Multi-level digital intelligent fishery authority distribution method and system
Through multi -level digital wisdom fishery authority allocation methods, define user roles and permissions standards, allocate permissions step -by -step allocation, and monitor and audit in real time, solve the problem of unreasonable medium authority distribution in existing technology, improve system security and efficiency, and the number is the number. The smart fishery system provides technical support.
Patent Information
- Application Number
- CN202411173609.9
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-08-26
- Publication Date
- 2025-01-28
- Estimated Expiration
- Not applicable · inactive patent
AI Technical Summary
现有技术中权限分配不合理,导致数据泄露风险增加,且传统方法效率低下,无法满足数智渔业系统的快速响应需求。
Multi -level digital wisdom fishery permissions allocation methods are adopted, and the user role and permissions standards are defined, and the use of right to match the right to distribute permissions in level, and monitor the use of permissions in real time, and conduct regular permissions audit.
The accurate distribution and dynamic adjustment of user permissions have been realized, the security and stability of the system is improved, the efficiency and synergy of business operation are improved, and it provides technical support for the development of the digital fishery system.
Smart Images

Figure CN119377923A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the technical field of authority management, and more specifically to a multi-level digital fishery authority allocation method and system. Background Art
[0002] With the rapid development of science and technology, digitalization and intelligence have become important driving forces for the transformation and upgrading of modern fisheries. In building an efficient and secure digital fishery system, a scientific and reasonable permission allocation method is crucial, which is directly related to the stable operation of the system and the smooth execution of data security.
[0003] In the existing technology, there may be unreasonable allocation of permissions. For example, some users are granted too many unnecessary permissions, increasing the risk of data leakage; or there are a large number of users and the permission allocation is complex. The traditional permission allocation method is inefficient and cannot meet the rapid response requirements of the digital fishery system.
[0004] Therefore, it is an urgent problem that technicians in this field need to solve to propose a multi-level digital fishery authority allocation method and system to solve the difficulties existing in the prior art. Summary of the invention
[0005] In view of this, the present invention provides a multi-level digital fishery authority allocation method and system for solving the technical problems existing in the prior art.
[0006] In order to achieve the above object, the present invention provides the following technical solutions:
[0007] A multi-level digital fishery authority allocation method, comprising the following steps:
[0008] Identify the fishery resources that require management and define the different users in the system;
[0009] Manage different users through the system, formulate authority standards, and clarify the scope of responsibilities and operating permissions of different users in the system;
[0010] Through the authority matching strategy, the authorities of different users are matched, the users are given corresponding hierarchical information, and the fishery authorities are allocated level by level.
[0011] Optionally, the specific content of defining different users in the system is:
[0012] Identify user roles in the system, including: super administrator, business administrator, operator, and data analyst;
[0013] Super administrator: responsible for system setup, maintenance, and user management;
[0014] Business administrator: responsible for managing the business data of each area according to the business module division;
[0015] Operator: responsible for data query and data entry of business modules;
[0016] Data Analyst: Responsible for data collection, processing and analysis of business modules.
[0017] Optionally, permission standards include: data access permissions and functional operation permissions.
[0018] Optionally, data access permissions include data scope and data operations;
[0019] The data scope restricts access to data based on user roles. Super administrators access all data in business modules, business administrators access data in the business modules they are responsible for, operators access data in the business modules they input, and data analysts access data from several business modules for comprehensive analysis.
[0020] Optionally, the functional operation permissions include dividing the system functions into different modules according to the business requirements of the system, and setting operation permissions based on different modules.
[0021] Optionally, the permission matching strategy is matched according to the responsibilities and permissions of different users based on the principle of least privilege. After the permission matching is completed, a permission review is performed to ensure the accuracy and rationality of permission allocation.
[0022] Optionally, it also includes: using a monitoring system to monitor the use of user rights in real time, conducting regular rights audits, checking whether user rights are consistent with responsibilities, and promptly detecting abnormal situations.
[0023] A multi-level digital fishery authority allocation system, which implements any of the above-mentioned multi-level digital fishery authority allocation methods, comprises a definition module, a management module, and an authority allocation module connected in sequence; wherein,
[0024] Definition module: define different users in the system according to the fishery resources to be managed;
[0025] Management module: manage different users through the system, formulate authority standards, and clarify the scope of responsibilities and operating permissions of different users in the system;
[0026] Permission allocation module: Match permissions for different users through permission matching strategies, assign users corresponding hierarchical information, and allocate fishery permissions step by step.
[0027] It can be seen from the above technical solution that, compared with the prior art, the present invention discloses a multi-level digital fishery authority allocation method and system, which has the beneficial effects of: through systematic steps, accurate allocation and dynamic adjustment of user authority are achieved. This method not only improves the security and stability of the system, but also improves the efficiency and coordination of business operations, providing strong technical support for the development of digital fishery systems. BRIEF DESCRIPTION OF THE DRAWINGS
[0028] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the provided drawings without paying creative work.
[0029] Figure 1 A flowchart of a multi-level digital fishery authority allocation method provided by the present invention;
[0030] Figure 2 A structural diagram of a multi-level digital fishery authority allocation system provided by the present invention;
[0031] Figure 3 A structural diagram of a computer device provided in an embodiment of the present invention. DETAILED DESCRIPTION
[0032] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.
[0033] See also Figure 1 As shown, the present invention discloses a multi-level digital fishery authority allocation method, comprising the following steps:
[0034] Identify the fishery resources that require management and define the different users in the system;
[0035] Manage different users through the system, formulate authority standards, and clarify the scope of responsibilities and operating permissions of different users in the system;
[0036] Through the authority matching strategy, the authorities of different users are matched, the users are given corresponding hierarchical information, and the fishery authorities are allocated level by level.
[0037] Specifically, the specific contents of the fishery resources to be managed are determined as follows: user data, system settings and operation logs, and the fishery resources are classified by type.
[0038] Furthermore, the specific contents of defining different users in the system are as follows:
[0039] Identify user roles in the system, including: super administrator, business administrator, operator, and data analyst;
[0040] Super administrator: responsible for system setup, maintenance, and user management;
[0041] Business administrator: responsible for managing the business data of each area according to the business module division;
[0042] Operator: responsible for data query and data entry of business modules;
[0043] Data Analyst: Responsible for data collection, processing and analysis of business modules.
[0044] Specifically, the super administrator is responsible for configuring system settings, including security settings, notification settings, and global settings. He has full access rights and can configure user permissions and system parameters. Business administrators have partial access rights. Operators perform routine operations such as querying and editing, and can only access and modify their own personal information, as well as perform core functional operations. Data analysts are responsible for accessing the system's API, have access rights to the API, and may require specific API keys.
[0045] Furthermore, the permission standards include: data access permissions and functional operation permissions.
[0046] Furthermore, data access permissions include data scope and data operations;
[0047] The data scope restricts access to data based on user roles. Super administrators access all data in business modules, business administrators access data in the business modules they are responsible for, operators access data in the business modules they input, and data analysts access data from several business modules for comprehensive analysis.
[0048] Furthermore, the functional operation permissions include dividing the system functions into different modules according to the business requirements of the system, and setting operation permissions based on different modules.
[0049] Furthermore, the permission matching strategy is matched according to the responsibilities and permissions of different users based on the principle of least privilege. After the permission matching is completed, a permission review is performed to ensure the accuracy and rationality of permission allocation.
[0050] Specifically, the principle of least privilege is followed to ensure that the minimum set of permissions required to complete each role is granted.
[0051] Furthermore, it also includes: using a monitoring system to monitor the use of user rights in real time, conducting regular rights audits, checking whether user rights are consistent with responsibilities, and promptly discovering abnormal situations.
[0052] Specifically, it also includes: when the scope of responsibilities of different users changes, a permission change application function is provided, allowing the initiation of permission change requests, and approving the permission change requests to ensure the rationality and compliance of the changes. After approval, the permissions of different users are adjusted to achieve dynamic adjustment of permissions.
[0053] Dynamically adjust user permissions based on information to ensure that only resources related to their current tasks can be accessed and operated; implement an approval process for permission changes to ensure that any permission adjustments are reasonably reviewed. When it is necessary to access more sensitive information or perform higher-level operations, the system initiates the approval process; integrate learning algorithms to automatically adjust permissions based on the user's historical behavior and preferences. When the system observes that a user frequently accesses a certain type of resource, it automatically increases the user's permissions to that type of resource.
[0054] and Figure 1 Corresponding to the method described above, the present invention also provides a multi-level digital fishery authority allocation system for Figure 1 The specific implementation of the method in the above example is shown in the schematic diagram of its structure. Figure 2 As shown, it includes a definition module, a management module, and a permission allocation module connected in sequence; wherein,
[0055] Definition module: define different users in the system according to the fishery resources to be managed;
[0056] Management module: manage different users through the system, formulate authority standards, and clarify the scope of responsibilities and operating permissions of different users in the system;
[0057] Permission allocation module: Match permissions for different users through permission matching strategies, assign users corresponding hierarchical information, and allocate fishery permissions step by step.
[0058] Specifically, the above modules may be embedded in or independent of a processor in a computer device in the form of hardware, or may be stored in a memory in a computer device in the form of software, so that the processor can call and execute operations corresponding to the above modules.
[0059] In one embodiment, see Figure 3 As shown, a computer device is provided, which may be a terminal. The computer device includes a processor, a memory, a communication interface, a display screen, and an input device connected via a system bus.
[0060] Among them, the processor of the computer device is used to provide computing and control capabilities, and the memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The communication interface of the computer device is used to communicate with an external terminal in a wired or wireless manner, and the wireless method can be achieved through WIFI, an operator network, NFC (near field communication) or other technologies. The display screen of the computer device can be a liquid crystal display screen or an electronic ink display screen, and the input device of the computer device can be a touch layer covering the display screen, or a button, trackball or touchpad set on the computer device housing, or an external keyboard, touchpad or mouse, etc.
[0061] In this specification, each embodiment is described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the embodiments can be referred to each other. For the system disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and the relevant parts can be referred to the method part.
[0062] The above description of the disclosed embodiments enables one skilled in the art to implement or use the present invention. Various modifications to these embodiments will be apparent to one skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present invention. Therefore, the present invention will not be limited to the embodiments shown herein, but rather to the widest scope consistent with the principles and novel features disclosed herein.
Claims
1. A multi-level digital fishery authority allocation method, characterized in that: The following steps are involved: Identify the fishery resources that require management and define the different users in the system; Manage different users through the system, formulate authority standards, and clarify the scope of responsibilities and operating permissions of different users in the system; Through the authority matching strategy, the authorities of different users are matched, the users are given corresponding hierarchical information, and the fishery authorities are allocated level by level.
2. A multi-level digital fishery authority allocation method according to claim 1, characterized in that: The specific contents of defining different users in the system are: Identify user roles in the system, including: super administrator, business administrator, operator, and data analyst; Super administrator: responsible for system setup, maintenance, and user management; Business administrator: responsible for managing the business data of each area according to the business module division; Operator: responsible for data query and data entry of business modules; Data Analyst: Responsible for data collection, processing and analysis of business modules.
3. A multi-level digital fishery authority allocation method according to claim 1, characterized in that: Permission standards include: data access permissions and functional operation permissions.
4. A multi-level digital fishery authority allocation method according to claim 3, characterized in that: Data access permissions include data scope and data operations; The data scope restricts access to data based on user roles. Super administrators access all data in business modules, business administrators access data in the business modules they are responsible for, operators access data in the business modules they input, and data analysts access data from several business modules for comprehensive analysis.
5. A multi-level digital fishery authority allocation method according to claim 3, characterized in that: Functional operation permissions include dividing system functions into different modules according to the business needs of the system, and setting operation permissions based on different modules.
6. A multi-level digital fishery authority allocation method according to claim 1, characterized in that: The permission matching strategy is matched according to the responsibilities and permissions of different users based on the principle of least privilege. After the permission matching is completed, a permission review is conducted to ensure the accuracy and rationality of permission allocation.
7. A multi-level digital fishery authority allocation method according to claim 1, characterized in that: Also includes: Use the monitoring system to monitor the use of user rights in real time, conduct regular rights audits, check whether user rights are consistent with responsibilities, and detect abnormal situations in a timely manner.
8. A multi-level digital fishery authority allocation system, characterized by A multi-level digital fishery authority allocation method according to any one of claims 1 to 7 is implemented, comprising a definition module, a management module, and an authority allocation module connected in sequence; wherein: Definition module: define different users in the system according to the fishery resources to be managed; Management module: manage different users through the system, formulate authority standards, and clarify the scope of responsibilities and operating permissions of different users in the system; Permission allocation module: Match permissions for different users through permission matching strategies, assign users corresponding hierarchical information, and allocate fishery permissions step by step.
Citation Information
Patent Citations
Management authority matching method, device and system
CN117540404A
Intranet dynamic access method and system based on tobacco intranet zero trust
CN118368141A
Service operator authorization management method
CN118536106A