Multi-level authority management method, device and equipment based on power internet of things, and storage medium

Abstract

The invention discloses a multi-level authority management method, device and equipment based on an electric power internet of things, and a storage medium. The method comprises the following steps: obtaining an operation request sent by a target user in the power Internet of Things system, and obtaining user identity information and a request execution permission according to the operation request; verifying the user identity information, and determining whether the target user is a legal user; if yes, according to the user identity information, determining the role operation authority of the target user based on a role operation authority list pre-constructed in the power Internet of Things system; and executing the operation request based on the request execution permission according to the role operation permission. The operation request is executed according to the request execution permission of the sent operation request and the user role permission of the target user. According to the invention, authority checking can be carried out before request operation is carried out on the target user, so that unauthorized operation is avoided, and the overall safety and stability of the power Internet of Things system are ensured.

Description

Technical Field

[0001] The present invention relates to the technical field of resource authority management, and in particular to a multi-level authority management method, device, equipment and storage medium based on electric power Internet of Things. Background Art

[0002] With the rapid development of power Internet of Things technology, remote operation and maintenance of power systems has become a key means to ensure the stable operation of power systems. Power Internet of Things can achieve real-time monitoring and remote operation of power equipment by connecting sensors, smart devices and communication networks. Specifically, the power Internet of Things system usually involves a multi-level, multi-role user structure, and the user's operating permissions vary depending on their level and role.

[0003] However, traditional permission management methods are difficult to flexibly adapt to this complex user structure, which often leads to problems such as excessive or insufficient permissions, which in turn affects the security and operational efficiency of the system. In addition, with the increase in the number of devices and the increase in system complexity, traditional permission management methods face many challenges in the remote operation and maintenance of the power Internet of Things. Therefore, how to ensure the rationality of remote operation and maintenance permission management in the power Internet of Things system has become an urgent problem to be solved. Summary of the invention

[0004] The present invention provides a multi-level authority management method, device, equipment and storage medium based on the power Internet of Things to implement authority checking of target users and avoid unauthorized operations, thereby ensuring the security and stability of the power Internet of Things system.

[0005] According to one aspect of the present invention, a multi-level authority management method based on power Internet of Things is provided, comprising:

[0006] Obtain an operation request sent by a target user in the power Internet of Things system, and obtain user identity information and request execution authority according to the operation request;

[0007] Verifying the user identity information to determine whether the target user is a legitimate user;

[0008] If yes, determining the role operation authority of the target user according to the user identity information and based on the role operation authority list pre-constructed in the power Internet of Things system;

[0009] According to the role operation authority, based on the request execution authority, the operation request is executed.

[0010] According to another aspect of the present invention, a multi-level authority management device based on the power Internet of Things is provided, comprising:

[0011] An acquisition module is used to acquire an operation request sent by a target user in the power Internet of Things system, and obtain user identity information and request execution authority according to the operation request;

[0012] A verification module, used to verify the user identity information and determine whether the target user is a legitimate user;

[0013] A determination module, configured to determine the role operation authority of the target user according to the user identity information and based on a role operation authority list pre-constructed in the power Internet of Things system after determining that the target user is a legitimate user;

[0014] An execution module is used to execute the operation request according to the role operation authority and based on the request execution authority.

[0015] According to another aspect of the present invention, an electronic device is provided, the electronic device comprising:

[0016] at least one processor; and

[0017] a memory communicatively connected to the at least one processor; wherein,

[0018] The memory stores a computer program that can be executed by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the multi-level authority management method based on the power Internet of Things described in any embodiment of the present invention.

[0019] According to another aspect of the present invention, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the multi-level authority management method based on the power Internet of Things described in any embodiment of the present invention when executed.

[0020] The technical solution of the embodiment of the present invention obtains the operation request sent by the target user in the power Internet of Things system, and obtains the user identity information and the requested execution authority according to the operation request; verifies the user identity information to determine whether the target user is a legitimate user; then, based on the role operation authority list pre-constructed in the power Internet of Things system, determines the role operation authority of the target user; and executes the operation request based on the role operation authority and the requested execution authority. This solution can verify the role operation authority of the target user when the identity information of the target user is verified, and when the role operation authority verification is passed, the corresponding operation can be performed in the power Internet of Things system. Effective management of operation authority information in the power Internet of Things is achieved to ensure the security and stability of the overall operation of the system. It can also solve the problem that the existing authorization management method is difficult to flexibly adapt to complex user structures.

[0021] It should be understood that the contents described in this section are not intended to identify the key or important features of the embodiments of the present invention, nor are they intended to limit the scope of the present invention. Other features of the present invention will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0022] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0023] Figure 1 This is a flowchart of a multi-level authority management method based on the power Internet of Things provided according to the first embodiment of the present invention;

[0024] Figure 2 This is a flowchart of a multi-level authority management method based on the power Internet of Things provided according to the second embodiment of the present invention;

[0025] Figure 3 This is a structural diagram of a multi-level authority management device based on the power Internet of Things provided according to Embodiment 3 of the present invention;

[0026] Figure 4 It is a structural schematic diagram of an electronic device that implements the multi-level authority management method based on the power Internet of Things according to an embodiment of the present invention. DETAILED DESCRIPTION

[0027] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0028] It should be noted that the terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0029] Embodiment 1

[0030] Figure 1 A flowchart of a multi-level permission management method based on the power Internet of Things is provided for the first embodiment of the present invention. This embodiment is applicable to situations involving a multi-level, multi-role user structure in the power Internet of Things system. The method can be executed by a multi-level permission management device based on the power Internet of Things. The multi-level permission management device based on the power Internet of Things can be implemented in the form of hardware and / or software. The multi-level permission management device based on the power Internet of Things can be configured in an electronic device. Figure 1 As shown, the method includes:

[0031] S110. Acquire an operation request sent by a target user in the power Internet of Things system, and obtain user identity information and request execution authority according to the operation request.

[0032] Among them, the operation request can be an operation request for equipment or data initiated by the target user in the power Internet of Things system. Specifically, it can be a request to control the equipment, such as a request to start, stop or restart the equipment; it can also be a request to access data, such as a request to read, modify or delete data.

[0033] The user identity information may be the basic information of the target user, including user name, password, user status, etc. The requested execution permission may be the specific permission required to execute the operation initiated by the target user. For example, if the target user initiates an operation to restart the monitoring device, the permission to restart the monitoring device is required.

[0034] Specifically, according to different operation requirements initiated by the target user in the power Internet of Things system, the basic identity information of the target user and the operation execution authority required for the initiated operation requirements can be obtained.

[0035] Preferably, before obtaining the operation request initiated by the target user, a login authentication service is required according to the user name and login password entered by the target user. Through the login authentication service, the user information is obtained, and the login credentials in the login request are verified; after the verification is passed, a login token containing the user name, role information and expiration time is generated, returned to the client and stored locally.

[0036] S120: Verify the user identity information to determine whether the target user is a legitimate user.

[0037] Among them, legitimate users may be users who can initiate operation requests in the power Internet of Things system.

[0038] Continuing with the above example, after receiving the operation request from the target user, the login token of the target user can be extracted from the operation request, and the login token can be verified using the public key provided by the authentication service to ensure that the token has not been tampered with. At the same time, the validity of the login token is verified, such as checking whether the token has expired. If the verification is successful, the user identity information in the login token is extracted to determine whether the target user is a user who can initiate an operation request in the power Internet of Things system.

[0039] Optionally, the user identity information is verified to determine whether the target user is a legitimate user, including: obtaining the legitimate identity information and its corresponding identity information authentication identifier from a user identity information database; based on the identity information authentication identifier, matching the legitimate identity information with the user identity information to obtain an identity information matching result; and determining whether the target user is a legitimate user based on the identity information matching result.

[0040] Among them, the legal identity information can be the identity information of a pre-set user who can initiate an operation request to the power Internet of Things system, which may specifically include information such as user name, password, and user status.

[0041] Among them, the identity authentication identifier can be data used to determine the identity of a user who has been authorized to perform specific operations in the power Internet of Things system, which may include biometric information such as mobile phone number, user key, and fingerprint.

[0042] Specifically, after receiving the user identity information in the login token, the identification information in the login token used to verify the user identity information can be matched with the user identity information that can initiate operation requests pre-stored in the identity information database to determine whether the target user is a legitimate user. Exemplarily, the fingerprint information of the target user can be obtained and matched with the pre-stored fingerprint information to determine whether the target user is a legitimate user based on the matching result of the fingerprint information.

[0043] S130: If yes, determine the role operation authority of the target user according to the user identity information and based on the role operation authority list pre-built in the power Internet of Things system.

[0044] The role operation authority may be the authority of the user to perform operations set in advance in the power Internet of Things system, and may include role information such as on-site operation and maintenance personnel, remote monitoring personnel, dispatchers, system administrators, etc. For example, on-site operation and maintenance personnel can access and operate on-site equipment, and remote monitoring personnel can view real-time data and alarm information of equipment, but cannot directly operate the equipment.

[0045] Furthermore, a role operation permission inheritance mechanism can also be supported. Specifically, roles with advanced operation permissions can be allowed to inherit the permissions of basic operation permission roles, and expand unique advanced role operation permissions. For example, the "senior operation and maintenance personnel" role can add emergency operation permissions based on the "field operation and maintenance personnel" role. For example, when the equipment is overheated, the field operation and maintenance personnel can cool the equipment down; while the senior operation and maintenance personnel can directly control the equipment to stop running. This embodiment does not impose specific restrictions on this.

[0046] Among them, determining the role operation authority of the target user can specifically be to determine the operation requirements that the target user can execute when determining that the target user is a legitimate user. For example, the target user may correspond to the role of an on-site operation and maintenance personnel, and then the target user's operation requests to access and operate on-site equipment can be executed.

[0047] S140: Execute the operation request according to the role operation authority and based on the request execution authority.

[0048] Specifically, the execution of the operation request may be based on the operation request initiated by the target user, and the authority required to execute the operation request is verified with the authority of the target user to execute the operation request. After the authority verification is passed, the operation request initiated by the target user is executed. For example, when the target user initiates an operation request to view the real-time data of the device, it is obtained whether the target user has the operation authority to view the real-time data of the device. If so, the target user is allowed to view the real-time data of the device.

[0049] Optionally, the operation request is executed according to the role operation permission and based on the request execution permission, including: obtaining the role operation permission configuration data of the target user and the request execution permission configuration data corresponding to the operation request; performing data verification on the role operation permission configuration data and the request execution permission configuration data to obtain a permission configuration data verification result; and executing the operation request according to the permission configuration data verification result.

[0050] Among them, the permission configuration data may refer to the system permissions that are pre-configured in the power Internet of Things system and available to users, which may specifically include functional permissions and data permissions; among them, functional permissions may refer to the function menu that users can see when logging into the power Internet of Things system and the functional operation permissions they have in the menu; data permissions may refer to the data range that users can see when opening the corresponding function menu page.

[0051] The result of obtaining the permission configuration data verification can specifically be the comparison result obtained by comparing the system permissions that the target user can use in the power Internet of Things system with the system permissions required to execute the operation requirements. Specifically, it can be that the target user initiates an operation on the field equipment in the power Internet of Things system, and at the same time obtains the pre-configured system permissions that the target user can use to operate the field equipment in the power Internet of Things system, obtains the result of passing the permission configuration data verification, and executes the target user's operation requirements on the field equipment.

[0052] Preferably, it is also possible to perform an authentication service on the input credentials of the target user for accessing the power Internet of Things system, such as a user name and password. If the verification is successful, an access token is generated and returned. The target user is controlled to access the power Internet of Things system and perform corresponding operations based on the access token. The user's access status can also be tracked to prevent attacks such as access hijacking. Furthermore, when the target user actively logs out of access, the authentication service can clear the target user's access data and invalidate the generated access token. Specifically, the access timeout can also be set to automatically log out the user when the user is inactive for a long time; the system access time can also be automatically extended when the target user continues to use the system beyond the access validity period.

[0053] Optionally, after executing the operation request based on the requested execution authority according to the role operation authority, it also includes: recording the operation log data of the operation request and storing it in a structured format; the operation log data includes the target user login time, requested execution authority and target user role operation authority and changes in the target user role operation authority, and is displayed through a visual interface; setting access rights to the operation log data for access or query.

[0054] The change of the target user role permissions may include adding and / or deleting roles, adjusting role operation permissions, changing user roles, and other permission change operations.

[0055] Specifically, when the target user performs operations in the power Internet of Things system, such as logging in, modifying configurations, or managing equipment, the logging service of the operation log management module captures the operation and records the detailed information in the log database. Among them, the log database can store the operation log in a structured manner and support subsequent rapid retrieval and analysis, such as constructing a structured storage method such as a tree diagram. Furthermore, the operation log can be analyzed through a log analysis tool to identify potential security threats and generate an analysis report. Furthermore, during the system audit process, detailed operation records can be provided based on the operation log management module to help auditors trace and analyze the system operation history.

[0056] In an optional scheme of this example, it can be combined with one or more optional schemes in this embodiment. Optionally, after data verification is performed on the role operation permission configuration data and the request execution permission configuration data to obtain the permission configuration data verification result, it also includes: caching the result of data verification of the target user, and recording the role operation permission configuration data and the request execution permission configuration data, so that when the target user repeatedly executes the operation request, the operation request is executed according to the cached data verification result.

[0057] Specifically, distributed caching technologies such as Redis (Remote Dictionary Server) can be used to cache the target user's permission information, where the permission information can include key data such as the target user's identity information, identity authentication identifier, requested operation permissions, and role operation permissions. Furthermore, when the target user repeatedly initiates the same operation request, the operation request can be directly executed based on the cached permission information. Redis distributed caching technology can be used to reduce the need to access the database each time the permission verification is performed, thereby speeding up the permission verification process.

[0058] Furthermore, when permission information changes, such as when roles are added and / or deleted, role operation permissions are adjusted, or user roles are changed, a cache update service can be triggered to refresh the permission information in the cache. Among them, cache updates can adopt active refresh or delayed elimination strategies. Active refresh can mean that permission changes immediately trigger cache updates, while delayed elimination can mean checking the validity and updating the next time the permission is accessed. The cache update mechanism can ensure that after permissions change, all nodes in the system can quickly obtain the latest permission information to avoid expired or inconsistent permissions.

[0059] The technical solution of the embodiment of the present invention obtains the operation request sent by the target user in the power Internet of Things system, and obtains the user identity information and the requested execution authority according to the operation request; verifies the user identity information to determine whether the target user is a legitimate user; further, based on the role operation authority list pre-constructed in the power Internet of Things system, determines the role operation authority of the target user; and executes the operation request based on the role operation authority and the requested execution authority. The present invention can verify the role operation authority of the target user when the identity information of the target user is verified, and when the role operation authority verification is passed, the corresponding operation can be performed in the power Internet of Things system. Effective management of the operation authority information in the power Internet of Things is achieved to ensure the security and stability of the overall operation of the system. It can also solve the problem that the existing authorization management method is difficult to flexibly adapt to complex user structures.

[0060] Embodiment 2

[0061] Figure 2 This is a flow chart of a multi-level authority management method based on the power Internet of Things provided in the second embodiment of the present invention. Based on the above technical solutions, this embodiment further optimizes the above multi-level authority management method.

[0062] Furthermore, before the step of "obtaining the operation request sent by the target user in the power Internet of Things system, and obtaining the user identity information and the request execution authority according to the operation request", add the step of "obtaining the authority level that needs to be managed in the power Internet of Things system and its corresponding request operation authority, and determining the legal operation user and user role information of the authority level; generating the field identifier corresponding to the request operation authority, and establishing the mapping relationship between the field identifier and the legal operation user to obtain the mapping relationship between the request operation authority and the user role information; generating a role operation authority list including at least one mapping relationship between the request operation authority and the user role information." to improve the construction method of the role operation authority list. Figure 2 As shown, the method includes:

[0063] S210: Obtain the authority level that needs to be managed in the power Internet of Things system and its corresponding request operation authority, and determine the legal operation users and user role information of the authority level.

[0064] Among them, the authority level can be to divide the system's operating permissions into different levels or categories according to different needs and security requirements in the power Internet of Things system.

[0065] The legal operation user may be an operation user with corresponding role operation authority pre-assigned to each authority level. The user role information may be the identity information of the operation user with role operation authority pre-assigned to each authority level.

[0066] Specifically, the administrator of the power Internet of Things system can set corresponding operating users for different levels or categories of operating permissions that need to be managed in the system through a visual interface in the management console, and store the identity information of the operating users accordingly.

[0067] Furthermore, the operating users at each level of authority can be adjusted in real time according to the changes in operation records, system status, and operation and maintenance tasks. For example, in the event of a sudden failure, the system can temporarily grant emergency operation authority to specific personnel and automatically revoke it afterwards. In this embodiment, authority can be dynamically allocated based on the real-time situation of the on-site equipment of the power Internet of Things system, so as to improve the efficiency of on-site operation and maintenance and avoid the spread of faults due to insufficient authority.

[0068] Optionally, after obtaining the permission level that needs to be managed in the electric power Internet of Things system and its corresponding request operation permission, and determining the legitimate operation users and user role information of the permission level, it also includes: obtaining power fault information, and adjusting the user role information according to the power fault information; based on the adjusted user role information, making corresponding adjustments to the role operation permission of the legitimate operation user; when the legitimate operation user has at least two user role information, merging the role operation permissions according to the priority of the user role information to obtain the target operation permission of the legitimate operation user.

[0069] Among them, the power fault information can be the fault information of the field equipment obtained through the power Internet of Things system. Specifically, it can be the fault data such as the detection that the operating temperature of the field equipment is too high, or the detection that the current in the equipment is too large.

[0070] Among them, the target operation authority may refer to all role operation authorities possessed by the operation users assigned to each authority level. For example, the operation user may have the authority to access and operate on-site equipment, and may also have the authority to view the real-time data and alarm information of the equipment, which are all called the target operation authority of the operation user.

[0071] Specifically, a user-role association table can be constructed in the user role mapping unit to record the association relationship between user identity information and role identity information, and support the mapping of multiple role identity information. Further, the association table can include the mapping relationship between user identity information and role identity information, and the user role mapping unit can also obtain the fault information of the power system, and dynamically adjust the role for the corresponding user based on the fault information, thereby adjusting the corresponding role operation authority.

[0072] Preferably, the target user may have multiple roles, for example, including the roles of "device administrator" and "alarm handler". Specifically, the device administrator may refer to the manager who accesses and records the operation data of the device; the alarm handler may refer to the manager who handles the alarm information of the device. Furthermore, permissions can also be merged according to the priority of the role operation permissions based on the user role mapping unit, and ensure that the permissions of the high-priority role are applied first when permissions conflict. Exemplarily, the role priority of the alarm handler may be higher than the role priority of the device administrator, that is, when the target user has the role operation permissions of both the device administrator and the alarm handler, the priority of processing the alarm information of the field device is higher than the priority of collecting the data information of the field device. This embodiment does not impose specific restrictions on this.

[0073] S220: Generate a field identifier corresponding to the requested operation authority, and establish a mapping relationship between the field identifier and the legal operation user to obtain a mapping relationship between the requested operation authority and the user role information.

[0074] The field identifier may specifically be a data identifier for indicating the requested operation authority corresponding to the operation request initiated by the target user.

[0075] The requested operation authority and user role information may be obtained by utilizing the correspondence between the field identifier and the requested operation authority, and generating a mapping relationship between the requested operation authority and the user role information according to the user role information of the legal operation user pre-assigned to each authority level.

[0076] Accordingly, a field identifier corresponding to the requested operation authority is generated, and a mapping relationship between the field identifier and the legal operation user is established, including: generating a field identifier corresponding to the target operation authority, and establishing a mapping relationship between the field identifier corresponding to the target operation authority and the legal operation user.

[0077] Specifically, the legal operating users pre-assigned to each permission level can have multiple role operating permissions, such as device management operating permissions and alarm processing operating permissions, which are all target operating permissions for legal operating users. Furthermore, field identifiers corresponding to each operating permission can be generated, and a mapping relationship between the field identifiers corresponding to each operating permission and the legal operating users can be established.

[0078] S230: Generate a role operation permission list including a mapping relationship between at least one requested operation permission and user role information.

[0079] Among them, the user access permission list can be pre-assigned with corresponding user role information according to the permission level and corresponding request operation permission that the relevant technical personnel need to manage in the power Internet of Things system. For example, the role operation permission list can be shown in Table 1:

[0080] Table 1:

[0081]

[0082] It should be noted that an embodiment of the present invention discloses a method for constructing a role operation permission list, which is used to represent the mapping relationship between the requested operation permission and the user role information. As another optional method for representing the mapping relationship between the requested operation permission and the user role information in an embodiment of the present invention, a role operation permission association tree may also be constructed. By obtaining the permission hierarchy that needs to be managed in the electric power Internet of Things system and its corresponding requested operation permission, and determining the legitimate operation users and user role information of the permission hierarchy, a field identifier corresponding to the requested operation permission is generated, and a mapping relationship between the field identifier and the legitimate operation user is established to obtain a mapping relationship between the requested operation permission and the user role information, and a role operation permission association tree including a mapping relationship between at least one requested operation permission and the user role information is generated.

[0083] S240. Obtain an operation request sent by a target user in the power Internet of Things system, and obtain user identity information and request execution authority according to the operation request.

[0084] S250: Verify the user identity information to determine whether the target user is a legitimate user.

[0085] S260: If yes, determine the role operation authority of the target user according to the user identity information and based on the role operation authority list pre-built in the power Internet of Things system.

[0086] S270: Execute the operation request according to the role operation authority and based on the request execution authority.

[0087] The technical solution of the embodiment of the present invention obtains the permission level that needs to be managed in the power Internet of Things system and its corresponding request operation permission, and determines the legal operation users and user role information of the permission level; verifies the user identity information to determine whether the target user is a legal user; further, determines the role operation permission of the target user based on the mapping relationship between the request operation permission and the user role information; and executes the operation request based on the request execution permission according to the role operation permission. The present invention can realize flexible configuration of user identity information, role identity information and role operation permission, and when the target user passes the identity information verification and role operation permission verification, the corresponding operation can be performed in the power Internet of Things system. Effective management of operation permission information in the power Internet of Things is realized to ensure the security and stability of the overall operation of the system. It can also solve the problem that the existing authorization management method is difficult to flexibly adapt to complex user structures.

[0088] Embodiment 3

[0089] Figure 3 The schematic diagram of the structure of a multi-level permission management device based on the power Internet of Things provided in the third embodiment of the present invention. The multi-level permission management device based on the power Internet of Things provided in the embodiment of the present invention can be applied to situations involving a multi-level and multi-role user structure in the power Internet of Things system. The multi-level permission management device based on the power Internet of Things can be implemented in the form of hardware and / or software, such as Figure 3 As shown, it specifically includes: an acquisition module 310, a verification module 320, a determination module 330 and an execution module 340. Among them,

[0090] The acquisition module 310 is used to obtain the operation request sent by the target user in the power Internet of Things system, and obtain the user identity information and the request execution authority according to the operation request.

[0091] The verification module 320 is used to verify the user identity information to determine whether the target user is a legitimate user.

[0092] The determination module 330 is used to determine the role operation authority of the target user based on the user identity information and the role operation authority list pre-built in the power Internet of Things system after determining that the target user is a legitimate user.

[0093] The execution module 340 is used to execute the operation request according to the role operation authority and based on the request execution authority.

[0094] This solution can verify the role operation authority of the target user when the target user's identity information is verified, and when the role operation authority is verified, the corresponding operation can be performed in the power Internet of Things system. It realizes the effective management of the operation authority information in the power Internet of Things to ensure the security and stability of the overall operation of the system. It can also solve the problem that the existing authorization management method is difficult to flexibly adapt to the complex user structure.

[0095] Optionally, the verification module 320 is specifically used to obtain legal identity information and its corresponding identity information authentication identifier from a user identity information database; based on the identity information authentication identifier, match the legal identity information with the user identity information to obtain an identity information matching result; and determine whether the target user is a legal user based on the identity information matching result.

[0096] Optionally, the device further includes: a role operation permission list construction module 350.

[0097] The role operation permission list construction module 350 is used to obtain the permission level that needs to be managed in the power Internet of Things system and its corresponding request operation permission, and determine the legal operation users and user role information of the permission level; generate a field identifier corresponding to the request operation permission, establish a mapping relationship between the field identifier and the legal operation user, so as to obtain a mapping relationship between the request operation permission and the user role information; generate a role operation permission list including a mapping relationship between at least one request operation permission and user role information.

[0098] Optionally, the role operation permission list construction module 350 is also used to obtain power fault information, and adjust the user role information according to the power fault information; based on the adjusted user role information, make corresponding adjustments to the role operation permission of the legitimate operation user; when the legitimate operation user has at least two user role information, merge the role operation permissions according to the priority of the user role information to obtain the target operation permission of the legitimate operation user; accordingly, generate a field identifier corresponding to the requested operation permission, and establish a mapping relationship between the field identifier and the legitimate operation user, including: generating a field identifier corresponding to the target operation permission, and establishing a mapping relationship between the field identifier corresponding to the target operation permission and the legitimate operation user.

[0099] Optionally, the execution module 340 is specifically used to obtain the role operation permission configuration data of the target user and the request execution permission configuration data corresponding to the operation request; perform data verification on the role operation permission configuration data and the request execution permission configuration data to obtain a permission configuration data verification result; and execute the operation request according to the permission configuration data verification result.

[0100] Optionally, the device further includes: a recording module 360.

[0101] The recording module 360 ​​is used to record the operation log data of the operation request and store it in a structured format after executing the operation request according to the role operation permission and based on the request execution permission; the operation log data includes the target user login time, the request execution permission and the target user role operation permission and the change of the target user role operation permission, and is displayed through a visual interface; the access rights of the operation log data are set for access or query.

[0102] Optionally, the execution module 340 is also specifically used to, after performing data verification on the role operation permission configuration data and the request execution permission configuration data and obtaining the permission configuration data verification result, cache the result of the data verification on the target user, and record the role operation permission configuration data and the request execution permission configuration data, so that when the target user repeatedly executes the operation request, the operation request is executed according to the cached data verification result.

[0103] The multi-level authority management device based on the power Internet of Things provided in the embodiment of the present invention can execute the multi-level authority management method based on the power Internet of Things provided in any embodiment of the present invention, and has the functional modules and beneficial effects corresponding to the execution method.

[0104] Example 4

[0105] Figure 4 A schematic diagram of the structure of an electronic device 40 that can be used to implement an embodiment of the present invention is shown. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital processing, cellular phones, smart phones, wearable devices (such as helmets, glasses, watches, etc.) and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely examples and are not intended to limit the implementation of the present invention described and / or required herein.

[0106] like Figure 4As shown, the electronic device 40 includes at least one processor 41, and a memory connected to the at least one processor 41, such as a read-only memory (ROM) 42, a random access memory (RAM) 43, etc., wherein the memory stores a computer program that can be executed by at least one processor, and the processor 41 can perform various appropriate actions and processes according to the computer program stored in the read-only memory (ROM) 42 or the computer program loaded from the storage unit 48 to the random access memory (RAM) 43. In the RAM 43, various programs and data required for the operation of the electronic device 40 can also be stored. The processor 41, the ROM 42, and the RAM 43 are connected to each other through a bus 44. An input / output (I / O) interface 45 is also connected to the bus 44.

[0107] A number of components in the electronic device 40 are connected to the I / O interface 45, including: an input unit 46, such as a keyboard, a mouse, etc.; an output unit 47, such as various types of displays, speakers, etc.; a storage unit 48, such as a disk, an optical disk, etc.; and a communication unit 49, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 49 allows the electronic device 40 to exchange information / data with other devices through a computer network such as the Internet and / or various telecommunication networks.

[0108] The processor 41 may be a variety of general and / or special processing components with processing and computing capabilities. Some examples of the processor 41 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, digital signal processors (DSPs), and any appropriate processors, controllers, microcontrollers, etc. The processor 41 executes the various methods and processes described above, such as a multi-level authority management method based on the power Internet of Things.

[0109] In some embodiments, the multi-level permission management method based on the power Internet of Things can be implemented as a computer program, which is tangibly contained in a computer-readable storage medium, such as a storage unit 48. In some embodiments, part or all of the computer program can be loaded and / or installed on the electronic device 40 via the ROM 42 and / or the communication unit 49. When the computer program is loaded into the RAM 43 and executed by the processor 41, one or more steps of the multi-level permission management method based on the power Internet of Things described above can be performed. Alternatively, in other embodiments, the processor 41 can be configured to execute the multi-level permission management method based on the power Internet of Things in any other appropriate manner (for example, by means of firmware).

[0110] Various implementations of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), load programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various implementations can include: being implemented in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which can be a special purpose or general purpose programmable processor that can receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit data and instructions to the storage system, the at least one input device, and the at least one output device.

[0111] Computer programs for implementing the methods of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, so that when the computer program is executed by the processor, the functions / operations specified in the flow chart and / or block diagram are implemented. The computer program may be executed entirely on the machine, partially on the machine, partially on the machine and partially on a remote machine as a stand-alone software package, or entirely on a remote machine or server.

[0112] In the context of the present invention, a computer-readable storage medium may be a tangible medium that may contain or store a computer program for use by or in combination with an instruction execution system, device or equipment. A computer-readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, devices or equipment, or any suitable combination of the foregoing. Alternatively, a computer-readable storage medium may be a machine-readable signal medium. A more specific example of a machine-readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0113] To provide interaction with a user, the systems and techniques described herein may be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and a pointing device (e.g., a mouse or trackball) through which the user can provide input to the electronic device. Other types of devices may also be used to provide interaction with the user; for example, the feedback provided to the user may be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user may be received in any form (including acoustic input, voice input, or tactile input).

[0114] The systems and techniques described herein may be implemented in a computing system that includes backend components (e.g., as a data server), or a computing system that includes middleware components (e.g., an application server), or a computing system that includes frontend components (e.g., a user computer with a graphical user interface or a web browser through which a user can interact with implementations of the systems and techniques described herein), or a computing system that includes any combination of such backend components, middleware components, or frontend components. The components of the system may be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: a local area network (LAN), a wide area network (WAN), a blockchain network, and the Internet.

[0115] A computing system may include a client and a server. The client and the server are generally remote from each other and usually interact through a communication network. The client and server relationship is generated by computer programs running on the corresponding computers and having a client-server relationship with each other. The server may be a cloud server, also known as a cloud computing server or cloud host, which is a host product in the cloud computing service system to solve the defects of difficult management and weak business scalability in traditional physical hosts and VPS services.

[0116] It should be understood that the various forms of processes shown above can be used to reorder, add or delete steps. For example, the steps described in the present invention can be executed in parallel, sequentially or in different orders, as long as the desired results of the technical solution of the present invention can be achieved, and this document does not limit this.

[0117] The above specific implementations do not constitute a limitation on the protection scope of the present invention. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions can be made according to design requirements and other factors. Any modification, equivalent substitution and improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. A multi-level authority management method based on power Internet of Things, characterized in that: include: Obtain an operation request sent by a target user in the power Internet of Things system, and obtain user identity information and request execution authority according to the operation request; Verifying the user identity information to determine whether the target user is a legitimate user; If yes, determining the role operation authority of the target user according to the user identity information and based on the role operation authority list pre-constructed in the power Internet of Things system; According to the role operation authority, based on the request execution authority, the operation request is executed.

2. The method according to claim 1, characterized in that Verifying the user identity information to determine whether the target user is a legitimate user includes: Obtain legal identity information and its corresponding identity information authentication identifier from the user identity information database; Based on the identity information authentication identifier, matching the legal identity information with the user identity information to obtain an identity information matching result; According to the identity information matching result, it is determined whether the target user is a legitimate user.

3. The method according to claim 1, characterized in that The role operation permission list is constructed as follows: Obtain the permission level that needs to be managed in the power Internet of Things system and its corresponding request operation permission, and determine the legal operation user and user role information of the permission level; Generate a field identifier corresponding to the requested operation authority, and establish a mapping relationship between the field identifier and the legal operation user to obtain a mapping relationship between the requested operation authority and the user role information; A role operation permission list including a mapping relationship between at least one requested operation permission and user role information is generated.

4. The method according to claim 3, characterized in that After obtaining the permission level that needs to be managed in the power Internet of Things system and its corresponding request operation permission, and determining the legal operation user and user role information of the permission level, it also includes: Acquire power failure information, and adjust the user role information according to the power failure information; Based on the adjusted user role information, the role operation authority of the legal operation user is adjusted accordingly; When the legal operating user has at least two user role information, the role operation permissions are merged according to the priority of the user role information to obtain the target operation permission of the legal operating user; Accordingly, generating a field identifier corresponding to the requested operation authority and establishing a mapping relationship between the field identifier and the legal operation user includes: Generate a field identifier corresponding to the target operation authority, and establish a mapping relationship between the field identifier corresponding to the target operation authority and the legal operation user.

5. The method according to claim 1, characterized in that Executing the operation request according to the role operation authority and based on the request execution authority includes: Obtaining the role operation permission configuration data of the target user and the request execution permission configuration data corresponding to the operation request; Performing data verification on the role operation permission configuration data and the request execution permission configuration data to obtain a permission configuration data verification result; The operation request is executed according to the verification result of the permission configuration data.

6. The method according to claim 1, characterized in that After executing the operation request according to the role operation authority and based on the request execution authority, the method further includes: The operation log data of the operation request is recorded and stored in a structured format; the operation log data includes the target user login time, the requested execution authority and the target user role operation authority and the change of the target user role operation authority, and is displayed through a visual interface; Set access permissions for the operation log data for access or query.

7. The method according to claim 5, characterized in that After the role operation permission configuration data and the request execution permission configuration data are verified to obtain the permission configuration data verification result, the method further includes: The result of data verification for the target user is cached, and the role operation permission configuration data and the request execution permission configuration data are recorded, so that when the target user repeatedly executes the operation request, the operation request is executed according to the cached data verification result.

8. A multi-level authority management device based on the power Internet of Things, characterized in that: include: An acquisition module is used to acquire an operation request sent by a target user in the power Internet of Things system, and obtain user identity information and request execution authority according to the operation request; A verification module, used to verify the user identity information and determine whether the target user is a legitimate user; A determination module, configured to determine the role operation authority of the target user according to the user identity information and based on a role operation authority list pre-constructed in the power Internet of Things system after determining that the target user is a legitimate user; An execution module is used to execute the operation request according to the role operation authority and based on the request execution authority.

9. An electronic device, characterized in that: The electronic device comprises: at least one processor; and a memory communicatively connected to the at least one processor; wherein, The memory stores a computer program executable by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the multi-level authority management method based on the power Internet of Things as described in any one of claims 1-7.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the multi-level authority management method based on the power Internet of Things according to any one of claims 1 to 7 when executed.

Images