Creation method and device of data management system, equipment, medium and product

Abstract

The invention relates to a creation method and device of a data management system, equipment, a medium and a product. The method comprises the following steps: acquiring system management demand information of a target data management system; wherein the system management demand information comprises data management demand information and user demand information; determining a design strategy of the target data management system according to the data management demand information; wherein the design strategy comprises a data encryption strategy and / or an access control strategy; and based on the low-code development tool, according to the design strategy and the user demand information, creating a target data management system. By adopting the method, the creation efficiency of the target data management system can be improved, and the created target data management system can manage data more efficiently and safely.

Description

Technical Field

[0001] The present application relates to the field of data management technology, and in particular to a method, device, equipment, medium and product for creating a data management system. Background Art

[0002] Data management refers to the process of comprehensive planning, organization, storage, processing, maintenance and utilization of data, which includes work from data collection and entry, to data storage, updating, backup and recovery, to data analysis, mining and application. Data management aims to ensure the integrity, reliability, security and effectiveness of data, so that organizations can better use data to support decision-making, innovation and business operations. The main goals of data management include improving data quality, maximizing data assets, ensuring data security and optimizing data processes.

[0003] However, existing data management systems may have loopholes in the security protection of sensitive data, and traditional development methods may require a lot of manual development, which is time-consuming and labor-intensive, and can easily lead to data leakage or tampering by unauthorized personnel, which will cause great losses to the data provider. At the same time, insecure transmission, storage and processing methods may bring security risks to the data management system online and affect the normal operation of the work. Summary of the invention

[0004] Based on this, it is necessary to provide a method, device, equipment, medium and product for creating a data management system that can ensure the secure storage and transmission of data in response to the above technical problems.

[0005] In a first aspect, the present application provides a method for creating a data management system, comprising:

[0006] Acquire system management requirement information of the target data management system; wherein the system management requirement information includes data management requirement information and user requirement information;

[0007] Determine the design strategy of the target data management system according to the data management requirement information; wherein the design strategy includes a data encryption strategy and / or an access control strategy;

[0008] Based on low-code development tools, the target data management system is created according to the design strategy and the user's demand information.

[0009] In one of the embodiments, if the data management requirement information includes data level information and data permission information, the design strategy includes a data encryption strategy and an access control strategy;

[0010] Determining the design strategy of the target data management system according to the data management requirement information includes:

[0011] Determining a data encryption strategy for the target data management system according to the data level information;

[0012] An access control policy of the target data management system is determined based on the data permission information.

[0013] In one embodiment, determining the data encryption strategy of the target data management system according to the data level information includes:

[0014] Determining, according to the data level information, a data encryption standard corresponding to each data level in the target data management system;

[0015] Determine the data encryption algorithm corresponding to each data level according to the data encryption standard corresponding to each data level;

[0016] The data encryption strategy of the target data management system is determined according to the data encryption algorithm corresponding to each data level.

[0017] In one embodiment, determining the access control policy of the target data management system according to the data permission information includes:

[0018] Determining the data access permission level corresponding to each data type in the target data management system according to the data permission information;

[0019] Determine the user identity level corresponding to each data type based on the data access permission level corresponding to each data type;

[0020] The access control policy of the target data management system is determined according to the data access permission level and user identity level corresponding to each data type.

[0021] In one embodiment, the low-code development tool is used to create the target data management system according to the design strategy and the user's requirement information, including:

[0022] Based on the low-code development tool, create each usage function module of the target data management system and the interaction process corresponding to each usage function module according to the user's demand information;

[0023] Based on the low-code development tool and in accordance with the design strategy, the management function modules of the target data management system and the interaction processes corresponding to the management function modules are created.

[0024] In one embodiment, if the design strategy includes a data encryption strategy and an access control strategy, each management function module includes a data encryption module, a rights management module and an access control module; the data encryption strategy includes different data encryption algorithms and algorithm logic corresponding to different data encryption algorithms;

[0025] The low-code development tool is used to create, according to the design strategy, each management function module of the target data management system and the interaction process corresponding to each management function module, including:

[0026] Based on the low-code development tool, according to the access control policy, create the access control module and the interaction process corresponding to the access control module, and create the permission management module and the interaction process corresponding to the permission management module;

[0027] Obtain installation packages of different data encryption algorithms, and integrate the installation packages of different data encryption algorithms into the low-code development tool;

[0028] Based on a low-code development tool that integrates different data encryption algorithms, the data encryption module and the interaction process of the data encryption module are created according to the data encryption strategy and the algorithm logic corresponding to different data encryption algorithms.

[0029] In a second aspect, the present application also provides a device for creating a data management system, comprising:

[0030] An information acquisition module is used to acquire system management requirement information of a target data management system; wherein the system management requirement information includes data management requirement information and user requirement information;

[0031] A strategy determination module, used to determine the design strategy of the target data management system according to the data management requirement information; wherein the design strategy includes a data encryption strategy and / or an access control strategy;

[0032] A system creation module is used to create the target data management system based on a low-code development tool according to the design strategy and the user's demand information.

[0033] In a third aspect, the present application further provides a computer device, including a memory and a processor, wherein the memory stores a computer program, and when the processor executes the computer program, the following steps are implemented:

[0034] Acquire system management requirement information of the target data management system; wherein the system management requirement information includes data management requirement information and user requirement information;

[0035] Determine the design strategy of the target data management system according to the data management requirement information; wherein the design strategy includes a data encryption strategy and / or an access control strategy;

[0036] Based on low-code development tools, the target data management system is created according to the design strategy and the user's demand information.

[0037] In a fourth aspect, the present application further provides a computer-readable storage medium having a computer program stored thereon, wherein when the computer program is executed by a processor, the following steps are implemented:

[0038] Acquire system management requirement information of the target data management system; wherein the system management requirement information includes data management requirement information and user requirement information;

[0039] Determine the design strategy of the target data management system according to the data management requirement information; wherein the design strategy includes a data encryption strategy and / or an access control strategy;

[0040] Based on low-code development tools, the target data management system is created according to the design strategy and the user's demand information.

[0041] In a fifth aspect, the present application further provides a computer program product, including a computer program, which implements the following steps when executed by a processor:

[0042] Acquire system management requirement information of the target data management system; wherein the system management requirement information includes data management requirement information and user requirement information;

[0043] Determine the design strategy of the target data management system according to the data management requirement information; wherein the design strategy includes a data encryption strategy and / or an access control strategy;

[0044] Based on low-code development tools, the target data management system is created according to the design strategy and the user's demand information.

[0045] The creation method, device, equipment, medium and product of the above-mentioned data management system obtains the system management requirement information of the target data management system, including data management requirement information and user requirement information, and determines the design strategy of the target data management system based on the data management requirement information; wherein the design strategy includes a data encryption strategy and / or an access control strategy; further, based on the low-code development tool, the target data management system is created according to the design strategy and user requirement information. The above-mentioned scheme, by obtaining the data management requirement information and user requirement information of the target data management system to be created, comprehensively considers the comprehensive needs of the users and managers of the target data management system, and also ensures the security of the data; at the same time, according to the data management requirement information, ensures the accuracy, practicality and management sophistication of the determined data encryption strategy and access control strategy; further, ensures the security and practicality of the target data management system created according to the design strategy, and also improves the data management efficiency. In addition, by introducing low-code development tools, this scheme reduces the development time and complexity of the target data management system and improves work efficiency. BRIEF DESCRIPTION OF THE DRAWINGS

[0046] In order to more clearly illustrate the technical solutions in the embodiments of the present application or the related technologies, the drawings required for use in the embodiments or the related technical descriptions are briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0047] Figure 1 A schematic diagram of a process for creating a data management system in one embodiment;

[0048] Figure 2 A schematic diagram of a flow chart for determining a design strategy for a target data management system in one embodiment;

[0049] Figure 3 A schematic diagram of a process for determining a data encryption strategy in one embodiment;

[0050] Figure 4 A schematic diagram of a process for determining an access control policy in an embodiment;

[0051] Figure 5 A schematic diagram of a process for creating a target data management system in one embodiment;

[0052] Figure 6 A schematic diagram of a process for creating a management function module in one embodiment;

[0053] Figure 7 is a flow chart of a method for creating a data management system in another embodiment;

[0054] Figure 8 is a structural block diagram of a device for creating a data management system in one embodiment;

[0055] Fig. 9 FIG. 4 is a diagram showing the internal structure of a computer device in one embodiment. DETAILED DESCRIPTION

[0056] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0057] The method for creating a data management system provided in the embodiment of the present application can be applied in an application environment in which a group or enterprise or other organization creates a data management system for managing data. Optionally, the method for creating a data management system provided in the embodiment of the present application can be executed by a computer device, which can be a server or a terminal with powerful computing capabilities.

[0058] In one embodiment, Figure 1 As shown, a method for creating a data management system is provided, which is described by taking the method applied to a server as an example, and specifically includes the following steps:

[0059] S101, obtaining system management requirement information of a target data management system.

[0060] Among them, the target data management system is a system used by an enterprise or institution to associate data; in the embodiment of the present application, the target data management system can be a scientific research achievement management system of a scientific research institution. System management requirement information represents the functions that need to be met by the created target data management system; in the embodiment of the present application, the system management requirement information includes data management requirement information and user requirement information; management requirement information represents the functions that need to be met by the management function module in the target data management system; user requirement information represents the functions that need to be met by the use function module in the target management system.

[0061] Optionally, a questionnaire can be sent to members of an enterprise or institution through a mini program to collect information on system management requirements; or, the questionnaire can be distributed to members of an enterprise or institution offline. Furthermore, the questionnaires fed back from different channels are counted and summarized to obtain the system management requirements information of the target data management system.

[0062] For example, the user's demand information may include experimental design and planning requirements (the scientific research team needs to be able to record the design, plan and expected results of the experiment in detail in the system), data collection and preprocessing requirements (the target data management system supports scientific researchers to directly upload or input experimental data), experimental results analysis requirements (the scientific research team needs to be able to perform statistical analysis and graphical display of experimental results), paper writing and submission requirements (the target data management system supports scientific researchers to write papers, organize literature, and collaborate with collaborators to complete paper submission), etc.

[0063] S102: Determine a design strategy for a target data management system based on data management requirement information.

[0064] Among them, the design strategy is a strategy for creating each functional module in the target data management system; in an embodiment of the present application, the design strategy includes a data encryption strategy and / or an access control strategy.

[0065] Optionally, after obtaining the data management demand information, in order to meet the needs of users and managers, the data management demand information can be analyzed and classified based on big data analysis algorithms, and strategies can be designed for creating various functional modules of the target management system based on the data management demand information and user demand information, as the design strategy of the target data management system.

[0066] S103, based on low-code development tools, creates a target data management system according to design strategies and user demand information.

[0067] Among them, the low-code development tool is a development platform based on a graphical interface and visual modeling technology, which can be integrated into a server; for example, in an embodiment of the present application, the low-code development tool may be Appian.

[0068] Optionally, you can use low-code development tools (such as the Appian platform) to create a new application (i.e., the target data management system), name the new application, set the application icon and description information, and create various functional modules based on the design strategy and user demand information to complete the creation of the target data management system.

[0069] In the method for creating the above-mentioned data management system, the system management requirement information of the target data management system, including data management requirement information and user requirement information, is obtained, and the design strategy of the target data management system is determined based on the data management requirement information; wherein, the design strategy includes a data encryption strategy and / or an access control strategy; further, based on the low-code development tool, the target data management system is created based on the design strategy and the user requirement information. The above-mentioned scheme, by obtaining the data management requirement information and user requirement information of the target data management system to be created, comprehensively considers the comprehensive needs of the users and managers of the target data management system, and also ensures the security of the data; at the same time, based on the data management requirement information, ensures the accuracy, practicality and management sophistication of the determined data encryption strategy and access control strategy; further, ensures the security and practicality of the target data management system created according to the design strategy, and also improves data management efficiency. In addition, by introducing low-code development tools, this scheme reduces the development time and complexity of the target data management system and improves work efficiency.

[0070] Optionally, if the data management requirement information includes data level information and data permission information, the design strategy includes a data encryption strategy and an access control strategy; on this basis, in one embodiment, Figure 2 As shown, a method for determining a design strategy for a target data management system is provided to refine the above S102, specifically comprising the following steps:

[0071] S201, determining a data encryption strategy of a target data management system according to data level information.

[0072] The data level information is information reflecting the target data management system's classification strategy for different data.

[0073] Optionally, different data encryption methods can be set for data of different data levels according to the data level information, so as to establish a correspondence between the data level and the data encryption method, and use the correspondence as the data encryption strategy of the target management system.

[0074] S202: Determine the access control policy of the target data management system according to the data authority information.

[0075] The data permission information is information reflecting the target data management system's setting strategy for access permissions to different data.

[0076] Optionally, different access policies can be set for data with different access permissions based on data permission information. For example, user identities are divided into administrators, members, and ordinary members, and different access permissions are assigned to different user identities, that is, a correspondence between user identities and data access permissions is established, and according to the correspondence, data access control policies are set for the target data management system.

[0077] In this embodiment, the data encryption strategy and access control strategy of the target data management system are determined according to the data level information and the data authority information, thereby ensuring the security of the created target data management system.

[0078] Optionally, based on the above embodiment, in one embodiment, as Figure 3 As shown, a method for determining the data encryption strategy of the target data management system is provided to refine the above S201, specifically including the following steps:

[0079] S301, determining the data encryption standard corresponding to each data level in the target data management system according to the data level information.

[0080] Among them, the data encryption standard describes the standards for encrypting data of different data levels.

[0081] Optionally, the importance of different data levels may be determined based on the description information of the data of different data levels in the data level information; further, different encryption standards may be specified for each data level based on the importance of each data level.

[0082] S302: Determine the data encryption algorithm corresponding to each data level according to the data encryption standard corresponding to each data level.

[0083] The data encryption algorithm is an algorithm used to encrypt data.

[0084] Optionally, encryption algorithms of different security levels may be obtained according to the data encryption standards corresponding to each data level, and a data encryption algorithm of a higher security level may be allocated to a data level having a higher data encryption standard.

[0085] Exemplarily, the data encryption algorithm may be a complementary encryption algorithm such as AES (Advanced Encryption Standard, a symmetric encryption algorithm) and RSA (Rivest-Shamir-Adleman, an asymmetric encryption algorithm).

[0086] S303: Determine the data encryption strategy of the target data management system according to the data encryption algorithm corresponding to each data level.

[0087] Optionally, the data encryption strategy of the target data management system may be determined based on the specific logic of the data encryption algorithm and the data types corresponding to the data at each data level.

[0088] In the embodiment of the present application, by determining different data encryption standards for different data levels and selecting different data encryption algorithms for the data corresponding to each data level according to the data encryption standards, the security of each data in the created target data management system and the rationality of the data encryption process are guaranteed.

[0089] Optionally, based on the above embodiment, in one embodiment, as Figure 4 As shown, a method for determining the access control policy of the target data management system is provided to refine the above S202, specifically including the following steps:

[0090] S401, determining the data access permission level corresponding to each data type in the target data management system according to the data permission information.

[0091] Optionally, the access permission levels corresponding to the data of different data types to be managed in the target data management system can be extracted from the data permission information. It can be understood that the higher the access permission level, the higher the corresponding security level.

[0092] S402: Determine the user identity level corresponding to each data type according to the data access permission level corresponding to each data type.

[0093] The user identity level describes the user's level in the target data management system, and also describes the access permission level of the data that the user can access and upload.

[0094] Optionally, based on the data access permission level corresponding to each data type, the identity that can access and upload data of the data type is determined, and different user identity levels are assigned to each access permission level, thereby determining the user identity level corresponding to each data type.

[0095] S403: Determine the access control policy of the target data management system according to the data access permission level and user identity level corresponding to each data type.

[0096] Optionally, based on the correspondence between the data access permission level corresponding to each data type and the user identity level, different access policies may be set for different user identity levels to determine the access control policy of the target data management system.

[0097] In an embodiment of the present application, by determining the user identity level corresponding to each data type based on the data access permission level corresponding to each data type, the access permissions of different members of the target data management system are restricted to a certain extent, thereby ensuring the security of each data in the target data management system.

[0098] Optionally, in one embodiment, Figure 5 As shown, a method for creating a target data management system is provided to refine the above S103, specifically comprising the following steps:

[0099] S501, based on the low-code development tool and according to the user's demand information, create each usage function module of the target data management system and the interaction process corresponding to each usage function module.

[0100] Optionally, in a low-code development tool, you can determine the various functional modules in the target data management system based on the user's demand information, and develop a personalized interaction process for each functional module based on actual needs and the specific layout of each functional module.

[0101] S502, based on low-code development tools and according to design strategies, create various management function modules of the target data management system and the corresponding interaction processes of each management function module.

[0102] Optionally, in a low-code development tool, you can determine the management function modules in the target data management system based on the design strategy, and develop a personalized interaction process for each management function module based on actual needs and the specific layout of each management function module.

[0103] In the embodiment of the present application, by creating each usage function module and each management function module respectively according to the user's demand information and design strategy, the personalization and practicality of the created target data management system are guaranteed, so that the created target data management system can better meet the needs of the user.

[0104] Optionally, the design strategy includes a data encryption strategy and an access control strategy, each management function module includes a data encryption module, a rights management module and an access control module; the data encryption strategy includes different data encryption algorithms and algorithm logic corresponding to different data encryption algorithms; based on the above embodiment, in one embodiment, Figure 6 As shown, a method for creating a management function module is provided to refine the above S502, which specifically includes the following steps:

[0105] S601, based on the low-code development tool and according to the access control policy, create an access control module and the interaction process corresponding to the access control module, and create a permission management module and the interaction process corresponding to the permission management module.

[0106] Optionally, a low-code development tool can be used to create a specific display page of the access control module and operation buttons in the display page according to the access control policy, and set a corresponding interaction process for each operation button. Furthermore, a permission management module and the interaction process corresponding to the permission management module can be created according to the same method.

[0107] Exemplarily, for the access control module, an access control list and a role-based access control module are created; and a strict access control policy is set to restrict user access to and operation of the system.

[0108] For the permission management module, set different user roles and permission levels, including administrators and ordinary users; configure permission expressions to ensure that only users with specific permissions can access the corresponding data and functions. For example, the user identity can be administrator, ordinary user, etc. Different permission levels have different access rights. Each user is granted appropriate permissions and can only access the data and functions they need to work, but has no right to access other data. The administrator has the highest authority and can manage user accounts, set permissions, and view all data.

[0109] S602, obtain installation packages of different data encryption algorithms, and integrate the installation packages of different data encryption algorithms into low-code development tools.

[0110] Optionally, you can download installation packages for different data encryption algorithms from the program management website and install each installation package in the low-code development tool.

[0111] S603, based on the low-code development tool that integrates different data encryption algorithms, create data encryption modules and the interaction process of data encryption modules according to the data encryption strategy and the algorithm logic corresponding to different data encryption algorithms.

[0112] Optionally, you can use a low-code development tool that integrates different data encryption algorithms. According to the data encryption strategy and the algorithm logic corresponding to different data encryption algorithms, you can set the execution logic of the data encryption algorithm for the data encryption module as an interactive process.

[0113] It should be noted that you can also create an authentication module for authenticating the user (ie, the user). Specifically, create a user registration page, including the necessary information of user name and password; implement a user login page, perform user identity authentication, and ensure that legitimate users can access the system.

[0114] In an embodiment of the present application, by integrating different data encryption algorithms into a low-code development tool, it is ensured that the target data management system can implement the data encryption and protection process.

[0115] Figure 7 FIG. 1 is a flow chart of a method for creating a data management system in another embodiment. Based on the above embodiment, this embodiment provides an optional example of a method for creating a data management system. Figure 7 The specific implementation process is as follows:

[0116] S701, obtaining data management requirement information and user requirement information of the target data management system.

[0117] Among them, system management demand information includes data management demand information and user demand information.

[0118] S702: Determine the data encryption standard corresponding to each data level in the target data management system according to the data level information in the data management requirement information.

[0119] S703: Determine the data encryption algorithm corresponding to each data level according to the data encryption standard corresponding to each data level.

[0120] S704: Determine the data encryption strategy of the target data management system according to the data encryption algorithm corresponding to each data level.

[0121] S705: Determine the data access permission level corresponding to each data type in the target data management system according to the data permission information in the data management requirement information.

[0122] S706: Determine the user identity level corresponding to each data type based on the data access permission level corresponding to each data type.

[0123] S707: Determine the access control policy of the target data management system according to the data access permission level and user identity level corresponding to each data type.

[0124] S708, based on low-code development tools and according to user demand information, create various usage function modules of the target data management system and the corresponding interaction processes for each usage function module.

[0125] S709, based on low-code development tools and according to design strategies, create various management function modules of the target data management system and the corresponding interaction processes of each management function module.

[0126] Among them, the management function module includes a data encryption module, a permission management module and an access control module.

[0127] Optionally, based on low-code development tools, create access control modules and corresponding interaction processes for the access control modules, as well as create permission management modules and corresponding interaction processes for the permission management modules according to access control policies; obtain installation packages of different data encryption algorithms, and integrate the installation packages of different data encryption algorithms into low-code development tools; based on low-code development tools integrated with different data encryption algorithms, create data encryption modules and interaction processes for the data encryption modules according to data encryption policies and the algorithm logic corresponding to different data encryption algorithms.

[0128] The specific process of the above S701-S709 can be found in the description of the above method embodiment. The implementation principle and technical effect are similar and will not be repeated here.

[0129] It should be understood that, although the various steps in the flowcharts involved in the above-mentioned embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps does not have a strict order restriction, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above-mentioned embodiments can include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily to be carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0130] Based on the same inventive concept, the embodiment of the present application also provides a data management system creation device for implementing the data management system creation method involved above. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme recorded in the above method, so the specific limitations in the one or more data management system creation device embodiments provided below can refer to the limitations of the data management system creation method above, and will not be repeated here.

[0131] In an exemplary embodiment, Figure 8 As shown, a device 800 for creating a data management system is provided, comprising: an information acquisition module 810, a strategy determination module 820 and a system creation module 830, wherein:

[0132] The information acquisition module 810 is used to acquire the system management requirement information of the target data management system; wherein the system management requirement information includes data management requirement information and user requirement information.

[0133] The strategy determination module 820 is used to determine the design strategy of the target data management system according to the data management requirement information; wherein the design strategy includes a data encryption strategy and / or an access control strategy.

[0134] The system creation module 830 is used to create a target data management system based on low-code development tools, according to design strategies and user demand information.

[0135] The creation device of the above-mentioned data management system obtains the system management requirement information of the target data management system, including data management requirement information and user requirement information, and determines the design strategy of the target data management system based on the data management requirement information; wherein the design strategy includes data encryption strategy and / or access control strategy; further, based on the low-code development tool, the target data management system is created according to the design strategy and user requirement information. The above-mentioned scheme, by obtaining the data management requirement information and user requirement information of the target data management system to be created, comprehensively considers the comprehensive needs of the users and managers of the target data management system, and also ensures the security of the data; at the same time, according to the data management requirement information, ensures the accuracy, practicality and management sophistication of the determined data encryption strategy and access control strategy; further, ensures the security and practicality of the target data management system created according to the design strategy, and also improves the data management efficiency. In addition, by introducing low-code development tools, this scheme reduces the development time and complexity of the target data management system and improves work efficiency.

[0136] In one embodiment, if the data management requirement information includes data level information and data permission information, the design strategy includes a data encryption strategy and an access control strategy; the strategy determination module 820 includes:

[0137] The first determining unit is used to determine the data encryption strategy of the target data management system according to the data level information.

[0138] The second determining unit is used to determine the access control policy of the target data management system according to the data authority information.

[0139] In one embodiment, the first determining unit is specifically configured to:

[0140] Based on the data level information, determine the data encryption standard corresponding to each data level in the target data management system; based on the data encryption standard corresponding to each data level, determine the data encryption algorithm corresponding to each data level; based on the data encryption algorithm corresponding to each data level, determine the data encryption strategy of the target data management system.

[0141] In one embodiment, the second determining unit is specifically configured to:

[0142] Based on the data permission information, determine the data access permission level corresponding to each data type in the target data management system; based on the data access permission level corresponding to each data type, determine the user identity level corresponding to each data type; based on the data access permission level and user identity level corresponding to each data type, determine the access control policy of the target data management system.

[0143] In one embodiment, the system creation module 830 includes:

[0144] The first creation unit is used to create various usage function modules of the target data management system and the interaction processes corresponding to each usage function module based on the low-code development tool and according to the user's demand information.

[0145] The second creation unit is used to create various management function modules of the target data management system and the interaction processes corresponding to each management function module based on the low-code development tool and the design strategy.

[0146] In one embodiment, the design strategy includes a data encryption strategy and an access control strategy, each management function module includes a data encryption module, a rights management module and an access control module; the data encryption strategy includes different data encryption algorithms and algorithm logic corresponding to different data encryption algorithms; the second creation unit is specifically used to:

[0147] Based on low-code development tools, create access control modules and corresponding interaction processes for access control modules according to access control policies, and create permission management modules and corresponding interaction processes for permission management modules; obtain installation packages of different data encryption algorithms, and integrate the installation packages of different data encryption algorithms into low-code development tools; based on low-code development tools integrated with different data encryption algorithms, create data encryption modules and interaction processes for data encryption modules according to data encryption policies and the algorithm logic corresponding to different data encryption algorithms.

[0148] Each module in the creation device of the above data management system can be implemented in whole or in part by software, hardware and their combination. Each module can be embedded in or independent of the processor in the computer device in the form of hardware, or can be stored in the memory of the computer device in the form of software, so that the processor can call and execute the operations corresponding to each module above.

[0149] In an exemplary embodiment, a computer device is provided. The computer device may be a server, and its internal structure diagram may be as shown in FIG. Fig. 9As shown. The computer device includes a processor, a memory, an input / output interface (Input / Output, referred to as I / O) and a communication interface. Among them, the processor, the memory and the input / output interface are connected through a system bus, and the communication interface is connected to the system bus through the input / output interface. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the computer device is used to store data such as system management requirement information of the target data management system. The input / output interface of the computer device is used to exchange information between the processor and an external device. The communication interface of the computer device is used to communicate with an external terminal through a network connection. When the computer program is executed by the processor, a method for creating a data management system is implemented.

[0150] Those skilled in the art will understand that Fig. 9 The structure shown in the figure is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0151] In one embodiment, a computer device is provided, including a memory and a processor, wherein a computer program is stored in the memory, and when the processor executes the computer program, the following steps are implemented:

[0152] Obtaining system management requirement information of the target data management system; wherein the system management requirement information includes data management requirement information and user requirement information;

[0153] Determine the design strategy of the target data management system based on the data management requirement information; wherein the design strategy includes a data encryption strategy and / or an access control strategy;

[0154] Based on low-code development tools, create the target data management system according to design strategies and user demand information.

[0155] In one embodiment, if the data management requirement information includes data level information and data authority information, the design strategy includes a data encryption strategy and an access control strategy; when the processor executes the computer program to determine the design strategy of the target data management system according to the data management requirement information, the following steps are also implemented:

[0156] According to the data level information, the data encryption strategy of the target data management system is determined; according to the data permission information, the access control strategy of the target data management system is determined.

[0157] In one embodiment, when the processor executes the computer program to determine the data encryption policy of the target data management system according to the data level information, the processor further implements the following steps:

[0158] Based on the data level information, determine the data encryption standard corresponding to each data level in the target data management system; based on the data encryption standard corresponding to each data level, determine the data encryption algorithm corresponding to each data level; based on the data encryption algorithm corresponding to each data level, determine the data encryption strategy of the target data management system.

[0159] In one embodiment, when the processor executes the computer program to determine the access control policy of the target data management system according to the data permission information, the processor further implements the following steps:

[0160] Based on the data permission information, determine the data access permission level corresponding to each data type in the target data management system; based on the data access permission level corresponding to each data type, determine the user identity level corresponding to each data type; based on the data access permission level and user identity level corresponding to each data type, determine the access control policy of the target data management system.

[0161] In one embodiment, when the processor executes the computer program based on the low-code development tool to create a target data management system according to the design strategy and user requirement information, the following steps are also implemented:

[0162] Based on low-code development tools, according to the user's demand information, create each usage function module of the target data management system and the corresponding interaction process for each usage function module; based on low-code development tools, according to the design strategy, create each management function module of the target data management system and the corresponding interaction process for each management function module.

[0163] In one embodiment, the design strategy includes a data encryption strategy and an access control strategy, and each management function module includes a data encryption module, a permission management module, and an access control module; the data encryption strategy includes different data encryption algorithms and algorithm logic corresponding to different data encryption algorithms; when the processor executes a computer program based on a low-code development tool, according to the design strategy, creates each management function module of the target data management system and the interaction process corresponding to each management function module, the following steps are also implemented:

[0164] Based on low-code development tools, create access control modules and corresponding interaction processes for access control modules according to access control policies, and create permission management modules and corresponding interaction processes for permission management modules; obtain installation packages of different data encryption algorithms, and integrate the installation packages of different data encryption algorithms into low-code development tools; based on low-code development tools integrated with different data encryption algorithms, create data encryption modules and interaction processes for data encryption modules according to data encryption policies and the algorithm logic corresponding to different data encryption algorithms.

[0165] In one embodiment, a computer readable storage medium is provided, on which a computer program is stored, and when the computer program is executed by a processor, the following steps are implemented:

[0166] Obtaining system management requirement information of the target data management system; wherein the system management requirement information includes data management requirement information and user requirement information;

[0167] Determine the design strategy of the target data management system based on the data management requirement information; wherein the design strategy includes a data encryption strategy and / or an access control strategy;

[0168] Based on low-code development tools, create the target data management system according to design strategies and user demand information.

[0169] In one embodiment, if the data management requirement information includes data level information and data authority information, the design strategy includes a data encryption strategy and an access control strategy; when the processor executes the computer program to determine the design strategy of the target data management system according to the data management requirement information, the following steps are also implemented:

[0170] According to the data level information, the data encryption strategy of the target data management system is determined; according to the data permission information, the access control strategy of the target data management system is determined.

[0171] In one embodiment, when the processor executes the computer program to determine the data encryption policy of the target data management system according to the data level information, the processor further implements the following steps:

[0172] Based on the data level information, determine the data encryption standard corresponding to each data level in the target data management system; based on the data encryption standard corresponding to each data level, determine the data encryption algorithm corresponding to each data level; based on the data encryption algorithm corresponding to each data level, determine the data encryption strategy of the target data management system.

[0173] In one embodiment, when the processor executes the computer program to determine the access control policy of the target data management system according to the data permission information, the processor further implements the following steps:

[0174] Based on the data permission information, determine the data access permission level corresponding to each data type in the target data management system; based on the data access permission level corresponding to each data type, determine the user identity level corresponding to each data type; based on the data access permission level and user identity level corresponding to each data type, determine the access control policy of the target data management system.

[0175] In one embodiment, when the processor executes the computer program based on the low-code development tool to create a target data management system according to the design strategy and user requirement information, the following steps are also implemented:

[0176] Based on low-code development tools, according to the user's demand information, create each usage function module of the target data management system and the corresponding interaction process for each usage function module; based on low-code development tools, according to the design strategy, create each management function module of the target data management system and the corresponding interaction process for each management function module.

[0177] In one embodiment, the design strategy includes a data encryption strategy and an access control strategy, and each management function module includes a data encryption module, a permission management module, and an access control module; the data encryption strategy includes different data encryption algorithms and algorithm logic corresponding to different data encryption algorithms; when the processor executes a computer program based on a low-code development tool, according to the design strategy, creates each management function module of the target data management system and the interaction process corresponding to each management function module, the following steps are also implemented:

[0178] Based on low-code development tools, create access control modules and corresponding interaction processes for access control modules according to access control policies, and create permission management modules and corresponding interaction processes for permission management modules; obtain installation packages of different data encryption algorithms, and integrate the installation packages of different data encryption algorithms into low-code development tools; based on low-code development tools integrated with different data encryption algorithms, create data encryption modules and interaction processes for data encryption modules according to data encryption policies and the algorithm logic corresponding to different data encryption algorithms.

[0179] In one embodiment, a computer program product is provided, comprising a computer program, which, when executed by a processor, implements the following steps:

[0180] Obtaining system management requirement information of the target data management system; wherein the system management requirement information includes data management requirement information and user requirement information;

[0181] Determine the design strategy of the target data management system based on the data management requirement information; wherein the design strategy includes a data encryption strategy and / or an access control strategy;

[0182] Based on low-code development tools, create the target data management system according to design strategies and user demand information.

[0183] In one embodiment, if the data management requirement information includes data level information and data authority information, the design strategy includes a data encryption strategy and an access control strategy; when the processor executes the computer program to determine the design strategy of the target data management system according to the data management requirement information, the following steps are also implemented:

[0184] According to the data level information, the data encryption strategy of the target data management system is determined; according to the data permission information, the access control strategy of the target data management system is determined.

[0185] In one embodiment, when the processor executes the computer program to determine the data encryption policy of the target data management system according to the data level information, the processor further implements the following steps:

[0186] Based on the data level information, determine the data encryption standard corresponding to each data level in the target data management system; based on the data encryption standard corresponding to each data level, determine the data encryption algorithm corresponding to each data level; based on the data encryption algorithm corresponding to each data level, determine the data encryption strategy of the target data management system.

[0187] In one embodiment, when the processor executes the computer program to determine the access control policy of the target data management system according to the data permission information, the processor further implements the following steps:

[0188] Based on the data permission information, determine the data access permission level corresponding to each data type in the target data management system; based on the data access permission level corresponding to each data type, determine the user identity level corresponding to each data type; based on the data access permission level and user identity level corresponding to each data type, determine the access control policy of the target data management system.

[0189] In one embodiment, when the processor executes the computer program based on the low-code development tool to create a target data management system according to the design strategy and user requirement information, the following steps are also implemented:

[0190] Based on low-code development tools, according to the user's demand information, create each usage function module of the target data management system and the corresponding interaction process for each usage function module; based on low-code development tools, according to the design strategy, create each management function module of the target data management system and the corresponding interaction process for each management function module.

[0191] In one embodiment, the design strategy includes a data encryption strategy and an access control strategy, and each management function module includes a data encryption module, a permission management module, and an access control module; the data encryption strategy includes different data encryption algorithms and algorithm logic corresponding to different data encryption algorithms; when the processor executes a computer program based on a low-code development tool, according to the design strategy, creates each management function module of the target data management system and the interaction process corresponding to each management function module, the following steps are also implemented:

[0192] Based on low-code development tools, create access control modules and corresponding interaction processes for access control modules according to access control policies, and create permission management modules and corresponding interaction processes for permission management modules; obtain installation packages of different data encryption algorithms, and integrate the installation packages of different data encryption algorithms into low-code development tools; based on low-code development tools integrated with different data encryption algorithms, create data encryption modules and interaction processes for data encryption modules according to data encryption policies and the algorithm logic corresponding to different data encryption algorithms.

[0193] It should be noted that the user information (including but not limited to user demand information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with relevant regulations.

[0194] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in this application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetoresistive random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, etc., but are not limited to this.

[0195] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0196] The above-described embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A method for creating a data management system, characterized in that: The method comprises: Acquire system management requirement information of the target data management system; wherein the system management requirement information includes data management requirement information and user requirement information; Determine the design strategy of the target data management system according to the data management requirement information; wherein the design strategy includes a data encryption strategy and / or an access control strategy; Based on low-code development tools, the target data management system is created according to the design strategy and the user's demand information.

2. The method according to claim 1, characterized in that If the data management requirement information includes data level information and data authority information, then the design strategy includes a data encryption strategy and an access control strategy; Determining the design strategy of the target data management system according to the data management requirement information includes: Determining a data encryption strategy for the target data management system according to the data level information; An access control policy of the target data management system is determined based on the data permission information.

3. The method according to claim 2, characterized in that Determining the data encryption strategy of the target data management system according to the data level information includes: Determining, according to the data level information, a data encryption standard corresponding to each data level in the target data management system; Determine the data encryption algorithm corresponding to each data level according to the data encryption standard corresponding to each data level; The data encryption strategy of the target data management system is determined according to the data encryption algorithm corresponding to each data level.

4. The method according to claim 2, characterized in that: Determining the access control policy of the target data management system according to the data permission information includes: Determining the data access permission level corresponding to each data type in the target data management system according to the data permission information; Determine the user identity level corresponding to each data type based on the data access permission level corresponding to each data type; The access control policy of the target data management system is determined according to the data access permission level and user identity level corresponding to each data type.

5. The method according to claim 1, characterized in that The low-code development tool is used to create the target data management system according to the design strategy and the user's demand information, including: Based on the low-code development tool, create each usage function module of the target data management system and the interaction process corresponding to each usage function module according to the user's demand information; Based on the low-code development tool and in accordance with the design strategy, the management function modules of the target data management system and the interaction processes corresponding to the management function modules are created.

6. The method according to claim 5, characterized in that The design strategy includes a data encryption strategy and an access control strategy, and each management function module includes a data encryption module, a rights management module and an access control module; the data encryption strategy includes different data encryption algorithms and algorithm logic corresponding to different data encryption algorithms; The low-code development tool is used to create, according to the design strategy, each management function module of the target data management system and the interaction process corresponding to each management function module, including: Based on the low-code development tool, according to the access control policy, create the access control module and the interaction process corresponding to the access control module, and create the permission management module and the interaction process corresponding to the permission management module; Obtain installation packages of different data encryption algorithms, and integrate the installation packages of different data encryption algorithms into the low-code development tool; Based on a low-code development tool that integrates different data encryption algorithms, the data encryption module and the interaction process of the data encryption module are created according to the data encryption strategy and the algorithm logic corresponding to different data encryption algorithms.

7. A device for creating a data management system, characterized in that: The device comprises: An information acquisition module is used to acquire system management requirement information of a target data management system; wherein the system management requirement information includes data management requirement information and user requirement information; A strategy determination module, used to determine the design strategy of the target data management system according to the data management requirement information; wherein the design strategy includes a data encryption strategy and / or an access control strategy; A system creation module is used to create the target data management system based on a low-code development tool according to the design strategy and the user's demand information.

8. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 6 are implemented.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

10. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

Images