Data permission processing method and system

Abstract

The invention provides a data permission processing method and system. The method comprises the following steps: respectively setting a first permission, a second permission and a third permission for a preset database; acquiring a personnel list of a target company corresponding to the target data in real time, and correspondingly dividing first-level members, second-level members and third-level members; a first permission is correspondingly set for the first-level members, a second permission is correspondingly set for the second-level members, a third permission is correspondingly set for the third-level members, and a corresponding data transmission network is created in real time according to the first-level members, the second-level members and the third-level members; when it is detected that a member sends real-time data in real time, whether the real-time data circulates in the data transmission network or not is judged in real time; and if not, correspondingly determining a target permission corresponding to the member, and carrying out feedback processing on the real-time data based on the target permission so as to judge whether to send the real-time data or not in real time according to a feedback result. According to the invention, the secrecy performance of data can be effectively improved.

Description

Technical Field

[0001] The present invention relates to the technical field of data processing, and in particular to a data authority processing method and system. Background Art

[0002] With the advancement of science and technology and the rapid development of the times, the Internet and computer technology have also developed rapidly, and have been popularized in people's daily life and work, greatly facilitating people's lives.

[0003] In the field of environmental protection, computer technology has also been widely used, and in the course of daily work, a large amount of different types of data will be generated, such as atmospheric data, forestry data, and water resources data, which require corresponding management to facilitate the search and use of staff.

[0004] Furthermore, in the process of managing various types of data, in order to use the data reasonably, most of the existing technologies will set corresponding data usage permissions for employees in different positions, so that each employee can process the data within the corresponding usage permissions. However, although this method can enable the staff to use the data as required, it cannot effectively prevent the staff from leaking the data they obtain to outsiders, which makes data leakage easy to occur. Summary of the invention

[0005] Based on this, the purpose of the present invention is to provide a data permission processing method and system to solve the problem that the existing technology cannot effectively prevent staff from leaking the data they obtain to outsiders, resulting in data leakage.

[0006] The first aspect of the embodiment of the present invention proposes: A data permission processing method, wherein the method comprises: The target data collected in real time is stored in a preset database, and the first permission, the second permission and the third permission are set for the preset database according to the preset rules; Obtaining in real time a personnel list of the target company corresponding to the target data, and dividing the personnel list into first-level members, second-level members, and third-level members; The first permission is set for the first-level members, the second permission is set for the second-level members, and the third permission is set for the third-level members, and a corresponding data transmission network is created in real time according to the first-level members, the second-level members, and the third-level members; When it is detected in real time that there is a member sending real-time data, it is determined in real time whether the real-time data is circulated inside the data transmission network; If it is determined in real time that the real-time data is not circulating within the data transmission network, the target authority corresponding to the member is determined accordingly, and feedback processing is performed on the real-time data based on the target authority to determine in real time whether to send the real-time data based on the feedback result.

[0007] The beneficial effects of the present invention are: by storing the target data collected in real time into a preset database for easy management, based on this, the corresponding first permission, second permission and third permission will be further set for the current preset database, and at the same time, the corresponding first-level members, second-level members and third-level members will be further divided within the current target company, and a corresponding data transmission network can be created. Based on this, in the actual use process, the real-time data to be sent by each member can be reviewed accordingly, so as to effectively avoid data leakage, thereby protecting the interests of the company and improving the confidentiality of the data.

[0008] Furthermore, the step of setting the first permission, the second permission and the third permission for the preset database respectively according to the preset rules includes: When the preset database is acquired in real time, the last data update time, data storage volume and database attributes corresponding to the preset database are detected in real time; Constructing a corresponding storage data chain in real time according to the last data update time, the data storage volume and the database attribute, and performing a one-time encryption process on the preset database through the storage data chain to generate a corresponding first encryption key; The first encryption key is set to correspond to the first permission of the preset database.

[0009] Furthermore, the step of setting the first permission, the second permission and the third permission for the preset database according to the preset rules also includes: When the preset database is acquired in real time, a full scan is performed on the preset database to detect in real time several data types correspondingly contained in the preset database; Matching target data subsets corresponding to each of the data types in the preset database, and performing a secondary change process on the first encryption key to generate a number of target sequence numbers accordingly; A target sequence number is set for each target data subset to correspond to a second encryption key of the target data subset, and the second encryption key is set to correspond to the second permission of the preset database.

[0010] Furthermore, the step of setting the first permission, the second permission and the third permission for the preset database according to the preset rules also includes: When each of the target data subsets is acquired in real time, each of the target data subsets is analyzed and processed to detect a number of target parameters correspondingly contained in the target data subset; Combining and processing the plurality of target parameters to generate a plurality of parameter coordinates accordingly, and generating corresponding target parameter change curves in real time according to the plurality of parameter coordinates; A plurality of maximum points and a plurality of minimum points contained in the internal correspondence of the plurality of target parameter change curves are detected in real time, and the plurality of target parameters are encrypted through the plurality of maximum points and the plurality of minimum points to generate a third encryption key accordingly, and the third encryption key is correspondingly set as the third authority of the preset database.

[0011] Further, the step of performing feedback processing on the real-time data based on the target authority to determine whether to send the real-time data in real time according to the feedback result includes: When it is determined in real time that the target authority of the member is the first authority, the member is correspondingly determined to be the highest decision maker, and the real-time data is directly determined to meet the sending requirement; A corresponding sending instruction is generated in real time according to the real-time data, and the real-time data is sent to the corresponding user terminal through the sending instruction.

[0012] Further, the step of performing feedback processing on the real-time data based on the target authority to determine whether to send the real-time data in real time according to the feedback result includes: When it is determined in real time that the target authority of the member is the second authority, the member is directly determined to be an intermediate decision maker, and the real-time data is fed back to the highest decision maker corresponding to the first authority, and it is determined in real time whether the highest decision maker has reviewed and approved the real-time data; If it is determined in real time that the highest decision maker has reviewed and approved the real-time data, then the real-time data is correspondingly determined to meet the sending requirements, and the real-time data is correspondingly sent to the user terminal.

[0013] Further, the step of performing feedback processing on the real-time data based on the target authority to determine whether to send the real-time data in real time according to the feedback result includes: When it is determined in real time that the target authority of the member is the third authority, the member is directly determined to be the lowest decision maker, and the real-time data is fed back to the intermediate decision maker corresponding to the second authority and the highest decision maker corresponding to the first authority in sequence; Determine in real time whether the intermediate decision maker and the highest decision maker have both reviewed and approved the real-time data; If it is determined in real time that both the intermediate decision maker and the highest decision maker have reviewed and approved the real-time data, then the real-time data is correspondingly determined to meet the sending requirements, and the real-time data is correspondingly sent to the user terminal.

[0014] The second aspect of the embodiment of the present invention proposes: A data rights processing system, wherein the system comprises: A storage module, used to store the target data collected in real time into a preset database, and set the first permission, the second permission and the third permission for the preset database according to preset rules; An acquisition module is used to acquire in real time a personnel list of a target company corresponding to the target data, and to classify the personnel list into first-level members, second-level members and third-level members; A processing module, configured to set the first permission for the first-level members, the second permission for the second-level members, and the third permission for the third-level members, and to create corresponding data transmission networks according to the first-level members, the second-level members, and the third-level members in real time; A judgment module, for judging in real time whether the real-time data is circulated within the data transmission network when it is detected in real time that there is a member sending real-time data; The execution module is used to determine the target authority corresponding to the member if it is determined in real time that the real-time data is not circulated within the data transmission network, and to perform feedback processing on the real-time data based on the target authority, so as to determine in real time whether to send the real-time data according to the feedback result.

[0015] Furthermore, the storage module is specifically used for: When the preset database is acquired in real time, the last data update time, data storage volume and database attributes corresponding to the preset database are detected in real time; Constructing a corresponding storage data chain in real time according to the last data update time, the data storage volume and the database attribute, and performing a one-time encryption process on the preset database through the storage data chain to generate a corresponding first encryption key; The first encryption key is set to correspond to the first permission of the preset database.

[0016] Furthermore, the storage module is specifically used for: When the preset database is acquired in real time, a full scan is performed on the preset database to detect in real time several data types correspondingly contained in the preset database; Matching target data subsets corresponding to each of the data types in the preset database, and performing a secondary change process on the first encryption key to generate a number of target sequence numbers accordingly; A target sequence number is set for each target data subset to correspond to a second encryption key of the target data subset, and the second encryption key is set to correspond to the second permission of the preset database.

[0017] Furthermore, the storage module is specifically used for: When each of the target data subsets is acquired in real time, each of the target data subsets is analyzed and processed to detect a number of target parameters correspondingly contained in the target data subset; Combining and processing the plurality of target parameters to generate a plurality of parameter coordinates accordingly, and generating corresponding target parameter change curves in real time according to the plurality of parameter coordinates; A plurality of maximum points and a plurality of minimum points contained in the internal correspondence of the plurality of target parameter change curves are detected in real time, and the plurality of target parameters are encrypted through the plurality of maximum points and the plurality of minimum points to generate a third encryption key accordingly, and the third encryption key is correspondingly set as the third authority of the preset database.

[0018] Furthermore, the execution module is specifically used for: When it is determined in real time that the target authority of the member is the first authority, the member is correspondingly determined to be the highest decision maker, and the real-time data is directly determined to meet the sending requirement; A corresponding sending instruction is generated in real time according to the real-time data, and the real-time data is sent to the corresponding user terminal through the sending instruction.

[0019] Furthermore, the execution module is specifically used for: When it is determined in real time that the target authority of the member is the second authority, the member is directly determined to be an intermediate decision maker, and the real-time data is fed back to the highest decision maker corresponding to the first authority, and it is determined in real time whether the highest decision maker has reviewed and approved the real-time data; If it is determined in real time that the highest decision maker has reviewed and approved the real-time data, then the real-time data is correspondingly determined to meet the sending requirements, and the real-time data is correspondingly sent to the user terminal.

[0020] Furthermore, the execution module is specifically used for: When it is determined in real time that the target authority of the member is the third authority, the member is directly determined to be the lowest decision maker, and the real-time data is fed back to the intermediate decision maker corresponding to the second authority and the highest decision maker corresponding to the first authority in sequence; Determine in real time whether the intermediate decision maker and the highest decision maker have both reviewed and approved the real-time data; If it is determined in real time that both the intermediate decision maker and the highest decision maker have reviewed and approved the real-time data, then the real-time data is correspondingly determined to meet the sending requirements, and the real-time data is correspondingly sent to the user terminal.

[0021] The third aspect of the embodiment of the present invention proposes: A computer comprises a memory, a processor and a computer program stored in the memory and executable on the processor, wherein the processor implements the data permission processing method as described above when executing the computer program.

[0022] The fourth aspect of the embodiments of the present invention proposes: A readable storage medium stores a computer program, wherein the program, when executed by a processor, implements the data permission processing method as described above.

[0023] Additional aspects and advantages of the present invention will be given in part in the following description and in part will be obvious from the following description, or will be learned through practice of the present invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0024] Figure 1 A flowchart of a data authority processing method provided by the first embodiment of the present invention; Figure 2 This is a structural block diagram of a data authority processing system provided in the third embodiment of the present invention.

[0025] The following specific implementation manner will further illustrate the present invention in conjunction with the above-mentioned drawings. DETAILED DESCRIPTION

[0026] In order to facilitate the understanding of the present invention, the present invention will be described more fully below with reference to the relevant drawings. Several embodiments of the present invention are given in the drawings. However, the present invention can be implemented in many different forms and is not limited to the embodiments described herein. On the contrary, the purpose of providing these embodiments is to make the disclosure of the present invention more thorough and comprehensive.

[0027] It should be noted that when an element is referred to as being "fixed to" another element, it may be directly on the other element or there may be a central element. When an element is considered to be "connected to" another element, it may be directly connected to the other element or there may be a central element at the same time. The terms "vertical", "horizontal", "left", "right" and similar expressions used herein are for illustrative purposes only.

[0028] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as those commonly understood by those skilled in the art to which the present invention belongs. The terms used herein in the specification of the present invention are only for the purpose of describing specific embodiments and are not intended to limit the present invention. The term "and / or" used herein includes any and all combinations of one or more of the related listed items.

[0029] See also Figure 1 , shown is the data permission processing method provided by the first embodiment of the present invention. The data permission processing method provided by this embodiment can reasonably allocate data usage rights to each member within the company, and can effectively prevent data leakage, thereby correspondingly improving the confidentiality performance of the data.

[0030] Specifically, this embodiment provides: A data permission processing method specifically comprises the following steps: Step S10, storing the target data collected in real time into a preset database, and setting the first permission, the second permission and the third permission for the preset database according to preset rules; Step S20, obtaining in real time a personnel list of the target company corresponding to the target data, and dividing the personnel list into first-level members, second-level members and third-level members; Step S30, setting the first permission for the first-level members, setting the second permission for the second-level members, and setting the third permission for the third-level members, and creating corresponding data transmission networks according to the first-level members, the second-level members, and the third-level members in real time; Step S40, when it is detected in real time that there is a member sending real-time data, it is determined in real time whether the real-time data is circulated within the data transmission network; Step S50, if it is determined in real time that the real-time data is not circulated within the data transmission network, the target authority corresponding to the member is determined accordingly, and feedback processing is performed on the real-time data based on the target authority to determine in real time whether to send the real-time data based on the feedback result.

[0031] Specifically, in this embodiment, it should be noted that in order to reasonably and effectively allocate data usage rights to each member within the company, it is necessary to obtain the company's internal information in real time. Based on this, the present invention will first collect the required target data. Specifically, the target data is the data that needs to be processed. Preferably, in order to facilitate the management of the current target data, the present invention will store the target data collected in real time in a pre-set database. It should be noted that the internal correspondence of the current target data includes important data and non-important data. Based on this, targeted processing is required. In addition, due to the different positions of each member within the company, it can The data that can be obtained will not be the same. Based on this, the present invention will immediately perform permission allocation processing on the current preset database according to the pre-set rules, and can generate the corresponding first permission, second permission and third permission in real time. Similarly, the present invention will also make reasonable allocations for each member within the current company, and can divide the corresponding first-level members, second-level members and third-level members. Based on this, permissions can be allocated at this time. Preferably, the present invention will allocate the current first permission to the current first-level member, and the current second permission to the current second-level member, and the current third permission to the current third-level member, so as to facilitate subsequent processing.

[0032] Furthermore, after the authority allocation of the above-mentioned preset database is reasonably completed in the above-mentioned manner, it is necessary to complete the subsequent data management. Specifically, in order to prevent data leakage without permission, the present invention will further construct the required data transmission network based on the user terminals used by the current first-level members, second-level members and third-level members. It should be pointed out that the data transmission network is a network unique to the company, that is, the current data transmission network is used to transmit data circulated within the company. Based on this, in the actual application process, it can be detected in real time through the data transmission network whether there are members sending data to the outside of the company. Specifically, if so, corresponding processing is required at this time. Preferably, the present invention will detect in real time the target authority corresponding to the member currently sending data to the outside of the company. At the same time, it can judge in real time whether the current member can send data to the outside of the company according to the level of the current target authority, thereby effectively preventing the internal data of the company from being easily leaked, and at the same time improving the confidentiality of the data.

[0033] Second embodiment Furthermore, the step of setting the first permission, the second permission and the third permission for the preset database respectively according to the preset rules includes: When the preset database is acquired in real time, the last data update time, data storage volume and database attributes corresponding to the preset database are detected in real time; Constructing a corresponding storage data chain in real time according to the last data update time, the data storage volume and the database attribute, and performing a one-time encryption process on the preset database through the storage data chain to generate a corresponding first encryption key; The first encryption key is set to correspond to the first permission of the preset database.

[0034] Furthermore, the step of setting the first permission, the second permission and the third permission for the preset database according to the preset rules also includes: When the preset database is acquired in real time, a full scan is performed on the preset database to detect in real time several data types correspondingly contained in the preset database; Matching target data subsets corresponding to each of the data types in the preset database, and performing a secondary change process on the first encryption key to generate a number of target sequence numbers accordingly; A target sequence number is set for each target data subset to correspond to a second encryption key of the target data subset, and the second encryption key is set to correspond to the second permission of the preset database.

[0035] Furthermore, the step of setting the first permission, the second permission and the third permission for the preset database according to the preset rules also includes: When each of the target data subsets is acquired in real time, each of the target data subsets is analyzed and processed to detect a number of target parameters correspondingly contained in the target data subset; Combining and processing the plurality of target parameters to generate a plurality of parameter coordinates accordingly, and generating corresponding target parameter change curves in real time according to the plurality of parameter coordinates; A plurality of maximum points and a plurality of minimum points contained in the internal correspondence of the plurality of target parameter change curves are detected in real time, and the plurality of target parameters are encrypted through the plurality of maximum points and the plurality of minimum points to generate a third encryption key accordingly, and the third encryption key is correspondingly set as the third authority of the preset database.

[0036] Further, the step of performing feedback processing on the real-time data based on the target authority to determine whether to send the real-time data in real time according to the feedback result includes: When it is determined in real time that the target authority of the member is the first authority, the member is correspondingly determined to be the highest decision maker, and the real-time data is directly determined to meet the sending requirement; A corresponding sending instruction is generated in real time according to the real-time data, and the real-time data is sent to the corresponding user terminal through the sending instruction.

[0037] Further, the step of performing feedback processing on the real-time data based on the target authority to determine whether to send the real-time data in real time according to the feedback result includes: When it is determined in real time that the target authority of the member is the second authority, the member is directly determined to be an intermediate decision maker, and the real-time data is fed back to the highest decision maker corresponding to the first authority, and it is determined in real time whether the highest decision maker has reviewed and approved the real-time data; If it is determined in real time that the highest decision maker has reviewed and approved the real-time data, then the real-time data is correspondingly determined to meet the sending requirements, and the real-time data is correspondingly sent to the user terminal.

[0038] Further, the step of performing feedback processing on the real-time data based on the target authority to determine whether to send the real-time data in real time according to the feedback result includes: When it is determined in real time that the target authority of the member is the third authority, the member is directly determined to be the lowest decision maker, and the real-time data is fed back to the intermediate decision maker corresponding to the second authority and the highest decision maker corresponding to the first authority in sequence; Determine in real time whether the intermediate decision maker and the highest decision maker have both reviewed and approved the real-time data; If it is determined in real time that both the intermediate decision maker and the highest decision maker have reviewed and approved the real-time data, then the real-time data is correspondingly determined to meet the sending requirements, and the real-time data is correspondingly sent to the user terminal.

[0039] In addition, in the present embodiment, it is also necessary to explain that after the required preset database is obtained in real time through the above steps, it is necessary to immediately parse the current preset database to further generate the required first permission, second permission and third permission. Preferably, the present invention will first detect the last data update time, data storage volume and database attributes corresponding to the current preset database. At the same time, a corresponding storage data chain is constructed in real time in the format of "last data update time-data storage volume-database attributes". It should be pointed out that the storage data chain contains the required numbers and letters. Based on this, corresponding random permutations and combinations can be performed, and the required first encryption key can be further generated. The first encryption key can encrypt the current preset database once, thereby generating a first permission adapted to the current preset database in real time. Based on this, in order to be able to generate the required second authority, the present invention will further split out the target numbers and target letters corresponding to the current first encryption key. At the same time, the present invention will further perform a full scan of the current preset database, and can scan out the corresponding data types contained in the current preset database. It should be pointed out that since each data type corresponds to a series of data, based on this, the present invention will further match the target data subsets corresponding to each current data type in real time inside the above-mentioned preset database. Based on this, several target serial numbers are further randomly transformed in real time according to the above-mentioned target numbers and target letters. Based on this, a target serial number can be set for each current target data subset respectively, and each target serial number can be used as the second encryption key of each target data subset. At the same time, the current second encryption key will be set to the second authority of the current preset database.Based on this, it should also be noted that, since each of the above-mentioned target data subsets contains a series of parameters that need to be used, based on this, in order to prevent the leakage of the parameters, the present invention will further parse and process the current target data subset. At the same time, it can detect the corresponding target parameters contained in the current target data subset, and can combine the current target parameters to generate corresponding parameter coordinates. Based on this, the corresponding target parameter change curve can be further drawn in the preset two-dimensional coordinate system according to the current parameter coordinates in real time. Based on this, the present invention will further detect the current target parameter change curve in real time. The internal real-time contained in the maximum value points and the minimum value points, and finally complete the encryption processing of the current target parameters through the current maximum value points and the minimum value points, and can generate the required third encryption key accordingly. At the same time, the current third encryption key is immediately set to the third authority of the current preset database, so that the authority allocation of the current preset database can be reasonably and effectively completed, and the data in the current preset database can be effectively prevented from being easily leaked, so as to facilitate subsequent processing.

[0040] Furthermore, after allocating the database permissions and members within the company through the above steps, in the process of actual application, the above data transmission network can monitor the data usage of each member in real time. Specifically, when it is detected in real time that a member needs to send data outside the company, corresponding judgment and analysis processing will be immediately performed. Preferably, the present invention will detect the target permission corresponding to the current member in real time. Based on this, three situations will occur accordingly. Specifically, when it is detected that the target permission of the current member is the first permission, it is directly determined that the current member is the highest decision maker of the current company, that is, the highest decision maker of the current company corresponds to the management of the entire preset database, so that it can be directly determined that the real-time data that the current highest decision maker needs to send meets the sending requirements. Correspondingly, when it is detected that the target permission of the current member is the second permission, it can be directly determined that the current member is each member within the current company. The intermediate decision maker of the department, so that before the current intermediate decision maker sends real-time data to the outside, it is necessary to feedback the current real-time data to the above-mentioned highest decision maker, and only after the highest decision maker agrees, can the data be sent to the outside of the company, so as to effectively avoid data leakage. Correspondingly, when it is detected that the current member is the third authority, it can be directly determined that the current member is the lowest decision maker in the current company. Therefore, before the current lowest decision maker sends real-time data to the outside of the company, it is necessary to feedback the real-time data to be sent to the above-mentioned intermediate decision maker and the highest decision maker in turn, and only after the above-mentioned intermediate decision makers and the highest decision maker have approved, the current lowest decision maker can send real-time data to the outside of the company, so as to effectively prevent the data in the above-mentioned preset database from being easily leaked, and at the same time, the use rights of each member within the company can be reasonably allocated, which correspondingly improves the confidentiality of the data.

[0041] See also Figure 2 , the third embodiment of the present invention provides: A data rights processing system, wherein the system comprises: A storage module, used to store the target data collected in real time into a preset database, and set the first permission, the second permission and the third permission for the preset database according to preset rules; An acquisition module is used to acquire in real time a personnel list of a target company corresponding to the target data, and to classify the personnel list into first-level members, second-level members and third-level members; A processing module, configured to set the first permission for the first-level members, the second permission for the second-level members, and the third permission for the third-level members, and to create corresponding data transmission networks according to the first-level members, the second-level members, and the third-level members in real time; A judgment module, for judging in real time whether the real-time data is circulated within the data transmission network when it is detected in real time that there is a member sending real-time data; The execution module is used to determine the target authority corresponding to the member if it is determined in real time that the real-time data is not circulated within the data transmission network, and to perform feedback processing on the real-time data based on the target authority, so as to determine in real time whether to send the real-time data according to the feedback result.

[0042] Furthermore, the storage module is specifically used for: When the preset database is acquired in real time, the last data update time, data storage volume and database attributes corresponding to the preset database are detected in real time; Constructing a corresponding storage data chain in real time according to the last data update time, the data storage volume and the database attribute, and performing a one-time encryption process on the preset database through the storage data chain to generate a corresponding first encryption key; The first encryption key is set to correspond to the first permission of the preset database.

[0043] Furthermore, the storage module is specifically used for: When the preset database is acquired in real time, a full scan is performed on the preset database to detect in real time several data types correspondingly contained in the preset database; Matching target data subsets corresponding to each of the data types in the preset database, and performing a secondary change process on the first encryption key to generate a number of target sequence numbers accordingly; A target sequence number is set for each target data subset to correspond to a second encryption key of the target data subset, and the second encryption key is set to correspond to the second permission of the preset database.

[0044] Furthermore, the storage module is specifically used for: When each of the target data subsets is acquired in real time, each of the target data subsets is analyzed and processed to detect a number of target parameters correspondingly contained in the target data subset; Combining and processing the plurality of target parameters to generate a plurality of parameter coordinates accordingly, and generating corresponding target parameter change curves in real time according to the plurality of parameter coordinates; A plurality of maximum points and a plurality of minimum points contained in the internal correspondence of the plurality of target parameter change curves are detected in real time, and the plurality of target parameters are encrypted through the plurality of maximum points and the plurality of minimum points to generate a third encryption key accordingly, and the third encryption key is correspondingly set as the third authority of the preset database.

[0045] Furthermore, the execution module is specifically used for: When it is determined in real time that the target authority of the member is the first authority, the member is correspondingly determined to be the highest decision maker, and the real-time data is directly determined to meet the sending requirement; A corresponding sending instruction is generated in real time according to the real-time data, and the real-time data is sent to the corresponding user terminal through the sending instruction.

[0046] Furthermore, the execution module is specifically used for: When it is determined in real time that the target authority of the member is the second authority, the member is directly determined to be an intermediate decision maker, and the real-time data is fed back to the highest decision maker corresponding to the first authority, and it is determined in real time whether the highest decision maker has reviewed and approved the real-time data; If it is determined in real time that the highest decision maker has reviewed and approved the real-time data, then the real-time data is correspondingly determined to meet the sending requirements, and the real-time data is correspondingly sent to the user terminal.

[0047] Furthermore, the execution module is specifically used for: When it is determined in real time that the target authority of the member is the third authority, the member is directly determined to be the lowest decision maker, and the real-time data is fed back to the intermediate decision maker corresponding to the second authority and the highest decision maker corresponding to the first authority in sequence; Determine in real time whether the intermediate decision maker and the highest decision maker have both reviewed and approved the real-time data; If it is determined in real time that both the intermediate decision maker and the highest decision maker have reviewed and approved the real-time data, then the real-time data is correspondingly determined to meet the sending requirements, and the real-time data is correspondingly sent to the user terminal.

[0048] A fourth embodiment of the present invention provides a computer, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the data permission processing method described above when executing the computer program.

[0049] A fifth embodiment of the present invention provides a readable storage medium having a computer program stored thereon, wherein the program, when executed by a processor, implements the data permission processing method as described above.

[0050] In summary, the data permission processing method and system provided by the above embodiments of the present invention can reasonably allocate data usage permissions to each member within the company, and can effectively prevent data leakage, thereby correspondingly improving the confidentiality of the data.

[0051] It should be noted that the above modules can be functional modules or program modules, and can be implemented by software or hardware. For modules implemented by hardware, the above modules can be located in the same processor; or the above modules can be located in different processors in any combination.

[0052] The logic and / or steps represented in the flowchart or otherwise described herein, for example, can be considered as an ordered list of executable instructions for implementing logical functions, and can be embodied in any computer-readable medium for use by an instruction execution system, device or apparatus (such as a computer-based system, a system including a processor, or other system that can fetch instructions from an instruction execution system, device or apparatus and execute instructions), or in conjunction with such instruction execution systems, devices or apparatuses. For the purposes of this specification, "computer-readable medium" can be any device that can contain, store, communicate, propagate or transmit a program for use by an instruction execution system, device or apparatus, or in conjunction with such instruction execution systems, devices or apparatuses.

[0053] More specific examples of computer-readable media (a non-exhaustive list) include the following: an electrical connection with one or more wires (electronic device), a portable computer disk case (magnetic device), a random access memory (RAM), a read-only memory (ROM), an erasable and programmable read-only memory (EPROM or flash memory), an optical fiber device, and a portable compact disk read-only memory (CDROM). In addition, the computer-readable medium may even be a paper or other suitable medium on which the program is printed, since the program may be obtained electronically, for example, by optically scanning the paper or other medium, followed by editing, deciphering or, if necessary, processing in another suitable manner, and then stored in a computer memory.

[0054] It should be understood that the various parts of the present invention can be implemented by hardware, software, firmware or a combination thereof. In the above-mentioned embodiments, multiple steps or methods can be implemented by software or firmware stored in a memory and executed by a suitable instruction execution system. For example, if implemented by hardware, as in another embodiment, it can be implemented by any one of the following technologies known in the art or their combination: a discrete logic circuit having a logic gate circuit for implementing a logic function for a data signal, a dedicated integrated circuit having a suitable combination of logic gate circuits, a programmable gate array (PGA), a field programmable gate array (FPGA), etc.

[0055] In the description of this specification, the description with reference to the terms "one embodiment", "some embodiments", "example", "specific example", or "some examples" means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present invention. In this specification, the schematic representation of the above terms does not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described can be combined in any one or more embodiments or examples in a suitable manner.

[0056] The above-described embodiments only express several implementation methods of the present invention, and the description thereof is relatively specific and detailed, but it cannot be understood as limiting the scope of the present invention. It should be pointed out that, for those skilled in the art, several variations and improvements can be made without departing from the concept of the present invention, and these all belong to the protection scope of the present invention. Therefore, the protection scope of the present invention shall be subject to the attached claims.

Claims

1. A data authority processing method, characterized in that: The method comprises: The target data collected in real time is stored in a preset database, and the first permission, the second permission and the third permission are set for the preset database according to the preset rules; Obtaining in real time a personnel list of the target company corresponding to the target data, and dividing the personnel list into first-level members, second-level members, and third-level members; The first permission is set for the first-level members, the second permission is set for the second-level members, and the third permission is set for the third-level members, and a corresponding data transmission network is created in real time according to the first-level members, the second-level members, and the third-level members; When it is detected in real time that there is a member sending real-time data, it is determined in real time whether the real-time data is circulated inside the data transmission network; If it is determined in real time that the real-time data is not circulated within the data transmission network, the target authority corresponding to the member is determined accordingly, and feedback processing is performed on the real-time data based on the target authority, so as to determine in real time whether to send the real-time data according to the feedback result; The step of respectively setting the first permission, the second permission and the third permission for the preset database according to the preset rules comprises: When the preset database is acquired in real time, the last data update time, data storage volume and database attributes corresponding to the preset database are detected in real time; Constructing a corresponding storage data chain in real time according to the last data update time, the data storage volume and the database attribute, and performing a one-time encryption process on the preset database through the storage data chain to generate a corresponding first encryption key; The first encryption key is set to correspond to the first permission of the preset database.

2. The data authority processing method according to claim 1, characterized in that: The step of respectively setting the first permission, the second permission and the third permission for the preset database according to the preset rules further includes: When the preset database is acquired in real time, a full scan is performed on the preset database to detect in real time several data types correspondingly contained in the preset database; Matching target data subsets corresponding to each of the data types in the preset database, and performing a secondary change process on the first encryption key to generate a number of target sequence numbers accordingly; A target sequence number is set for each target data subset to correspond to a second encryption key of the target data subset, and the second encryption key is set to correspond to the second permission of the preset database.

3. The data authority processing method according to claim 2, characterized in that: The step of respectively setting the first permission, the second permission and the third permission for the preset database according to the preset rules further includes: When each of the target data subsets is acquired in real time, each of the target data subsets is analyzed and processed to detect a number of target parameters correspondingly contained in the target data subset; Combining and processing the plurality of target parameters to generate a plurality of parameter coordinates accordingly, and generating corresponding target parameter change curves in real time according to the plurality of parameter coordinates; A plurality of maximum points and a plurality of minimum points contained in the internal correspondence of the plurality of target parameter change curves are detected in real time, and the plurality of target parameters are encrypted through the plurality of maximum points and the plurality of minimum points to generate a third encryption key accordingly, and the third encryption key is correspondingly set as the third authority of the preset database.

4. The data authority processing method according to claim 1, characterized in that: The step of performing feedback processing on the real-time data based on the target authority to determine whether to send the real-time data in real time according to the feedback result includes: When it is determined in real time that the target authority of the member is the first authority, the member is correspondingly determined to be the highest decision maker, and the real-time data is directly determined to meet the sending requirement; A corresponding sending instruction is generated in real time according to the real-time data, and the real-time data is sent to the corresponding user terminal through the sending instruction.

5. The data authority processing method according to claim 4, characterized in that: The step of performing feedback processing on the real-time data based on the target authority to determine whether to send the real-time data in real time according to the feedback result includes: When it is determined in real time that the target authority of the member is the second authority, the member is directly determined to be an intermediate decision maker, and the real-time data is fed back to the highest decision maker corresponding to the first authority, and it is determined in real time whether the highest decision maker has reviewed and approved the real-time data; If it is determined in real time that the highest decision maker has reviewed and approved the real-time data, then the real-time data is correspondingly determined to meet the sending requirements, and the real-time data is correspondingly sent to the user terminal.

6. The data authority processing method according to claim 5, characterized in that: The step of performing feedback processing on the real-time data based on the target authority to determine whether to send the real-time data in real time according to the feedback result includes: When it is determined in real time that the target authority of the member is the third authority, the member is directly determined to be the lowest decision maker, and the real-time data is fed back to the intermediate decision maker corresponding to the second authority and the highest decision maker corresponding to the first authority in sequence; Determine in real time whether the intermediate decision maker and the highest decision maker have both reviewed and approved the real-time data; If it is determined in real time that both the intermediate decision maker and the highest decision maker have reviewed and approved the real-time data, then the real-time data is correspondingly determined to meet the sending requirements, and the real-time data is correspondingly sent to the user terminal.

7. A data authority processing system, characterized in that: Used to implement the data authority processing method according to any one of claims 1 to 6, the system comprises: A storage module, used to store the target data collected in real time into a preset database, and set the first permission, the second permission and the third permission for the preset database according to preset rules; An acquisition module is used to acquire in real time a personnel list of a target company corresponding to the target data, and to classify the personnel list into first-level members, second-level members and third-level members; A processing module, configured to set the first permission for the first-level members, the second permission for the second-level members, and the third permission for the third-level members, and to create corresponding data transmission networks according to the first-level members, the second-level members, and the third-level members in real time; A judgment module, for judging in real time whether the real-time data is circulated within the data transmission network when it is detected in real time that there is a member sending real-time data; The execution module is used to determine the target authority corresponding to the member if it is determined in real time that the real-time data is not circulated within the data transmission network, and to perform feedback processing on the real-time data based on the target authority, so as to determine in real time whether to send the real-time data according to the feedback result.

8. A computer comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the data permission processing method as described in any one of claims 1 to 6 is implemented.

9. A readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the data permission processing method as described in any one of claims 1 to 6 is implemented.

Images