Enterprise information sharing management method, system, device and storage medium

Abstract

The present application discloses a method, system, device and storage medium for enterprise information sharing management, which is convenient for managing enterprise data, and can promote collaboration and communication between departments within the enterprise, and improve the efficiency and value of data utilization. The present application method includes: obtaining department data uploaded by each department, and judging whether the format of the department data uploaded by each department conforms to the upload format through regular expressions; when it is determined that the format of the department data conforms to the upload format, automatically generating a unique identification mark according to the department data, and the identification mark contains a timestamp and the department information corresponding to the department data; classifying the department data according to the department information to obtain classified data; uploading the classified data to the information management system; when receiving the application information of the target data, judging whether the access right is available according to the application information.

Description

Technical Field

[0001] The present application relates to the field of enterprise data processing technology, and in particular to an enterprise information sharing management method, system, device and storage medium. Background Art

[0002] In modern enterprise management, data sharing has become an important means to improve business collaboration efficiency, especially within large enterprises or groups, where departments often need to exchange and share data to ensure the accuracy and timeliness of information. Currently, data sharing methods usually rely on simple file sharing systems. Although this method has achieved data circulation to a certain extent, it has many defects.

[0003] When departments process data, due to the lack of unified data format specifications, the data formats are diverse, making it difficult to manage and process them uniformly. In the process of data sharing, there is a lack of effective access control and encryption measures. Sensitive data may be accessed by unauthorized departments or individuals, causing the risk of data leakage, thereby affecting data security. Summary of the invention

[0004] In order to solve the above technical problems, the present application provides an enterprise information sharing management method, system, device and storage medium.

[0005] The technical solution provided in this application is described below:

[0006] The first aspect of the present application provides an enterprise information sharing management method, characterized in that the method comprises:

[0007] Obtain the department data uploaded by each department, and determine whether the format of the department data uploaded by each department complies with the upload format through a regular expression;

[0008] When it is determined that the format of the department data conforms to the upload format, a unique identification mark is automatically generated according to the department data, and the identification mark includes a timestamp and department information corresponding to the department data;

[0009] Classifying the department data according to department information to obtain classified data;

[0010] Uploading the classified data to an information management system;

[0011] When receiving application information for target data, determining whether access rights are granted according to the application information;

[0012] If so, determining whether to approve the application for the target data according to the access permission;

[0013] When approval is determined, an access credential is generated according to the application information, wherein the access credential includes an identification code for identifying the target data;

[0014] Retrieving the target data from the information management system according to the identification code;

[0015] Encrypt the target data using an encryption algorithm to obtain encrypted data;

[0016] An encrypted credential is generated according to the encrypted data, and the encrypted credential is sent to an authorized department, so that the authorized department can view the target data through the encrypted credential.

[0017] Optionally, judging whether the format of the department data uploaded by each department complies with the upload format by using a regular expression includes:

[0018] Identify predefined regular expressions;

[0019] Parsing the department data uploaded by each department to obtain key fields of the department data;

[0020] Obtaining the format of the key field;

[0021] It is determined whether the format of the key field complies with the upload format according to the regular expression.

[0022] Optionally, a unique identification mark is automatically generated according to the department data, and the identification mark includes a timestamp and department information corresponding to the department data, including:

[0023] Obtaining the upload time of the department data, and using the upload time as the upload timestamp;

[0024] Reading an uploaded department information field of the department data, wherein the information field includes a department number or a department name;

[0025] The upload timestamp and the department information field are combined into a target character string, and a unique identification mark is generated according to the target character string through a hash algorithm, wherein the identification mark includes the timestamp and the department information corresponding to the department data.

[0026] Optionally, when the application information is received, determining whether the access right is granted according to the application information includes:

[0027] When receiving the application information, parsing the user identity in the application information;

[0028] Whether the user has access rights is determined according to the user identity.

[0029] Optionally, judging whether to approve the application for the target data according to the access permission includes:

[0030] obtaining a permission level according to the access rights;

[0031] Obtaining the access level range of the target data;

[0032] Determining whether the permission level is within the access level range;

[0033] If not, a prompt message will appear indicating that the application has been rejected.

[0034] Optionally, generating access credentials according to the application information includes:

[0035] Generate an identification code based on the application information;

[0036] Obtain access rights and validity period of the application information;

[0037] An access credential is generated according to the identification code, the access authority and the access validity period.

[0038] Optionally, when application information of the target data is received, after determining whether the access right is granted according to the application information, the method further includes:

[0039] If not, a prompt message will appear indicating that the application has been rejected.

[0040] A second aspect of the present application provides an enterprise information sharing management system, the system comprising:

[0041] An acquisition unit, used to acquire department data uploaded by each department, and determine whether the format of the department data uploaded by each department conforms to the upload format through a regular expression;

[0042] A first generating unit, configured to automatically generate a unique identification mark according to the department data when it is determined that the format of the department data conforms to the upload format, wherein the identification mark includes a timestamp and department information corresponding to the department data;

[0043] A classification unit, used for classifying the department data according to department information to obtain classified data;

[0044] An uploading unit, used for uploading the classified data to an information management system;

[0045] A first judgment unit, configured to, when receiving application information of target data, judge whether the user has access rights according to the application information;

[0046] a second judgment unit, configured to judge whether to approve the application for the target data according to the access permission when the first judgment unit determines that the application has the access permission;

[0047] A second generating unit is configured to generate an access credential according to the application information when the second determining unit determines to approve the access application according to the access permission, wherein the access credential includes an identification code for identifying the target data;

[0048] A retrieving unit, used for retrieving the target data from the information management system according to the identification code;

[0049] An encryption unit, used for encrypting the target data using an encryption algorithm to obtain encrypted data;

[0050] The sending unit is used to generate an encrypted certificate according to the encrypted data, and send the encrypted certificate to the authorized department, so that the authorized department can view the target data through the encrypted certificate.

[0051] A third aspect of the present application provides an enterprise information sharing management device, the device comprising:

[0052] Processor, memory, input-output unit, and bus;

[0053] The processor is connected to the memory, the input and output unit, and the bus;

[0054] The memory stores a program, and the processor calls the program to execute the method as described in the first aspect and any one of the first aspects.

[0055] A fourth aspect of the present application provides a computer-readable storage medium, on which a program is stored. When the program is executed on a computer, the method described in the first aspect and any one of the first aspects is performed.

[0056] It can be seen from the above technical solutions that this application has the following advantages:

[0057] 1. Use regular expressions to verify the format of department data uploaded by each department to ensure that all uploaded data meets the predetermined format requirements, which helps to eliminate the problems caused by data format diversity and inconsistency and improve the efficiency and accuracy of data processing.

[0058] 2. Automatically generate a unique identification tag containing timestamp and department information for each department data that conforms to the format. The identification tag facilitates data retrieval and management.

[0059] 3. Classify department data according to department information and obtain classified data, which will help enterprises better organize and manage data and improve the readability and usability of data. At the same time, classified data will also facilitate subsequent data analysis and mining, providing stronger support for enterprise decision-making.

[0060] 4. When receiving the application information of the target data, determine whether the access right is granted based on the application information, and determine whether to approve the application of the target data based on the access right. This helps to ensure that only authorized departments or individuals can access sensitive data, prevent data leakage and unauthorized access, and ensure data security.

[0061] 5. Use encryption algorithms to encrypt target data to obtain encrypted data, which can protect the confidentiality and integrity of the data and prevent the data from being tampered with or stolen during transmission and storage. At the same time, encrypted data also increases the security of the data, so that even if the data is illegally obtained, it cannot be easily decrypted and used.

[0062] 6. By generating access credentials and encryption credentials, efficient sharing of data between authorized departments is achieved. Authorized departments can view target data with encrypted credentials without worrying about data security and privacy protection, thereby promoting collaboration and communication between departments within the enterprise and improving data utilization efficiency and value. BRIEF DESCRIPTION OF THE DRAWINGS

[0063] In order to more clearly illustrate the technical solution in the present application, the drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0064] Figure 1 A schematic diagram of an embodiment of the enterprise information sharing management method of the present application;

[0065] Figure 2 This is another schematic diagram of an embodiment of the enterprise information sharing management method of the present application;

[0066] Figure 3 This is another schematic diagram of an embodiment of the enterprise information sharing management method of the present application;

[0067] Figure 4 This is another schematic diagram of an embodiment of the enterprise information sharing management method of the present application;

[0068] Figure 5 This is another schematic diagram of an embodiment of the enterprise information sharing management method of the present application;

[0069] Figure 6This is another schematic diagram of an embodiment of the enterprise information sharing management method of the present application;

[0070] Figure 7 This is a schematic diagram of an embodiment of the enterprise information sharing management system of the present application;

[0071] Figure 8 This is a schematic diagram of an embodiment of the enterprise information sharing management and matching device of the present application. DETAILED DESCRIPTION

[0072] It should be noted that the talent data matching method based on big data provided in this application can be applied to a terminal, a system, or a server. For example, the terminal can be a smart phone or a computer, a tablet computer, a smart TV, a smart watch, a portable computer terminal, or a fixed terminal such as a desktop computer. For the convenience of explanation, this application uses the terminal as an example for the execution subject.

[0073] See also Figure 1 The present application first provides an embodiment of an enterprise information sharing management method, which includes:

[0074] 101. Obtain department data uploaded by each department, and determine whether the format of the department data uploaded by each department complies with the upload format through a regular expression;

[0075] 102. When it is determined that the format of the department data conforms to the upload format, a unique identification mark is automatically generated according to the department data, wherein the identification mark includes a timestamp and department information corresponding to the department data;

[0076] 103. Classify the department data according to department information to obtain classified data;

[0077] 104. Uploading the classified data to an information management system;

[0078] 105. When receiving the application information of the target data, judging whether the access right is granted according to the application information, and if not, displaying a prompt message of rejecting the application;

[0079] 106. If yes, determining whether to approve the application for the target data according to the access permission;

[0080] 107. When approval is determined, an access credential is generated according to the application information, wherein the access credential includes an identification code for identifying the target data;

[0081] 108. Retrieving the target data from the information management system according to the identification code;

[0082] 109. Encrypt the target data using an encryption algorithm to obtain encrypted data;

[0083] 110. Generate an encrypted credential based on the encrypted data, and send the encrypted credential to an authorized department, so that the authorized department can view the target data through the encrypted credential.

[0084] In an embodiment of the present application, the department data uploaded by each department is first obtained, and a regular expression is used to determine whether the format of the department data uploaded by each department conforms to the upload format. When it is determined that the format of the department data conforms to the upload format, a unique identification mark is automatically generated based on the department data, and the identification mark includes a timestamp and department information corresponding to the department data. The department data is then classified according to the department information to obtain classified data, and the classified data is uploaded to the information management system. When application information for target data is received, it is determined whether access rights are granted based on the application information. If so, it is determined whether the application for the target data is approved based on the access rights. When approval is determined, an access credential is generated based on the application information, and the access credential includes an identification code for identifying the target data. The target data is then retrieved from the information management system based on the identification code, and the target data is encrypted using an encryption algorithm to obtain encrypted data. Finally, an encrypted credential is generated based on the encrypted data, and the encrypted credential is sent to the authorized department so that the authorized department can view the target data through the encrypted credential.

[0085] In step 101, the department data uploaded by each department is obtained, and a regular expression is used to determine whether the format of the department data uploaded by each department conforms to the upload format. Specifically, the terminal provides an API interface, allowing each department to upload data through the API interface. It should be noted that before each department uploads the data, the format of the data needs to be converted into a corresponding format as required, such as CSV, Excel, JSON, etc., which is not specifically limited here.

[0086] The terminal then uses regular expressions to check whether the uploaded data conforms to the predefined format. Regular expressions can detect whether the department data conforms to the format requirements. If the data does not conform to the format requirements, the terminal will prompt to re-upload or modify the data.

[0087] In step 102, when it is determined that the format of the department data conforms to the upload format, a unique identification mark is automatically generated according to the department data, and the identification mark includes a timestamp and department information corresponding to the department data. Specifically, the terminal generates a unique identification mark for each uploaded data, and the identification mark includes a timestamp, i.e., the time when the data is uploaded, and department information, such as department ID, name, etc. The timestamp can ensure the uniqueness of the identification mark, and can distinguish even when multiple departments upload the same data.

[0088] The generated unique identifier is associated with the corresponding data and stored in the system's database, so that during subsequent data processing or query, the corresponding data can be quickly located through the identifier.

[0089] In step 103, the department data is classified according to the department information to obtain classified data; specifically, the terminal classifies the data according to the department information, such as department name, business type, etc.

[0090] The classified data is stored according to the corresponding classification rules.

[0091] In step 104, the classified data is uploaded to the information management system. During the uploading process, the integrity and consistency of the data are ensured to avoid data loss or damage. In order to improve the efficiency of data query, an index is created for the data in the information management system. The index can speed up the retrieval of the data, so that the corresponding information can be queried from the information management system later, which is convenient and fast.

[0092] In step 105, when application information for target data is received, it is determined whether the user has access rights based on the application information. If not, a prompt message to reject the application is displayed. Specifically, when a department needs to apply for target data in the information management system, it will first send an application information for the target data to the terminal. When the terminal receives the application information, it will first check the applicant's access rights. If the applicant does not have access rights to the target data, the system will immediately reject the application and send a corresponding prompt message. If the applicant has access rights to the target data, step 106 will be executed.

[0093] In step 106, whether to approve the application for the target data is determined based on the access rights. Specifically, if the applicant has access rights, the terminal will further evaluate whether the applicant's access rights are sufficient to extract the target data from the information management system. For example, some users may only have the right to view the target data, but not the right to download or modify the target data. The terminal decides whether to approve the application request for the target data based on the access rights. If the application is approved, the terminal will generate an access credential; if the application is rejected, the terminal will send a corresponding prompt message.

[0094] In step 107, when approval is determined, an access credential is generated according to the application information, and the access credential includes an identification code for identifying the target data; specifically, the terminal generates an access credential for the approved application, and the access credential includes information such as an identification code for identifying the target data, a validity period of access, and access rights. It should be noted that in order to ensure the security of the access credential, the terminal will further encrypt or sign the access credential, so that even if the access credential is leaked, the attacker cannot forge or tamper with the credential.

[0095] In step 108, the target data is retrieved from the information management system according to the identification code; specifically, when the access credential is used to access the target data, the terminal retrieves the corresponding data from the information management system according to the identification code in the access credential. It should be noted that before retrieving the data, the terminal needs to verify the validity of the identification code, which can be done by checking whether the identification code exists, whether it has expired, whether it matches the applicant's authority, etc. After determining that the identification code exists, the target data is retrieved from the information management system according to the identification code, and then step 109 is executed.

[0096] In step 109, the target data is encrypted using an encryption algorithm to obtain encrypted data; specifically, an encryption algorithm is selected to encrypt the data according to the sensitivity and security requirements of the data. The data can be encrypted using encryption algorithms such as AES and RSA. The encrypted data cannot be directly read or tampered with, and can only be decrypted using a corresponding decryption algorithm.

[0097] In step 110, an encryption certificate is generated according to the encrypted data, and the encryption certificate is sent to the authorization department so that the authorization department can view the target data through the encryption certificate. After obtaining the encrypted data, the terminal generates an encryption certificate for the encrypted data, and the encryption certificate includes the hash value of the encrypted data, the decryption key, the validity period of the access, etc. The encryption certificate is then sent to the authorization department so that the authorization department can use the encryption certificate to decrypt the encrypted data and view the target data.

[0098] To sum up, this application involves multiple links such as data uploading, format verification, classified storage, access control, data encryption and credential issuance to ensure the security, integrity and availability of data, to meet the needs of different departments, to facilitate unified management and processing of departmental data, and to improve data security.

[0099] For code examples of enterprise information sharing management methods, please refer to the following:

[0100] import re

[0101] import time

[0102] import json

[0103] from cryptography.fernet import Fernet

[0104] # Simulation Information Management System

[0105] class InformationManagementSystem:

[0106] def __init__(self):

[0107] self.data_store = {}

[0108] def upload_data(self, department, data):

[0109] self.data_store[department] = data

[0110] def fetch_data(self, dept_id):

[0111] return self.data_store.get(dept_id, None)

[0112] # Permission Management

[0113] class AccessControl:

[0114] def __init__(self):

[0115] # Assume permission data structure

[0116] self.permissions = {

[0117] 'dept_a': 'read',

[0118] 'dept_b': 'write',

[0119] # More department permissions...

[0120] }

[0121] def has_access(self, department, action):

[0122] return self.permissions.get(department) == action

[0123] # Encryption Tools

[0124] class EncryptionTool:

[0125] def __init__(self, key):

[0126] self.cipher = Fernet(key)

[0127] def encrypt(self, data):

[0128] return self.cipher.encrypt(data.encode()).decode()

[0129] def decrypt(self, encrypted_data):

[0130] return self.cipher.decrypt(encrypted_data.encode()).decode()

[0131] # Core function implementation

[0132] class DepartmentDataHandler:

[0133] def __init__(self):

[0134] self.ims = InformationManagementSystem()

[0135] self.ac = AccessControl()

[0136] self.encryption_tool = EncryptionTool(Fernet.generate_key())

[0137] def validate_data_format(self, data):

[0138] # Assume that the department data format is: "department name: data content"

[0139] pattern = r'^[\w]+:[\w\s]+$'

[0140] return re.match(pattern, data)

[0141] def generate_unique_identifier(self, department):

[0142] timestamp = int(time.time())

[0143] return f"{department}_{timestamp}"

[0144] def categorize_data(self, data):

[0145] department, content = data.split(':')

[0146] return {department: content.strip()}

[0147] def upload_department_data(self, department, data):

[0148] if self.validate_data_format(data):

[0149] unique_id = self.generate_unique_identifier(department)

[0150] categorized_data = self.categorize_data(data)

[0151] categorized_data['unique_id'] = unique_id

[0152] # Upload data to the information management system

[0153] self.ims.upload_data(department, categorized_data)

[0154] return unique_id

[0155] else:

[0156] raise ValueError("The data format does not meet the upload requirements")

[0157] def request_access(self, department, action):

[0158] if not self.ac.has_access(department, action):

[0159] return "Request denied: no access rights"

[0160] return "Access Permission Confirmation"

[0161] def generate_access_token(self, department, action):

[0162] return f"{department}_{action}_{int(time.time())}"

[0163] def encrypt_information(self, department):

[0164] data = self.ims.fetch_data(department)

[0165] if data:

[0166] encrypted_data = self.encryption_tool.encrypt(json.dumps(data))

[0167] return encrypted_data

[0168] return None

[0169] # Example Usage

[0170] handler = DepartmentDataHandler()

[0171] # Department data upload

[0172] try:

[0173] unique_id = handler.upload_department_data("dept_a", "dept_a: some data content")

[0174] print(f"Upload successful, unique identification: {unique_id}")

[0175] except ValueError as e:

[0176] print(e)

[0177] # Request access

[0178] access_response = handler.request_access("dept_a", "read")

[0179] print(access_response)

[0180] # Encrypted information

[0181] encrypted_info = handler.encrypt_information("dept_a")

[0182] print(f"Encrypted data: {encrypted_info}")

[0183] The code example involves the process of data transmission. Specifically, the department data uploaded by each department is judged by regular expressions whether the format of the department data uploaded by each department conforms to the upload format. When it is determined that the format of the department data conforms to the upload format, a unique identification mark is automatically generated according to the department data. The identification mark includes a timestamp and the department information corresponding to the department data. The department data is then classified according to the department information to obtain classified data, and the classified data is uploaded to the information management system.

[0184] Furthermore, when application information for target data is received, it is determined whether access rights are granted based on the application information. If so, it is determined whether the application for the target data is approved based on the access rights. When approval is determined, an access credential is generated based on the application information. The access credential contains an identification code for identifying the target data. The target data is then retrieved from the information management system based on the identification code, and the target data is encrypted using an encryption algorithm to obtain encrypted data. Finally, an encrypted credential is generated based on the encrypted data, and the encrypted credential is sent to the authorized department so that the authorized department can view the target data through the encrypted credential.

[0185] The format of department data uploaded by each department is verified through regular expressions to ensure that all uploaded data meets the predetermined format requirements, which helps to eliminate the problems caused by data format diversity and inconsistency, and improve the efficiency and accuracy of data processing. When receiving the application information of the target data, it determines whether the access right is granted based on the application information, and determines whether to approve the application for the target data based on the access right. This helps to ensure that only authorized departments or individuals can access sensitive data, prevent data leakage and unauthorized access, and ensure data security. Finally, by generating access credentials and encryption credentials, efficient sharing of data between authorized departments is achieved. Authorized departments can view the target data with encrypted credentials without worrying about data security and privacy protection, thereby promoting collaboration and communication between departments within the enterprise and improving the efficiency and value of data utilization.

[0186] Please refer to Figure 2 According to some embodiments of the present invention, in step 101, judging by regular expressions whether the format of the department data uploaded by each department complies with the upload format may specifically include, but is not limited to, the following:

[0187] 201. Determine a predefined regular expression;

[0188] 202. Parse the department data uploaded by each department to obtain key fields of the department data;

[0189] 203. Obtain the format of the key field;

[0190] 204. Determine whether the format of the key field complies with the upload format according to the regular expression.

[0191] In an embodiment of the present application, a predefined regular expression is first determined. The regular expression is used to check whether the uploaded department data meets specific format requirements. The regular expression can accurately check whether the string meets the predefined pattern. After the data of each department is uploaded, the terminal must parse it in order to extract the key fields of the department information for subsequent processing. Specifically, the uploaded department data is read, and then, according to the format of the data, such as CSV, JSON, etc., each field is parsed. Among the parsed fields, the terminal identifies the key fields related to the subsequent processing. The extracted key fields include department name, data upload time, data unique identifier, etc.

[0192] After identifying the key fields, further determine the specific formats of these key fields for subsequent format verification, that is, confirm the data type of each key field, such as string, integer, floating point number, date, etc., and then analyze the format of each field in depth. For example, for a string type field, you need to check its length, whether it contains special characters, etc. For a date type field, you need to confirm the date format to be followed (such as "YYYY-MM-DD" or "MM / DD / YYYY").

[0193] After obtaining the format of the key field, use regular expressions to check whether the format of the key field meets the upload requirements. For each key field, the terminal will match its value with the corresponding regular expression. If the field value meets the pattern of the regular expression, it is considered to be in the correct format; otherwise, it is considered to be in the wrong format. For fields with incorrect formats, the terminal should give a clear error prompt and require re-upload or modification of the data.

[0194] By using regular expressions, parsing data, analyzing field formats, and performing format verification, it is possible to ensure that the uploaded department data meets the predetermined format requirements, thereby facilitating subsequent data processing and analysis.

[0195] Please refer to Figure 3 According to some embodiments of the present invention, in step 102, a unique identification mark is automatically generated according to the department data, and the identification mark includes a timestamp and department information corresponding to the department data, which specifically may include, but is not limited to, the following:

[0196] 301. Obtain the upload time of the department data, and use the upload time as the upload timestamp;

[0197] 302. Read the uploaded department information field of the department data, where the information field includes a department number or a department name;

[0198] 303. Combine the upload timestamp and the department information field into a target string, and generate a unique identification mark according to the target string by a hash algorithm, wherein the identification mark includes the timestamp and the department information corresponding to the department data.

[0199] In an embodiment of the present application, the terminal captures the precise time of departmental data upload through the terminal's clock function, which can be accurate to seconds or even milliseconds. After obtaining the upload time, the terminal converts it into a timestamp format. The timestamp is a digital encoding method that represents time. Converting the upload time into a timestamp can facilitate subsequent data processing and comparison.

[0200] Furthermore, after obtaining the uploaded timestamp, in order to identify and manage the data uploaded by different departments, the terminal needs to read and record the department information field. The terminal first locates the department information field in the department data. These information fields contain the department number or department name. After locating the field, the terminal needs to read its value, which may be a number, such as the department number, or a string, such as the department name. The read department information is then recorded for subsequent data association and processing.

[0201] Then, the upload timestamp and department information fields are combined into a target string, which contains the upload time of the data and the information of the department to which it belongs. Then, a unique identification is generated based on the target string and the corresponding hash algorithm. Since this identification contains the timestamp and department information, the corresponding department data can be uniquely identified.

[0202] Please refer to Figure 4 According to some embodiments of the present invention, when the application information is received in step 105, determining whether the access right is granted according to the application information may specifically include, but is not limited to, the following:

[0203] 401. When receiving application information, parse the user identity in the application information;

[0204] 402. Determine whether the user has access rights according to the user identity identifier.

[0205] In an embodiment of the present application, the terminal receives application information sent by the user. In the received application information, the terminal locates the field containing the user identity identification. This can be achieved by checking the structure of the information and matching the predefined field name. After locating the identity identification field, its value is parsed. The parsed value is the user's unique identifier, such as user name, user ID, email address or mobile phone number.

[0206] After parsing the user identity, the terminal needs to determine whether the user has permission to access the requested resources or perform the requested operations. The terminal has a set of clearly defined permission rules that specify which users or user groups can access which resources or perform which operations. The terminal then performs a permission check based on the parsed user identity and the defined permission rules, matches the user identity with the user or user group in the rule, and checks whether the requested resource or operation is within the scope allowed by the rule.

[0207] Based on the result of the permission check, the terminal will make a decision on whether to grant the user access rights. If the user has access rights, the terminal allows the user to continue the operation; if the user does not have access rights, the system rejects the user's request.

[0208] Figure 5 According to some embodiments of the present invention, determining whether to approve the application for the target data according to the access rights in step 106 may specifically include, but is not limited to, the following:

[0209] 501. Obtaining an authority level according to the access authority;

[0210] 502. Obtaining the access level range of the target data;

[0211] 503. Determine whether the permission level is within the access level range;

[0212] 504. If not, a prompt message will appear indicating that the application has been rejected.

[0213] In an embodiment of the present application, the terminal first determines the user's permission level based on the user's access rights by looking up the mapping relationship between permissions and levels. The mapping relationship is stored in a permission table in a database, which records the level corresponding to each permission. The user's permission level can be obtained by querying. This permission level may be a number, a string, or an enumeration value, which is not specifically limited here, and represents the user's permission level in the terminal.

[0214] After that, the target data accessed by the user is obtained, and the access level range of the target data is further queried. After the access level range of the target data is determined through the query, the user's permission level is compared with the access level range of the target data to determine whether the user has the right to access the information. The user's permission level and the access level range of the target data are compared by using appropriate comparison logic, such as equal to, greater than, less than, within the range, etc. Based on the comparison result, the terminal determines whether the user's permission level is within the access level range. If it is within the range, the user has the right to access, otherwise, the user does not have the right to access.

[0215] If the user's permission level is not within the access level range of the target data, the terminal will generate a prompt message to reject the application.

[0216] Please refer to Figure 6 According to some embodiments of the present invention, generating an encrypted credential based on the encrypted data in step 110 may specifically include, but is not limited to, the following:

[0217] 601. Generate an identification code according to the application information;

[0218] 602. Obtaining access rights and access validity period of the application information;

[0219] 603. Generate an access credential according to the identification code, the access permission and the access validity period.

[0220] In an embodiment of the present application, when generating encrypted credentials based on encrypted data, specifically, first analyze the received application information to extract key fields or data, such as user ID, request time, request type, etc., and then use a hash algorithm, a UUID generation algorithm, etc. to process the extracted data to generate a unique identification code, which is unpredictable, unique, and associated with the application information.

[0221] In order to generate a valid access credential, the terminal obtains the user's access rights to the requested resources and the validity period of this permission. After obtaining the identification code, access rights and access validity period, the terminal will generate an access credential for the user to present when using it to prove his or her access rights. The terminal ensures that only users with appropriate permissions can access protected department data within the validity period, thereby ensuring the security of department data.

[0222] See also Figure 7 The second aspect of the present application provides an enterprise information sharing management system, the system comprising:

[0223] An acquisition unit 701 is used to acquire whether the format of the department data uploaded by the department complies with the upload format;

[0224] A first generating unit 702 is used to automatically generate a unique identification mark according to the department data when it is determined that the format of the department data conforms to the upload format, wherein the identification mark includes a timestamp and department information corresponding to the department data;

[0225] A classification unit 703, used for classifying the department data according to department information to obtain classified data;

[0226] An uploading unit 704 is used to upload the classification data to an information management system;

[0227] The first judgment unit 705 is used to judge whether the access right is granted according to the application information when the application information of the target data is received;

[0228] A second judgment unit 706, configured to judge whether to approve the application for the target data according to the access permission when the first judgment unit determines that the application has the access permission;

[0229] A second generating unit 707 is configured to generate an access credential according to the application information when the second determining unit determines to approve the access application according to the access permission, wherein the access credential includes an identification code for identifying the target data;

[0230] A retrieving unit 708, configured to retrieve the target data from the information management system according to the identification code;

[0231] The encryption unit 709 is used to encrypt the target data using an encryption algorithm to obtain encrypted data;

[0232] The issuing unit 710 is configured to generate an encrypted certificate according to the encrypted data, and issue the encrypted certificate to an authorized department, so that the authorized department can view the target data through the encrypted certificate.

[0233] See also Figure 8 The present application also provides an enterprise information sharing management device, including:

[0234] Processor 801, memory 802, input and output unit 803, bus 804;

[0235] The processor 801 is connected to the memory 802, the input and output unit 803 and the bus 804;

[0236] The memory 802 stores a program, and the processor 801 calls the program to execute any of the above methods.

[0237] The present application also relates to a computer-readable storage medium on which a program is stored, wherein when the program is run on a computer, the computer is caused to execute any of the above methods.

[0238] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0239] In the several embodiments provided in the present application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be an indirect coupling or communication connection through some interfaces, devices or units, which can be electrical, mechanical or other forms.

[0240] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0241] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0242] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application is essentially or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product. The computer software product is stored in a storage medium, including several instructions to enable a computer device (which can be a personal computer, server, or network device, etc.) to execute all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, read-only memory), random access memory (RAM, random access memory), disk or optical disk and other media that can store program code.

Claims

1. An enterprise information sharing management method, characterized in that: The method comprises: Obtain the department data uploaded by each department, and determine whether the format of the department data uploaded by each department complies with the upload format through a regular expression; When it is determined that the format of the department data conforms to the upload format, a unique identification mark is automatically generated according to the department data, and the identification mark includes a timestamp and department information corresponding to the department data; Classifying the department data according to department information to obtain classified data; Uploading the classified data to an information management system; When receiving application information for target data, determining whether access rights are granted according to the application information; If so, determining whether to approve the application for the target data according to the access permission; When approval is determined, an access credential is generated according to the application information, wherein the access credential includes an identification code for identifying the target data; Retrieving the target data from the information management system according to the identification code; Encrypt the target data using an encryption algorithm to obtain encrypted data; An encrypted credential is generated according to the encrypted data, and the encrypted credential is sent to an authorized department, so that the authorized department can view the target data through the encrypted credential.

2. The enterprise information sharing management method according to claim 1, characterized in that: A regular expression is used to determine whether the format of the department data uploaded by each department complies with the upload format, including: Identify predefined regular expressions; Parsing the department data uploaded by each department to obtain key fields of the department data; Obtaining the format of the key field; It is determined whether the format of the key field complies with the upload format according to the regular expression.

3. The enterprise information sharing management method according to claim 1, characterized in that: A unique identification mark is automatically generated according to the department data, wherein the identification mark includes a timestamp and department information corresponding to the department data, including: Obtaining the upload time of the department data, and using the upload time as the upload timestamp; Reading an uploaded department information field of the department data, wherein the information field includes a department number or a department name; The upload timestamp and the department information field are combined into a target character string, and a unique identification mark is generated according to the target character string through a hash algorithm, wherein the identification mark includes the timestamp and the department information corresponding to the department data.

4. The enterprise information sharing management method according to claim 1, characterized in that: When the application information is received, judging whether the access right is granted according to the application information includes: When receiving the application information, parsing the user identity in the application information; Whether the user has access rights is determined according to the user identity.

5. The enterprise information sharing management method according to claim 4, characterized in that: Determining whether to approve the application for the target data according to the access permission includes: obtaining a permission level according to the access rights; Obtaining the access level range of the target data; Determining whether the permission level is within the access level range; If not, a prompt message will appear indicating that the application has been rejected.

6. The enterprise information sharing management method according to claim 1, characterized in that: Generate access credentials based on the application information, including: Generate an identification code according to the application information; Obtain access rights and validity period of the application information; An access credential is generated according to the identification code, the access authority and the access validity period.

7. The enterprise information sharing management method according to claim 1, characterized in that: When application information of the target data is received, after determining whether the access right is granted according to the application information, the method further includes: If not, a prompt message will appear indicating that the application has been rejected.

8. An enterprise information sharing management system, characterized in that: The system comprises: An acquisition unit, used to acquire department data uploaded by each department, and determine whether the format of the department data uploaded by each department conforms to the upload format through a regular expression; A first generating unit, configured to automatically generate a unique identification mark according to the department data when it is determined that the format of the department data conforms to the upload format, wherein the identification mark includes a timestamp and department information corresponding to the department data; A classification unit, used for classifying the department data according to department information to obtain classified data; An uploading unit, used for uploading the classified data to an information management system; A first judgment unit, configured to, when receiving application information of target data, judge whether the user has access rights according to the application information; a second judgment unit, configured to judge whether to approve the application for the target data according to the access permission when the first judgment unit determines that the application has the access permission; A second generating unit is configured to generate an access credential according to the application information when the second determining unit determines to approve the access application according to the access permission, wherein the access credential includes an identification code for identifying the target data; A retrieving unit, used for retrieving the target data from the information management system according to the identification code; An encryption unit, used for encrypting the target data using an encryption algorithm to obtain encrypted data; The sending unit is used to generate an encrypted certificate according to the encrypted data, and send the encrypted certificate to the authorized department, so that the authorized department can view the target data through the encrypted certificate.

9. An enterprise information sharing management device, characterized in that: The device comprises: Processor, memory, input-output unit, and bus; The processor is connected to the memory, the input and output unit, and the bus; The memory stores a program, and the processor calls the program to execute the method according to any one of claims 1 to 7.

10. A computer-readable storage medium having a program stored thereon, wherein the program, when executed on a computer, performs the method according to any one of claims 1 to 7.

Images