Information sharing method and device, electronic equipment and storage medium

Abstract

The embodiment of the invention provides an information sharing method and device, electronic equipment and a storage medium, and belongs to the technical field of business intelligence. The method comprises the steps that a first service role of the first electronic equipment is determined according to pre-configured role configuration, the role configuration comprises a plurality of service roles, and different service roles correspond to different permissions; according to the permission of the first service role, a first data source corresponding to the permission of the first service role is obtained, and different permissions correspond to different data sources; generating a report according to the first data source; the report is sent to a second electronic device, the second electronic device is configured to be a second service role, and the second service role is a service role subscribing to the report. According to the embodiment of the invention, the report sharing efficiency in a large-scale application scene can be improved, and a more efficient and safer data sharing mode is realized.

Description

Technical Field

[0001] The present application relates to the field of business intelligence technology, and in particular to an information sharing method, device, electronic device and storage medium. Background Art

[0002] As a basic function of business intelligence (BI) applications, report subscription is widely adopted by mainstream BI tools such as Tableau, fineBI, Guanyuan, and NetEase Cloud Computing. On the one hand, the report subscription function improves the efficiency of report sharing, but on the other hand, it has strict security restrictions.

[0003] Although the existing report subscription function has improved the speed of data sharing, it often exposes the defects of complex and inefficient sharing process in large-scale application scenarios with more than 10,000 users, hundreds of thousands of reports, and hundreds of TB of source data. In common report subscription solutions, each time a user subscribes to a report, it needs to go through multiple levels of approval and signing, which is a cumbersome and inefficient process.

[0004] Therefore, how to improve the efficiency of shared reports in large-scale application scenarios has become a technical problem that needs to be solved urgently. Summary of the invention

[0005] The main purpose of the embodiments of the present application is to propose an information sharing method, device, electronic device and storage medium, aiming to achieve a more efficient and secure data sharing mode.

[0006] To achieve the above-mentioned purpose, a first aspect of an embodiment of the present application provides an information sharing method, the method comprising: determining a first business role of the first electronic device according to a preconfigured role configuration, the role configuration comprising a plurality of business roles, and different business roles corresponding to different permissions;

[0007] According to the permission of the first business role, obtaining a first data source corresponding to the permission of the first business role, where different permissions correspond to different data sources;

[0008] Generate a report based on the first data source;

[0009] The report is sent to a second electronic device, where the second electronic device is configured as a second service role, and the second service role is a service role that subscribes to the report.

[0010] In some embodiments, determining the first service role of the first electronic device according to the preconfigured role configuration includes:

[0011] According to the preconfigured role configuration, sending a role application request to a third electronic device, the third electronic device is configured as a third business role, the authority of the third business role is greater than the authority of the first business role, and the role application request is used to request that the first electronic device be configured as the first business role;

[0012] A response message sent by the third electronic device is received, and it is determined that the first electronic device is configured as the first service role.

[0013] In some embodiments, sending the report to the second electronic device includes:

[0014] Acquire a business role allocation record, where the business role allocation record includes at least one electronic device and a business role corresponding to each electronic device;

[0015] According to the business role allocation record, the report is sent to the second electronic device through a preset platform, and the second electronic device is an electronic device configured as the second business role among the at least one electronic device.

[0016] In some embodiments, sending the report to the second electronic device includes:

[0017] receiving a subscription request sent by the second electronic device;

[0018] In response to the subscription request, setting a subscription period for the report to obtain a target report, wherein the subscription period is a subscription validity period authorized by the first electronic device;

[0019] The target report is sent to the second electronic device through a preset platform.

[0020] In some embodiments, in response to the subscription request, setting a subscription period for the report to obtain a target report includes:

[0021] In response to the subscription request, if the report is a report of a preset type, intercepting the report according to the subscription request to obtain a temporary report, where the temporary report is in a read-only state;

[0022] A subscription period is set for the temporary report to obtain the target report.

[0023] In some embodiments, sending the target report to the second electronic device via a preset platform includes:

[0024] Setting a watermark chain in the target report through the preset platform, wherein the watermark chain is used to record all forwarding information of the target report;

[0025] The target report for setting the watermark chain is sent to the second electronic device.

[0026] In some embodiments, the preset platform is used to record forwarding information of the target report between different electronic devices in the watermark chain.

[0027] To achieve the above-mentioned purpose, a second aspect of an embodiment of the present application provides an information sharing device, the device comprising: a role configuration module, used to determine a first business role of the first electronic device according to a preconfigured role configuration, the role configuration comprising a plurality of business roles, and different business roles correspond to different permissions;

[0028] A permission management module, used to obtain, according to the permission of the first business role, a first data source corresponding to the permission of the first business role, where different permissions correspond to different data sources;

[0029] A report generation module, used to generate a report according to the first data source;

[0030] The report push module is used to send the report to a second electronic device, where the second electronic device is configured as a second business role, and the second business role is a business role that subscribes to the report.

[0031] To achieve the above-mentioned purpose, the third aspect of an embodiment of the present application proposes an electronic device, which includes a memory and a processor, wherein the memory stores a computer program, and when the processor executes the computer program, the method described in the first aspect is implemented.

[0032] To achieve the above-mentioned purpose, the fourth aspect of an embodiment of the present application proposes a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method described in the first aspect is implemented.

[0033] The information sharing method, device, electronic device and storage medium proposed in this application predefine business roles and divide permissions, bind business roles to data source permissions, subscribe to and push reports according to the permissions of business roles, and record subscription information and generate a watermark chain. By setting roles and performing permission management, data leakage and unauthorized access can be prevented, while the subscription process is simplified and the efficiency of report sharing is improved. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] Figure 1 is a flow chart of the information sharing method provided in an embodiment of the present application;

[0035] Figure 2 yes Figure 1 Flow chart of step S100 in FIG.

[0036] Figure 3 yes Figure 1 Flow chart of step S400 in FIG.

[0037] Figure 4 yes Figure 1 Another flow chart of step S400 in FIG. 1 ;

[0038] Figure 5 yes Figure 4 Flow chart of step S440 in FIG.

[0039] Figure 6 yes Figure 4 Flow chart of step S450 in FIG.

[0040] Figure 7 It is a structural diagram of an information sharing device provided in an embodiment of the present application;

[0041] Figure 8 It is a schematic diagram of the hardware structure of the electronic device provided in the embodiment of the present application. DETAILED DESCRIPTION

[0042] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0043] It should be noted that, although the functional modules are divided in the device schematic diagram and the logical order is shown in the flowchart, in some cases, the steps shown or described may be performed in a different order than the module division in the device or the order in the flowchart. The terms "first", "second", etc. in the specification, claims and the above drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence.

[0044] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as those commonly understood by those skilled in the art to which this application belongs. The terms used herein are only for the purpose of describing the embodiments of this application and are not intended to limit this application.

[0045] First, some nouns involved in this application are analyzed:

[0046] Business Intelligence (BI) is the use of modern data warehouse technology, online analysis and processing technology, data mining and data presentation technology to analyze data to realize business value, helping enterprises extract valuable information from massive data, thereby optimizing operational efficiency, enhancing market competitiveness and achieving digital transformation.

[0047] Report Subscription: is a function or service that allows users to automatically receive specific reports or data sets on a regular basis. This function is common in enterprise-level software applications, such as enterprise resource planning (ERP), customer relationship management (CRM) systems, or business intelligence (BI) tools. By setting up report subscriptions, users can specify the time interval for receiving reports (such as daily, weekly, or monthly), as well as the method of receiving them (such as via email or directly within the application). Report subscriptions can be sent in the form of emails, notifications on online platforms, or by directly saving the report in the user's online document storage. Such services are very common in modern enterprise management information systems and help improve the efficiency and convenience of information acquisition.

[0048] Although the existing report subscription function speeds up data sharing, it often leads to complex and inefficient sharing processes when facing large-scale application scenarios with more than 10,000 users, hundreds of thousands of reports, and hundreds of TB of source data. In common report subscription solutions, users need to go through multiple approval processes each time they subscribe to a report, which not only increases the complexity of the operation, but also greatly reduces efficiency.

[0049] Based on this, the embodiments of the present application provide an information sharing method, device, electronic device and storage medium, aiming to improve the efficiency of sharing reports in large-scale application scenarios.

[0050] The information sharing method, device, electronic device and storage medium provided in the embodiments of the present application are specifically described through the following embodiments. First, the recommended method in the embodiments of the present application is described.

[0051] The information sharing method provided in the embodiment of the present application relates to the field of business intelligence technology. The information sharing method provided in the embodiment of the present application can be applied to a terminal, can be applied to a server side, or can be software running in a terminal or a server side. In some embodiments, the terminal can be a smart phone, a tablet computer, a laptop computer, a desktop computer, etc.; the server side can be configured as an independent physical server, or can be configured as a server cluster or a distributed system composed of multiple physical servers, and can also be configured as a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, CDN, and big data and artificial intelligence platforms; the software can be an application that implements the information sharing method, etc., but is not limited to the above forms.

[0052] The present application can be used in many general or special computer system environments or configurations. For example: personal computers, server computers, handheld or portable devices, tablet devices, multiprocessor systems, microprocessor-based systems, set-top boxes, programmable consumer electronics, network PCs, minicomputers, mainframe computers, distributed computing environments including any of the above systems or devices, etc. The present application can be described in the general context of computer-executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform specific tasks or implement specific abstract data types. The present application can also be practiced in distributed computing environments, in which tasks are performed by remote processing devices connected through a communication network. In a distributed computing environment, program modules can be located in local and remote computer storage media including storage devices.

[0053] It should be noted that in each specific implementation of the present application, when it comes to the need to perform relevant processing based on data related to user identity or characteristics such as user information, user behavior data, user historical data, and user location information, the user's permission or consent will be obtained first, and the collection, use, and processing of these data will comply with relevant laws, regulations, and standards. In addition, when the embodiment of the present application needs to obtain the user's sensitive personal information, the user's separate permission or consent will be obtained through a pop-up window or by jumping to a confirmation page. After clearly obtaining the user's separate permission or consent, the necessary user-related data for the normal operation of the embodiment of the present application will be obtained.

[0054] Figure 1 is an optional flow chart of the information sharing method provided in the embodiment of the present application. Figure 1 The method may include but is not limited to steps S100 to S400.

[0055] Step S100: determining a first service role of the first electronic device according to a pre-configured role configuration, wherein the role configuration includes a plurality of service roles, and different service roles correspond to different permissions.

[0056] When dealing with report subscriptions in large-scale BI applications, role configuration plays a key role. In this model, different business roles correspond to different permissions, which determine what data users can access and what operations they can perform.

[0057] The first business role of the first electronic device is determined according to the preconfigured role configuration. The system will assign the corresponding business role to a specific electronic device or user according to the predefined roles and permissions. The role configuration also includes how to bind the role to the data source, so that only authorized personnel can access the corresponding data, thereby ensuring the security of the data. The preconfigured role configuration is customized by an administrator or a user with data source permissions. When setting the business role, the corresponding permissions are configured for each role. There can be multiple business roles, and each business role has different permissions. In addition, the role configuration is dynamic, and the administrator or the user with data source permissions can adjust it at any time according to changes in the organizational structure or changes in business needs, and can also add new roles and permissions as the business develops.

[0058] In one implementation of this embodiment, business roles can be divided into data owners, report producers, and readers. Specifically, the data owner is responsible for binding the managed data source permissions to the business role, approving the user's business role application, and granting them the corresponding data source access rights; the report producer is responsible for report production, setting the subscription scope and subscription period of the report, and pushing the set report to the readers; the readers can view the report pushed by the report producer, or subscribe to the report from the report producer. By the user applying for user-role binding to the data owner, the data owner maintains the role-data source relationship, which not only meets the efficient application of business roles, but also realizes the effective management of data permissions by the data owner.

[0059] For example, if a user needs to create or push a report, the user can apply for the role of "report maker" to the data owner. The data owner can grant the user the role after approval, or reject the user's application. Similarly, if a user needs to view specific data, he or she may be assigned the role of "receiver".

[0060] Preconfigured role configuration and corresponding business role allocation When processing report subscriptions under large-scale BI applications, the traditional user-data source permission application is transformed into a user-role-data source application mode. By binding roles with data source permissions, it is ensured that only authorized users can access sensitive data, thereby reducing the risk of data leakage and abuse; administrators do not need to set permissions for each user individually, but can allocate permissions in batches based on user applications or through preconfigured roles. When permissions need to be adjusted, only the role configuration needs to be modified, and the corresponding permission changes will be automatically applied to all users with the role, thereby simplifying permission management.

[0061] Step S200: acquiring a first data source corresponding to the permission of the first business role according to the permission of the first business role, where different permissions correspond to different data sources.

[0062] According to the role configuration information, the authority corresponding to the first business role and the data source corresponding to the authority are found. According to the matching result, the first data source accessible to the business role is obtained from the system.

[0063] Specifically, when the first electronic device needs to access a data source, the system first identifies the current business role of the first electronic device and queries the permissions of the role; then, based on the query results, the system maps the permissions of the business role to the corresponding data source, thereby enabling the first electronic device to access the data source and perform operations permitted by its permissions.

[0064] Through this user-role-data source binding mechanism, users can only access data sources assigned to their business roles, thereby ensuring data security and compliance.

[0065] Step S300: Generate a report based on the first data source.

[0066] After accessing the data source, users can select the required data fields and perform pre-processing such as data cleaning and data conversion. Then, the layout and format of the report are designed, and the processed data is mapped to the report design to generate the report.

[0067] In one implementation of this embodiment, the report maker can perform multidimensional analysis on the data according to the authorized data source by dragging dimensions and indicators, configuring labels and indicator derivation, etc., so as to generate a data report. The data report is a data view customized according to the analysis requirements, which can more intuitively show the data trends and rules. Specifically, the report maker will select the required dimensions (such as region, time, product category, etc.) and indicators (such as sales, quantity, profit, etc.) according to the analysis objectives, and drag the dimensions and indicators from the component library of the tool to the analysis area for data display and analysis. Then, the report maker can add labels or create derived indicators as needed. Labels can help distinguish different attributes of data; derived indicators are generated by calculating and combining existing indicators to generate new indicators, such as calculating year-on-year growth rate, month-on-month growth rate, etc. According to the analysis requirements, the report maker can also perform operations such as screening, filtering, sorting and grouping on the data to make the report clear and easy to read. The report maker can push a copy of the prepared data report as a subscription to other users with data source permissions. The readers can directly view and use these reports without repeating the analysis process, which improves efficiency.

[0068] In another implementation of this embodiment, the report can also be a visual dashboard. Specifically, the report maker selects the data report that he wants to visualize, and binds the data in the data report to the dashboard UI components. These UI components can be charts, dashboards, maps, etc., which are used to present the data in a graphical way. Then, different UI components are added to the dashboard by dragging and dropping, and the layout and style are adjusted to form an online visual dashboard. The dashboard can contain multiple components to display data of different dimensions and indicators.

[0069] The first business role generates reports based on data sources, which can integrate complex information in the data source into a unified view and conduct in-depth analysis of the data to facilitate subsequent analysis and decision-making; reports can also be customized according to user needs to display data for a specific time period or specific dimension; reports can also help users understand and interpret data more quickly through visualization elements such as charts and graphs, thereby improving work efficiency.

[0070] Step S400: sending the report to a second electronic device, where the second electronic device is configured as a second service role, and the second service role is a service role that subscribes to the report.

[0071] After the report is created, it needs to be sent to the authorized user. First, confirm the business role of the second electronic device and make sure it has been configured as a role for subscribing to reports. Then, according to the report subscription requirements, select the appropriate subscription method. The subscription method can be through the message notification system within the preset platform (such as the BI platform) or by sending an email through the preset platform.

[0072] Specifically, in order to ensure the security of report push, all push operations must be performed on the preset platform. When pushing a report, the system will automatically check the role permissions of the recipient. The push operation can only be successful if the recipient has the role permissions corresponding to the report data. If the recipient does not have permissions, the system will automatically prompt "No permission" and block the push operation to ensure that data security is not violated. In addition, the preset platform can also push reports via email, but the content of the email is not a report file, but a report link generated by the preset platform. This link points to the report page on the preset platform, and you need to log in to the preset platform to view it. The report data is not directly transmitted via email, thereby ensuring the security and flexibility of the report.

[0073] See also Figure 2 In some embodiments, step S100 may include but is not limited to steps S110 to S120:

[0074] Step S110, sending a role application request to a third electronic device according to a preconfigured role configuration, the third electronic device being configured as a third business role, the authority of the third business role being greater than the authority of the first business role, the role application request being used to request that the first electronic device be configured as the first business role;

[0075] Step S120: receiving a response message sent by the third electronic device, and determining that the first electronic device is configured as the first service role.

[0076] The first electronic device sends a role application request to the third electronic device using a preset platform according to the preconfigured role configuration, wherein the third electronic device is configured as a third business role, the third business role is a user with the authority to manage data sources, and the third business role assigns a business role to the first electronic device according to the received role application.

[0077] In one implementation of this embodiment, the first business role is the report maker, the second business role is the reader, and the third business role is the data owner. For example, when a user needs to create or push a report, the user can initiate a role application for "report maker" to the data owner, and the data owner grants the role identity applied for by the user after approval; after the report maker has prepared the report, he can directly push the report to the reader, or push the report to the reader after processing it according to the reader's subscription requirements.

[0078] By defining different roles and granting corresponding permissions, users do not need to apply for data source permissions one level at a time, but instead apply for role permissions, which can simplify the process while ensuring data security and improving efficiency.

[0079] See also Figure 3 In some embodiments, step S400 may include but is not limited to steps S410 to S420:

[0080] Step S410, obtaining a business role allocation record, wherein the business role allocation record includes at least one electronic device and a business role corresponding to each electronic device;

[0081] Step S420: sending the report to the second electronic device through a preset platform according to the business role allocation record, where the second electronic device is an electronic device configured as the second business role among the at least one electronic device.

[0082] In this embodiment, the report sending method can be that the first business role actively pushes the report to the second business role. Specifically, the first business role obtains the business role assignment record from the management system of the preset platform, and the business role assignment record stores information of multiple electronic devices and their corresponding business roles. According to the obtained business role assignment record, the user assigned to the second business role is screened out, and the report push function provided by the preset platform is used to send the report to the screened second business role.

[0083] In one implementation of this embodiment, the report maker actively pushes the report to the reader through a preset platform. When the report type sent is a data report, the reader can view and compile the data report after receiving the data report, and the data report is an editable report.

[0084] By obtaining business role assignment records, it is possible to ensure that reports are only sent to the second electronic device with corresponding permissions, thereby achieving accurate information distribution; by distributing reports based on business roles, the risk of data leakage can be reduced and unauthorized access can be prevented; in addition, business role assignment records can also help track the report sending history, facilitating auditing and troubleshooting.

[0085] See also Figure 4 In some embodiments, step S400 may also include but is not limited to steps S430 to S440:

[0086] Step S430, receiving a subscription request sent by the second electronic device;

[0087] Step S440, in response to the subscription request, setting a subscription period for the report to obtain a target report, wherein the subscription period is a subscription validity period authorized by the first electronic device;

[0088] Step S450: sending the target report to the second electronic device via a preset platform.

[0089] In this embodiment, the report sending method can also be that the second business role initiates an application for subscribing to the report to the first business role, and the first business role pushes the report to the second business role according to the content of the application. Specifically, the first business role receives a subscription request sent by the second business role, and the subscription request may include the name or identifier of the report to be subscribed, the report type, the subscription scope, and the subscription time limit. The first business role processes the report according to the subscription request, adjusts the type and subscription scope of the report, and applies for or independently sets the validity period of the report according to the subscription time limit of the second business role, and finally sends the processed report to the second business role through the preset platform.

[0090] Specifically, the subscription scope can be free reports, selector fixed reports and screenshots. Free reports open a page for self-selection of dimension values, and can select dimensions and values ​​according to user needs for data exploration and analysis; selector fixed reports are pre-configured according to specific selector settings (such as a specific time range, specific data filtering conditions, etc.), where selector parameters are fixed and ordinary users are not allowed to change; screenshots can only see specific data views or screenshots of visual dashboards, and no interaction or data exploration can be performed.

[0091] In one implementation of this embodiment, the report producer processes the report according to the subscription request sent by the audience. First, the report subscribed by the audience is obtained and the report type is adjusted. If the audience applies to subscribe to a visual dashboard, the data report is converted into a visual dashboard; then, the subscription scope of the report is adjusted, and the dimensions and indicators of the report are adjusted according to the needs of the audience and the principle of least authority to ensure that the audience can only see necessary data; finally, the subscription period of the report is set. The subscription period can be based on the subscription period applied by the audience, or the validity period of the report can be set independently, where the validity period can be one-time or within a specified time range.

[0092] Setting a subscription period for a report helps manage user subscriptions and can prevent long-term exposure of data to a certain extent, reducing the risk of data leakage. Users can access reports conveniently and quickly within the authorized validity period, improving user experience and work efficiency.

[0093] See also Figure 5 In some embodiments, step S440 may include but is not limited to steps S441 to S442:

[0094] Step S441, in response to the subscription request, if the report is a report of a preset type, intercepting the report according to the subscription request to obtain a temporary report, wherein the temporary report is in a read-only state;

[0095] Step S442, setting a subscription period for the temporary report to obtain the target report.

[0096] In this embodiment, the preset types of reports are selector-cured reports and screenshots. When the subscription request of the second business role is a selector-cured report and screenshot, the first business role intercepts the report according to the subscription request and generates a temporary report. This temporary report will be set to read-only mode, and the user cannot perform any editing operations. The first business role will then set a subscription period for the temporary report, which can be based on the period specified in the subscription request, or customized by the first business role according to actual conditions. Finally, the set report is sent to the second business role to meet its subscription needs.

[0097] In one implementation of this embodiment, when the audience requests to subscribe to a selector-fixed report, the report maker filters and intercepts the report content according to the subscription scope selected by the audience. The selector setting can be a time range (specified date or specified time period), data filtering conditions (specified data categories, such as all departments or specific departments, etc.), indicators (such as: number of people, quantity, total amount, profit margin, etc.), etc. After the report maker intercepts the content specified by the audience according to the selector setting, the report is set to read-only mode, and the audience cannot edit or change the data of the selector-fixed report. Optionally, when the selector-fixed report contains a filter, the audience can use the filter to filter data, but cannot change the configuration of the filter; when the selector-fixed report contains a sorting function, the audience can change the sorting order, but cannot change the sorting field; the audience can also adjust the position of each component in the dashboard, but cannot add or delete components.

[0098] In another implementation of this embodiment, when the recipient requests to subscribe to obtain a screenshot of the report, the report maker captures the report content according to the subscription scope selected by the recipient. The screenshot can be forwarded through a preset platform or sent to the recipient via email. When the validity period set by the report maker is exceeded, the screenshot in the email will be displayed as "no viewing permission", thereby effectively ensuring the security and timeliness of the information and preventing the illegal use of expired information.

[0099] Users can submit subscription requests to customize report content according to their needs, and can flexibly choose the subscription period according to their needs, which improves the relevance and practicality of report content. For preset types of reports, by intercepting and setting read-only status, it can ensure that users can only view authorized information, thereby reducing the risk of data leakage.

[0100] See also Figure 6 In some embodiments, step S450 may also include but is not limited to steps S451 to S452:

[0101] Step S451, setting a watermark chain in the target report through the preset platform, wherein the watermark chain is used to record all forwarding information of the target report;

[0102] Step S452: sending the target report for setting the watermark chain to the second electronic device.

[0103] In order to enhance the security and tracking capabilities of reports, you can set a watermark chain in the target report to track the forwarding path of the target report. Through the preset platform, a watermark chain is embedded in the report to be sent. The watermark chain contains information such as the business role watermark of the sending report, the business role watermark of the receiving report, the creation time of the subscription task, and the timestamp of the validity period. It is used to track the forwarding path of the report and record the timeliness of the subscription task. When the report is forwarded, the system can automatically record the forwarding information and embed the forwarding information into the watermark chain.

[0104] In addition, in addition to recording forwarding information, the watermark chain can also be used to verify the validity and timeliness of subscription tasks. When a user forwards a report, the preset platform verifies whether the recipient in the watermark chain is a legitimate user in the subscription link, and verifies whether the subscription task is within the validity period. If all verifications are successful, the platform forwards the report to the recipient, and allows the recipient to view the report through the preset platform or email within the validity period without signing in. If the verification fails, the forwarding request is rejected, and feedback is provided to the forwarder to inform the reason for the forwarding failure. When the subscription task exceeds the set validity period, the forwarded report link will become invalid, and the user who subscribed to the report will no longer have the right to view the report.

[0105] In this embodiment, the preset platform can be used to record the forwarding information of the target report between different electronic devices in the watermark chain. If the second electronic device forwards the target report to the fourth electronic device through the preset platform, the forwarding record will be recorded in the watermark chain for easy tracing and auditing. For example, if user A forwards the report to user B, and user B forwards the report to user C, the watermark chain will record the entire forwarding chain from A→B→C. Each forwarding will add a new record on the basis of the original watermark chain, including the forwarder, the receiver, and the forwarding time, thereby forming a complete forwarding chain.

[0106] In visual report subscription, the validity and timeliness of subscription tasks can be verified through watermark chain, which can effectively track the forwarding path of the target report, avoid data and operation unauthorized access, and protect the copyright and privacy of report content, thereby enhancing the security and traceability of the report.

[0107] The embodiment of the present application predefines different business roles according to business needs, and assigns corresponding data source permissions to each business role, and clarifies which roles can access and operate which data; binds business roles to data source permissions to form a "role-data" relationship, and users only need to apply for roles to obtain corresponding data source permissions, without having to apply for data source permissions one by one, which simplifies the permission application process; users can subscribe to and push reports based on the permissions of the business roles applied for, to achieve efficient data sharing and analysis results delivery; the platform generates a watermark chain based on the subscription information of the report, and performs permission verification on the report, which is convenient for traceability and management. This application changes the traditional "user-data source permission" application to the "user-role-data source permission" application mode. Users do not need to apply directly for data source permissions, but apply for role permissions, which can simplify the permission application process; users can safely share analysis results through role subscriptions without the need for layer-by-layer approval, and report subscriptions support fast push without signature, which improves the efficiency of information transmission.

[0108] See also Figure 7 The embodiment of the present application also provides an information sharing device, which can implement the above-mentioned information sharing method, and the device includes:

[0109] A role configuration module 10, configured to determine a first service role of the first electronic device according to a preconfigured role configuration, wherein the role configuration includes a plurality of service roles, and different service roles correspond to different permissions;

[0110] The authority management module 20 is used to obtain the first data source corresponding to the authority of the first business role according to the authority of the first business role, and different authorities correspond to different data sources;

[0111] A report generation module 30, used to generate a report according to the first data source;

[0112] The report pushing module 40 is used to send the report to a second electronic device, where the second electronic device is configured as a second service role, and the second service role is a service role that subscribes to the report.

[0113] In some implementations, the role configuration module 10 may include:

[0114] a role application unit, configured to send a role application request to a third electronic device according to a preconfigured role configuration, wherein the third electronic device is configured as a third service role, the authority of the third service role is greater than the authority of the first service role, and the role application request is used to request that the first electronic device be configured as the first service role;

[0115] The message receiving unit is used to receive a response message sent by the third electronic device, and determine that the first electronic device is configured as the first service role.

[0116] In some implementations, the report push module 40 may include:

[0117] A role acquisition unit, configured to acquire a business role allocation record, wherein the business role allocation record includes at least one electronic device and a business role corresponding to each electronic device;

[0118] The first pushing unit is used to send the report to the second electronic device through a preset platform according to the business role allocation record. The second electronic device is an electronic device configured as the second business role among the at least one electronic device.

[0119] In some implementations, the report push module 40 may further include:

[0120] A request receiving unit, configured to receive a subscription request sent by the second electronic device;

[0121] a term setting unit, configured to set a subscription term for the report in response to the subscription request to obtain a target report, wherein the subscription term is a subscription validity period authorized by the first electronic device;

[0122] The second pushing unit is used to send the target report to the second electronic device through a preset platform.

[0123] In some implementations, the deadline setting unit may include:

[0124] an interception subunit, configured to, in response to the subscription request, intercept the report according to the subscription request to obtain a temporary report when the report is a report of a preset type, wherein the temporary report is in a read-only state;

[0125] The setting subunit is used to set a subscription period for the temporary report to obtain the target report.

[0126] In some embodiments, the second pushing unit may include:

[0127] A watermark chain subunit, used to set a watermark chain in the target report through the preset platform, wherein the watermark chain is used to record all forwarding information of the target report;

[0128] The push subunit is used to send the target report for setting the watermark chain to the second electronic device.

[0129] The specific implementation of the information sharing device is basically the same as the specific implementation of the above-mentioned information sharing method, and will not be repeated here.

[0130] The embodiment of the present application also provides an electronic device, the electronic device includes a memory and a processor, the memory stores a computer program, and the processor implements the above information sharing method when executing the computer program. The electronic device can be any smart terminal including a tablet computer, a car computer, etc.

[0131] See also Figure 8 , Figure 8 The hardware structure of an electronic device of another embodiment is illustrated, and the electronic device includes:

[0132] The processor 801 may be implemented by a general-purpose CPU (Central Processing Unit), a microprocessor, an application-specific integrated circuit (ASIC), or one or more integrated circuits, and is used to execute relevant programs to implement the technical solutions provided in the embodiments of the present application.

[0133] The memory 802 can be implemented in the form of a read-only memory (ROM), a static storage device, a dynamic storage device, or a random access memory (RAM). The memory 802 can store an operating system and other applications. When the technical solution provided in the embodiment of this specification is implemented by software or firmware, the relevant program code is stored in the memory 802, and the processor 801 calls and executes the information sharing method of the embodiment of this application;

[0134] Input / output interface 803, used to implement information input and output;

[0135] The communication interface 804 is used to realize the communication interaction between the device and other devices. The communication can be realized through a wired manner (such as USB, network cable, etc.) or a wireless manner (such as mobile network, WI FI, Bluetooth, etc.);

[0136] A bus 805 that transmits information between the various components of the device (e.g., the processor 801, the memory 802, the input / output interface 803, and the communication interface 804);

[0137] The processor 801 , the memory 802 , the input / output interface 803 and the communication interface 804 are connected to each other in communication within the device via a bus 805 .

[0138] An embodiment of the present application also provides a computer-readable storage medium, which stores a computer program. When the computer program is executed by a processor, the above-mentioned information sharing method is implemented.

[0139] The memory, as a non-transient computer-readable storage medium, can be used to store non-transient software programs and non-transient computer executable programs. In addition, the memory may include a high-speed random access memory, and may also include a non-transient memory, such as at least one disk storage device, a flash memory device, or other non-transient solid-state storage device. In some embodiments, the memory may optionally include a memory remotely disposed relative to the processor, and these remote memories may be connected to the processor via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0140] The information sharing method, information sharing device, electronic device and storage medium provided in the embodiments of the present application predefine business roles and divide permissions, bind business roles to data source permissions, subscribe to and push reports according to the permissions of the business roles, and record subscription information and generate a watermark chain. By setting roles and performing permission management, data leakage and unauthorized access can be prevented, while the subscription process is simplified and the efficiency of report sharing is improved.

[0141] The embodiments described in the embodiments of the present application are intended to more clearly illustrate the technical solutions of the embodiments of the present application and do not constitute a limitation on the technical solutions provided in the embodiments of the present application. Those skilled in the art will appreciate that with the evolution of technology and the emergence of new application scenarios, the technical solutions provided in the embodiments of the present application are also applicable to similar technical problems.

[0142] Those skilled in the art will appreciate that the technical solutions shown in the figures do not constitute a limitation on the embodiments of the present application, and may include more or fewer steps than shown in the figures, or a combination of certain steps, or different steps.

[0143] The device embodiments described above are merely illustrative, and the units described as separate components may or may not be physically separated, that is, they may be located in one place or distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0144] Those skilled in the art will appreciate that all or some of the steps in the methods disclosed above, and the functional modules / units in the systems and devices may be implemented as software, firmware, hardware, or a suitable combination thereof.

[0145] The terms "first", "second", "third", "fourth", etc. (if any) in the specification of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0146] It should be understood that in the present application, "at least one (item)" means one or more, and "plurality" means two or more. "And / or" is used to describe the association relationship of associated objects, indicating that three relationships may exist. For example, "A and / or B" can mean: only A exists, only B exists, and A and B exist at the same time, where A and B can be singular or plural. The character " / " generally indicates that the objects associated before and after are in an "or" relationship. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single or plural items. For example, at least one of a, b or c can mean: a, b, c, "a and b", "a and c", "b and c", or "a and b and c", where a, b, c can be single or multiple.

[0147] In the several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the above units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0148] The units described above as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0149] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0150] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application is essentially or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including multiple instructions to enable a computer device (which can be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods of various embodiments of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (Read-Only Memory, referred to as ROM), random access memory (Random Access Memory, referred to as RAM), disk or optical disk and other media that can store programs.

[0151] The preferred embodiments of the present application are described above with reference to the accompanying drawings, but the scope of the rights of the present application is not limited thereto. Any modification, equivalent substitution and improvement made by a person skilled in the art without departing from the scope and essence of the present application should be within the scope of the rights of the present application.

Claims

1. An information sharing method, characterized in that: Applied to a first electronic device, the method includes: Determining a first business role of the first electronic device according to a preconfigured role configuration, wherein the role configuration includes a plurality of business roles, and different business roles correspond to different permissions; According to the permission of the first business role, obtaining a first data source corresponding to the permission of the first business role, where different permissions correspond to different data sources; Generate a report based on the first data source; The report is sent to a second electronic device, where the second electronic device is configured as a second service role, and the second service role is a service role that subscribes to the report.

2. The method according to claim 1, characterized in that The determining the first service role of the first electronic device according to the preconfigured role configuration includes: According to the preconfigured role configuration, sending a role application request to a third electronic device, the third electronic device is configured as a third business role, the authority of the third business role is greater than the authority of the first business role, and the role application request is used to request that the first electronic device be configured as the first business role; A response message sent by the third electronic device is received, and it is determined that the first electronic device is configured as the first service role.

3. The method according to claim 1, characterized in that The sending the report to the second electronic device includes: Acquire a business role allocation record, where the business role allocation record includes at least one electronic device and a business role corresponding to each electronic device; According to the business role allocation record, the report is sent to the second electronic device through a preset platform, and the second electronic device is an electronic device configured as the second business role among the at least one electronic device.

4. The method according to claim 1, characterized in that: The sending the report to the second electronic device includes: receiving a subscription request sent by the second electronic device; In response to the subscription request, setting a subscription period for the report to obtain a target report, wherein the subscription period is a subscription validity period authorized by the first electronic device; The target report is sent to the second electronic device through a preset platform.

5. The method according to claim 4, characterized in that In response to the subscription request, setting a subscription period for the report and obtaining a target report includes: In response to the subscription request, if the report is a report of a preset type, intercepting the report according to the subscription request to obtain a temporary report, where the temporary report is in a read-only state; A subscription period is set for the temporary report to obtain the target report.

6. The method according to claim 4, characterized in that Sending the target report to the second electronic device through a preset platform includes: Setting a watermark chain in the target report through the preset platform, wherein the watermark chain is used to record all forwarding information of the target report; The target report for setting the watermark chain is sent to the second electronic device.

7. The method according to claim 6, characterized in that The preset platform is used to record the forwarding information of the target report between different electronic devices in the watermark chain.

8. An information sharing device, characterized in that: The device comprises: A role configuration module, configured to determine a first service role of the first electronic device according to a preconfigured role configuration, wherein the role configuration includes a plurality of service roles, and different service roles correspond to different permissions; A permission management module, used to obtain, according to the permission of the first business role, a first data source corresponding to the permission of the first business role, where different permissions correspond to different data sources; A report generation module, used to generate a report according to the first data source; The report push module is used to send the report to a second electronic device, where the second electronic device is configured as a second business role, and the second business role is a business role that subscribes to the report.

9. An electronic device, characterized in that: The electronic device includes a memory and a processor, the memory stores a computer program, and the processor implements the information sharing method according to any one of claims 1 to 7 when executing the computer program.

10. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the information sharing method according to any one of claims 1 to 7 is implemented.

Images