passed the target operation and maintenance control process;

[0032] If the target operation and maintenance operation match the target operation and maintenance scenario, prompt the target user to enter a work order number;

[0033] Verifying the target operation and maintenance operation according to the work order information corresponding to the work order number;

[0034] If the verification fails, it is determined that the target user has not passed the target operation and maintenance control process;

[0035] If the verification is successful, a verification code is sent to the group leader corresponding to the target user, and the target user is prompted to enter the verification code;

[0036] If the sent verification code is consistent with the verification code input by the target user, it is determined that the target user has passed the target operation and maintenance control process;

[0037] If the sent verification code is inconsistent with the verification code input by the target user, it is determined that the target user has not passed the target operation and maintenance control process.

[0038] In some embodiments, verifying the target operation and maintenance operation according to the work order information corresponding to the work order number includes:

[0039] According to the work order number type corresponding to the work order number, obtaining work order information from an interface corresponding to the work order number type, wherein the work order number type is an external work order number or an internal work order number;

[0040] Perform at least one of the following verification operations based on the work order information:

[0041] Verifying whether the work order information contains work order authorization information;

[0042] Verify whether the work order operator in the work order information matches the target user;

[0043] Check whether the current time is within the work order operation time range in the work order information;

[0044] Verify whether the target operation is within the scope of the work order operation in the work order information.

[0045] In some embodiments, sending a verification code to a group leader corresponding to the target user includes:

[0046] Determine the group leader corresponding to the target user according to the pre-configured correspondence between users and user groups and the correspondence between user groups and group leaders;

[0047] Send a verification code to the group leader corresponding to the target user.

[0048] In a second aspect, an embodiment of the present invention provides an operation and maintenance authority control device, including:

[0049] An operation type acquisition unit, configured to respond to an operation and maintenance operation request initiated by a target user and acquire a target operation and maintenance scenario carried in the operation and maintenance operation request;

[0050] The permission judgment unit is used to judge whether the target user has the permission to perform the operation and maintenance operation corresponding to the target operation and maintenance scenario according to the pre-configured permission correspondence relationship between the user and the operation and maintenance scenario.

[0051] A control process determination unit is used to determine the target operation and maintenance control process corresponding to the target operation and maintenance scenario according to the pre-configured risk level of the target operation and maintenance scenario and the correspondence between the risk level and the operation and maintenance control process, if the target user has the authority to perform the operation and maintenance operation corresponding to the target operation and maintenance scenario, wherein the pre-configured multiple operation and maintenance scenarios are divided into at least two risk levels;

[0052] A control process execution unit, used to execute the target operation and maintenance control process;

[0053] An operation interface display unit is used to display an operation and maintenance operation interface if the target user passes the target operation and maintenance control process.

[0054] In a third aspect, an embodiment of the present invention provides an electronic device, the electronic device comprising a processor and a memory;

[0055] The memory is used to store program code and transmit the program code to the processor;

[0056] The processor is used to execute an operation and maintenance authority control method as described in any one of the implementation modes in the first aspect according to the instructions in the program code.

[0057] In a fourth aspect, an embodiment of the present invention provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, an operation and maintenance authority control method as described in any one of the implementation methods in the first aspect is implemented.

[0058] Compared with the prior art, the beneficial effects of the present invention are as follows:

[0059] The present invention discloses an operation and maintenance authority control method and related devices, which divide the operation and maintenance operations into multiple operation and maintenance scenarios in advance, and the multiple operation and maintenance scenarios are divided into at least two risk levels, and the authority correspondence between users and operation and maintenance scenarios and the correspondence between risk levels and operation and maintenance management and control processes are configured, so as to realize authority control for different operation and maintenance scenarios, and realize the use of different operation and maintenance management and control processes for different risk levels, thereby ensuring different levels of risk control for operation and maintenance operations at different risk levels, and improving the security of operation and maintenance operations.

[0060] This summary is provided to introduce concepts in a brief form that will be described in detail in the detailed description below. This summary is not intended to identify key features or essential features of the claimed technical solution, nor is it intended to limit the scope of the claimed technical solution. BRIEF DESCRIPTION OF THE DRAWINGS

[0061] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the provided drawings without paying creative work.

[0062] Figure 1 A flowchart of an operation and maintenance authority control method disclosed in an embodiment of the present invention;

[0063] Figure 2 A schematic diagram of a partial method flow of an operation and maintenance authority control method disclosed in an embodiment of the present invention;

[0064] Figure 3 A schematic diagram of a partial method flow of an operation and maintenance authority control method disclosed in an embodiment of the present invention;

[0065] Figure 4 A schematic diagram of a partial method flow of an operation and maintenance authority control method disclosed in an embodiment of the present invention;

[0066] Figure 5 A schematic diagram of the structure of an operation and maintenance authority control device disclosed in an embodiment of the present invention;

[0067] Figure 6 The present invention is a schematic diagram of the structure of an electronic device disclosed in an embodiment of the present invention.

[0068] The above and other features, advantages and aspects of the embodiments of the present disclosure will become more apparent with reference to the following detailed description in conjunction with the accompanying drawings. Throughout the accompanying drawings, the same or similar reference numerals represent the same or similar elements. It should be understood that the drawings are schematic and the originals and elements are not necessarily drawn to scale. DETAILED DESCRIPTION

[0069] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0070] The term "including" and its variations used herein are open inclusions, i.e., "including but not limited to". The term "based on" means "based at least in part on". The term "one embodiment" means "at least one embodiment"; the term "another embodiment" means "at least one additional embodiment"; the term "some embodiments" means "at least some embodiments". The relevant definitions of other terms will be given in the following description.

[0071] It should be noted that the concepts such as "first" and "second" mentioned in the present disclosure are only used to distinguish different devices, modules or units, and are not used to limit the order or interdependence of the functions performed by these devices, modules or units.

[0072] It should be noted that the modifications of "one" and "plurality" mentioned in the present disclosure are illustrative rather than restrictive, and those skilled in the art should understand that unless otherwise clearly indicated in the context, it should be understood as "one or more".

[0073] It should be noted that the user information (including but not limited to user device information, user personal information, user facial images, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in the present invention are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data need to comply with relevant laws, regulations and standards of relevant countries and regions.

[0074] An operation and maintenance authority control method provided by the present invention is applied to an application operation and maintenance system, and the application operation and maintenance system is deployed on electronic devices such as servers and server clusters. The operation and maintenance authority control method provided by the present invention can be implemented by a computer program, such as by a computer program installed in the application operation and maintenance system.

[0075] Figure 1 A flowchart of an operation and maintenance authority control method provided by an embodiment of the present invention specifically includes the following steps:

[0076] S101: In response to an operation and maintenance request initiated by a target user, obtaining a target operation and maintenance scenario carried in the operation and maintenance request;

[0077] The target user can be any user who performs operation and maintenance operations.

[0078] After the target user logs in to the application operation and maintenance system, before performing specific operation and maintenance operations, he needs to select the target operation and maintenance scenario in the visual interface and initiate an operation and maintenance operation request.

[0079] Exemplarily, the target user selects the target operation and maintenance scenario through a drop-down list in the visualization interface.

[0080] Exemplarily, according to the standard operation and maintenance process, the operation and maintenance operations are divided into seven operation and maintenance scenarios, namely, operation and maintenance design and development, capacity planning, problem troubleshooting and processing, monitoring and alarm, routine maintenance, application changes, and emergency response. The target operation and maintenance scenario can be any one of the seven operation and maintenance scenarios.

[0081] S102: judging whether the target user has the authority to perform the operation and maintenance operation corresponding to the target operation and maintenance scenario according to the pre-configured authority correspondence relationship between the user and the operation and maintenance scenario;

[0082] The pre-configured permission correspondence between users and operation and maintenance scenarios indicates the range of operation and maintenance scenarios that different users have the permission to perform.

[0083] Based on the user information of the target user when logging in and the pre-configured permission correspondence between the user and the operation and maintenance scenario, the scope of the operation and maintenance scenarios that the target user has the permission to execute is determined. If the target operation and maintenance scenario is within the scope of the operation and maintenance scenarios that the target user has the permission to execute, it is determined that the target user has the permission to execute the operation and maintenance operations corresponding to the target operation and maintenance scenario. Otherwise, it is determined that the target user does not have the permission to execute the operation and maintenance operations corresponding to the target operation and maintenance scenario.

[0084] If the target user does not have the authority to perform the operation and maintenance operations corresponding to the target operation and maintenance scenario, a prompt will be given to the target user that the operation is not authorized, or a prompt will be given to the target user that the operation is illegal.

[0085] S103: If the target user has the authority to perform the operation and maintenance operation corresponding to the target operation and maintenance scenario, determine the target operation and maintenance control process corresponding to the target operation and maintenance scenario according to the pre-configured risk level of the target operation and maintenance scenario and the correspondence between the risk level and the operation and maintenance control process, and the pre-configured multiple operation and maintenance scenarios are divided into at least two risk levels;

[0086] It is understandable that different operation and maintenance scenarios have different risk levels. For example, for operation and maintenance scenarios such as operation and maintenance design and development, capacity planning, problem troubleshooting, monitoring and alarm, and routine maintenance, which do not involve read and write operations, the risk level is low. For operation and maintenance scenarios such as application changes, which involve production system write operations, the risk level is high.

[0087] According to actual application scenarios, the pre-configured multiple operation and maintenance scenarios are divided into at least two risk levels. For example, the multiple operation and maintenance scenarios are divided into two risk levels, three risk levels, and so on.

[0088] The operation and maintenance control process is the process of reviewing operation and maintenance permissions.

[0089] By pre-configuring the correspondence between risk levels and operation and maintenance control processes, different operation and maintenance control processes can be used for different risk levels to ensure different levels of risk control for operation and maintenance operations at different risk levels. The higher the risk level, the stricter the corresponding operation and maintenance control process, such as requiring the target user to provide a work order and requiring the target user's corresponding group leader to authorize.

[0090] S104: Execute the target operation and maintenance control process;

[0091] The operation and maintenance control processes corresponding to different risk levels are different. The following is a detailed explanation through specific examples, so I will not go into details here.

[0092] S105: If the target user passes the target operation and maintenance control process, the operation and maintenance operation interface is displayed.

[0093] It should be noted that the displayed operation and maintenance operation interface is the operation and maintenance operation interface corresponding to the target operation and maintenance scenario. More specifically, the displayed operation and maintenance operation interface may also be the operation and maintenance operation interface corresponding to the target operation and maintenance operation selected by the target user after selecting the target operation and maintenance scenario.

[0094] If the target user fails to pass the target operation and maintenance control process, it will prompt that the target user does not have the operation authority, or prompt that the target user has performed an illegal operation.

[0095] Furthermore, the above configuration contents are configured on the management page, where the application name, resource type, resource ID, resource name, operation and maintenance scenario, maintenance personnel and other information are displayed, and new and edit buttons are provided to achieve the creation, deletion and change of configuration contents. A master switch of the process control function is provided at the platform level, and a sub-switch of the process control function is provided at the application level, so as to achieve three-level process control configuration management of the platform, application and resource.

[0096] The present embodiment discloses an operation and maintenance permission control method, which divides the operation and maintenance operations into multiple operation and maintenance scenarios in advance, wherein the multiple operation and maintenance scenarios are divided into at least two risk levels, and the permission correspondence between users and operation and maintenance scenarios and the correspondence between risk levels and operation and maintenance management and control processes are configured, thereby realizing permission control for different operation and maintenance scenarios and using different operation and maintenance management and control processes for different risk levels, ensuring different levels of risk control for operation and maintenance operations at different risk levels, and improving the security of operation and maintenance operations.

[0097] S104 is described below through three specific examples:

[0098] Example 1

[0099] like Figure 2 As shown in the figure, if the risk level of the target operation and maintenance scenario is level 1, executing the target operation and maintenance control process specifically includes the following steps:

[0100] S201: Obtain the target operation selected by the target user;

[0101] The target user can select the target operation when initiating an operation request, or can select the target operation in the interface when it is determined that the target user has the authority to perform the operation corresponding to the target operation scenario.

[0102] Exemplarily, the target operation may be audit log viewing, flight inventory data viewing, JVM (Java Virtual Machine) detail viewing, non-sensitive data read-only operation of the production system, read and write operation of the non-production system, etc.

[0103] S202: Determine whether the target operation and the target operation scenario match;

[0104] Specifically, according to the correspondence between the pre-configured operation and maintenance operation and the operation and maintenance scenario, it is determined whether the target operation and maintenance operation matches the target operation and maintenance scenario.

[0105] If the target operation and the target operation scenario match, executing S203: determining that the target user passes the target operation and maintenance control process;

[0106] If the target operation and the target operation scenario do not match, execute S204: determine that the target user has not passed the target operation and maintenance control process.

[0107] Example 2

[0108] like Figure 3 As shown in the figure, if the risk level of the target operation and maintenance scenario is the second level, the risk of the second level is higher than the first level, and the execution of the target operation and maintenance control process specifically includes the following steps:

[0109] S301: Obtain the target operation selected by the target user;

[0110] S302: Determine whether the target operation and the target operation scenario match;

[0111] If the target operation and the target operation scenario do not match, execute S303: determine that the target user has not passed the target operation and maintenance control process;

[0112] For the specific implementation of S301~S302, please refer to S201~S202 in Example 1, which will not be repeated here.

[0113] If the target operation and the target scenario match, execute S304: prompt the target user to enter the work order number;

[0114] The work order number here can be an external work order number or an internal work order number. The internal work order is generated by the operation and maintenance system, and the external work order can be generated by the customer service system or the change system.

[0115] S305: Verify the target operation and maintenance operation according to the work order information corresponding to the work order number;

[0116] If the verification passes, execute S306: determine that the target user has passed the target operation and maintenance control process;

[0117] If the verification fails, S303: determining that the target user has not passed the target operation and maintenance control process.

[0118] According to the work order number type corresponding to the work order number entered by the target user, select the corresponding way to obtain the work order information. If the work order number entered by the target user is an internal work order number, obtain the work order information from the interface corresponding to the internal work order number. If the work order number entered by the target user is an external work order number, obtain the work order information from the interface corresponding to the external work order number.

[0119] Perform at least one of the following verification operations based on the obtained work order information:

[0120] A1: Verify whether the work order information contains the work order authorization information;

[0121] If the work order information contains work order authorization information, it means that the work order is approved.

[0122] A2: Verify whether the work order operator in the work order information matches the target user;

[0123] Specifically, by matching the work order operator information with the target user, the work order operator information includes the name, department and other information of the approved work order operator.

[0124] A3: Check whether the current time is within the work order operation time range in the work order information;

[0125] The work order operation time range is the approved work order operation time range.

[0126] A4: Verify whether the target operation is within the work order operation range in the work order information.

[0127] The work order operation scope is the approved work order operation scope.

[0128] If the verification is passed, the operation and maintenance interface will be displayed normally. The operation and maintenance interface will open all the existing permissions of the target user, which refers to the menu permissions in the operation and maintenance interface, regardless of whether the operation and maintenance scenario is set.

[0129] If the target user closes the operation and maintenance interface or refreshes the operation and maintenance interface, the verification will become invalid and the user needs to re-verify the interface when entering the interface again.

[0130] Example 3

[0131] like Figure 4 As shown in the figure, if the risk level of the target operation and maintenance scenario is the third level, the risk of the third level is higher than the second level, and the execution of the target operation and maintenance control process specifically includes the following steps:

[0132] S401: Obtaining a target operation selected by a target user;

[0133] S402: Determine whether the target operation and the target operation scenario match;

[0134] If the target operation and the target operation scenario do not match, execute S403: determine that the target user has not passed the target operation and maintenance control process;

[0135] For the specific implementation of S401~S402, please refer to S201~S202 in Example 1, which will not be repeated here.

[0136] If the target operation and the target scenario match, execute S404: prompt the target user to enter the work order number;

[0137] S405: Verify the target operation and maintenance operation according to the work order information corresponding to the work order number;

[0138] If the verification fails, executing S403: determining that the target user has not passed the target operation and maintenance control process;

[0139] For the specific implementation of S404~S405, please refer to S304~S305 in Example 1, which will not be repeated here.

[0140] If the verification is successful, execute S406: send a verification code to the group leader corresponding to the target user, and prompt the target user to enter the verification code;

[0141] There are many conditions for triggering S406 when the verification passes:

[0142] Exemplarily, if the verification passes, S406 is directly triggered.

[0143] For example, if the target user does not manually close the operation and maintenance interface when the work order operation time ends, the page prompts "The scheduled online end time has arrived. Do you need to continue using it to make application changes?" The target user selects "Yes", triggering S406.

[0144] Specifically, based on the pre-configured correspondence between users and user groups and the correspondence between user groups and group leaders, the group leader corresponding to the target user is determined, the mobile phone number of the group leader corresponding to the target user is obtained, and a verification code is sent to the group leader corresponding to the target user.

[0145] S407: Determine whether the sent verification code is consistent with the verification code entered by the target user;

[0146] Specifically, determine whether the verification code sent within the valid time is consistent with the verification code entered by the target user. If the verification code entered by the target user is not received within the valid time after the verification code is sent, prompt the target user whether to resend the verification code. If the verification code sent within the valid time is inconsistent with the verification code entered by the target user, prompt the target user to "Please enter the correct verification code."

[0147] Exemplarily, the effective time is 5 minutes.

[0148] If the sent verification code is consistent with the verification code input by the target user, executing S408: determining that the target user has passed the target operation and maintenance control process;

[0149] If the sent verification code is inconsistent with the verification code input by the target user, execute S403: determine that the target user has not passed the target operation and maintenance control process.

[0150] After confirming that the target user has passed the target operation and maintenance control process, if the target user closes the operation and maintenance operation interface or refreshes the operation and maintenance operation interface, the verification will be invalid and re-verification is required to enter again.

[0151] It should be noted that the above three examples are only for illustration and the present invention is not limited thereto.

[0152] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present disclosure. In this regard, each square box in the flow chart or block diagram can represent a module, a program segment or a part of a code, and the module, the program segment or a part of the code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some implementations as replacements, the functions marked in the square box can also occur in a sequence different from that marked in the accompanying drawings. For example, two square boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each square box in the block diagram and / or flow chart, and the combination of the square boxes in the block diagram and / or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0153] The names of the messages or information exchanged between multiple devices in the embodiments of the present disclosure are only used for illustrative purposes and are not used to limit the scope of these messages or information.

[0154] Although operations are depicted in a particular order, this should not be understood as requiring that the operations be performed in the particular order shown or in a sequential order.Multitasking and parallel processing may be advantageous under certain circumstances.

[0155] It should be understood that the various steps described in the method embodiments of the present disclosure may be performed in different orders and / or in parallel. In addition, the method embodiments may include additional steps and / or omit the steps shown. The scope of the present disclosure is not limited in this respect.

[0156] Computer program code for performing the operations of the present disclosure may be written in one or more programming languages ​​or a combination thereof, including, but not limited to, object-oriented programming languages, such as Java, Smalltalk, C++, and conventional procedural programming languages, such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In cases involving a remote computer, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0157] Based on the operation and maintenance authority control method disclosed in the above embodiment, this embodiment correspondingly discloses an operation and maintenance authority control device, see Figure 5 , the device comprises:

[0158] The operation type acquisition unit 501 is used to respond to the operation and maintenance operation request initiated by the target user and acquire the target operation and maintenance scenario carried in the operation and maintenance operation request;

[0159] The permission judgment unit 502 is used to judge whether the target user has the permission to perform the operation and maintenance operation corresponding to the target operation and maintenance scenario according to the pre-configured permission correspondence relationship between the user and the operation and maintenance scenario.

[0160] The control process determination unit 503 is used to determine the target operation and maintenance control process corresponding to the target operation and maintenance scenario according to the pre-configured risk level of the target operation and maintenance scenario and the correspondence between the risk level and the operation and maintenance control process, if the target user has the authority to perform the operation and maintenance operation corresponding to the target operation and maintenance scenario, wherein the pre-configured multiple operation and maintenance scenarios are divided into at least two risk levels;

[0161] A control process execution unit 504 is used to execute the target operation and maintenance control process;

[0162] The operation interface display unit 505 is used to display the operation and maintenance operation interface if the target user passes the target operation and maintenance control process.

[0163] In some embodiments, it also includes:

[0164] A prompting unit is used to prompt the target user that he does not have the operation authority if the target user does not have the authority to perform the operation corresponding to the target operation scenario; if the target user has not passed the target operation and maintenance management process, prompt the target user that he does not have the operation authority.

[0165] In some embodiments, if the risk level of the target operation and maintenance scenario is the first level, the control process execution unit 504 is specifically used to:

[0166] Obtain the target operation selected by the target user;

[0167] Determine whether the target operation and the target scenario match;

[0168] If the target operation and maintenance operation match the target operation and maintenance scenario, determining that the target user has passed the target operation and maintenance control process;

[0169] If the target operation and maintenance operation do not match the target operation and maintenance scenario, it is determined that the target user has not passed the target operation and maintenance control process.

[0170] In some embodiments, if the risk level of the target operation and maintenance scenario is the second level, the control process execution unit 504 is specifically used to:

[0171] Obtain the target operation selected by the target user;

[0172] Determine whether the target operation and the target scenario match;

[0173] If the target operation and maintenance operation do not match the target operation and maintenance scenario, determining that the target user has not passed the target operation and maintenance control process;

[0174] If the target operation and maintenance operation match the target operation and maintenance scenario, prompt the target user to enter a work order number;

[0175] Verifying the target operation and maintenance operation according to the work order information corresponding to the work order number;

[0176] If the verification is successful, it is determined that the target user has passed the target operation and maintenance control process;

[0177] If the verification fails, it is determined that the target user has not passed the target operation and maintenance control process.

[0178] In some embodiments, if the risk level of the target operation and maintenance scenario is the third level, the control process execution unit 504 is specifically used to:

[0179] Obtain the target operation selected by the target user;

[0180] Determine whether the target operation and the target scenario match;

[0181] If the target operation and maintenance operation do not match the target operation and maintenance scenario, determining that the target user has not passed the target operation and maintenance control process;

[0182] If the target operation and maintenance operation match the target operation and maintenance scenario, prompt the target user to enter a work order number;

[0183] Verifying the target operation and maintenance operation according to the work order information corresponding to the work order number;

[0184] If the verification fails, it is determined that the target user has not passed the target operation and maintenance control process;

[0185] If the verification is successful, a verification code is sent to the group leader corresponding to the target user, and the target user is prompted to enter the verification code;

[0186] If the sent verification code is consistent with the verification code input by the target user, it is determined that the target user has passed the target operation and maintenance control process;

[0187] If the sent verification code is inconsistent with the verification code input by the target user, it is determined that the target user has not passed the target operation and maintenance control process.

[0188] In some embodiments, the control process execution unit 504 includes:

[0189] The operation and maintenance verification subunit is used to:

[0190] According to the work order number type corresponding to the work order number, obtaining work order information from an interface corresponding to the work order number type, wherein the work order number type is an external work order number or an internal work order number;

[0191] Perform at least one of the following verification operations based on the work order information:

[0192] Verifying whether the work order information contains work order authorization information;

[0193] Verify whether the work order operator in the work order information matches the target user;

[0194] Check whether the current time is within the work order operation time range in the work order information;

[0195] Verify whether the target operation is within the scope of the work order operation in the work order information.

[0196] In some embodiments, the control process execution unit 504 includes:

[0197] The verification code sending subunit is used to determine the group leader corresponding to the target user according to the pre-configured correspondence between users and user groups and the correspondence between user groups and group leaders; and send a verification code to the group leader corresponding to the target user.

[0198] The present embodiment discloses an operation and maintenance authority control device, which divides the operation and maintenance operations into multiple operation and maintenance scenarios in advance, wherein the multiple operation and maintenance scenarios are divided into at least two risk levels, and configures the authority correspondence between users and operation and maintenance scenarios and the correspondence between risk levels and operation and maintenance management and control processes, thereby realizing authority control for different operation and maintenance scenarios and using different operation and maintenance management and control processes for different risk levels, ensuring different levels of risk control for operation and maintenance operations at different risk levels, and improving the security of operation and maintenance operations.

[0199] The units involved in the embodiments described in the present disclosure may be implemented by software or hardware, wherein the name of a unit does not, in some cases, limit the unit itself.

[0200] The functions described above herein may be performed at least in part by one or more hardware logic components. For example, exemplary types of hardware logic components that may be used include, without limitation, field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), complex programmable logic devices (CPLDs), and the like.

[0201] Reference below Figure 6 , which shows a schematic diagram of the structure of an electronic device 600 suitable for implementing the embodiment of the present disclosure. The terminal device in the embodiment of the present disclosure may include but is not limited to mobile terminals such as mobile phones, laptop computers, digital broadcast receivers, PDAs (personal digital assistants), PADs (tablet computers), PMPs (portable multimedia players), vehicle terminals (such as vehicle navigation terminals), etc., and fixed terminals such as digital TVs, desktop computers, etc. Figure 6 The electronic device shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present disclosure.

[0202] like Figure 6 As shown, the electronic device 600 may include a processing device (e.g., a central processing unit, a graphics processing unit, etc.) 601, which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) 602 or a program loaded from a storage device 608 into a random access memory (RAM) 603. In the RAM 603, various programs and data required for the operation of the electronic device 600 are also stored. The processing device 601, the ROM 602, and the RAM 603 are connected to each other via a bus 604. An input / output (I / O) interface 605 is also connected to the bus 604.

[0203] Typically, the following devices may be connected to the I / O interface 605: an input device 606 including, for example, a touch screen, a touch pad, a keyboard, a mouse, a camera, a microphone, an accelerometer, a gyroscope, etc.; an output device 607 including, for example, a liquid crystal display (LCD), a speaker, a vibrator, etc.; a storage device 608 including, for example, a magnetic tape, a hard disk, etc.; and a communication device 609. The communication device 609 may allow the electronic device 600 to communicate with other devices wirelessly or by wire to exchange data. Although Figure 6 The electronic device 600 is shown with various devices, but it should be understood that it is not required to implement or possess all the devices shown. More or fewer devices may be implemented or possessed instead.

[0204] The computer-readable medium carries one or more programs. When the one or more programs are executed by the electronic device, the electronic device: responds to an operation and maintenance operation request initiated by a target user, obtains a target operation and maintenance scenario carried in the operation and maintenance operation request; determines whether the target user has the authority to perform the operation and maintenance operation corresponding to the target operation and maintenance scenario based on a pre-configured permission correspondence relationship between the user and the operation and maintenance scenario; if the target user has the authority to perform the operation and maintenance operation corresponding to the target operation and maintenance scenario, determines a target operation and maintenance control process corresponding to the target operation and maintenance scenario based on a pre-configured risk level of the target operation and maintenance scenario and a correspondence relationship between the risk level and the operation and maintenance control process, wherein the pre-configured multiple operation and maintenance scenarios are divided into at least two risk levels; executes the target operation and maintenance control process; and if the target user passes the target operation and maintenance control process, displays an operation and maintenance operation interface.

[0205] In the context of the present disclosure, a machine-readable medium may be a tangible medium that may contain or store a program for use by or in conjunction with an instruction execution system, device, or equipment. A machine-readable medium may be a machine-readable signal medium or a machine-readable storage medium. A machine-readable medium may include, but is not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, device, or device, or any suitable combination of the foregoing. A more specific example of a machine-readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0206] It should be noted that the computer-readable medium mentioned above in the present disclosure may be a computer-readable signal medium or a computer-readable storage medium or any combination of the above two. The computer-readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In the present disclosure, a computer-readable storage medium may be any tangible medium containing or storing a program that can be used by or in combination with an instruction execution system, device or device. In the present disclosure, a computer-readable signal medium may include a data signal propagated in a baseband or as part of a carrier wave, which carries a computer-readable program code. This propagated data signal may take a variety of forms, including but not limited to an electromagnetic signal, an optical signal, or any suitable combination of the above. Computer readable signal media may also be any computer readable medium other than computer readable storage media, which may send, propagate or transmit a program for use by or in conjunction with an instruction execution system, apparatus or device. The program code contained on the computer readable medium may be transmitted using any appropriate medium, including but not limited to: wires, optical cables, RF (radio frequency), etc., or any suitable combination of the above.

[0207] The computer-readable medium may be included in the electronic device, or may exist independently without being incorporated into the electronic device.

[0208] In particular, according to an embodiment of the present disclosure, the process described above with reference to the flowchart can be implemented as a computer software program. For example, an embodiment of the present disclosure includes a computer program product, which includes a computer program carried on a non-transitory computer-readable medium, and the computer program contains program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from a network through a communication device 609, or installed from a storage device 608, or installed from a ROM 602. When the computer program is executed by the processing device 601, the above-mentioned functions defined in the method of the embodiment of the present disclosure are executed.

[0209] According to one or more embodiments of the present disclosure, [Example 1] provides an operation and maintenance authority control method, including:

[0210] In response to an operation and maintenance operation request initiated by a target user, obtaining a target operation and maintenance scenario carried in the operation and maintenance operation request;

[0211] According to the pre-configured permission correspondence between users and operation and maintenance scenarios, it is determined whether the target user has the permission to perform the operation and maintenance operation corresponding to the target operation and maintenance scenario;

[0212] If the target user has the authority to perform the operation and maintenance operation corresponding to the target operation and maintenance scenario, the target operation and maintenance control process corresponding to the target operation and maintenance scenario is determined according to the pre-configured risk level of the target operation and maintenance scenario and the correspondence between the risk level and the operation and maintenance control process, and the pre-configured multiple operation and maintenance scenarios are divided into at least two risk levels;

[0213] Execute the target operation and maintenance control process;

[0214] If the target user passes the target operation and maintenance control process, the operation and maintenance operation interface is displayed.

[0215] According to one or more embodiments of the present disclosure, [Example 2] provides the method of Example 1, further comprising:

[0216] If the target user does not have the authority to perform the operation and maintenance operation corresponding to the target operation and maintenance scenario, it is prompted that the target user does not have the operation authority;

[0217] If the target user does not pass the target operation and maintenance control process, it is prompted that the target user does not have the operation authority.

[0218] According to one or more embodiments of the present disclosure, [Example 3] provides the method of Example 1, where if the risk level of the target operation and maintenance scenario is the first level, executing the target operation and maintenance control process includes:

[0219] Obtain the target operation selected by the target user;

[0220] Determine whether the target operation and the target scenario match;

[0221] If the target operation and maintenance operation match the target operation and maintenance scenario, determining that the target user has passed the target operation and maintenance control process;

[0222] If the target operation and maintenance operation do not match the target operation and maintenance scenario, it is determined that the target user has not passed the target operation and maintenance control process.

[0223] According to one or more embodiments of the present disclosure, [Example 4] provides the method of Example 1, and if the risk level of the target operation and maintenance scenario is the second level, executing the target operation and maintenance control process includes:

[0224] Obtain the target operation selected by the target user;

[0225] Determine whether the target operation and the target scenario match;

[0226] If the target operation and maintenance operation do not match the target operation and maintenance scenario, determining that the target user has not passed the target operation and maintenance control process;

[0227] If the target operation and maintenance operation match the target operation and maintenance scenario, prompt the target user to enter a work order number;

[0228] Verifying the target operation and maintenance operation according to the work order information corresponding to the work order number;

[0229] If the verification is successful, it is determined that the target user has passed the target operation and maintenance control process;

[0230] If the verification fails, it is determined that the target user has not passed the target operation and maintenance control process.

[0231] According to one or more embodiments of the present disclosure, [Example 5] provides the method of Example 1, where if the risk level of the target operation and maintenance scenario is the third level, executing the target operation and maintenance control process includes:

[0232] Obtain the target operation selected by the target user;

[0233] Determine whether the target operation and the target scenario match;

[0234] If the target operation and maintenance operation do not match the target operation and maintenance scenario, determining that the target user has not passed the target operation and maintenance control process;

[0235] If the target operation and maintenance operation match the target operation and maintenance scenario, prompt the target user to enter a work order number;

[0236] Verifying the target operation and maintenance operation according to the work order information corresponding to the work order number;

[0237] If the verification fails, it is determined that the target user has not passed the target operation and maintenance control process;

[0238] If the verification is successful, a verification code is sent to the group leader corresponding to the target user, and the target user is prompted to enter the verification code;

[0239] If the sent verification code is consistent with the verification code input by the target user, it is determined that the target user has passed the target operation and maintenance control process;

[0240] If the sent verification code is inconsistent with the verification code input by the target user, it is determined that the target user has not passed the target operation and maintenance control process.

[0241] According to one or more embodiments of the present disclosure, [Example 6] provides the method of Example 1, wherein verifying the target operation and maintenance operation according to the work order information corresponding to the work order number includes:

[0242] According to the work order number type corresponding to the work order number, obtaining work order information from an interface corresponding to the work order number type, wherein the work order number type is an external work order number or an internal work order number;

[0243] Perform at least one of the following verification operations based on the work order information:

[0244] Verifying whether the work order information contains work order authorization information;

[0245] Verify whether the work order operator in the work order information matches the target user;

[0246] Check whether the current time is within the work order operation time range in the work order information;

[0247] Verify whether the target operation is within the scope of the work order operation in the work order information.

[0248] According to one or more embodiments of the present disclosure, [Example 7] provides the method of Example 1, wherein sending a verification code to the group leader corresponding to the target user includes:

[0249] Determine the group leader corresponding to the target user according to the pre-configured correspondence between users and user groups and the correspondence between user groups and group leaders;

[0250] Send a verification code to the group leader corresponding to the target user.

[0251] According to one or more embodiments of the present disclosure, [Example 8] provides an operation and maintenance authority control device, including:

[0252] An operation type acquisition unit, configured to respond to an operation and maintenance operation request initiated by a target user and acquire a target operation and maintenance scenario carried in the operation and maintenance operation request;

[0253] The permission judgment unit is used to judge whether the target user has the permission to perform the operation and maintenance operation corresponding to the target operation and maintenance scenario according to the pre-configured permission correspondence relationship between the user and the operation and maintenance scenario.

[0254] A control process determination unit is used to determine the target operation and maintenance control process corresponding to the target operation and maintenance scenario according to the pre-configured risk level of the target operation and maintenance scenario and the correspondence between the risk level and the operation and maintenance control process, if the target user has the authority to perform the operation and maintenance operation corresponding to the target operation and maintenance scenario, wherein the pre-configured multiple operation and maintenance scenarios are divided into at least two risk levels;

[0255] A control process execution unit, used to execute the target operation and maintenance control process;

[0256] An operation interface display unit is used to display an operation and maintenance operation interface if the target user passes the target operation and maintenance control process.

[0257] Although the subject matter has been described in language specific to structural features and / or methodological logical actions, it should be understood that the subject matter defined in the appended claims is not necessarily limited to the specific features or actions described above. On the contrary, the specific features and actions described above are merely example forms of implementing the claims.

[0258] Although several specific implementation details are included in the above discussion, these should not be interpreted as limiting the scope of the present disclosure. Certain features described in the context of a separate embodiment can also be implemented in a single embodiment in combination. On the contrary, the various features described in the context of a single embodiment can also be implemented in multiple embodiments individually or in any suitable sub-combination.

[0259] The above description is only a preferred embodiment of the present disclosure and an explanation of the technical principles used. Those skilled in the art should understand that the scope of disclosure involved in the present disclosure is not limited to the technical solutions formed by a specific combination of the above technical features, but should also cover other technical solutions formed by any combination of the above technical features or their equivalent features without departing from the above disclosed concept. For example, the above features are replaced with the technical features with similar functions disclosed in the present disclosure (but not limited to) by each other to form a technical solution.

Claims

1. A method for controlling operation and maintenance authority, characterized in that: include: In response to an operation and maintenance operation request initiated by a target user, obtaining a target operation and maintenance scenario carried in the operation and maintenance operation request; According to the pre-configured permission correspondence between users and operation and maintenance scenarios, it is determined whether the target user has the permission to perform the operation and maintenance operation corresponding to the target operation and maintenance scenario; If the target user has the authority to perform the operation and maintenance operation corresponding to the target operation and maintenance scenario, the target operation and maintenance control process corresponding to the target operation and maintenance scenario is determined according to the pre-configured risk level of the target operation and maintenance scenario and the correspondence between the risk level and the operation and maintenance control process, and the pre-configured multiple operation and maintenance scenarios are divided into at least two risk levels; Execute the target operation and maintenance control process; If the target user passes the target operation and maintenance control process, the operation and maintenance operation interface is displayed.

2. The operation and maintenance authority control method according to claim 1, characterized in that: Also includes: If the target user does not have the authority to perform the operation and maintenance operation corresponding to the target operation and maintenance scenario, it is prompted that the target user does not have the operation authority; If the target user does not pass the target operation and maintenance control process, it is prompted that the target user does not have the operation authority.

3. The operation and maintenance authority control method according to claim 1, characterized in that: If the risk level of the target operation and maintenance scenario is the first level, executing the target operation and maintenance control process includes: Obtain the target operation selected by the target user; Determine whether the target operation and the target scenario match; If the target operation and maintenance operation match the target operation and maintenance scenario, determining that the target user has passed the target operation and maintenance control process; If the target operation and maintenance operation do not match the target operation and maintenance scenario, it is determined that the target user has not passed the target operation and maintenance control process.

4. The operation and maintenance authority control method according to claim 3 is characterized in that: If the risk level of the target operation and maintenance scenario is the second level, executing the target operation and maintenance control process includes: Obtain the target operation selected by the target user; Determine whether the target operation and the target scenario match; If the target operation and maintenance operation do not match the target operation and maintenance scenario, determining that the target user has not passed the target operation and maintenance control process; If the target operation and maintenance operation match the target operation and maintenance scenario, prompt the target user to enter a work order number; Verifying the target operation and maintenance operation according to the work order information corresponding to the work order number; If the verification is successful, it is determined that the target user has passed the target operation and maintenance control process; If the verification fails, it is determined that the target user has not passed the target operation and maintenance control process.

5. The operation and maintenance authority control method according to claim 3 or 4, characterized in that: If the risk level of the target operation and maintenance scenario is the third level, executing the target operation and maintenance control process includes: Obtain the target operation selected by the target user; Determine whether the target operation and the target scenario match; If the target operation and maintenance operation do not match the target operation and maintenance scenario, determining that the target user has not passed the target operation and maintenance control process; If the target operation and maintenance operation match the target operation and maintenance scenario, prompt the target user to enter a work order number; Verifying the target operation and maintenance operation according to the work order information corresponding to the work order number; If the verification fails, it is determined that the target user has not passed the target operation and maintenance control process; If the verification is successful, a verification code is sent to the group leader corresponding to the target user, and the target user is prompted to enter the verification code; If the sent verification code is consistent with the verification code input by the target user, it is determined that the target user has passed the target operation and maintenance control process; If the sent verification code is inconsistent with the verification code input by the target user, it is determined that the target user has not passed the target operation and maintenance control process.

6. The operation and maintenance authority control method according to claim 5, characterized in that: The verifying the target operation and maintenance operation according to the work order information corresponding to the work order number includes: According to the work order number type corresponding to the work order number, obtaining work order information from an interface corresponding to the work order number type, wherein the work order number type is an external work order number or an internal work order number; Perform at least one of the following verification operations based on the work order information: Verifying whether the work order information contains work order authorization information; Verify whether the work order operator in the work order information matches the target user; Check whether the current time is within the work order operation time range in the work order information; Verify whether the target operation is within the scope of the work order operation in the work order information.

7. The operation and maintenance authority control method according to claim 5, characterized in that: The sending of the verification code to the group leader corresponding to the target user includes: Determine the group leader corresponding to the target user according to the pre-configured correspondence between users and user groups and the correspondence between user groups and group leaders; Send a verification code to the group leader corresponding to the target user.

8. An operation and maintenance authority control device, characterized in that: include: An operation type acquisition unit, configured to respond to an operation and maintenance operation request initiated by a target user and acquire a target operation and maintenance scenario carried in the operation and maintenance operation request; The permission judgment unit is used to judge whether the target user has the permission to perform the operation and maintenance operation corresponding to the target operation and maintenance scenario according to the pre-configured permission correspondence relationship between the user and the operation and maintenance scenario. A control process determination unit is used to determine the target operation and maintenance control process corresponding to the target operation and maintenance scenario according to the pre-configured risk level of the target operation and maintenance scenario and the correspondence between the risk level and the operation and maintenance control process, if the target user has the authority to perform the operation and maintenance operation corresponding to the target operation and maintenance scenario, wherein the pre-configured multiple operation and maintenance scenarios are divided into at least two risk levels; A control process execution unit, used to execute the target operation and maintenance control process; An operation interface display unit is used to display an operation and maintenance operation interface if the target user passes the target operation and maintenance control process.

9. An electronic device, characterized in that: The electronic device comprises a processor and a memory; The memory is used to store program code and transmit the program code to the processor; The processor is used to execute an operation and maintenance authority control method as described in any one of claims 1-7 according to the instructions in the program code.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, an operation and maintenance authority control method according to any one of claims 1 to 7 is implemented.

Images