Data management system and method
By dividing areas and setting permission levels in the enterprise bill data management system, the problems of information leakage and low functionality in the existing technology are solved, and refined management and data security are improved.
Patent Information
- Application Number
- CN202411813703.6
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-12-11
- Publication Date
- 2025-01-07
- Estimated Expiration
- Not applicable · inactive patent
AI Technical Summary
The lack of precise control of existing enterprise bill data management, resulting in low information leakage risks and low functionality, and the inability to effectively distinguish the access rights of different personnel.
By establishing an employee information database and bill data sorting module, the areas are divided according to bill type and enterprise type, and the permission levels are set in combination with the administrator account, and different areas are encrypted separately to ensure that employees can only query information that meets their own permission levels.
It realizes refined management of bill data, reduces the risk of data abuse, improves work efficiency and data security, and prevents data leakage and illegal access.
Smart Images

Figure CN119271648A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the technical field of bill data management, and in particular to a data management system and method. Background Art
[0002] Electronic bills are a form of bills that are generated, transmitted, stored and processed electronically. They replace traditional paper bills with digital technology and network systems, realizing paperless management of bills. They include different types of bills such as electronic invoices, electronic checks, and electronic drafts, and are widely used in commercial transactions, financial settlements, tax management and other fields. In today's enterprise operation and management, efficient management and security of bill data have become key. With the continuous expansion of enterprise scale and the increasing complexity of business, enterprise personnel information and various bill data have exploded. Existing enterprise bill data management is mostly a one-size-fits-all approach, that is, the bills are uniformly encrypted, and employees can often view all the information of the bills when they review them. However, there are significant differences in the data needs and access rights of different personnel within the enterprise during their work. The existing data management lacks accurate and effective data management of electronic bills, which easily leads to information leakage risks and has problems with low practicality and functionality.
[0003] Currently, no effective solution has been proposed for the problems in the related technologies. Summary of the invention
[0004] In view of the problems in the related art, the present invention proposes a data management system and method to overcome the above technical problems existing in the existing related art.
[0005] To this end, the specific technical solution adopted by the present invention is as follows: A data management method, the method comprising the following steps: S1. Establish an enterprise employee information database, collect information of different personnel in the enterprise and establish enterprise employee files, and set up an administrator account to set the permissions of enterprise personnel; S2. Organize the enterprise bill data, divide the different types of bills into regions based on the type of bills, and set the sensitivity level of the regions divided by different bills according to the enterprise type; S3. Based on the type of enterprise, the administrator account is used to grant the corresponding personnel account permission levels of the enterprise, match the sensitivity levels of different bills, and encrypt different areas of the bills separately to ensure that enterprise employees with different permissions can only query the bill information that matches their own level.
[0006] As a preferred embodiment, the S1 includes the following sub-steps: S11. Collect internal employee information of the company, including employee name, department, position, length of service, and contact information; S12, based on Establish an enterprise employee information database and create a file for each employee of the enterprise. The file content includes the employee's name, department, position, length of service, and contact information. The employee files in the enterprise employee information database are summarized according to the department; S13. Create an administrator account in the enterprise employee information database and grant the administrator account functions, including creating, modifying and deleting other users' accounts or account authority levels.
[0007] As a preferred embodiment, S2 includes the following sub-steps: S21. Collect enterprise bill data, including bills of exchange, checks, purchase invoices, and sales invoices, and divide different bills into different regions based on their types; S22. Classify the sensitivity of the divided bill areas based on the enterprise attributes, including Different levels of sensitivity are set, and different enterprise employee account permissions are matched based on the sensitivity classification level.
[0008] As a preferred embodiment, the S21 includes the following sub-steps: S211. For different bill types, basic bill information is collected respectively. The specific steps are as follows: Bill of exchange: drawer, payee, amount, due date; Check: drawer account number, amount, date, check number; Purchase invoice: product information, amount, tax number, invoice number, invoice date; Sales invoice: product information, amount, tax number, invoice number, invoice date; S212. Based on the types of bills, the different types of bills are divided into different regions. The specific steps are as follows: For bills of exchange, based on the nature of the bills of exchange, the areas are divided around payment-related information. The steps are as follows: The information related to the issuer, including the issuer's name, address, and contact information, is grouped into regions. ; The detailed information corresponding to the payee, including the payee name and the receiving account, is classified into regions. ; Grouping amounts into regions , in order to clarify the specific payment amount carried by the bill of exchange; Set expiration dates to areas ; For checks, based on the fact that checks are used for bank payments, the areas are divided based on the payment subject, key elements of payment vouchers, and time factors. The steps are as follows: Divide the bank account information of the drawer into areas ; Divide the amount into regions ; Divide the issue date into zones , used to determine the timeliness of a check; Divide check numbers into regions ; For purchase invoices, to reflect the specific situation of the purchase business, the areas are divided according to product details, financial and tax information, invoice number and issuance time: Divide the details of the purchased goods on the purchase invoice into areas , including product name, specifications, quantity, and unit price; Divide the amount into regions , the amount includes the total price of the goods and the sum of other expenses; Divide the invoicing party's tax number into regions ; Divide invoice number and invoice date into zones ; For sales invoices, regional division is carried out based on sales commodity situation, financial and tax information, invoice identification and time factors: Divide the details of the sales items into regions , including product name, specifications, quantity, and unit price; Divide the amount into regions , including the total revenue from sales and related expenses; Divide the tax number of the invoicing party into regions ; Divide invoice number and invoice date into zones .
[0009] As a preferred implementation, the S212 includes the following sub-steps: S2121. For bills of exchange, based on the collected corporate bill of exchange data, a plane rectangular coordinate system is established for each bill of exchange data, and the origin is set. The text of the bill of exchange content is recognized and the area is divided according to the coordinates. The specific steps and algorithm formula are as follows: based on Recognition technology, extracting all text content on the bill of exchange and obtaining the coordinate position of each text block, where the coordinate position includes the upper left corner coordinate and the lower right corner coordinate; Targeted area According to the preset keywords "issuer", "address", and "contact information", the corresponding text blocks are matched, and their coordinate positions are determined according to the matched keywords. The coordinates of the keywords and the distribution of the text blocks are combined to determine the coordinates of the upper left corner of the issuer information area. and the lower right corner coordinates , where the upper left corner coordinates are the leftmost text block coordinates of the line where the keyword is located, and the lower right corner coordinates are the rightmost text block coordinates of the line below the keyword: area The coordinate range is: , ; Targeted area According to the preset keywords "payee name" and "payee account", the corresponding text blocks are matched, and their coordinate positions are determined according to the matched keywords. The coordinates of the keywords and the distribution of the text blocks are combined to determine the coordinates of the upper left corner of the issuer information area. and the lower right corner coordinates , where the upper left corner coordinates are the leftmost text block coordinates of the line where the keyword is located, and the lower right corner coordinates are the rightmost text block coordinates of the line below the keyword: area The coordinate range is: , ; Targeted area According to the preset keyword "amount", the corresponding text block is matched, and its coordinate position is determined according to the matched keyword. Combining the coordinates of the keyword and the distribution of the text block, the coordinates of the upper left corner of the issuer information area are determined. and the lower right corner coordinates , where the upper left corner coordinates are the leftmost text block coordinates of the line where the keyword is located, and the lower right corner coordinates are the rightmost text block coordinates of the line below the keyword: area The coordinate range is: , ; Targeted area According to the preset keyword "set expiration date", the corresponding text block is matched, and its coordinate position is determined according to the matched keyword. Combining the coordinates of the keyword and the distribution of the text block, the coordinates of the upper left corner of the issuer information area are determined. and the lower right corner coordinates , where the upper left corner coordinates are the leftmost text block coordinates of the line where the keyword is located, and the lower right corner coordinates are the rightmost text block coordinates of the line below the keyword: area The coordinate range is: , ; S2122. Repeat step S2121 to divide the enterprise check data, enterprise purchase invoice data, and enterprise sales invoice data into regions, wherein: For corporate check data, region The default keyword is "Drawer Bank Account Number", and the area The default keyword is "amount", area The default keyword is "Issuance Date", area The preset keyword is "check number"; For corporate purchase invoice data, region The preset keywords are "product name", "specification", "quantity", "unit price", and region The default keyword is "amount", area The default keyword is "Invoice Tax Number", Region The preset keywords are "invoice number" and "invoicing date"; For enterprise sales invoice data, region The preset keywords are "product name", "specification", "quantity", "unit price", and region The default keyword is "amount", area The default keyword is "Invoice Tax Number", Region The preset keywords are "invoice number" and "invoicing date".
[0010] As a preferred implementation, S221, based on the enterprise type, the enterprises are divided into industrial and trade enterprises, financial service enterprises, and technology and information enterprises, and the enterprises are divided based on the business scope of the current enterprises; S222. Based on the characteristics of the enterprise type, the regional sensitivity of the bills of exchange, checks, purchase invoices and sales invoices after regional division is divided. The specific steps are as follows: For industrial and trade enterprises: Level 1 sensitivity areas are: , , , , , ; The Level 2 sensitivity areas are: , , , , ; Level 3 sensitivity areas are: , , , , ; For financial services companies: Level 1 sensitivity areas are: , , , ; The Level 2 sensitivity areas are: , , , , ; The Level 3 sensitivity areas are: , , , , , , ; For technology and information companies: Level 1 sensitivity areas are: , , ; Level 2 sensitivity areas are: , , , , , , ; The Level 3 sensitivity areas are: , , , , , .
[0011] As a preferred embodiment, S3 includes the following sub-steps: S31. Based on the employee files in the current enterprise employee information database and in combination with different bill sensitivity levels under the enterprise type, account permissions are set for each employee file through the administrator account, where: The sensitivity range for level 1 permission accounts is: level 1, level 2, and level 3; The sensitivity range for accessing Level 2 accounts is: Level 2, Level 3; The sensitivity range for accessing level 3 accounts is: Level 3; S32. Based on the different areas divided by the bill, the different levels of areas are separately encrypted using the RSA algorithm, and decryption keys are assigned to different authority levels.
[0012] A data management system, including a bill data collection module, an employee information collection module, a summary and sorting module, a region division and sensitivity setting module, and an authority matching module; The bill data collection module is used to collect corporate bill information, including bills of exchange, checks, purchase invoices, and sales invoices, and transmit them to the summary and sorting module; The employee information collection module is used to collect internal employee information of the enterprise, including employee name, department, position, length of service, contact information, and transmit it to the summary and sorting module; The summarizing and arranging module is based on Establish an enterprise employee information database and create a file for each employee of the enterprise. The file content includes the employee's name, department, position, length of service, and contact information. The employee files in the enterprise employee information database are summarized according to the department; The regional division and sensitivity setting module organizes the enterprise bill data, divides different types of bills into regions based on the type of bill, and sets the sensitivity level of the regions divided by different bills in combination with the enterprise type; The permission matching module, in combination with the enterprise type, grants the enterprise's corresponding personnel account permission level through the administrator account, matches the sensitivity level of different bills, and encrypts different areas of the bill separately to ensure that enterprise employees with different permissions can only query the bill information that matches their own level.
[0013] The beneficial effects of the present invention are: 1. The present invention divides the bill data into regions according to the data of different bills, and classifies the sensitivity of the regions divided for different bills according to the characteristics of the enterprise, and implements differentiated management measures for data of different sensitivity levels, thereby avoiding the risk of data abuse caused by excessive authority of internal personnel, improving work efficiency, and reducing the interference of irrelevant information on employees; 2. When bills are checked by accounts of different levels, the present invention queries the list of decryptable area identifiers corresponding to the authority according to the authority level bound to the user account, hides the unlocked bill areas, and displays the bill areas with matching authority, so as to improve the security of enterprise bill data; 3. The present invention combines the characteristics of the enterprise type to perform personalized regional division and enterprise type sensitivity level division for bills of exchange, checks, purchase invoices, and sales invoices, and sets the authority level for the internal employee accounts of the enterprise, so that different employees can view different information on the same bill, thus realizing refined management of information. At the same time, the authority level setting of the employee account ensures that only employees with corresponding authority can view or operate the information in a specific area; 4. The present invention personalizes the bill data according to the characteristics of the enterprise type, making the system more in line with the actual business needs of the enterprise, improving the practicality and flexibility of the system, and effectively preventing data leakage and illegal access through encryption and permission control of sensitive information, thereby ensuring the security of enterprise data. BRIEF DESCRIPTION OF THE DRAWINGS
[0014] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.
[0015] Figure 1 is a flow chart of a data management method according to an embodiment of the present invention; Figure 2 is a block diagram of a data management system according to an embodiment of the present invention. DETAILED DESCRIPTION
[0016] To further illustrate each embodiment, the present invention provides drawings, which are part of the disclosure of the present invention and are mainly used to illustrate the embodiments and can be used in conjunction with the relevant descriptions in the specification to explain the operating principles of the embodiments. With reference to these contents, ordinary technicians in the field should be able to understand other possible implementations and advantages of the present invention. The components in the figures are not drawn to scale, and similar component symbols are generally used to represent similar components.
[0017] According to an embodiment of the present invention, a data management system and method are provided.
[0018] The present invention is further described with reference to the accompanying drawings and specific embodiments: Example 1: Figure 1 As shown, a data management method according to an embodiment of the present invention comprises the following steps: S1. Establish an enterprise employee information database, collect information of different personnel in the enterprise and establish enterprise employee files, and set up an administrator account to set the permissions of enterprise personnel; S11. Collect internal employee information of the company, including employee name, department, position, length of service, and contact information; S12, based on Establish an enterprise employee information database and create a file for each employee of the enterprise. The file content includes the employee's name, department, position, length of service, and contact information. The employee files in the enterprise employee information database are summarized according to the department; S13. Create an administrator account in the enterprise employee information database and grant the administrator account functions, including creating, modifying and deleting other users' accounts or account authority levels.
[0019] S2. Organize the enterprise bill data, divide the different types of bills into regions based on the type of bills, and set the sensitivity level of the regions divided by different bills according to the enterprise type; S21. Collect enterprise bill data, including bills of exchange, checks, purchase invoices, and sales invoices, and divide different bills into different regions based on their types; S211. For different bill types, basic bill information is collected respectively. The specific steps are as follows: Bill of exchange: drawer, payee, amount, due date; Check: drawer account number, amount, date, check number; Purchase invoice: product information, amount, tax number, invoice number, invoice date; Sales invoice: product information, amount, tax number, invoice number, invoice date; S212. Based on the types of bills, the different types of bills are divided into different regions. The specific steps are as follows: For bills of exchange, based on the nature of the bills of exchange, the areas are divided around payment-related information. The steps are as follows: The information related to the issuer, including the issuer's name, address, and contact information, is grouped into regions. ; It should be noted that this area is mainly used to clarify the origin of the bill, and plays a role in tracing and confirming the responsible party in subsequent bill circulation, query and verification processes.
[0020] The detailed information corresponding to the payee, including the payee name and the receiving account, is classified into regions. ; It should be noted that the focus of this area is to clarify the final recipient of the funds and to track the flow of funds during the use of the bills.
[0021] Grouping amounts into regions , in order to clarify the specific payment amount carried by the bill of exchange; It should be noted that the importance of the amount area lies in that it directly reflects the scale of fund transactions and is used for financial accounting and payment arrangements.
[0022] Set expiration dates to areas ; It should be noted that the due date determines the time point of payment, which is used to manage whether the holder collects the payment on time or the payee arranges the payment of funds.
[0023] For checks, based on the fact that checks are used for bank payments, the areas are divided based on the payment subject, key elements of payment vouchers, and time factors. The steps are as follows: Divide the bank account information of the drawer into areas ; It should be noted that the bank account information of the drawer is the core of determining the source of payment funds. When processing check payments, the bank will verify the drawer's payment ability and account legitimacy based on this account.
[0024] Divide the amount into regions ; It should be noted that listing the amount area separately can clarify the specific amount of funds paid by this check. The amount is the key value embodiment of the check and involves operations such as financial accounting and bank fund transfers.
[0025] Divide the issue date into zones , used to determine the timeliness of a check; Divide check numbers into regions ; It should be noted that the check number is unique, which allows the check to be accurately located and identified in the bank system as well as by the drawer, payee and other parties during the bill management, inquiry, and verification processes.
[0026] For purchase invoices, to reflect the specific situation of the purchase business, the areas are divided according to product details, financial and tax information, invoice number and issuance time: Divide the details of the purchased goods on the purchase invoice into areas , including product name, specifications, quantity, and unit price; It should be noted that detailed information on goods helps companies verify the specific content of purchases and conduct related business operations such as inventory management and cost accounting; Divide the amount into regions , the amount includes the total price of the goods and the sum of other expenses; It should be noted that the amount is an important reflection of procurement expenditure, involving financial accounts payable records, budget control and other aspects; Divide the tax number of the invoicing party into regions ; It should be noted that the tax number is used by the tax department to identify taxpayers and is used by companies to conduct tax deduction related operations.
[0027] Divide invoice number and invoice date into zones ; It should be noted that the invoice number is unique, which makes it easier for enterprises to register, query, archive and perform other management operations on invoices. The invoice date is used to determine the time sequence of procurement transactions, involving aspects such as the financial accounting period.
[0028] For sales invoices, regional division is carried out based on sales commodity situation, financial and tax information, invoice identification and time factors: Divide the details of the sales items into regions , including product name, specifications, quantity, and unit price; It should be noted that the detailed information of sales goods is used by enterprises to verify sales business content, conduct inventory management, income accounting and other operations.
[0029] Divide the amount into regions , including the total revenue from sales and related expenses; It should be noted that the amount is the key basis for the company to confirm sales revenue, calculate accounts receivable and other financial work.
[0030] Divide the tax number of the invoicing party into regions ; It should be noted that the tax number of the invoice issuer is mainly used for tax declaration, tax deduction of the purchaser and supervision by the tax department. It is an important indicator of the legality and tax compliance of the invoice. Divide invoice number and invoice date into zones .
[0031] It should be noted that the invoice number is used for invoice management and identification, and the invoice date is used to determine the chronological order of sales business and the financial accounting period, which involves corporate financial management and business process streamlining.
[0032] S2121. For bills of exchange, based on the collected corporate bill of exchange data, a plane rectangular coordinate system is established for each bill of exchange data, and the origin is set. The text of the bill of exchange content is recognized and the area is divided according to the coordinates. The specific steps and algorithm formula are as follows: based on Recognition technology, extracting all text content on the bill of exchange and obtaining the coordinate position of each text block, where the coordinate position includes the upper left corner coordinate and the lower right corner coordinate; Targeted area According to the preset keywords "issuer", "address", and "contact information", the corresponding text blocks are matched, and their coordinate positions are determined according to the matched keywords. The coordinates of the keywords and the distribution of the text blocks are combined to determine the coordinates of the upper left corner of the issuer information area. and the lower right corner coordinates , where the upper left corner coordinates are the leftmost text block coordinates of the line where the keyword is located, and the lower right corner coordinates are the rightmost text block coordinates of the line below the keyword: area The coordinate range is: , ; It should be noted that for the upper left corner coordinate, it is necessary to select the leftmost coordinate of all keyword text blocks, and the algorithm formula is: ; ; For the lower right corner coordinate, select the rightmost coordinate of all keyword text blocks. The algorithm formula is: ; .
[0033] Targeted area According to the preset keywords "payee name" and "payee account", the corresponding text blocks are matched, and their coordinate positions are determined according to the matched keywords. The coordinates of the keywords and the distribution of the text blocks are combined to determine the coordinates of the upper left corner of the issuer information area. and the lower right corner coordinates , where the upper left corner coordinates are the leftmost text block coordinates of the line where the keyword is located, and the lower right corner coordinates are the rightmost text block coordinates of the line below the keyword: area The coordinate range is: , ; Targeted area According to the preset keyword "amount", the corresponding text block is matched, and its coordinate position is determined according to the matched keyword. Combining the coordinates of the keyword and the distribution of the text block, the coordinates of the upper left corner of the issuer information area are determined. and the lower right corner coordinates , where the upper left corner coordinates are the leftmost text block coordinates of the line where the keyword is located, and the lower right corner coordinates are the rightmost text block coordinates of the line below the keyword: area The coordinate range is: , ; Targeted area According to the preset keyword "set expiration date", the corresponding text block is matched, and its coordinate position is determined according to the matched keyword. Combining the coordinates of the keyword and the distribution of the text block, the coordinates of the upper left corner of the issuer information area are determined. and the lower right corner coordinates , where the upper left corner coordinates are the leftmost text block coordinates of the line where the keyword is located, and the lower right corner coordinates are the rightmost text block coordinates of the line below the keyword: area The coordinate range is: , ; S2122. Repeat step S2121 to divide the enterprise check data, enterprise purchase invoice data, and enterprise sales invoice data into regions, wherein: For corporate check data, region The default keyword is "Drawer Bank Account Number", and the area The default keyword is "amount", area The default keyword is "Issuance Date", area The preset keyword is "check number"; For corporate purchase invoice data, region The preset keywords are "product name", "specification", "quantity", "unit price", and region The default keyword is "amount", area The default keyword is "Invoice Tax Number", Region The preset keywords are "invoice number" and "invoicing date"; For enterprise sales invoice data, region The preset keywords are "product name", "specification", "quantity", "unit price", and region The default keyword is "amount", area The default keyword is "Invoice Tax Number", Region The preset keywords are "invoice number" and "invoicing date".
[0034] It should be noted that keyword area matching division is performed for different bill types, so as to achieve specific area division for different types of bills, providing data support for subsequent bill sensitivity division.
[0035] S22. Classify the sensitivity of the divided bill areas based on the enterprise attributes, including Different levels of sensitivity are used to match different enterprise employee account permissions. S221. Based on the type of enterprise, enterprises are divided into industrial and trade enterprises, financial service enterprises, and technology and information enterprises. Enterprises are divided based on the current business scope of the enterprise; It should be noted that industrial and trade enterprises are usually involved in the production, manufacturing, and trade of goods. The main activities of the enterprises include raw material procurement, production and manufacturing, product sales, etc. In daily operations, enterprises mainly rely on purchase invoices and sales invoices. These bills record the costs and benefits of the enterprises. Financial services enterprises include banks, insurance companies, investment companies, etc. Their main activities revolve around capital flow and management. Enterprises are more involved in the processing of checks and bills of exchange. These two bills are directly related to the payment and collection of funds. Technology and information enterprises usually include information technology service providers, software development companies, big data analysis companies, etc., and mainly rely on the provision of technical services and solutions. The demand for bills is not high. The type classification of enterprises needs to be based on the business license and business scope of the enterprise, and must be divided and set by experts in related fields.
[0036] S222. Based on the characteristics of the enterprise type, the regional sensitivity of the bills of exchange, checks, purchase invoices and sales invoices after regional division is divided. The specific steps are as follows: For industrial and trade enterprises: Level 1 sensitivity areas are: , , , , , ; The Level 2 sensitivity areas are: , , , , ; Level 3 sensitivity areas are: , , , , ; For financial services companies: Level 1 sensitivity areas are: , , , ; The Level 2 sensitivity areas are: , , , , ; Level 3 sensitivity areas are: , , , , , , ; For technology and information companies: Level 1 sensitivity areas are: , , ; Level 2 sensitivity areas are: , , , , , , ; The Level 3 sensitivity areas are: , , , , , .
[0037] It should be noted that the sensitivity of the bill area of an enterprise is divided based on the enterprise type, with Level 1 being the highest level and Level 3 being the lowest level. For industrial and trading enterprises, since enterprises need to engage in production, manufacturing, and sales, they are sensitive to raw material prices and sales prices. For financial service enterprises, enterprises are mostly responsible for capital flow and management, and have a high sensitivity level to bills of exchange and checks. For technology and information enterprises, the main amount of transactions are corporate business, and they have a high sensitivity level to bills of exchange.
[0038] Embodiment 2: S3, according to the enterprise type, the account authority level of the corresponding personnel of the enterprise is assigned through the administrator account, the sensitivity level of different bills is matched, and different areas of the bills are encrypted separately to ensure that employees of different permissions can only query the bill information that meets their own level; S31. Based on the employee files in the current enterprise employee information database and in combination with different bill sensitivity levels under the enterprise type, account permissions are set for each employee file through the administrator account, where: The sensitivity range for level 1 permission accounts is: level 1, level 2, and level 3; The sensitivity range for accessing Level 2 accounts is: Level 2, Level 3; The sensitivity range for accessing level 3 accounts is: Level 3; S32. Based on the different areas divided by the bill, the different levels of areas are separately encrypted using the RSA algorithm, and decryption keys are assigned to different authority levels.
[0039] It should be noted that when checking bills with accounts of different levels, the list of decryptable area identifiers corresponding to the permission level bound to the user account is queried, the unlocked bill areas are hidden, and the bill areas with matching permissions are displayed to improve the security of corporate bill data.
[0040] Example 3: Figure 2 As shown, a data management system includes a bill data collection module, an employee information collection module, a summary and sorting module, a region division and sensitivity setting module, and a permission matching module; The bill data collection module is used to collect corporate bill information, including bills of exchange, checks, purchase invoices, and sales invoices, and transmit them to the summary and sorting module; The employee information collection module is used to collect internal employee information of the enterprise, including employee name, department, position, length of service, contact information, and transmit it to the summary and sorting module; Summarize and organize the modules, based on Establish an enterprise employee information database and create a file for each employee of the enterprise. The file content includes the employee's name, department, position, length of service, and contact information. The employee files in the enterprise employee information database are summarized according to the department; The regional division and sensitivity setting module organizes the enterprise bill data, divides different types of bills into regions based on the type of bill, and sets the sensitivity level of the regions divided by different bills in combination with the enterprise type; The permission matching module, based on the enterprise type, grants the enterprise's corresponding personnel account permission levels through the administrator account, matches the sensitivity levels of different bills, and encrypts different areas of the bills separately to ensure that enterprise employees with different permissions can only query the bill information that matches their own level.
[0041] In summary, the present invention divides the bill data into regions according to the data of different bills, and classifies the sensitivity of the regions divided for different bills in combination with the characteristics of the enterprise, implements differentiated management measures for data of different sensitivity levels, avoids the risk of data abuse caused by excessive authority of internal personnel, improves work efficiency, and reduces the interference of irrelevant information on employees. When bills are checked in accounts of different levels, the list of decryptable area identifiers corresponding to the authority is queried according to the authority level bound to the user account, the unlocked bill area is hidden, and the bill area with matching authority is displayed, so as to improve the security of the enterprise bill data; By personalizing the bill data based on the characteristics of the enterprise type, the system becomes more in line with the actual business needs of the enterprise, improving the practicality and flexibility of the system. By encrypting and controlling permissions for sensitive information, data leakage and illegal access are effectively prevented, ensuring the security of enterprise data.
[0042] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principle of the present invention should be included in the protection scope of the present invention.
Claims
1. A data management method, characterized in that: The method comprises the following steps: S1. Establish an enterprise employee information database, collect information of different personnel in the enterprise and establish enterprise employee files, and set up an administrator account to set the permissions of enterprise personnel; S2. Organize the enterprise bill data, divide the different types of bills into regions based on the type of bills, and set the sensitivity level of the regions divided by different bills according to the enterprise type; S3. Based on the type of enterprise, the administrator account is used to grant the corresponding personnel account permission levels of the enterprise, match the sensitivity levels of different bills, and encrypt different areas of the bills separately to ensure that enterprise employees with different permissions can only query the bill information that matches their own level.
2. A data management method according to claim 1, characterized in that: The S1 comprises the following sub-steps: S11. Collect internal employee information of the company, including employee name, department, position, length of service, and contact information; S12, based on Establish an enterprise employee information database and create a file for each employee of the enterprise. The file content includes the employee's name, department, position, length of service, and contact information. The employee files in the enterprise employee information database are summarized according to the department; S13. Create an administrator account in the enterprise employee information database and grant the administrator account functions, including creating, modifying and deleting other users' accounts or account authority levels.
3. A data management method according to claim 1, characterized in that: The S2 comprises the following sub-steps: S21. Collect enterprise bill data, including bills of exchange, checks, purchase invoices, and sales invoices, and divide different bills into different regions based on their types; S22. Classify the sensitivity of the divided bill areas based on the enterprise attributes, including Different levels of sensitivity are set, and different enterprise employee account permissions are matched based on the sensitivity classification level.
4. A data management method according to claim 3, characterized in that: The S21 comprises the following sub-steps: S211. For different bill types, basic bill information is collected respectively. The specific steps are as follows: Bill of exchange: drawer, payee, amount, due date; Check: drawer account number, amount, date, check number; Purchase invoice: product information, amount, tax number, invoice number, invoice date; Sales invoice: product information, amount, tax number, invoice number, invoice date; S212. Based on the types of bills, the different types of bills are divided into different regions. The specific steps are as follows: For bills of exchange, based on the nature of the bills of exchange, the areas are divided around payment-related information. The steps are as follows: The information related to the issuer, including the issuer's name, address, and contact information, is grouped into regions. ; The detailed information corresponding to the payee, including the payee name and the receiving account, is classified into regions. ; Grouping amounts into regions , in order to clarify the specific payment amount carried by the bill of exchange; Set expiration dates to areas ; For checks, based on the fact that checks are used for bank payments, the areas are divided based on the payment subject, key elements of payment vouchers, and time factors. The steps are as follows: Divide the bank account information of the drawer into areas ; Divide the amount into regions ; Divide the issue date into zones , used to determine the timeliness of a check; Divide check numbers into regions ; For purchase invoices, to reflect the specific situation of the purchase business, the areas are divided according to product details, financial and tax information, invoice number and issuance time: Divide the details of the purchased goods on the purchase invoice into areas , including product name, specifications, quantity, and unit price; Divide the amount into regions , the amount includes the total price of the goods and the sum of other expenses; Divide the tax number of the invoicing party into regions ; Divide invoice number and invoice date into zones ; For sales invoices, regional division is carried out based on sales commodity situation, financial and tax information, invoice identification and time factors: Divide the details of the sales items into regions , including product name, specifications, quantity, and unit price; Divide the amount into regions , including the total revenue from sales and related expenses; Divide the tax number of the invoicing party into regions ; Divide invoice number and invoice date into zones .
5. A data management method according to claim 4, characterized in that: The S212 includes the following sub-steps: S2121. For bills of exchange, based on the collected corporate bill of exchange data, a plane rectangular coordinate system is established for each bill of exchange data, and the origin is set. The text of the bill of exchange content is recognized and the area is divided according to the coordinates. The specific steps and algorithm formula are as follows: based on Recognition technology, extracting all text content on the bill of exchange and obtaining the coordinate position of each text block, where the coordinate position includes the upper left corner coordinate and the lower right corner coordinate; Targeted area According to the preset keywords "issuer", "address", and "contact information", the corresponding text blocks are matched, and their coordinate positions are determined according to the matched keywords. Combined with the coordinates of the keywords and the distribution of the text blocks, the coordinates of the upper left corner of the issuer information area are determined. and the lower right corner coordinates , where the upper left corner coordinates are the leftmost text block coordinates of the line where the keyword is located, and the lower right corner coordinates are the rightmost text block coordinates of the line below the keyword: area The coordinate range is: , ; Targeted area According to the preset keywords "payee name" and "payee account", the corresponding text blocks are matched, and the coordinate position is determined according to the matched keywords. The coordinates of the keywords and the distribution of the text blocks are combined to determine the coordinates of the upper left corner of the issuer information area. and the lower right corner coordinates , where the upper left corner coordinates are the leftmost text block coordinates of the line where the keyword is located, and the lower right corner coordinates are the rightmost text block coordinates of the line below the keyword: area The coordinate range is: , ; Targeted area According to the preset keyword "amount", the corresponding text block is matched, and its coordinate position is determined according to the matched keyword. Combining the coordinates of the keyword and the distribution of the text block, the coordinates of the upper left corner of the issuer information area are determined. and the lower right corner coordinates , where the upper left corner coordinates are the leftmost text block coordinates of the line where the keyword is located, and the lower right corner coordinates are the rightmost text block coordinates of the line below the keyword: area The coordinate range is: , ; Targeted area , according to the preset keyword "set expiration date", match the corresponding text block, determine its coordinate position according to the matched keyword, and determine the coordinate of the upper left corner of the issuer information area based on the keyword coordinates and the distribution of the text block and the lower right corner coordinates , where the upper left corner coordinates are the leftmost text block coordinates of the line where the keyword is located, and the lower right corner coordinates are the rightmost text block coordinates of the line below the keyword: area The coordinate range is: , ; S2122. Repeat step S2121 to divide the enterprise check data, enterprise purchase invoice data, and enterprise sales invoice data into regions, wherein: For corporate check data, region The default keyword is "Drawer Bank Account Number", area The default keyword is "amount", area The default keyword is "Issuance Date", area The default keyword is "check number"; For corporate purchase invoice data, region The preset keywords are "product name", "specification", "quantity", "unit price", and region The default keyword is "amount", area The default keyword is "Invoice Tax Number", area The preset keywords are "invoice number" and "invoice date"; For enterprise sales invoice data, region The preset keywords are "product name", "specification", "quantity", "unit price", and region The default keyword is "amount", area The default keyword is "Invoice Tax Number", area The preset keywords are "invoice number" and "invoice date".
6. A data management method according to claim 4, characterized in that: The S22 comprises the following sub-steps: S221. Based on the type of enterprise, enterprises are divided into industrial and trade enterprises, financial service enterprises, and technology and information enterprises. Enterprises are divided based on the current business scope of the enterprise; S222. Based on the characteristics of the enterprise type, the regional sensitivity of the bills of exchange, checks, purchase invoices and sales invoices after regional division is divided. The specific steps are as follows: For industrial and trade enterprises: Level 1 sensitivity areas are: , , , , , ; Level 2 sensitivity areas are: , , , , ; Level 3 sensitivity areas are: , , , , ; For financial services companies: Level 1 sensitivity areas are: , , , ; Level 2 sensitivity areas are: , , , , ; Level 3 sensitivity areas are: , , , , , , ; For technology and information companies: Level 1 sensitivity areas are: , , ; Level 2 sensitivity areas are: , , , , , , ; Level 3 sensitivity areas are: , , , , , .
7. A data management method according to claim 6, characterized in that: The S3 comprises the following sub-steps: S31. Based on the employee files in the current enterprise employee information database and in combination with different bill sensitivity levels under the enterprise type, account permissions are set for each employee file through the administrator account, where: The sensitivity range for accessing level 1 accounts is: level 1, level 2, and level 3; The sensitivity range for accessing Level 2 permission accounts is: Level 2, Level 3; The sensitivity range for accessing level 3 accounts is: Level 3; S32. Based on the different areas divided by the bill, the different levels of areas are separately encrypted using the RSA algorithm, and decryption keys are assigned to different authority levels.
8. A data management system, characterized in that: The method adopts the data management method as described in any one of claims 1 to 7, including a bill data collection module, an employee information collection module, a summary and sorting module, a region division and sensitivity setting module, and a permission matching module; The bill data collection module is used to collect corporate bill information, including bills of exchange, checks, purchase invoices, and sales invoices, and transmit them to the summary and sorting module; The employee information collection module is used to collect internal employee information of the enterprise, including employee name, department, position, length of service, contact information, and transmit it to the summary and sorting module; The summarizing and arranging module is based on Establish an enterprise employee information database and create a file for each employee of the enterprise. The file content includes the employee's name, department, position, length of service, and contact information. The employee files in the enterprise employee information database are summarized according to the department; The regional division and sensitivity setting module organizes the enterprise bill data, divides different types of bills into regions based on the type of bill, and sets the sensitivity level of the regions divided by different bills in combination with the enterprise type; The permission matching module, in combination with the enterprise type, grants the enterprise's corresponding personnel account permission level through the administrator account, matches the sensitivity level of different bills, and encrypts different areas of the bill separately to ensure that enterprise employees with different permissions can only query the bill information that matches their own level.
Citation Information
Patent Citations
Financial data management system based on big data
CN112801549A
Bill management method established based on industry characteristics
CN115827798A
Enterprise data visual management method based on BIM (Building Information Modeling) technology
CN118644114A
Bill data hierarchical encryption system and method
CN118965440A
System for managing electronic bill and method therefor
KR1020150138926A