User single sign-on method, system and terminal based on data portal

Abstract

The invention discloses a user single sign-on method, system and terminal based on a data portal, and the method comprises the steps: obtaining multi-type data, and carrying out the preprocessing of the multi-type data, and obtaining multi-type application data; when a login request of the user to the target access system is received and the login request does not pass the authentication, redirecting to the data portal for user registration; when user registration is completed, obtaining a target application access link with the target access system, and jumping to a system home page of the target access system according to the target application access link; and determining an access permission of a user in the target access system according to a login request, and searching in the multi-type application data according to the access permission to obtain target type data required by the user. According to the method, the user is set to perform registration authentication at the data portal, so that the process of logging in the target access system by the user is effectively simplified, and meanwhile, the data query efficiency of the user is also improved.

Description

Technical Field

[0001] The present invention relates to the field of data processing technology, and in particular to a user single sign-on method, system, terminal and computer-readable storage medium based on a data portal. Background Art

[0002] At present, all enterprises generally carry out their own information construction to build their own multiple business information systems. However, when users use different business information systems to query data, they need to enter their account and password multiple times for identity authentication, which makes the identity authentication process cumbersome when users log in to the business information system. This not only reduces the efficiency of data query, but also brings a bad user experience to users.

[0003] Therefore, the prior art still needs to be improved and developed. Summary of the invention

[0004] The main purpose of the present invention is to provide a user single sign-on method, system, terminal and computer-readable storage medium based on a data portal, aiming to solve the problem in the prior art that users need to enter their account number and password for identity authentication multiple times during the data query process provided by different business information systems, which leads to cumbersome user login verification process for business information systems and low user data query efficiency.

[0005] To achieve the above object, the present invention provides a user single sign-on method based on a data portal, and the user single sign-on method based on a data portal comprises the following steps:

[0006] Acquire multiple types of data, and preprocess the multiple types of data to obtain multiple types of application data;

[0007] When a user's login request to the target access system is received and the login request authentication fails, redirecting to the data portal for user registration;

[0008] When the user registration is completed, a target application access link between the target access system and the target access system is obtained, and the user is redirected to the system homepage of the target access system according to the target application access link;

[0009] The access rights of the user in the target access system are determined according to the login request, and the multi-type application data are searched according to the access rights to obtain the target type data required by the user.

[0010] Optionally, the method for user single sign-on based on a data portal, wherein the step of acquiring multiple types of data and preprocessing the multiple types of data to obtain multiple types of application data, specifically includes:

[0011] Acquire multiple types of data, and perform data integration processing on the multiple types of data through the data portal to obtain integrated multiple types of data;

[0012] The integrated multi-type data is processed using a graphical interface to obtain the multi-type application data.

[0013] Optionally, the user single sign-on method based on the data portal, wherein when a user login request to the target access system is received and the login request authentication fails, redirecting to the data portal for user registration specifically includes:

[0014] When receiving a login request from the user, parsing the login request to obtain login information requested by the user;

[0015] Determine the target access system to be accessed according to the user request login information, and perform authentication processing in the target access system according to the user request login information;

[0016] If the authentication fails, the user is redirected to the data portal for user registration processing.

[0017] Optionally, the user single sign-on method based on the data portal, wherein if the authentication fails, redirecting to the data portal for user registration processing specifically includes:

[0018] If the authentication fails, determining an access link to the data portal, and redirecting to the data portal according to the access link;

[0019] Obtaining the user account and password carried in the user request login information, and comparing and verifying the user account and password with the preset user information in the data portal;

[0020] When the verification is passed, a user authorization identifier is generated according to the user request login information, and the user request login information and the corresponding user authorization identifier are stored in the authorization database to complete the user registration.

[0021] Optionally, the user single sign-on method based on the data portal, wherein when the user registration is completed, a target application access link between the target access system and the target access system is obtained, and the target application access link is used to jump to the system homepage of the target access system, specifically including:

[0022] When the user registration is completed, the data access interface of the target access system is obtained, and a target application access link between the data portal and the target access system is generated according to the data access interface;

[0023] Calling the user request login information and the corresponding user authorization identifier in the authorization database according to the target application access link, and performing authorization verification processing in the target access system according to the user request login information and the user authorization identifier;

[0024] When the authorization check is passed, the system jumps to the system homepage of the target access system.

[0025] Optionally, the user single sign-on method based on the data portal, wherein the target access system to be accessed is determined according to the user request login information, and authentication processing is performed in the target access system according to the user request login information, and then further includes:

[0026] If the authentication is successful, the user is redirected to the home page of the target access system.

[0027] Optionally, the user single sign-on method based on the data portal, wherein determining the access rights of the user in the target access system according to the login request, and searching in the multi-type application data according to the access rights to obtain the target type data required by the user, specifically includes:

[0028] Performing a user rights search in the target access system according to the login request to obtain the access rights corresponding to the login request;

[0029] The target access data range of the user in the multi-type application data is determined according to the access permission, and the target data is searched in the target access data range according to the login request to obtain the target type data required by the user.

[0030] In addition, to achieve the above-mentioned purpose, the present invention also provides a user single sign-on system based on a data portal, wherein the user single sign-on system based on a data portal comprises:

[0031] A data preprocessing module, used to acquire multiple types of data and preprocess the multiple types of data to obtain multiple types of application data;

[0032] A login authentication module, for redirecting the user to a data portal for user registration when a login request to a target access system is received and the login request fails authentication;

[0033] An access system jump module, used for obtaining a target application access link between the target access system and the target access system when the user registration is completed, and jumping to the system homepage of the target access system according to the target application access link;

[0034] The data search module is used to determine the access rights of the user in the target access system according to the login request, and search in the multi-type application data according to the access rights to obtain the target type data required by the user.

[0035] In addition, to achieve the above-mentioned purpose, the present invention also provides a terminal, wherein the terminal includes: a memory, a processor, and a user single sign-on program based on a data portal stored in the memory and executable on the processor, wherein the user single sign-on program based on the data portal, when executed by the processor, implements the steps of the user single sign-on method based on the data portal as described above.

[0036] In addition, to achieve the above-mentioned purpose, the present invention also provides a computer-readable storage medium, wherein the computer-readable storage medium stores a user single sign-on program based on a data portal, and when the user single sign-on program based on a data portal is executed by a processor, the steps of the user single sign-on method based on a data portal as described above are implemented.

[0037] In the present invention, multiple types of data are obtained, and the multiple types of data are preprocessed to obtain multiple types of application data; when a user's login request to the target access system is received and the login request authentication fails, it is redirected to the data portal for user registration; when the user registration is completed, the target application access link between the target access system is obtained, and the system homepage of the target access system is jumped to according to the target application access link; the access rights of the user in the target access system are determined according to the login request, and the multiple types of application data are searched according to the access rights to obtain the target type data required by the user. The present invention sets that after the user performs registration authentication in the data portal, when performing the target access system, the user can directly jump to the homepage of the target access system without the need for login verification, which not only effectively simplifies the process of the user logging into the target access system, but also improves the efficiency of the user's query on the data. At the same time, the present invention also sets corresponding user query rights for different users, which can effectively ensure the security of data query. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] Figure 1 It is a flow chart of a preferred embodiment of the user single sign-on method based on the data portal of the present invention;

[0039] Figure 2 It is a structural diagram of a preferred embodiment of the user single sign-on system based on a data portal of the present invention;

[0040] Figure 3 It is a structural diagram of a preferred embodiment of the terminal of the present invention. DETAILED DESCRIPTION

[0041] In order to make the purpose, technical solution and advantages of the present invention clearer and more specific, the present invention is further described in detail below with reference to the accompanying drawings and examples. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not used to limit the present invention.

[0042] At present, all enterprises generally carry out their own information construction to build their own multiple business information systems. However, when users use different business information systems to query data, they need to enter their account and password multiple times for identity authentication, which makes the identity authentication process cumbersome when users log in to the business information system. This not only reduces the efficiency of data query, but also brings a bad user experience to users.

[0043] To solve the above problems, the present invention provides a method for connecting users with a unified identity authentication system of a data portal. The data portal is a unified data service access portal of a data middle platform. By controlling users and permissions, users of different roles can find data service interfaces or data analysis results that meet their needs through a data portal system, and implement single-point login for users by connecting to a unified identity management platform of the data portal based on unified UI design specifications.

[0044] The user single sign-on method based on the data portal described in the preferred embodiment of the present invention is as follows: Figure 1 As shown, the user single sign-on method based on the data portal includes the following steps:

[0045] Step S10: Acquire multiple types of data, and pre-process the multiple types of data to obtain multiple types of application data, wherein the multiple types of data include basic data, summary data, indicator data, label data, analysis model data, and report data of each system.

[0046] Preparation for the implementation of the data portal: The data portal can integrate various data from different sources to truly realize data management. It takes the maintenance and management of data assets as its core function and provides a complete set of project management, resource allocation, member maintenance and other functions through a graphical interface.

[0047] Specifically, multiple types of data are acquired, and data integration processing is performed on the multiple types of data through the data portal to obtain integrated multiple types of data; and graphical interface processing is performed on the integrated multiple types of data to obtain the multiple types of application data.

[0048] Preparation work before data portal data implementation: 1. Design and demand analysis: including UI design and style color, design a user-friendly and easy-to-operate UI interface, and the interface complies with the corresponding preset UI design specifications. When designing, fully consider the rationalization of the layout, follow the user's browsing and operation habits from top to bottom and from left to right, avoid the arrangement of commonly used business function buttons too scattered, hide uncommon function blocks when necessary, keep the page simple, and allow users to focus on the main business process operations. 2. Hardware and network resources: application, installation and deployment of server resources, the unified portal deployment environment requires a production environment and a test environment, which need to be deployed in advance. 3. User experience: support management systems based on users, user groups, and projects to meet the needs of corporate customers at different stages of development.

[0049] Among them, the preprocessing includes not only data integration processing and graphical interface processing, but also data extraction processing, data storage processing and report display processing, which can realize unified query and display of business operation reports by extracting data from the grid production business system. Among them, 1. Data extraction processing is used to realize the unified extraction function of business data of the production business system. 2. Data storage is used to realize the unified filtering, optimization processing and unified storage function of business data, and provide data support for report display. 3. Report display is used to display the report content according to the data results of the report query.

[0050] Step S20: When a user's login request to the target access system is received and the login request authentication fails, the user is redirected to the data portal for user registration.

[0051] The data portal of the present invention supports free design and customization of portal interface, including interface content, interface layout and style. At the same time, it supports unified authorization login, realizes unified login and function integration, and users can access various systems with the same user name and password. The system realizes automatic matching, ensuring that users can complete the login authentication operation of all systems for this visit by logging in only once in the data portal system, and realizes seamless transfer, roaming and status maintenance of users between various systems.

[0052] Specifically, when a login request from the user is received, the login request is parsed and processed to obtain the login information requested by the user; the target access system to be accessed is determined based on the login information requested by the user, and authentication is performed in the target access system based on the login information requested by the user.

[0053] When a user needs to retrieve certain target data, he or she first needs to determine the target access system to be queried, generate a login request, and send the login request to the target access system for verification. After receiving the login request, the target access system will parse the login request, obtain the user request login information carried in the login request, and compare the login information stored in the target access system with the user request login information carried in the login request to determine whether the user's identity is allowed to log in.

[0054] If the authentication fails, the access link of the data portal is determined, and the user is redirected to the data portal according to the access link; the user account and password carried in the user request login information are obtained, and the user account and password are compared and verified with the preset user information in the data portal; when the verification is passed, a user authorization identifier is generated according to the user request login information, and the user request login information and the corresponding user authorization identifier are stored in the authorization database to complete the user registration. Furthermore, if the authentication is successful, the user is redirected to the system homepage of the target access system.

[0055] It is understandable that the user enters the user account and password in the user request login information on the login page of the target access system, and the target access system verifies the user account and password. If the user name and password are correct, the authentication is determined to be successful and the user is redirected to the system homepage of the target access system. If the user name and password are not correctly verified, the user is redirected to the data portal for user registration.

[0056] During the implementation process, when a user needs to be authenticated to access the target access system, a redirection method is adopted. The target access system will call its own authentication interface to perform user identity security authentication and compare the identity verification code. If they are different, it will jump (redirect) to the registration interface (that is, the data portal system in the present invention).

[0057] Among them, the process of verifying the user account and password by the target access system in the present invention is as follows: confirm the verification code according to the input account name and login password, and compare the verification code in the login information authorization database of the target access system by comparison. If the verification code exists, the verification passes; if the verification code does not exist, the verification fails.

[0058] Furthermore, in the process of verifying the user's login request information in the data portal system, the user account and password carried in the user's login request information will be compared and verified with the preset user information in the data portal. The specific implementation process is as follows: the user account and password carried in the user's login request information will be compared and verified with the preset user information in the data portal. If the verification is successful, the user's login request information entered by the user and the user authorization identifier generated by the comparison and verification will be added to the authorization database of the data portal (wherein the user's login request information added to the authorization database includes at least the user's unique identifier, user account, password and login status), so that when subsequent users access the target access system, they can directly call the user authorization identifier and user login request information in the authorization database. Among them, the user authorization identifier is used to tell the target access system that this user has been verified and has obtained login authorization, and can directly jump to the homepage of the target access system without the need for login verification.

[0059] Step S30: When the user registration is completed, a target application access link between the target access system and the target access system is obtained, and the target application access link is used to jump to the system homepage of the target access system.

[0060] The data portal system in the present invention supports the following functions: 1. User login: The user clicks the login button in the unified portal to jump to the personnel login interface. After the user completes the login authentication, it jumps back to the portal homepage and displays the user login information. 2. Trust transfer: After the user logs in to the portal, the application link of the CIS system, GIS system, PS system, pipeline integrity system and other systems (i.e., the target application access link in the present invention) is opened in the work portal, and the user is automatically logged in after entering the system management platform.

[0061] Specifically, when the user registration is completed, the data access interface of the target access system is obtained, and a target application access link is generated between the data portal and the target access system based on the data access interface; the user request login information and the corresponding user authorization identifier in the authorization database are called according to the target application access link, and authorization verification is performed in the target access system based on the user request login information and the user authorization identifier; when the authorization verification passes, jump to the system homepage of the target access system.

[0062] When the user completes registration in the data portal system and logs in to the subsequent target access system, the target access system will analyze the login request sent by the user and directly call the authorization database based on the login request to determine whether it has a user authorization identifier. If not, it will re-enter the data portal system for registration verification; if so, it will directly call the user request login information stored in the authorization database to log in. At this time, after the target access system receives the user authorization identifier, it will determine that the current user is a login authorized user. This user belongs to the single sign-on user range of its own system, and can directly jump to the homepage of its own system.

[0063] It is understandable that when a user accesses an intranet application system such as a cluster portal or a business system (equivalent to the target access system in the present invention) through a client such as a browser via a terminal device. The cluster portal or business system will determine whether the user has logged in. If the cluster portal or business system determines that the user has logged in, the user can directly access the cluster portal or business system (i.e., jump to the interface and enter the system homepage). If the cluster portal or business system determines that the user has not logged in or the login has expired, the user needs to access the data portal system to perform login verification and authentication again before further accessing the cluster portal or business system. Furthermore, when the authentication is passed during the judgment, the data portal system can search for the public network address of the target access system based on the locally stored mapping table, and the mapping table stores the corresponding IP address segment and the public network address of the target access system.

[0064] Therefore, when the user visits the target access system for the first time, the user can jump to the data portal system through the target access system and register the account information on the data portal system. The target access system will report the user's login information to the data portal system, and the data portal system will record it in the account list. At this time, the data portal system will verify the user's login information at this time with the pre-stored login information of the user. If they are consistent, the authentication is successful. Successful authentication indicates that the user has completed the login on the data portal system. At this time, the data portal system sends redirection information to the user's client, with the target being the target access system. Finally, the user's client accesses the target access system based on the redirection information of the target access system and enters the interface homepage of the target access system.

[0065] The present invention includes a user name and password in the login request sent by each user. When the user logs in and registers on the portal system, the user is integrated so that the user does not need to re-enter the password for subsequent logins. At the same time, other systems can also be called without entering the account number and password. When the user logs in to other systems, the application access link between the systems is obtained, and the authorization permission of the system is obtained through the application access link to realize the automatic login of the user.

[0066] Step S40: determining the access rights of the user in the target access system according to the login request, and searching in the multi-type application data according to the access rights to obtain the target type data required by the user.

[0067] The present invention supports the flexible establishment of data portals, and can customize the style, structure and content of portal pages. It can set permissions by level according to the organizational structure system, that is, it supports the matrix management mode of multiple subordinate units, multiple organizations, multiple personnel, multiple positions, multiple levels and multiple dimensions in the future, and provides permission settings for elements in the system such as files, information, notifications, and application forms, so as to realize flexible requirements for permission control and all-round permission control. It can realize logical isolation between subordinate units in the future, and personnel from different units can only see the content that they are authorized to view when logging into their own accounts, which can realize cross-unit and cross-level work coordination, and provide sufficient flexibility to meet the actual situation of organizational structure and personnel adjustment.

[0068] Specifically, a user authority search is performed in the target access system according to the login request to obtain the access authority corresponding to the login request; the target access data range of the user in the multi-type application data is determined according to the access authority, and a target data search is performed in the target access data range according to the login request to obtain the target type data required by the user.

[0069] In the present invention, when the target access system calls the authorization database of the data portal system and obtains the user authorization identifier, it is considered that the user has obtained trust authorization in the login verification link of each subsystem. Therefore, the user can directly jump to the corresponding page of other bound systems on the homepage of the portal system as needed, without having to perform login verification again when accessing other systems.

[0070] It can be understood that the present invention can realize the user's single sign-on (SingleSignOn, referred to as SSO, which means that in multiple application systems, the user only needs to log in once to access all mutually trusted application systems) through the target application access link, and determine the data range that the current user can query according to the login permissions corresponding to the current user.

[0071] In the present invention, when there are multiple business systems, through a unified user login platform, only one login or logout is required to complete unified login or logout in multiple business systems, which greatly facilitates user use and operation.

[0072] In summary, the present invention establishes a trust relationship with other access systems by constructing a data portal system. As long as the user passes the authentication of the data portal system, he can freely access the data provided by other access systems without having to input the authentication information of other access systems again. Moreover, through communication with the data portal system, other access systems can ensure that the user is a legitimate user and provide services for him. This improves access efficiency, reduces security risks and management costs, and realizes centralized management of data.

[0073] Furthermore, if Figure 2 As shown, based on the above-mentioned user single sign-on method based on the data portal, the present invention also provides a user single sign-on system based on the data portal, wherein the user single sign-on system based on the data portal includes:

[0074] The data preprocessing module 51 is used to obtain multiple types of data and preprocess the multiple types of data to obtain multiple types of application data;

[0075] A login authentication module 52, for redirecting the user to a data portal for user registration when a login request to a target access system is received and the login request fails authentication;

[0076] The access system jump module 53 is used to obtain the target application access link between the target access system and the target access system when the user registration is completed, and jump to the system homepage of the target access system according to the target application access link;

[0077] The data search module 54 is used to determine the access rights of the user in the target access system according to the login request, and search in the multi-type application data according to the access rights to obtain the target type data required by the user.

[0078] Furthermore, if Figure 3 As shown, based on the above-mentioned data portal-based user single sign-on method and system, the present invention also provides a terminal accordingly, and the terminal includes a processor 10, a memory 20 and a display 30. Figure 3 Only some components of the terminal are shown, but it should be understood that it is not required to implement all of the components shown, and more or fewer components may be implemented instead.

[0079] The memory 20 may be an internal storage unit of the terminal in some embodiments, such as a hard disk or memory of the terminal. The memory 20 may also be an external storage device of the terminal in other embodiments, such as a plug-in hard disk, a smart memory card (Smart Media Card, SMC), a secure digital (SecureDigital, SD) card, a flash card (Flash Card), etc. equipped on the terminal. Further, the memory 20 may also include both an internal storage unit of the terminal and an external storage device. The memory 20 is used to store application software and various types of data installed on the terminal, such as the program code of the installation terminal, etc. The memory 20 may also be used to temporarily store data that has been output or is to be output. In one embodiment, a user single sign-on program 40 based on a data portal is stored on the memory 20, and the user single sign-on program 40 based on the data portal can be executed by the processor 10, thereby realizing the user single sign-on method based on the data portal in the present application.

[0080] In some embodiments, the processor 10 may be a central processing unit (CPU), a microprocessor or other data processing chip, used to run the program code or process data stored in the memory 20, such as executing the data portal-based user single sign-on method.

[0081] In some embodiments, the display 30 may be an LED display, a liquid crystal display, a touch-sensitive liquid crystal display, an OLED (Organic Light-Emitting Diode) touch device, etc. The display 30 is used to display information on the terminal and to display a visual user interface. The components 10-30 of the terminal communicate with each other via a system bus.

[0082] In one embodiment, when the processor 10 executes the data portal-based user single sign-on program 40 in the memory 20, the following steps are implemented:

[0083] Acquire multiple types of data, and preprocess the multiple types of data to obtain multiple types of application data;

[0084] When a user's login request to the target access system is received and the login request authentication fails, redirecting to the data portal for user registration;

[0085] When the user registration is completed, a target application access link between the target access system and the target access system is obtained, and the user is redirected to the system homepage of the target access system according to the target application access link;

[0086] The access rights of the user in the target access system are determined according to the login request, and the multi-type application data are searched according to the access rights to obtain the target type data required by the user.

[0087] The acquiring of multiple types of data and preprocessing of the multiple types of data to obtain multiple types of application data specifically includes:

[0088] Acquire multiple types of data, and perform data integration processing on the multiple types of data through the data portal to obtain integrated multiple types of data;

[0089] The integrated multi-type data is processed using a graphical interface to obtain the multi-type application data.

[0090] When a user's login request to the target access system is received and the login request authentication fails, redirecting to the data portal for user registration specifically includes:

[0091] When receiving a login request from the user, parsing the login request to obtain login information requested by the user;

[0092] Determine the target access system to be accessed according to the user request login information, and perform authentication processing in the target access system according to the user request login information;

[0093] If the authentication fails, the user is redirected to the data portal for user registration processing.

[0094] If the authentication fails, redirecting to the data portal for user registration processing specifically includes:

[0095] If the authentication fails, determining an access link to the data portal, and redirecting to the data portal according to the access link;

[0096] Obtaining the user account and password carried in the user request login information, and comparing and verifying the user account and password with the preset user information in the data portal;

[0097] When the verification is passed, a user authorization identifier is generated according to the user request login information, and the user request login information and the corresponding user authorization identifier are stored in the authorization database to complete the user registration.

[0098] When the user registration is completed, a target application access link between the target access system and the target access system is obtained, and the target application access link is used to jump to the system homepage of the target access system, which specifically includes:

[0099] When the user registration is completed, the data access interface of the target access system is obtained, and a target application access link between the data portal and the target access system is generated according to the data access interface;

[0100] Calling the user request login information and the corresponding user authorization identifier in the authorization database according to the target application access link, and performing authorization verification processing in the target access system according to the user request login information and the user authorization identifier;

[0101] When the authorization check is passed, the system jumps to the system homepage of the target access system.

[0102] The step of determining a target access system to be accessed according to the user request login information, and performing authentication processing in the target access system according to the user request login information, further includes:

[0103] If the authentication is successful, the user is redirected to the home page of the target access system.

[0104] The step of determining the access rights of the user in the target access system according to the login request, and searching the multi-type application data according to the access rights to obtain the target type data required by the user specifically includes:

[0105] Performing a user rights search in the target access system according to the login request to obtain the access rights corresponding to the login request;

[0106] The target access data range of the user in the multi-type application data is determined according to the access permission, and the target data is searched in the target access data range according to the login request to obtain the target type data required by the user.

[0107] The present invention also provides a computer-readable storage medium, wherein the computer-readable storage medium stores a user single sign-on program based on a data portal, and when the user single sign-on program based on the data portal is executed by a processor, the steps of the user single sign-on method based on the data portal as described above are implemented.

[0108] In summary, the present invention provides a user single sign-on method and related equipment based on a data portal, the method comprising: obtaining multiple types of data, and preprocessing the multiple types of data to obtain multiple types of application data; when a user's login request to a target access system is received and the login request authentication fails, redirecting to the data portal for user registration; when the user registration is completed, obtaining a target application access link between the target access system and the target application access link, and jumping to the system homepage of the target access system according to the target application access link; determining the user's access rights in the target access system according to the login request, and searching in the multiple types of application data according to the access rights to obtain the target type data required by the user. The present invention sets the user to register and authenticate in the data portal, and then directly jumps to the homepage of the target access system when performing the target access system, without the need for login verification, which not only effectively simplifies the process of the user logging into the target access system, but also improves the efficiency of the user's query of data. At the same time, the present invention also sets corresponding user query rights for different users, which can effectively ensure the security of data query.

[0109] It should be noted that, in this article, the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, article or terminal including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or terminal. In the absence of further restrictions, an element defined by the sentence "comprises a ..." does not exclude the presence of other identical elements in the process, method, article or terminal including the element.

[0110] Of course, those skilled in the art can understand that all or part of the processes in the above-mentioned embodiments can be implemented by instructing related hardware (such as a processor, a controller, etc.) through a computer program, and the program can be stored in a computer-readable storage medium that can be read by a computer, and the program can include the processes of the above-mentioned method embodiments when executed. The computer-readable storage medium can be a memory, a disk, an optical disk, etc.

[0111] It should be understood that the application of the present invention is not limited to the above examples. For ordinary technicians in this field, improvements or changes can be made based on the above description. All these improvements and changes should fall within the scope of protection of the claims attached to the present invention.

Claims

1. A user single sign-on method based on a data portal, characterized in that: The user single sign-on method based on the data portal includes: Acquire multiple types of data, and preprocess the multiple types of data to obtain multiple types of application data; When a user's login request to the target access system is received and the login request authentication fails, redirecting to the data portal for user registration; When the user registration is completed, a target application access link between the target access system and the target access system is obtained, and the user is redirected to the system homepage of the target access system according to the target application access link; The access rights of the user in the target access system are determined according to the login request, and the multi-type application data are searched according to the access rights to obtain the target type data required by the user.

2. The user single sign-on method based on the data portal according to claim 1 is characterized in that: The acquiring of multiple types of data and preprocessing of the multiple types of data to obtain multiple types of application data specifically includes: Acquire multiple types of data, and perform data integration processing on the multiple types of data through the data portal to obtain integrated multiple types of data; The integrated multi-type data is processed using a graphical interface to obtain the multi-type application data.

3. The user single sign-on method based on data portal according to claim 2 is characterized in that: When a user's login request to the target access system is received and the login request authentication fails, redirecting to the data portal for user registration specifically includes: When receiving a login request from the user, parsing the login request to obtain login information requested by the user; Determine the target access system to be accessed according to the user request login information, and perform authentication processing in the target access system according to the user request login information; If the authentication fails, the user is redirected to the data portal for user registration processing.

4. The user single sign-on method based on data portal according to claim 3 is characterized in that: If the authentication fails, redirect to the data portal for user registration, which specifically includes: If the authentication fails, determining an access link to the data portal, and redirecting to the data portal according to the access link; Obtaining the user account and password carried in the user request login information, and comparing and verifying the user account and password with the preset user information in the data portal; When the verification is passed, a user authorization identifier is generated according to the user request login information, and the user request login information and the corresponding user authorization identifier are stored in the authorization database to complete the user registration.

5. The user single sign-on method based on data portal according to claim 4 is characterized in that: When the user registration is completed, a target application access link between the target access system and the target access system is obtained, and the target application access link is used to jump to the system homepage of the target access system, which specifically includes: When the user registration is completed, the data access interface of the target access system is obtained, and a target application access link between the data portal and the target access system is generated according to the data access interface; Calling the user request login information and the corresponding user authorization identifier in the authorization database according to the target application access link, and performing authorization verification processing in the target access system according to the user request login information and the user authorization identifier; When the authorization check is passed, the system jumps to the system homepage of the target access system.

6. The user single sign-on method based on data portal according to claim 3 is characterized in that: The method further comprises: determining a target access system to be accessed according to the user request login information, and performing authentication processing in the target access system according to the user request login information, and then further comprising: If the authentication is successful, the user is redirected to the home page of the target access system.

7. The user single sign-on method based on data portal according to claim 1 is characterized in that: Determining the access rights of the user in the target access system according to the login request, and searching in the multi-type application data according to the access rights to obtain the target type data required by the user, specifically includes: Performing a user rights search in the target access system according to the login request to obtain the access rights corresponding to the login request; The target access data range of the user in the multi-type application data is determined according to the access permission, and the target data is searched in the target access data range according to the login request to obtain the target type data required by the user.

8. A user single sign-on system based on a data portal, characterized in that: The user single sign-on system based on the data portal includes: A data preprocessing module, used to acquire multiple types of data and preprocess the multiple types of data to obtain multiple types of application data; A login authentication module, for redirecting the user to a data portal for user registration when a login request to a target access system is received and the login request fails authentication; An access system jump module, used for obtaining a target application access link between the target access system and the target access system when the user registration is completed, and jumping to the system homepage of the target access system according to the target application access link; The data search module is used to determine the access rights of the user in the target access system according to the login request, and search in the multi-type application data according to the access rights to obtain the target type data required by the user.

9. A terminal, characterized in that: The terminal includes: a memory, a processor, and a data portal-based user single sign-on program stored in the memory and executable on the processor. When the data portal-based user single sign-on program is executed by the processor, the steps of the data portal-based user single sign-on method as described in any one of claims 1 to 7 are implemented.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a data portal-based user single sign-on program, and when the data portal-based user single sign-on program is executed by the processor, the steps of the data portal-based user single sign-on method according to any one of claims 1 to 7 are implemented.

Images