Case related information compliance query approval method

Abstract

The invention discloses an approval method for compliance query of case related information. The method comprises the following steps: S1, a user logs in a system by using a digital certificate; s2, the system provides biological characteristic comparison identification for secondary identity verification; s3, the user enters a system information query function to create a query task and submits query application approval; s4, after the approval is passed, the user queries the content of the application query; and S5, the system records a query log, forms a case and clue investigation log, and provides log auditing and effect statistics functions for auditing and data analysis. According to the method, the problem of data potential safety hazards of an existing department unit information query system caused by insufficient fusion with a business process and imperfect information query permission limiting mechanism can be solved.

Description

Technical Field

[0001] The present invention relates to the technical field of public security behavior investigation and analysis application, and in particular to an approval method for compliance query of case-related information. Background Art

[0002] In today's digital age, with the rapid development and widespread application of informatization in some units and big data technology, data security issues are becoming increasingly prominent. However, the traditional departmental unit information systems were built without considering business processes and business characteristics, and generally lacked effective protection and restrictions on information queries that were not required for work.

[0003] When department personnel conduct information inquiries, the system does not perform any business verification, but only records the query content. This makes it impossible for the administrator to know from the perspective of log audit whether the query is personally operated, the reason for initiating the query, and whether the access is unauthorized. It can be seen that such systems lack strict identity and authority verification mechanisms, and their security is extremely fragile, with great hidden dangers. This also causes traditional departmental unit information systems to frequently have data security incidents such as theft of other people's digital certificates, unauthorized inquiries, data leaks, and infringement of citizens' personal privacy, causing adverse effects or serious consequences. Therefore, how to effectively limit and protect query permissions and data information in combination with business processes has become an urgent need for the further development of the current departmental unit information construction work. Summary of the invention

[0004] The technical problem to be solved by the present invention is to provide an approval method for compliance query of case-related information, so as to solve the problems existing in the existing departmental unit information query system, such as insufficient integration with business processes and imperfect information query authority restriction mechanism, which lead to data security risks in the query system.

[0005] In order to solve the above technical problems, the technical solutions adopted by the present invention are as follows.

[0006] A method for approving compliance query of case-related information includes the following steps:

[0007] S1. The user logs into the system using a digital certificate;

[0008] S2. The system provides biometric comparison and recognition for secondary identity authentication;

[0009] S3. The user enters the system information query function to create a query task and submits the query application for approval;

[0010] S4. After approval, the user queries the content of this application;

[0011] S5. The system records query logs and forms case and clue investigation logs, providing log audit and performance statistics functions for audit and data analysis.

[0012] Preferably, the digital certificate in step S1 is a digital certificate using RSA and SM2 dual algorithm cryptographic technology; the biometric verification method in step S2 includes but is not limited to any of portrait, fingerprint, voiceprint and iris.

[0013] Preferably, the creation of the query task in step S3 specifically includes: inputting or importing the content to be queried and selecting the business scenario of this query, and the business scenarios include case analysis scenarios and clue verification scenarios.

[0014] Preferably, when the user selects a case analysis scenario and selects an unsolved case in the system that he is responsible for or has participated in investigating, the system automatically extracts case-related information, the user supplements the reason for the inquiry, uploads the materials of the case and then initiates an inquiry application, which will be approved by any one of the investigation members who are also involved in the case; the materials include but are not limited to the decision to file a case.

[0015] Preferably, when the user selects the clue verification scenario, he / she supplements the clue name, clue type, clue source, clue overview, inquiry reason and uploads clue-related attachment information in the system and then initiates an inquiry application, which is approved by the system administrator or leader of the unit.

[0016] Preferably, when the query task is successfully created and submitted in step S3, the system generates a unique task number for the task submitted this time, and associates it with the current query user identity and query content; when the approver of each query task approves the task, he needs to choose whether to pass the approval and fill in the approval opinion. The system will notify the corresponding query system module of the task number and approval result.

[0017] Preferably, in step S4, when the user queries, the system re-checks the approval status of the task according to the current user identity information, query content and task number, and only approved tasks can be queried and query results returned.

[0018] Preferably, step S4 supports extended query with a depth of up to 5 layers through progressive query of query results.

[0019] Preferably, step S5 is specifically as follows: the system fully records in the query log the creation, approval, query, and progressive expansion query of each query task, including but not limited to login information, task application information, related case or clue information, related attachments, query content, inquirer, approver, query and approval time, IP address, and forms case and clue investigation logs based on task scenarios, providing log audit and effectiveness statistics functions for retrospective audit and data analysis.

[0020] Due to the adoption of the above technical scheme, the technical progress achieved by the present invention is as follows.

[0021] The present invention verifies the authenticity of the user by using digital certificates, cryptographic technology, biometric verification, etc. at the time of login, and organically combines the information query function with the business process of the department and unit, strictly verifies the user's query authority, and prevents users from impersonating others to make inquiries, unauthorized inquiries, using the system for non-work purposes, and other illegal operations, effectively ensuring the legitimacy and standardization of department and unit personnel in the process of using the system, effectively protecting the personal privacy of citizens from infringement, and significantly reducing the risk of citizens' personal information being leaked.

[0022] The present invention can also more intuitively grasp the number of cases solved and suspects captured by users through this query function through the audit log and effectiveness statistics functions formed during the operation process, which is convenient for subsequent responsibility tracing or performance appraisal, and can also better reflect the application value and construction significance of the departmental unit information system, and play an important role in the work of the departmental unit. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] Figure 1 It is a flow chart of the present invention. DETAILED DESCRIPTION

[0024] The present invention will be further described in detail below with reference to the accompanying drawings and specific embodiments.

[0025] A method for reviewing and approving case-related information in compliance with regulations, which is used to regulate and constrain the investigation and case-handling process and system query permissions of department personnel, and to record and supervise the entire process of information query, support post-event tracing, and achieve full-process protection of case-related information, case-handling process, citizens' personal information, etc., to protect case information and citizens' personal information from being illegally queried or leaked. Figure 1 As shown, the following steps are included:

[0026] S1. The user logs into the system using a digital certificate.

[0027] The digital certificate is a digital certificate that uses RSA and SM2 dual algorithm cryptographic technology.

[0028] S2. The system provides biometric comparison and recognition for secondary identity authentication.

[0029] When the system reads the user identity information in the digital certificate, it provides multiple biometric features such as portrait, fingerprint, voiceprint, iris, etc. for secondary identity verification to verify that the current logged-in user is indeed the person operating. Only after the comparison and verification is successful can you successfully log in to the system.

[0030] S3. The user enters the system information query function to create a query task and submits the query application for approval.

[0031] The specific steps of creating a query task are as follows: input or import the content to be queried and select the business scenario for this query. Business scenarios include case analysis scenarios and clue verification scenarios.

[0032] When users enter or import query content, they cannot directly initiate a query. They must first create a query task and select whether the business scenario for this query is case analysis or clue verification.

[0033] a) If the user selects the case analysis scenario, he / she should select an unsolved case that he / she is responsible for or involved in investigating in the system. The system will automatically extract relevant information of the case. The user needs to provide the reason for the inquiry and upload the case filing decision and other materials before initiating an inquiry application, which will be approved by any one of the investigation members who are also involved in the case.

[0034] b) If the user chooses the clue verification scenario, he / she should add the clue name, clue type, clue source, clue overview, inquiry reason, upload clue-related attachments and other information in the system before initiating an inquiry application, which will be approved by the system administrator or leader of the unit.

[0035] When the query task is created and submitted successfully, the system generates a unique task number for the submitted task, which is associated with the current query user identity and query content.

[0036] When the approver of each query task approves the task, he / she needs to choose whether to pass the approval and fill in the approval opinion. The system will then notify the corresponding query system module of the task number and approval result.

[0037] S4. After approval, the user can query the content of this application.

[0038] System users can only perform query actions after the query tasks they initiated have been approved. At the same time, the system should also verify the approval status of the task again based on the current user identity information, query content and task number when the user queries. Only tasks that have been approved can be queried and query results returned.

[0039] For each task that has been approved and successfully queried, users can continue to conduct up to 5 layers of progressive expansion query on the content in the query results. The progressive expansion query is associated with this query task without re-approval, so that users can quickly find new clues during research and judgment. If you have reached 5 layers, you can no longer query. If you need to query, you should re-apply for a new query task.

[0040] S5. The system records query logs and forms case and clue investigation logs, providing log audit and performance statistics functions for audit and data analysis.

[0041] The system records in the query log the creation, approval, query, and progressive expansion of each query task, including login information, task application information, related case or clue information, relevant attachments, query content, inquirer, approver, query and approval time, IP address, etc., and forms case and clue investigation logs based on task scenarios, providing log audit and performance statistics functions for retrospective audit and data analysis.

[0042] The present invention adopts a multi-factor authentication mechanism when logging into the system, which can ensure that the operation record is indeed the person's own, and prevent users from impersonating others to make inquiries. After logging into the system, users cannot initiate inquiries at will. They need to integrate their own business scenarios in the investigation of cases or clue verification and other departments, and combine the case-related authority verification and upload relevant legal documents. After approval by relevant personnel, the system grants the user the right to query relevant information before they can query and retrieve relevant information.

[0043] When conducting inquiries and analysis, it supports the query results to be expanded downwards. In addition, the query and expansion track and related cases or clues will be recorded in detail to form an investigation log, so that the administrator can conduct log audits and effectiveness statistics later.

Claims

1. A method for reviewing compliance inquiries about case-related information, characterized by: The following steps are involved: S1. The user logs into the system using a digital certificate; S2. The system provides biometric comparison and recognition for secondary identity authentication; S3. The user enters the system information query function to create a query task and submits the query application for approval; S4. After approval, the user queries the content of this application; S5. The system records query logs and forms case and clue investigation logs, providing log audit and performance statistics functions for audit and data analysis.

2. According to claim 1, the approval method for compliance query of case-related information is characterized by: The digital certificate in step S1 is a digital certificate using RSA and SM2 dual algorithm cryptographic technology; the biometric verification method in step S2 includes but is not limited to any of portrait, fingerprint, voiceprint and iris.

3. The method for reviewing compliance query of case-related information according to claim 1, characterized in that: The creation of the query task in step S3 specifically includes: inputting or importing the content to be queried and selecting the business scenario of this query, where the business scenarios include case analysis scenarios and clue verification scenarios.

4. The method for reviewing compliance query of case-related information according to claim 3 is characterized by: When the user selects a case analysis scenario and chooses an unsolved case that he or she is responsible for or has participated in investigating, the system automatically extracts relevant information about the case. The user supplements the reason for the query, uploads the materials of the case and initiates a query application, which will be approved by any one of the investigation members who are also involved in the case. The materials include but are not limited to the decision to file a case.

5. The method for reviewing compliance query of case-related information according to claim 3 is characterized by: When the user selects the clue verification scenario, he / she shall supplement the clue name, clue type, clue source, clue overview, inquiry reason and upload clue-related attachment information in the system and then initiate an inquiry application, which shall be approved by the system administrator or leader of the unit.

6. The method for reviewing compliance query of case-related information according to claim 1, characterized in that: In step S3, when the query task is successfully created and submitted, the system generates a unique task number for the submitted task and associates it with the current query user identity and query content; when the approver of each query task approves the task, he / she needs to choose whether to pass the approval and fill in the approval opinion. The system will notify the corresponding query system module of the task number and approval result.

7. The method for reviewing compliance query of case-related information according to claim 1, characterized in that: In step S4, when the user queries, the system checks the approval status of the task again according to the current user identity information, query content and task number. Only tasks that have been approved can be queried and query results returned.

8. The method for reviewing compliance query of case-related information according to claim 1, characterized in that: The step S4 supports extended query with a depth of up to 5 layers through progressive query of query results.

9. The method for reviewing compliance query of case-related information according to claim 1, characterized in that: The specific steps of step S5 are as follows: the system fully records the creation, approval, query, and progressive expansion query of each query task in the query log, including but not limited to login information, task application information, related case or clue information, related attachments, query content, inquirer, approver, query and approval time, and IP address, and forms a case and clue investigation log based on the task scenario, providing log audit and effectiveness statistics functions for retrospective audit and data analysis.

Images