User information maintenance management method, device and equipment based on service management system
By designing distributed management policies, encrypted associations and optimized permission control in the business management system, the problems of heterogeneous architecture and permission control in user data management are solved, the system efficiency and security are improved, and the system is adapted to diversified business scenarios.
Patent Information
- Application Number
- CN202411353505.6
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-09-26
- Publication Date
- 2024-12-31
- Estimated Expiration
- Not applicable · inactive patent
AI Technical Summary
The existing user data management methods fail to fully consider the heterogeneous architecture design, data synchronization requirements and fine-grained permission control of the user data storage architecture in the business management system, resulting in the possibility of permission control chaos in the case of high concurrency, affecting the system. Efficiency and safety.
By obtaining user data storage architecture and data synchronization requirements, designing distributed management strategies, and combining storage security requirements for encryption, designing permission control rules and transmission storage strategies, optimizing user behavior management mechanisms, integrating data exchange strategies, and forming an overall management plan .
Improves the flexibility and response speed of user data storage and management strategies, ensures the security of data during storage and transmission, avoids confusion in permission control, improves the stability and security of the system, and adapts to diverse business scenarios. .
Smart Images

Figure CN119227156A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the technical field of user data management, and in particular to a user data maintenance management method, device and equipment based on a business management system. Background Art
[0002] User information maintenance and management technology plays a vital role in the business management system, among which the full name of the business management system is the investor CA certificate business filing management system. With the rapid development of information technology and the advent of the big data era, how to efficiently and securely manage user information in the business management system has become an urgent problem to be solved. Existing user information management methods usually focus on a single aspect, such as only focusing on storage security or permission management, but failing to fully consider the heterogeneous architecture design of the user information storage architecture, data synchronization requirements, and fine-grained permission control. In addition, business management systems that fail to fully consider concurrent access to data and permission control design may experience confusion in permission control under high concurrency conditions, affecting the normal operation of the system. This one-sided management method may reduce the overall efficiency of the system and even bring security risks. Summary of the invention
[0003] The main purpose of the present invention is to provide a user data maintenance management method, device and equipment based on a business management system, which can fully consider the user's data storage rack and improve the overall efficiency.
[0004] To achieve the above object, the present invention provides a user data maintenance management method based on a business management system, comprising: Obtaining a user data storage architecture and data synchronization requirements from a business management system, performing a heterogeneous architecture design on the user data storage architecture based on the data synchronization requirements, and obtaining a corresponding distributed management strategy; Acquire storage security requirements, encrypt and associate the storage security requirements with the distributed management strategy, and obtain a corresponding transmission storage strategy; Obtaining user access rights and concurrent access data, performing permission control design on the user access rights according to the concurrent access data, and obtaining corresponding permission management rules; Perform management analysis on the authority management rules and the transmission and storage strategy to obtain a corresponding initial management strategy, and optimize the system mechanism of the initial management strategy based on the business management system to obtain an initial user behavior management mechanism; Acquire access data flow information, perform data exchange demand analysis on the user access rights according to the access data flow information, obtain corresponding data transmission rights, perform security analysis on the data transmission rights based on the transmission storage strategy, and obtain corresponding data exchange strategy; The initial user behavior management mechanism is integrated with the data exchange strategy to obtain a corresponding overall management solution.
[0005] Furthermore, the user data storage architecture is designed with a heterogeneous architecture based on the data synchronization requirement to obtain a corresponding distributed management strategy, including: Extracting features of the user data storage architecture to obtain corresponding storage structure features; Classifying data synchronization requirements according to the storage structure characteristics to obtain multiple synchronization types; Prioritizing the multiple synchronization types to obtain a synchronization priority list; Designing the user data storage architecture in layers according to the synchronization priority list to obtain a multi-layer storage structure; Performing distribution feature recognition on the multi-layer storage structure to obtain data distribution features; Performing a balanced design on the multi-layer storage structure according to the data distribution characteristics to obtain a balanced strategy; Performing consistency optimization on the load balancing strategy to obtain an optimized data distribution strategy; Performing redundancy design on the multi-layer storage structure according to the optimized data distribution strategy to obtain a data redundancy strategy; Designing a failover mechanism for the data redundancy strategy to obtain a failover recovery strategy; Integrate the fault recovery strategy with the optimized data distribution scheme to obtain a preliminary management strategy; Performing consistency analysis on the preliminary management strategy to obtain a consistency maintenance plan; The consistency maintenance scheme is integrated with the preliminary management strategy to obtain the distributed management strategy.
[0006] Further, the acquiring of the storage security requirement, cryptographically associating the storage security requirement with the distributed management strategy to obtain a corresponding transmission storage strategy, includes: Acquire the storage security requirements of the business management system, construct a multidimensional matrix according to the storage security requirements, and obtain a security level matrix; hierarchically processing the distributed management strategy according to the security level matrix to obtain a hierarchical management structure; Selecting an encryption algorithm for the hierarchical management structure to obtain an encryption scheme set, and encrypting the hierarchical management structure according to the encryption scheme set to obtain an encryption management policy; Performing transmission protocol matching on the encryption management policy to obtain a transmission protocol list; Performing a transmission security assessment on the encryption management strategy according to the transmission protocol list to obtain a secure transmission strategy; Designing a storage structure for the secure transmission strategy to obtain a distributed storage solution; The secure transmission strategy is optimized for storage according to the distributed storage solution to obtain a final transmission storage strategy.
[0007] Further, the selecting of an encryption algorithm for the hierarchical management structure to obtain an encryption scheme set, and encrypting the hierarchical management structure according to the encryption scheme set to obtain an encryption management policy, includes: Performing type analysis on each layer in the hierarchical management structure to obtain a structure type list; Evaluate the encryption strength requirement of each layer according to the structure type list to obtain an encryption strength requirement matrix; Performing algorithm matching on the encryption strength requirement matrix according to a preset encryption algorithm to obtain an initial encryption algorithm set; Performing computational complexity analysis on each layer according to the initial encryption algorithm set to obtain a computational complexity evaluation result; Optimizing and screening the initial encryption algorithm set based on the computational complexity evaluation result to obtain a final encryption algorithm set; Mapping and associating the final encryption algorithm set with the hierarchical management structure to obtain an encryption scheme set; Initializing parameters of each encryption algorithm in the encryption scheme set to obtain an encryption parameter set; Processing each layer of data in the hierarchical management structure in blocks according to the encryption parameter set to obtain a data block sequence; Applying the corresponding encryption algorithm to the data block sequence to perform encryption operation to obtain an initial encrypted data block; Performing integrity check on the encrypted data block to obtain a check result, and performing error correction on the initial encrypted data block according to the check result to obtain final encrypted data; The final encrypted data is associated and mapped with the hierarchical management structure to obtain the encryption management policy.
[0008] Furthermore, the obtaining of user access rights and concurrent access data, and performing permission control design on the user access rights according to the concurrent access data to obtain corresponding permission management rules include: Acquire the user access rights and concurrent access data of the business management system, classify the user access rights in layers, and obtain a multi-level access rights structure; Dynamically adjusting the multi-level permission structure according to the concurrent access data to obtain an adaptive permission architecture; Performing time window analysis on the adaptive permission architecture to obtain time-related access frequency data; Prioritizing the adaptive permission architecture according to the access frequency data to obtain a priority permission matrix; Performing conflict detection on the priority authority matrix to obtain a conflict rule set; Adjusting the priority authority matrix according to the conflict rule set to obtain a conflict-free authority structure; Performing resource consumption evaluation on the non-conflicting authority structure to obtain resource occupancy data; The conflict-free authority structure is optimized according to the resource occupancy data to obtain the authority management rules.
[0009] Further, the management analysis of the permission management rules and the transmission storage strategy is performed to obtain a corresponding initial management strategy, and the system mechanism optimization of the initial management strategy is performed based on the business management system to obtain an initial user behavior management mechanism, including: Decomposing the authority management rules hierarchically to obtain a multi-layer authority control structure; Mapping and analyzing the transmission and storage strategies according to the multi-layer authority control structure to obtain a corresponding relationship matrix; Performing clustering processing on the corresponding relationship matrix to obtain a set of user behavior patterns; Constructing user rules based on the user behavior pattern set to obtain preliminary behavior prediction rules; Cross-validating the preliminary behavior prediction rules to obtain optimized behavior prediction rules; Building an anomaly detection mechanism based on the optimized behavior prediction rules to obtain a user behavior anomaly identification mechanism; The user behavior abnormality identification mechanism is integrated with the optimized behavior prediction rule to obtain the initial management strategy; Acquire management mechanism information of the business management system, perform mechanism analysis on the management mechanism information, and obtain corresponding mechanism parameters; Performing simulation test on the integrated user management strategy based on the mechanism parameters to obtain test result data; The comprehensive user management strategy is adjusted according to the test result data in combination with the mechanism parameters to obtain the initial user behavior management mechanism.
[0010] Further, the obtaining of access data flow information, performing data exchange demand analysis on the user access rights according to the access data flow information to obtain corresponding data transmission rights, performing security analysis on the data transmission rights based on the transmission storage strategy to obtain corresponding data exchange strategies, includes: Acquire access data flow information of the business management system, perform flow calculation on the user access rights according to the access data flow information, and obtain corresponding user data exchange frequency and user data volume; Allocating bandwidth to a preset data transmission channel according to the user data exchange frequency and the user data volume to obtain a corresponding channel resource allocation scheme; Divide the channel resource allocation scheme into blocks according to preset data transmission requirements to obtain corresponding data block transmission schemes; Performing transmission delay analysis on the data block transmission scheme to obtain a corresponding transmission priority strategy; Performing demand queue scheduling on the transmission priority strategy to obtain the data transmission authority; Performing a security risk assessment on the data transmission authority to obtain corresponding security threat information; Performing security enhancement processing on the transmission storage strategy according to the security threat information to obtain a corresponding secure transmission protocol; Performing fault tolerance analysis on the secure transmission protocol to obtain a corresponding fault recovery strategy; The fault recovery strategy is backed up and redundancy optimized to obtain the data exchange strategy.
[0011] Furthermore, the initial user behavior management mechanism is integrated with the data exchange strategy to obtain a corresponding overall management solution, including: Extracting behavior features from the initial user behavior management mechanism to obtain a user behavior feature vector; Adaptively optimizing the data exchange strategy according to the user behavior feature vector to obtain an optimized exchange strategy; Adjusting the initial user behavior management mechanism according to the optimized exchange strategy to obtain a revised management mechanism; Associatively mapping the correction management mechanism and the optimized exchange strategy to obtain a preliminary integration plan; Generating a decision rule set according to the preliminary integration scheme, simplifying the decision rule set to obtain a simplified rule set; Extracting rules from the preliminary integration solution based on the simplified rule set to obtain a management rule set; Performing executability verification on the management rule set to obtain a verification rule set; Constructing a logical structure according to the verification rule set to obtain a multi-layer logical structure; The verification rule set is integrated according to the multi-layer logical structure to obtain the overall management solution.
[0012] The present invention also provides a user data maintenance management device based on a business management system, which is applied to any one of the above user data maintenance management methods, comprising: A collection module, the collection module is used to obtain the user data storage architecture and data synchronization requirements from the business management system, perform heterogeneous architecture design on the user data storage architecture based on the data synchronization requirements, and obtain a corresponding distributed management strategy; An analysis module, the analysis module is used to obtain storage security requirements, encrypt and associate the storage security requirements with the distributed management strategy, and obtain a corresponding transmission storage strategy; An association module, the association module is used to obtain user access rights and concurrent access data, perform permission control design on the user access rights according to the concurrent access data, and obtain corresponding permission management rules; A processing module, the processing module is used to perform management analysis on the permission management rules and the transmission and storage strategy to obtain a corresponding initial management strategy, and optimize the system mechanism of the initial management strategy based on the business management system to obtain an initial user behavior management mechanism; A control module is used to perform a data exchange demand analysis on the user access rights based on the business management system to obtain corresponding data transmission rights, and to perform a security analysis on the data transmission rights based on the transmission storage strategy to obtain corresponding data exchange strategies.
[0013] An execution module is used to integrate the initial user behavior management mechanism with the data exchange strategy to obtain a corresponding overall management solution.
[0014] The present invention also provides a user data maintenance and management device based on a business management system, comprising: Memory, used to store programs; The processor is used to execute the program to implement the various steps of the user information maintenance and management method based on the business management system as described in any one of claims 1-7.
[0015] The user data maintenance management method, device and equipment based on the business management system provided by the present invention have the following beneficial effects: By designing a heterogeneous architecture for user data storage and combining it with data synchronization requirements, the storage and management strategies of user data can be more comprehensively optimized, thereby improving the flexibility and response speed of the business management system and providing a more reliable foundation for data management. By encrypting and associating storage security requirements with distributed management strategies and conducting security analysis on transmission storage strategies, the security of user data during storage and transmission is ensured, reducing the risk of data leakage. Designing permission control for user access rights based on concurrent access data can more accurately manage user rights, especially in high concurrent access situations, effectively avoiding the phenomenon of chaotic permission control, thereby ensuring the stability and security of the business management system. Management analysis is performed on permission management rules and transmission storage strategies to obtain initial management strategies, and system mechanism optimization is performed based on the business management system, providing a comprehensive framework for user behavior management, which helps to improve the controllability and manageability of the system. By obtaining access data flow information and conducting data exchange demand analysis, the needs of user access rights can be accurately evaluated to ensure the security and reliability of data transmission. The initial user behavior management mechanism is integrated with the data exchange strategy to form an overall management solution that realizes the systematization and comprehensiveness of user information management, which not only improves the efficiency and security of the system, but also better adapts to diverse business scenarios. BRIEF DESCRIPTION OF THE DRAWINGS
[0016] Figure 1 It is a flow chart of a user data maintenance management method based on a business management system provided by the present invention; Figure 2 It is a structural diagram of a user data maintenance and management device based on a business management system provided by the present invention; Figure 3 It is a structural diagram of a user data maintenance and management device based on a business management system provided by the present invention; The realization of the purpose, functional features and advantages of the present invention will be further explained in conjunction with embodiments and with reference to the accompanying drawings. DETAILED DESCRIPTION
[0017] In order to make the purpose, technical solution and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not intended to limit the present invention.
[0018] The present invention is further described below in conjunction with the accompanying drawings and specific implementation methods.
[0019] Reference Figure 1 As shown, the present invention provides a user data maintenance management method based on a business management system, comprising: Step S1: Obtain the user data storage architecture and data synchronization requirements from the business management system, perform heterogeneous architecture design on the user data storage architecture based on the data synchronization requirements, and obtain the corresponding distributed management strategy; Step S2: Obtain storage security requirements, encrypt and associate the storage security requirements with the distributed management policy, and obtain a corresponding transmission storage policy; Step S3: Obtain user access rights and concurrent access data, perform permission control design on user access rights based on the concurrent access data, and obtain corresponding permission management rules; Step S4: Perform management analysis on the authority management rules and the transmission and storage strategies to obtain the corresponding initial management strategies, optimize the system mechanism of the initial management strategies based on the business management system, and obtain the initial user behavior management mechanism; Step S5: Obtain access data flow information, perform data exchange demand analysis on user access rights based on the access data flow information, obtain corresponding data transmission rights, perform security analysis on data transmission rights based on transmission storage policies, and obtain corresponding data exchange policies; Step S6: Integrate the initial user behavior management mechanism and the data exchange strategy to obtain a corresponding overall management solution.
[0020] Based on the above steps, the detailed process is as follows: Step S1: Extract the storage architecture of the current user data from the business management system. This includes the physical location of the storage (such as local storage, cloud storage or hybrid storage), storage media and storage technology.
[0021] Analyze the synchronization requirements of user data in the business management system, including the frequency of data synchronization (real-time synchronization, scheduled synchronization), the scope of synchronization, the priority of synchronization (high priority data, low priority data), etc.
[0022] According to the storage architecture and data synchronization requirements obtained above, a heterogeneous design of the user data storage architecture is carried out. Through the design steps, a distributed management strategy is formulated, which includes mechanisms such as data distribution, failover and load balancing among multiple storage nodes.
[0023] Step S2: After developing the distributed management strategy, obtain storage security requirements, including data encryption requirements, access control requirements, audit requirements, etc. For example, some sensitive data may require high-intensity encryption, while some data may require strict access control and record all access logs.
[0024] Cryptographically associate storage security requirements with distributed management strategies, select appropriate encryption algorithms (such as AES, RSA, etc.) and encryption strategies (such as symmetric encryption and asymmetric encryption, etc.), and integrate these encryption strategies into distributed management strategies.
[0025] Through encryption association, a transmission and storage strategy is formulated. The transmission and storage strategy includes encryption measures for data when it is stored and encryption measures for data during transmission. For example, SSL / TLS protocol is used during data transmission to ensure data transmission security.
[0026] Step S3: Obtaining user access rights, including obtaining access rights for each user or user group, for example, which users can read data, which users can write data, which users can delete data, etc.
[0027] Acquire concurrent access data, including the number of visits to the business management system during peak and off-peak periods, as well as concurrent access by different users or user groups. For example, some users may perform a large number of read operations during peak periods, while some users may perform write operations during off-peak periods.
[0028] Design permission control based on the obtained user access rights and concurrent access data. Develop detailed permission management rules. Permission management rules clearly define the access rights of each user or user group and include exception handling mechanisms. For example, when permission control anomalies are found, alarms can be triggered and logs can be recorded for subsequent investigation and processing.
[0029] Step S4: Perform comprehensive management analysis on the rights management rules and the transmission storage strategy, including analyzing the complexity of the rights management rules, the security and performance of the transmission storage strategy, etc.
[0030] Based on the results of management analysis, formulate an initial management strategy. The initial management strategy needs to comprehensively consider all aspects of permission management and data transmission to ensure effective operation in different business scenarios. For example, in the case of high concurrent access, how to ensure the effectiveness of permission control and the security of data transmission.
[0031] After the initial management strategy is obtained, the system mechanism of the initial management strategy is optimized based on the characteristic information and functional information of the business management system. For example, the cache mechanism of the business management system is used to improve the efficiency of data transmission, and its log function is used to strengthen the audit and monitoring of authority management.
[0032] Through system mechanism optimization, an initial user behavior management mechanism is obtained. The initial user behavior management mechanism can effectively manage various user behaviors, including data access, data modification, data transmission, etc., to ensure the security and efficiency of the entire system.
[0033] Step S5: Obtain access data flow information from the service management system, the access data flow information includes the size of data flow, the source and destination of the flow, the time distribution of the flow, etc. For example, there may be a large amount of data transmission in some time periods, while relatively less in some other time periods.
[0034] According to the access data flow information obtained, the data exchange demand analysis of user access rights is carried out to determine how to adjust and allocate user access rights under different data flow conditions. For example, under high flow conditions, it may be necessary to limit the access rights of certain low-priority users to ensure normal access for high-priority users.
[0035] Based on the analysis of data exchange requirements, data transmission permissions are formulated to clearly define which data transmission operations users can perform under different data traffic conditions. For example, under low traffic conditions, all users are allowed to perform data transmission, while under high traffic conditions, only high-priority users are allowed to perform data transmission.
[0036] Based on the transmission and storage strategy, a security analysis is performed on the data transmission permissions to obtain the corresponding data exchange strategy.
[0037] Step S6: Integrate the initial user behavior management mechanism and the data exchange strategy to form an overall management plan, and comprehensively optimize the overall management plan. For example, the efficiency of data transmission can be improved by optimizing the algorithm, and the security of the system can be improved by adjusting the authority control strategy.
[0038] Comprehensively test and verify the overall management solution, simulate different business scenarios and data traffic conditions, and ensure that the overall management solution can operate effectively under various circumstances. For example, stress testing verifies the performance of the system under high concurrency conditions, and security testing verifies the security of the system under various attack conditions.
[0039] The user data maintenance and management method based on the business management system provided by the present invention can optimize the storage and management strategy of user data more comprehensively by designing a heterogeneous architecture for the user data storage architecture and combining the data synchronization requirements, thereby improving the flexibility and response speed of the business management system and providing a more reliable basis for data management. By encrypting and associating the storage security requirements with the distributed management strategy and performing a security analysis on the transmission storage strategy, the security of user data during storage and transmission is ensured, and the risk of data leakage is reduced. By designing the permission control for user access rights based on concurrent access data, user rights can be managed more accurately, especially in the case of high concurrent access, the phenomenon of confusion in permission control can be effectively avoided, thereby ensuring the stability and security of the business management system. The permission management rules and transmission storage strategies are managed and analyzed to obtain the initial management strategy, and the system mechanism is optimized based on the business management system, providing a comprehensive framework for user behavior management, which helps to improve the controllability and manageability of the system. By obtaining the access data flow information and performing a data exchange demand analysis, the user access rights requirements can be accurately evaluated to ensure the security and reliability of the data transmission process. The initial user behavior management mechanism is integrated with the data exchange strategy to form an overall management solution that realizes the systematization and comprehensiveness of user information management, which not only improves the efficiency and security of the system, but also better adapts to diverse business scenarios.
[0040] In one embodiment, a heterogeneous architecture design is performed on the user data storage architecture based on data synchronization requirements to obtain a corresponding distributed management strategy, including: Extract features from the user data storage architecture to obtain corresponding storage structure features, including data type, data volume, access frequency, etc. Classify data synchronization requirements based on storage structure features to obtain multiple synchronization types, such as real-time synchronization, periodic synchronization, batch synchronization, etc. Prioritize these synchronization types to obtain a synchronization priority list, with priorities determined based on business importance, data timeliness, and other factors.
[0041] Based on the synchronization priority list, the user data storage architecture is hierarchically designed to obtain a multi-layer storage structure, for example, divided into a hot data layer, a warm data layer, and a cold data layer. The distribution characteristics of the multi-layer storage structure are identified to obtain data distribution characteristics, including the geographical location of data distribution, network topology, etc. Based on the data distribution characteristics, the multi-layer storage structure is balanced and a balancing strategy is obtained to ensure that data is reasonably distributed among various nodes.
[0042] The load balancing strategy is optimized for consistency to obtain the optimized data distribution strategy. Based on the optimized data distribution strategy, the multi-layer storage structure is designed for redundancy to obtain the data redundancy strategy to improve the reliability and fault tolerance of the system. The data redundancy strategy is designed for a failover mechanism to obtain a fault recovery strategy to ensure that the service can be quickly restored when a node fails.
[0043] Integrate the fault recovery strategy with the optimized data distribution plan to obtain a preliminary management strategy. Perform consistency analysis on the preliminary management strategy to obtain a consistency maintenance plan to ensure data consistency in a distributed environment. Integrate the consistency maintenance plan with the preliminary management strategy to obtain a complete distributed management strategy. The distributed management strategy comprehensively considers multiple aspects such as data synchronization, load balancing, fault recovery and consistency maintenance, and can effectively support user data maintenance management based on the business management system.
[0044] This embodiment achieves accurate identification of data synchronization requirements by extracting and classifying features of the user data storage architecture, thereby managing different types of user data more efficiently. The use of a multi-layer storage structure and priority sorting enables the business management system to flexibly schedule data according to its importance and access frequency, greatly improving data access efficiency. Through distributed feature identification and balanced design, the reasonable distribution of data in a distributed environment is ensured, effectively avoiding the problem of excessive single-point load. The introduction of redundant design and failover mechanism significantly improves the reliability and fault tolerance of the business management system, and ensures service continuity even in the event of partial node failure. Finally, through the integration of consistency analysis and maintenance solutions, the problem of data consistency in distributed systems is solved, ensuring the synchronization and consistency of user data among multiple nodes. This comprehensive distributed management strategy not only improves the performance and reliability of the system, but also enhances its scalability, and can better adapt to the rapid growth and changes of business.
[0045] In one embodiment, the storage security requirement is obtained, the storage security requirement is encrypted and associated with the distributed management policy, and the corresponding transmission storage policy is obtained, including: Obtain the storage security requirements of the business management system. Storage security requirements include specific requirements for data confidentiality, integrity, and availability. Based on these storage security requirements, construct a multidimensional matrix to obtain a security level matrix, which will be used to guide subsequent layered processing and encryption operations.
[0046] According to the security level matrix, the existing distributed management strategy is hierarchically processed. The purpose of hierarchical processing is to distinguish data of different security levels and formulate corresponding management strategies, thus forming a hierarchical management structure.
[0047] After obtaining the hierarchical management structure, the corresponding encryption algorithm is selected based on the data characteristics and security requirements of each level to form an encryption scheme set. Based on this encryption scheme set, the hierarchical management structure is encrypted to generate an encryption management policy.
[0048] The generated encryption management policy is matched with the transmission protocol, and the selection of the transmission protocol is based on the transmission requirements and security requirements of the business management system to obtain a transmission protocol list, which includes transmission protocols applicable to different data levels.
[0049] After the transmission protocol matching is completed, the encryption management policy is evaluated for transmission security based on the transmission protocol list to obtain a secure transmission policy.
[0050] Based on the secure transmission strategy, the storage structure is designed to form a distributed storage solution. The distributed storage solution aims to optimize the data storage method to improve the efficiency and security of storage. Based on this distributed storage solution, the secure transmission strategy is optimized to ensure the consistency and security of data during the storage process, and an optimized transmission storage strategy is obtained.
[0051] This embodiment, by constructing a security level matrix and a hierarchical management structure, can flexibly configure storage and transmission strategies according to the security requirements of different data. There is no need to design separate systems for data of different security levels, which greatly improves the adaptability and efficiency of the system. By selecting encryption algorithms and encrypting the hierarchical management structure, it is ensured that data of different security levels are protected accordingly, effectively overcoming the limitations of the traditional single encryption method. Through transmission protocol matching and security assessment, this method can select the most suitable transmission method for different types of data, which not only ensures the security of data transmission, but also optimizes transmission efficiency. Finally, through the design and optimization of distributed storage solutions, this method not only improves the security of data storage, but also enhances the scalability and fault tolerance of the system, making the entire user information maintenance and management system more stable and reliable.
[0052] In one embodiment, an encryption algorithm is selected for the hierarchical management structure to obtain an encryption scheme set, and the hierarchical management structure is encrypted according to the encryption scheme set to obtain an encryption management policy, including: Perform detailed type analysis on each layer in the hierarchical management structure, identify the structural types at different levels, and form a structural type list. Use the structural type list to further evaluate the encryption strength requirements of each layer and generate an encryption strength requirement matrix. Relying on the preset encryption algorithm library, perform algorithm matching on the encryption strength requirement matrix and preliminarily select a group of encryption algorithms, which is called the initial encryption algorithm set.
[0053] The computational complexity analysis is performed on the initial set of encryption algorithms to evaluate the computational complexity of each algorithm, and the final set of encryption algorithms is optimized and selected based on the needs of the actual application scenario. This set will be mapped and associated with the hierarchical management structure to form an encryption management strategy that includes a set of encryption schemes.
[0054] Initialize the parameters of each selected encryption algorithm to generate an encryption parameter set. Based on the encryption parameter set, block processing is performed on each layer of data in the hierarchical management structure to divide multiple data blocks and form a data block sequence. Subsequently, the system applies the corresponding encryption algorithm to perform encryption operations on the data block sequence to obtain the initial encrypted data block.
[0055] The encrypted data block is integrity checked, and the initial encrypted data block with errors is corrected based on the check result to obtain the encrypted data after error correction. The final encrypted data is associated and mapped with the hierarchical management structure to form a complete encryption management strategy, so that the data of the entire hierarchical management structure is effectively encrypted and protected.
[0056] This embodiment can accurately identify data requirements at different levels by performing type analysis and encryption strength requirement assessment on the hierarchical management structure, ensuring the pertinence and effectiveness of the encryption strategy. By matching the requirement matrix with the preset encryption algorithm library, it is possible to preliminarily screen out suitable encryption algorithms, optimize the algorithm selection process, and improve work efficiency. The initial encryption algorithm set is analyzed for computational complexity and optimized for screening to ensure that the encryption algorithm finally selected can meet security requirements without over-consuming computing resources, thereby achieving a balance between efficiency and security. The initialization and block processing of the encryption parameter set make the encryption process more systematic and standardized, ensuring the comprehensiveness and consistency of data encryption. The integrity check and error correction steps implemented in the data encryption process further improve the reliability and security of the data, and avoid data damage or loss caused by encryption errors. Finally, the encryption management strategy associates and maps the encrypted data with the hierarchical management structure, ensuring the orderly management and convenient access of the encrypted data.
[0057] In one embodiment, the user access rights and concurrent access data are obtained, and the user access rights are controlled and designed according to the concurrent access data to obtain corresponding rights management rules, including: Collect and organize user access rights and concurrent access data through system logs, user behavior records, etc. Determine the access needs and behavior patterns of each user in different time periods and different business modules through user access rights and concurrent access data.
[0058] User access rights are hierarchically classified to obtain a multi-level permission structure. The design of the multi-level permission structure needs to take into account multiple dimensions such as user roles, business modules, and data sensitivity to ensure the scientific and reasonable division of permissions. For example, permissions are divided into different levels such as administrators, operators, and visitors, and each level corresponds to a different access scope and operation permissions.
[0059] Based on concurrent access data, the multi-level permission structure is dynamically adjusted to adapt to changes in user behavior and fluctuations in system load, resulting in an adaptive permission architecture. By monitoring concurrent access data in real time, the user's permission level and access path are dynamically adjusted.
[0060] After obtaining the adaptive permission architecture, perform time window analysis on it to obtain time-related access frequency data. By counting and analyzing the access frequency of users in different time periods, we can identify the peak and trough periods of access.
[0061] According to the access frequency data, the priority of the adaptive permission architecture is assigned to obtain the priority permission matrix. The design of the priority permission matrix comprehensively considers the user's access needs and the carrying capacity of system resources, and the priority of permissions with higher access frequencies is increased, while the priority of permissions with lower access frequencies is reduced, so as to achieve reasonable allocation and efficient use of resources.
[0062] Conflict detection is performed on the priority permission matrix to identify and resolve permission conflicts and obtain a conflict rule set. The conflict detection process includes a comprehensive scan and analysis of the permission matrix to find the permission overlaps and conflict points between different users or roles. For example, a user may have both administrator and operator permissions, which may lead to permission conflicts.
[0063] According to the conflict rule set, the priority permission matrix is adjusted to obtain a conflict-free permission structure. The resource consumption of the conflict-free permission structure is evaluated to obtain resource usage data. The evaluation process requires comprehensive monitoring and analysis of system resource usage, including multiple dimensions such as CPU, memory, and network bandwidth, so as to understand the consumption of system resources by different permission operations. For example, it is found that some high-frequency operations consume a lot of system resources and need to be optimized and adjusted.
[0064] Based on the resource usage data, the conflict-free permission structure is optimized to obtain the final permission management rules. The optimization process needs to comprehensively consider the balance between user needs and system resources. Through further adjustment and optimization of the permission structure, the reasonable allocation and efficient use of system resources can be achieved.
[0065] This embodiment constructs a multi-level permission structure and an adaptive permission architecture by hierarchically classifying and dynamically adjusting user access rights, so as to flexibly respond to changes in user behavior and fluctuations in system load, thereby improving the stability and security of the system. Secondly, the use of time window analysis and access frequency data makes the permission allocation more scientific and reasonable. Through the design of the priority permission matrix, the allocation and utilization efficiency of resources are effectively optimized. The conflict detection and adjustment steps ensure the standardization and conflict-free nature of permission allocation, and reduce the risks of permission abuse and data leakage. The resource consumption evaluation and optimization process further improves the utilization rate of system resources and reduces unnecessary resource consumption. Ultimately, the obtained permission management rules not only improve business processing efficiency, but also enhance user experience, ensuring the security, flexibility and efficiency of the system.
[0066] In one embodiment, management analysis is performed on the authority management rules and the transmission and storage strategies to obtain the corresponding initial management strategies, and system mechanism optimization is performed on the initial management strategies based on the business management system to obtain the initial user behavior management mechanism, including: The permission management rules are decomposed hierarchically to obtain a multi-layer permission control structure, which can divide user permissions at different levels more finely. According to the multi-layer permission control structure, the transmission and storage strategy is mapped and analyzed to obtain a corresponding relationship matrix, which reflects the correlation between permissions and data transmission and storage. This corresponding relationship matrix is clustered to obtain a set of user behavior patterns, which can reflect the behavioral characteristics of different types of users.
[0067] Based on the obtained user behavior pattern set, user rules are constructed to obtain preliminary behavior prediction rules. The prediction rules can preliminarily predict the possible behavior patterns of users. In order to improve the accuracy of the prediction, the preliminary behavior prediction rules are cross-validated to obtain optimized behavior prediction rules. On this basis, an anomaly detection mechanism is constructed to obtain a user behavior anomaly recognition mechanism, which can identify abnormal behaviors that deviate from normal behavior patterns.
[0068] The user behavior anomaly identification mechanism is integrated with the optimized behavior prediction rules to obtain the initial management strategy. The initial management strategy comprehensively considers normal behavior prediction and abnormal behavior identification, and can manage user behavior more comprehensively. The management mechanism information of the business management system is obtained, and the management mechanism information is analyzed to obtain the corresponding mechanism parameters. The mechanism parameters reflect the operating characteristics of the current business management system.
[0069] Based on the obtained mechanism parameters, the integrated user management strategy is simulated and tested to obtain test result data. Based on these test result data and combined with the previously obtained mechanism parameters, the comprehensive user management strategy is parameter adjusted to obtain the initial user behavior management mechanism.
[0070] This embodiment forms a multi-layer permission control structure and a corresponding relationship matrix by performing hierarchical decomposition and mapping analysis on the permission management rules, thereby achieving more refined user permission management and improving the security and flexibility of the system. The behavior prediction rules and anomaly identification mechanisms constructed based on the user behavior pattern set can effectively predict user behavior and identify anomalies, greatly enhancing the prevention and defense capabilities of the system. The initial management strategy formed by integrating behavior prediction with anomaly identification is more comprehensive and intelligent, and can adapt to complex and changing business environments. By obtaining and analyzing the system management mechanism information, the obtained mechanism parameters can reflect the actual operating characteristics of the system and provide a reliable basis for strategy optimization. Finally, through simulation testing and parameter adjustment, the initial user behavior management mechanism obtained is more in line with actual needs, improving the operating efficiency and management effect of the system, and also enhancing the adaptability and scalability of the system.
[0071] In one embodiment, obtaining access data flow information, performing data exchange demand analysis on user access rights based on the access data flow information, obtaining corresponding data transmission rights, performing security analysis on data transmission rights based on transmission storage policies, and obtaining corresponding data exchange policies include: Obtain access data flow information of the business management system, including user access frequency, access duration, access data volume, etc. Calculate the flow of user access rights based on this flow information to obtain the data exchange frequency and data volume of each user. The data exchange frequency reflects the frequency of user access to the system, and the data volume indicates the size of the data involved in each user access.
[0072] Obtain the user data exchange frequency and data volume, and allocate bandwidth to the preset data transmission channel based on the user data exchange frequency and data volume. The data transmission channel is the network link used for data transmission in the business management system, and bandwidth allocation is to allocate appropriate network resources to each user based on user needs. Through this step, a channel resource allocation plan is obtained to allocate reasonable network bandwidth to different users.
[0073] According to the pre-set data transmission requirements, the channel resource allocation plan is divided into blocks. Data block is to divide a large amount of data into multiple smaller data blocks for easy transmission and management, and obtain a data block transmission plan. The data block transmission plan specifies how to divide and transmit data.
[0074] The transmission delay of the data block transmission scheme is analyzed. The transmission delay refers to the time required for data to travel from the sender to the receiver. By analyzing the transmission delay of different data blocks, a transmission priority strategy is obtained to determine which data should be transmitted first.
[0075] Based on the transmission priority strategy, demand queue scheduling is performed. Demand queue scheduling is the process of sorting and processing data transmission requests according to priority. Through this step, data transmission permissions are obtained to determine which users can transmit which data.
[0076] Conduct security risk assessment on data transmission permissions, including analyzing potential security threats, such as data leakage, unauthorized access, etc. The assessment results will form security threat information for subsequent security enhancement processing.
[0077] According to the security threat information, the transmission and storage strategy is security-enhanced. The transmission and storage strategy includes security measures such as data encryption and access control. Through security enhancement, a secure transmission protocol is obtained, which specifies how to securely transmit and store data.
[0078] The fault tolerance of the secure transmission protocol is analyzed. Fault tolerance is the ability of the system to operate normally even when some components fail. Through fault tolerance analysis, a fault recovery strategy is obtained, which specifies how to restore normal operation when a fault occurs.
[0079] Backup and redundancy optimization of the fault recovery strategy are performed to obtain a complete data exchange strategy.
[0080] This embodiment can accurately grasp the user's data exchange needs by obtaining access data flow information and performing flow calculation, realize the reasonable allocation of network resources, and improve the efficiency of system resource utilization. Bandwidth allocation and data block transmission based on user needs not only optimize the data transmission process, but also adapt to the access characteristics of different users, and enhance the flexibility and adaptability of the system. Through transmission delay analysis and priority strategy formulation, intelligent scheduling of data transmission is achieved, and the system response speed and user experience are improved. Through security risk assessment and security enhancement processing, the security of data transmission is greatly improved, and potential security threats are effectively prevented. At the same time, through fault tolerance analysis and fault recovery strategy formulation, the reliability and stability of the system are enhanced. Finally, through backup and redundancy optimization, the security of data and the availability of the system are further improved, ensuring the continuity of business. This comprehensive data exchange strategy not only ensures the safe maintenance of user information, but also improves the operating efficiency and reliability of the entire business management system.
[0081] In one embodiment, the initial user behavior management mechanism is integrated with the data exchange strategy to obtain a corresponding overall management solution, including: The initial user behavior management mechanism is subjected to behavioral feature extraction to obtain a user behavior feature vector. The initial user behavior management mechanism refers to the rules and policies initially formulated to manage user behavior. Behavioral feature extraction refers to extracting key features that can represent user behavior patterns from user behavior data. The user behavior feature vector is a set of numerical values used to quantitatively describe the user's behavioral characteristics. For example, features such as the user's login frequency and browsing time are extracted to form a multidimensional vector.
[0082] The data exchange strategy is adaptively optimized according to the user behavior feature vector to obtain the optimized exchange strategy. The data exchange strategy refers to the rules for transmitting and exchanging data between different modules of the system. Adaptive optimization refers to adjusting the data exchange strategy according to the user behavior characteristics to make it more in line with the user's usage habits.
[0083] The initial user behavior management mechanism is adjusted according to the optimized exchange strategy to obtain a revised management mechanism. This step is to feed back the optimized data exchange strategy into the user behavior management to further improve the management mechanism. For example, the frequency of user behavior monitoring is adjusted according to the optimized data transmission frequency.
[0084] The revised management mechanism and the optimized exchange strategy are associated and mapped to obtain a preliminary integration plan. The association mapping is to establish a corresponding relationship between the two to form a unified management framework. The preliminary integration plan is a preliminary plan that combines the revised management mechanism and the optimized exchange strategy.
[0085] A decision rule set is generated based on the preliminary integration plan, and the decision rule set is simplified to obtain a simplified rule set. Simplification is to remove redundant and contradictory rules and retain core effective rules. The simplified rule set is a streamlined decision rule set.
[0086] Based on the simplified rule set, the preliminary integration plan is subjected to rule extraction to obtain the management rule set. Rule extraction is to extract higher-level management rules from the simplified rule set. The management rule set is a set of rules used to guide the operation of the overall system.
[0087] Perform executability verification on the management rule set to obtain the verification rule set. Executability verification is to check whether the rules can be executed in the actual system and produce the expected effect. The verification rule set is a set of rules that have been verified to be actually executable.
[0088] The logical structure is constructed based on the validation rule set to obtain a multi-layer logical structure. The logical structure construction is to organize the validation rule set into a hierarchical structure. The multi-layer logical structure is a rule system with multiple levels.
[0089] Integrate the validation rule set based on the multi-layer logical structure to obtain the overall management solution. This step is to combine the multi-layer logical structure and the validation rule set to form the final overall management solution. The overall management solution is a comprehensive and systematic user data maintenance management method that includes multiple aspects such as user behavior management, data exchange strategy and decision rules.
[0090] This embodiment extracts behavioral features from the initial user behavior management mechanism and optimizes the data exchange strategy based on the extracted behavioral features, thereby achieving dynamic adaptation of the management mechanism and the exchange strategy and improving the system's responsiveness to changes in user behavior. The revised management mechanism and the optimized exchange strategy are associated and mapped to form a unified management framework, which enhances the synergy between the various modules of the system. By generating a decision rule set and simplifying it, the core effective rules are extracted, the complexity of the system is reduced, and the decision-making efficiency is improved. The executableness of the management rule set is verified to ensure the effectiveness of the rules in actual operation and reduce potential system errors. A multi-layer logical structure is constructed and integrated with the verification rule set to form a comprehensive and systematic management solution, which improves the overall performance and maintainability of the business management system.
[0091] Reference Figure 2 As shown, the present invention also provides a user data maintenance management device based on a business management system, which is applied to any one of the user data maintenance management methods above, comprising: The acquisition module is used to obtain the user data storage architecture and data synchronization requirements from the business management system, design a heterogeneous architecture for the user data storage architecture based on the data synchronization requirements, and obtain the corresponding distributed management strategy; An analysis module, which is used to obtain storage security requirements, encrypt and associate the storage security requirements with the distributed management strategy, and obtain the corresponding transmission storage strategy; The association module is used to obtain user access rights and concurrent access data, and to design permission control for user access rights based on concurrent access data to obtain corresponding permission management rules; The processing module is used to manage and analyze the authority management rules and transmission and storage strategies, obtain the corresponding initial management strategies, optimize the system mechanism of the initial management strategies based on the business management system, and obtain the initial user behavior management mechanism; The control module is used to perform data exchange demand analysis on user access rights based on the business management system to obtain corresponding data transmission rights, perform security analysis on data transmission rights based on transmission storage strategies to obtain corresponding data exchange strategies.
[0092] The execution module is used to integrate the initial user behavior management mechanism with the data exchange strategy to obtain the corresponding overall management plan.
[0093] The user data maintenance and management device based on the business management system provided by the present invention can optimize the storage and management strategy of user data more comprehensively by designing a heterogeneous architecture for the user data storage architecture and combining the data synchronization requirements, thereby improving the flexibility and response speed of the business management system and providing a more reliable basis for data management. By encrypting and associating the storage security requirements with the distributed management strategy and performing a security analysis on the transmission storage strategy, the security of user data during storage and transmission is ensured, and the risk of data leakage is reduced. By designing the permission control for user access rights based on concurrent access data, user rights can be managed more accurately, especially in the case of high concurrent access, the phenomenon of confusion in permission control can be effectively avoided, thereby ensuring the stability and security of the business management system. The permission management rules and transmission storage strategies are managed and analyzed to obtain the initial management strategy, and the system mechanism is optimized based on the business management system, providing a comprehensive framework for user behavior management, which helps to improve the controllability and manageability of the system. By obtaining the access data flow information and performing a data exchange demand analysis, the user access rights requirements can be accurately evaluated to ensure the security and reliability of the data transmission process. The initial user behavior management mechanism is integrated with the data exchange strategy to form an overall management solution that realizes the systematization and comprehensiveness of user information management, which not only improves the efficiency and security of the system, but also better adapts to diverse business scenarios.
[0094] Reference Figure 3 As shown, the present invention also provides a user data maintenance and management device based on a business management system, comprising: Memory, used to store programs; The processor is used to execute the program to implement each step of any one of the above-mentioned user information maintenance and management methods based on the business management system.
[0095] In this embodiment, the processor and the memory may be connected via a bus or other means. The memory may include a volatile memory, such as a random access memory; the memory may also include a non-volatile memory, such as a read-only memory, a flash memory, a hard disk, or a solid-state drive. The processor may be a general-purpose processor, such as a central processing unit, a digital signal processor, an application-specific integrated circuit, or one or more integrated circuits configured to implement the embodiments of the present invention.
[0096] It should be noted that technicians in the relevant technical field can clearly understand that for the convenience and conciseness of description, the specific working process of the system and each module described above can refer to the corresponding process in the aforementioned method embodiment, and will not be repeated here.
[0097] The above description is only a preferred embodiment of the present invention, and does not limit the patent scope of the present invention. Any equivalent structure or equivalent process transformation made by using the contents of the present invention specification and drawings, or directly or indirectly applied in other related technical fields, are also included in the patent protection scope of the present invention.
Claims
1. A user data maintenance and management method based on a business management system, characterized in that: include: Obtaining a user data storage architecture and data synchronization requirements from a business management system, performing a heterogeneous architecture design on the user data storage architecture based on the data synchronization requirements, and obtaining a corresponding distributed management strategy; Acquire storage security requirements, encrypt and associate the storage security requirements with the distributed management strategy, and obtain a corresponding transmission storage strategy; Obtaining user access rights and concurrent access data, performing permission control design on the user access rights according to the concurrent access data, and obtaining corresponding permission management rules; Perform management analysis on the authority management rules and the transmission and storage strategy to obtain a corresponding initial management strategy, and optimize the system mechanism of the initial management strategy based on the business management system to obtain an initial user behavior management mechanism; Acquire access data flow information, perform data exchange demand analysis on the user access rights according to the access data flow information, obtain corresponding data transmission rights, perform security analysis on the data transmission rights based on the transmission storage strategy, and obtain corresponding data exchange strategy; The initial user behavior management mechanism is integrated with the data exchange strategy to obtain a corresponding overall management solution.
2. The user data maintenance and management method based on the business management system according to claim 1 is characterized in that: The heterogeneous architecture design of the user data storage architecture based on the data synchronization requirement to obtain a corresponding distributed management strategy includes: Extracting features of the user data storage architecture to obtain corresponding storage structure features; Classifying data synchronization requirements according to the storage structure characteristics to obtain multiple synchronization types; Prioritizing the multiple synchronization types to obtain a synchronization priority list; Designing the user data storage architecture in layers according to the synchronization priority list to obtain a multi-layer storage structure; Performing distribution feature recognition on the multi-layer storage structure to obtain data distribution features; Performing a balanced design on the multi-layer storage structure according to the data distribution characteristics to obtain a balanced strategy; Performing consistency optimization on the load balancing strategy to obtain an optimized data distribution strategy; Performing redundancy design on the multi-layer storage structure according to the optimized data distribution strategy to obtain a data redundancy strategy; Designing a failover mechanism for the data redundancy strategy to obtain a failover recovery strategy; Integrate the fault recovery strategy with the optimized data distribution scheme to obtain a preliminary management strategy; Performing consistency analysis on the preliminary management strategy to obtain a consistency maintenance plan; The consistency maintenance scheme is integrated with the preliminary management strategy to obtain the distributed management strategy.
3. The user data maintenance and management method based on the business management system according to claim 1 is characterized in that: The acquiring of the storage security requirement, cryptographically associating the storage security requirement with the distributed management policy, and obtaining a corresponding transmission storage policy, includes: Acquire the storage security requirements of the business management system, construct a multidimensional matrix according to the storage security requirements, and obtain a security level matrix; hierarchically processing the distributed management strategy according to the security level matrix to obtain a hierarchical management structure; Selecting an encryption algorithm for the hierarchical management structure to obtain an encryption scheme set, and encrypting the hierarchical management structure according to the encryption scheme set to obtain an encryption management policy; Performing transmission protocol matching on the encryption management policy to obtain a transmission protocol list; Performing a transmission security assessment on the encryption management strategy according to the transmission protocol list to obtain a secure transmission strategy; Designing a storage structure for the secure transmission strategy to obtain a distributed storage solution; The secure transmission strategy is optimized for storage according to the distributed storage solution to obtain a final transmission storage strategy.
4. The user data maintenance and management method based on the business management system according to claim 3 is characterized in that: The step of selecting an encryption algorithm for the hierarchical management structure to obtain an encryption scheme set, and encrypting the hierarchical management structure according to the encryption scheme set to obtain an encryption management policy includes: Performing type analysis on each layer in the hierarchical management structure to obtain a structure type list; Evaluate the encryption strength requirement of each layer according to the structure type list to obtain an encryption strength requirement matrix; Performing algorithm matching on the encryption strength requirement matrix according to a preset encryption algorithm to obtain an initial encryption algorithm set; Performing computational complexity analysis on each layer according to the initial encryption algorithm set to obtain a computational complexity evaluation result; Optimizing and screening the initial encryption algorithm set based on the computational complexity evaluation result to obtain a final encryption algorithm set; Mapping and associating the final encryption algorithm set with the hierarchical management structure to obtain an encryption scheme set; Initializing parameters of each encryption algorithm in the encryption scheme set to obtain an encryption parameter set; Processing each layer of data in the hierarchical management structure in blocks according to the encryption parameter set to obtain a data block sequence; Applying the corresponding encryption algorithm to the data block sequence to perform encryption operation to obtain an initial encrypted data block; Performing integrity check on the encrypted data block to obtain a check result, and performing error correction on the initial encrypted data block according to the check result to obtain final encrypted data; The final encrypted data is associated and mapped with the hierarchical management structure to obtain the encryption management policy.
5. The user data maintenance and management method based on the business management system according to claim 1 is characterized in that: The obtaining of user access rights and concurrent access data, and performing permission control design on the user access rights according to the concurrent access data to obtain corresponding permission management rules include: Acquire the user access rights and concurrent access data of the business management system, classify the user access rights in layers, and obtain a multi-level access rights structure; Dynamically adjusting the multi-level permission structure according to the concurrent access data to obtain an adaptive permission architecture; Performing time window analysis on the adaptive permission architecture to obtain time-related access frequency data; Prioritizing the adaptive permission architecture according to the access frequency data to obtain a priority permission matrix; Performing conflict detection on the priority authority matrix to obtain a conflict rule set; Adjusting the priority authority matrix according to the conflict rule set to obtain a conflict-free authority structure; Performing resource consumption evaluation on the non-conflicting authority structure to obtain resource occupancy data; The conflict-free authority structure is optimized according to the resource occupancy data to obtain the authority management rules.
6. The user data maintenance and management method based on the business management system according to claim 1 is characterized in that: The management analysis of the permission management rules and the transmission and storage strategy is performed to obtain a corresponding initial management strategy, and the system mechanism optimization of the initial management strategy is performed based on the business management system to obtain an initial user behavior management mechanism, including: Decomposing the authority management rules hierarchically to obtain a multi-layer authority control structure; Mapping and analyzing the transmission and storage strategies according to the multi-layer authority control structure to obtain a corresponding relationship matrix; Performing clustering processing on the corresponding relationship matrix to obtain a set of user behavior patterns; Constructing user rules based on the user behavior pattern set to obtain preliminary behavior prediction rules; Cross-validating the preliminary behavior prediction rules to obtain optimized behavior prediction rules; Building an anomaly detection mechanism based on the optimized behavior prediction rules to obtain a user behavior anomaly identification mechanism; The user behavior abnormality identification mechanism is integrated with the optimized behavior prediction rule to obtain the initial management strategy; Acquire management mechanism information of the business management system, perform mechanism analysis on the management mechanism information, and obtain corresponding mechanism parameters; Performing simulation test on the integrated user management strategy based on the mechanism parameters to obtain test result data; The comprehensive user management strategy is adjusted according to the test result data in combination with the mechanism parameters to obtain the initial user behavior management mechanism.
7. The user data maintenance and management method based on the business management system according to claim 1 is characterized in that: The obtaining of access data flow information, performing data exchange demand analysis on the user access rights according to the access data flow information to obtain corresponding data transmission rights, and performing security analysis on the data transmission rights based on the transmission storage strategy to obtain corresponding data exchange strategies include: Acquire access data flow information of the business management system, perform flow calculation on the user access rights according to the access data flow information, and obtain corresponding user data exchange frequency and user data volume; Allocating bandwidth to a preset data transmission channel according to the user data exchange frequency and the user data volume to obtain a corresponding channel resource allocation scheme; Divide the channel resource allocation scheme into blocks according to preset data transmission requirements to obtain corresponding data block transmission schemes; Performing transmission delay analysis on the data block transmission scheme to obtain a corresponding transmission priority strategy; Performing demand queue scheduling on the transmission priority strategy to obtain the data transmission authority; Performing a security risk assessment on the data transmission authority to obtain corresponding security threat information; Performing security enhancement processing on the transmission storage strategy according to the security threat information to obtain a corresponding secure transmission protocol; Performing fault tolerance analysis on the secure transmission protocol to obtain a corresponding fault recovery strategy; The fault recovery strategy is backed up and redundancy optimized to obtain the data exchange strategy.
8. The user data maintenance and management method based on the business management system according to claim 1 is characterized in that: The initial user behavior management mechanism is integrated with the data exchange strategy to obtain a corresponding overall management solution, including: Extracting behavior features from the initial user behavior management mechanism to obtain a user behavior feature vector; Adaptively optimizing the data exchange strategy according to the user behavior feature vector to obtain an optimized exchange strategy; Adjusting the initial user behavior management mechanism according to the optimized exchange strategy to obtain a revised management mechanism; Associatively mapping the correction management mechanism and the optimized exchange strategy to obtain a preliminary integration plan; Generating a decision rule set according to the preliminary integration plan, simplifying the decision rule set to obtain a simplified rule set; Extracting rules from the preliminary integration solution based on the simplified rule set to obtain a management rule set; Performing executability verification on the management rule set to obtain a verification rule set; Constructing a logical structure according to the verification rule set to obtain a multi-layer logical structure; The verification rule set is integrated according to the multi-layer logical structure to obtain the overall management solution.
9. A user data maintenance and management device based on a business management system, characterized in that: The user data maintenance and management method applied to any one of claims 1 to 7 above comprises: A collection module, the collection module is used to obtain the user data storage architecture and data synchronization requirements from the business management system, perform heterogeneous architecture design on the user data storage architecture based on the data synchronization requirements, and obtain a corresponding distributed management strategy; An analysis module, the analysis module is used to obtain storage security requirements, encrypt and associate the storage security requirements with the distributed management strategy, and obtain a corresponding transmission storage strategy; An association module, the association module is used to obtain user access rights and concurrent access data, perform permission control design on the user access rights according to the concurrent access data, and obtain corresponding permission management rules; A processing module, the processing module is used to perform management analysis on the permission management rules and the transmission and storage strategy to obtain a corresponding initial management strategy, and optimize the system mechanism of the initial management strategy based on the business management system to obtain an initial user behavior management mechanism; A control module is used to perform a data exchange demand analysis on the user access rights based on the business management system to obtain corresponding data transmission rights, and to perform a security analysis on the data transmission rights based on the transmission storage strategy to obtain corresponding data exchange strategies. An execution module is used to integrate the initial user behavior management mechanism with the data exchange strategy to obtain a corresponding overall management solution.
10. A user data maintenance and management device based on a business management system, characterized in that: include: Memory, used to store programs; The processor is used to execute the program to implement the various steps of the user information maintenance and management method based on the business management system as described in any one of claims 1-7.
Citation Information
Cited By
ERP (Enterprise Resource Planning) information transmission system and method based on security monitoring
CN119996330A
