Big data SAAS mode customer relationship management system

By introducing component configuration modules, data management modules, risk management modules and behavior analysis modules into the big data SAAS model customer relationship management system, the problem of insufficient system security is solved, the balance between functional flexibility and security is achieved, and the stability and security of the system are improved.

CN119538263AActive Publication Date: 2025-02-28ZHONGJULIANG (SHENZHEN) TECHNOLOGY CO LTD
View PDF 3 Cites 0 Cited by

Patent Information

Application Number
CN202411604666.8
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2024-11-12
Publication Date
2025-02-28
Estimated Expiration
2044-11-12

AI Technical Summary

Technical Problem

The customer relationship management system based on the SaaS model has defects in security, including data breaches, tampering with the authentication mechanism, insufficient behavioral analysis, insufficient permission management, and the risks of relying on third-party cloud services.

Method used

A big data SAAS model customer relationship management system is designed, including component configuration module, data management module, risk management module and behavior analysis module. The component configuration module realizes flexible configuration of functions, the risk management module conducts dynamic data authentication and modification risk management, and the behavior analysis module conducts behavior analysis and evaluation to ensure the secure storage and operation of data.

Benefits of technology

The security and stability of the system are improved, and through flexible functional configuration and strict risk management, the security of sensitive data is protected and the risk of the system is reduced.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN119538263A_ABST
    Figure CN119538263A_ABST
Patent Text Reader

Abstract

The invention discloses a big data SAAS (software as a service) mode customer relationship management system, which comprises a component configuration module, a data management module, a risk management module and a behavior analysis module, and is characterized in that the component configuration module is used for performing component configuration on application functions of the customer relationship management system; a manager carries out function summary marking processing on a used function component configured in a currently authorized function library through the component configuration module and carries out function summary marking processing on the started function component to generate an application locator, and after the component configuration module checks and updates the application locator, the updated function component is started, and modification operation information is generated at the same time. Security authentication is carried out through the risk management module, the security of the management system can be protected when the management system modifies and views sensitive data, and the stability of the system is improved.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present invention belongs to the field of management systems, and in particular relates to a big data SAAS model customer relationship management system. Background Art

[0002] In today's digital age, enterprises have a growing demand for customer relationship management. Traditional customer relationship management systems have problems such as high deployment costs, difficult maintenance, and untimely function updates. With the development of big data technology and the rise of the SaaS model, the big data SaaS model customer relationship management system came into being. It uses cloud computing technology to reduce enterprise costs and achieve rapid deployment and updates. At the same time, through big data analysis, it can deeply explore the value of customer data, provide enterprises with accurate customer insights and decision-making support, and help enterprises improve customer satisfaction and market competitiveness.

[0003] However, the customer relationship management system based on the SaaS model has certain shortcomings in terms of security. Data storage encryption may be cracked, resulting in information leakage; timestamps in the authentication mechanism may be tampered with, and random number generation may have loopholes; behavioral analysis is performed after the fact, which may lead to misjudgment and difficulty in preventing malicious behavior in time; permission management is not sophisticated enough and can be easily bypassed; relying on third-party cloud services is risky, and network transmission data may also be intercepted and stolen. Summary of the invention

[0004] In view of the above technical problems, the present invention provides a big data SAAS model customer relationship management system, including a component configuration module, a data management module, a risk management module, and a behavior analysis module. The component configuration module is used to perform component configuration on the application functions of the customer relationship management system. The management personnel configure the functional components used in the currently authorized function library through the component configuration module, perform function summary marking on the enabled functional components, and generate an application locator. After the component configuration module checks and updates the application locator, it enables the updated functional components and generates modification operation information at the same time.

[0005] Before using the component configuration module, it is necessary to use the risk management module to authenticate and modify the risk management and judge the risk side. After the configuration of the functional component is completed, the behavior analysis module is used to analyze and evaluate the configuration behavior, and the behavior analysis results are obtained. The behavior analysis results are sent to the risk management module for behavior risk assessment.

[0006] The data management module is used to manage the data generated in the management system, including the secure storage, secure reading, and classification and summary of the data. When the data management module operates on sensitive data, it evaluates the operator's operation risk level through the risk management module and analyzes the operator's operation behavior through the behavior analysis module. The operation risk level evaluation data at least includes the historical login information, historical operation feature information, historical operation result information, and historical sensitive data reading frequency information of the current operator account; the operation behavior includes access to sensitive data, current login information, and data operation behavior.

[0007] The steps of configuring components through the component configuration module application function include:

[0008] Step S101, query the current authorized function library, obtain the available function indication information in the authorized function library, and the indication information is used to determine the mapping dictionary information of the available functions; the indication information is mapped and displayed with a visual selection box, and the management personnel performs function summary marking processing by checking the visual selection box.

[0009] Step S102: submitting the function summary marking process, generating an application locator according to the enabled function, wherein the application locator is used to locate the enabled function path.

[0010] Step S103, the application locator is checked by the component configuration module to check whether the current application locator state needs to be updated. After the update is completed, the mapping information of the available functions is obtained.

[0011] The risk management module performs authentication management through dynamic data authentication. The dynamic data authentication is for the risk management module to perform data integrity and correctness authentication on the dynamic data authentication data object. The dynamic data authentication data object at least includes the timestamp information of initiating the authentication request, the ciphertext of the authentication data packet, the authentication data key type and version number, and the HASH value of the authentication data packet; the risk management module performs modification risk management through preset modification behaviors. The preset modification behaviors extract the usage importance features of functional components in the authorized function library, mark the usage and modification scores of the functional components, and the preset modification behaviors calculate the weighted values ​​of the usage and modification scores of the functional components, and calculate the degree of similarity between the actual score value and the preset modification behavior score, and divide the modification risk level according to the degree of similarity.

[0012] When the operator uses the data management module to securely store and read the data in the management system, the risk management module must first perform security authentication. The authentication process includes:

[0013] In step S201, the operator initiates a secure storage and secure reading operation request. The data management module notifies the risk management module that security authentication has started. The risk management module generates a random number and encrypts the random number, and returns the random number and the encrypted ciphertext to the data management module. The ciphertext is decrypted by the data management module to verify whether the random number is the same.

[0014] Step S202, if they are the same, the data management module returns the ciphertext of the authentication data list to the risk management module, and the authentication data list includes at least the operator's identity information, the operator's authentication level, and the operator's historical operation list; if they are different, the data management module returns a failure flag, and the risk management module records the failure record of the current operator's current session.

[0015] Step S203, the risk management module parses the authentication data list. If there is no risk data item in the authentication data list, the risk management module returns an activation code to the data management module. When the data management module subsequently operates on sensitive data, the activation code information is attached in the request.

[0016] The working steps of the behavior analysis module include:

[0017] Step S301, receiving configuration behavior data. When the configuration of the functional component is completed, the behavior analysis module will receive the configuration behavior data, including the operation record of the functional component and the system status change.

[0018] Step S302 , performing analysis and evaluation, the behavior analysis module uses analysis algorithms and models to analyze the received configuration behavior data, compares the configuration behavior data with preset standards and specifications, and identifies potential problems and risks.

[0019] Step S303, generating and sending results. The behavior analysis module generates behavior analysis results and sends them to the risk management module.

[0020] The advantages of the present invention compared with the prior art are: (1) the present invention can select and disable functions in the system by flexibly configuring functional components through setting a component configuration module, thereby realizing flexible functional configuration; (2) the present invention can protect the security of the management system when modifying and viewing sensitive data through a risk management module for security authentication, thereby improving the stability of the system. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] Figure 1 An exemplary procedure for configuring components for the present invention.

[0022] Figure 2 The following is a block diagram showing an example of the system configuration of the system of the present invention.

[0023] Figure 3An exemplary step for performing security authentication for the risk management module of the present invention.

[0024] Figure 4 This is an exemplary step for the behavior analysis module of the present invention to work. DETAILED DESCRIPTION

[0025] Example: Figure 2 A big data SAAS model customer relationship management system shown includes a component configuration module, a data management module, a risk management module, and a behavior analysis module. The component configuration module is used to configure the components of the application functions of the customer relationship management system. The management personnel use the component configuration module to configure the functional components used in the currently authorized function library, perform function summary marking processing on the enabled functional components, and generate application locators. After the component configuration module checks and updates the application locator, it enables the updated functional components and generates modification operation information at the same time.

[0026] In this embodiment, the functions of the component configuration module can be more abundant and flexible. For example, the visual selection box can be classified and displayed according to different function types, such as customer information management functions, sales process management functions, marketing activity management functions, etc., so that managers can find the function components they need to configure more quickly.

[0027] When managers mark the function summary, they can add detailed annotations so that other managers can better understand the purpose and characteristics of the function component. At the same time, the generated application locator can not only be used to locate the path to enable the function, but also record the configuration time and configuration personnel of the function component, which is convenient for version management and auditing.

[0028] When checking and updating application locators, an automatic update mechanism can be introduced. When the system detects that a new functional component has been released or an existing functional component has been updated, it automatically prompts the administrator to check and update to ensure that the system always maintains the latest functional status.

[0029] Before using the component configuration module, it is necessary to use the risk management module to authenticate and modify the risk management and judge the risk side. After the configuration of the functional component is completed, the behavior analysis module is used to analyze and evaluate the configuration behavior, and the behavior analysis results are obtained. The behavior analysis results are sent to the risk management module for behavior risk assessment.

[0030] The data management module is used to manage the data generated in the management system, including the secure storage, secure reading, and classification and summary of the data. When the data management module operates on sensitive data, it evaluates the operator's operational risk level through the risk management module and analyzes the operator's operational behavior through the behavior analysis module. The operational risk level assessment data at least includes the current operator account's historical login information, historical operation feature information, historical operation result information, and historical sensitive data reading frequency information; operational behavior includes access to sensitive data, current login information, and data operation behavior.

[0031] In this embodiment, in addition to authenticating the timestamp information, authentication data packet ciphertext, authentication data key type and version number, and authentication data packet HASH value, the verification of the source IP address of the authentication request can be added to prevent malicious attacks. For the encryption algorithm of the authentication data packet ciphertext, more advanced encryption technology, such as quantum encryption, can be used to improve data security. An authentication log is established to record detailed information of each authentication, including authentication time, authentication result, authentication request source, etc., for security auditing and troubleshooting.

[0032] like Figure 1 The steps of configuring components by applying the component configuration module in this embodiment include:

[0033] Step S101, query the current authorized function library, obtain the available function indication information in the authorized function library, the indication information is used to determine the mapping dictionary information of the available functions; the indication information is mapped and displayed with a visual selection box, and the management personnel performs function summary marking processing by checking the visual selection box.

[0034] Step S102, submitting the function summary marking process, generating an application locator according to the enabled function, and the application locator is used to locate the enabled function path.

[0035] Step S103, the application locator is checked by the component configuration module to check whether the current application locator state needs to be updated. After the update is completed, the mapping information of the available functions is obtained.

[0036] The risk management module performs authentication management through dynamic data authentication. Dynamic data authentication is for the risk management module to authenticate the data integrity and correctness of the dynamic data authentication data object. The dynamic data authentication data object at least contains the timestamp information of initiating the authentication request, the ciphertext of the authentication data packet, the authentication data key type and version number, and the HASH value of the authentication data packet; the risk management module performs modification risk management through preset modification behaviors. The preset modification behaviors extract the usage importance characteristics of functional components in the authorized function library, mark the usage and modification scores of the functional components, and the preset modification behaviors calculate the weighted values ​​of the usage and modification scores of the functional components, and calculate the degree of similarity between the actual score value and the preset modification behavior score, and divide the modification risk level according to the degree of similarity.

[0037] like Figure 3 As shown in this embodiment, when the operator uses the data management module to securely store and securely read the data of the management system, the risk management module is first required to perform security authentication. The authentication process includes:

[0038] In step S201, the operator initiates a secure storage and secure reading operation request. The data management module notifies the risk management module that security authentication has started. The risk management module generates a random number and encrypts the random number, and returns the random number and the encrypted ciphertext to the data management module. The ciphertext is decrypted by the data management module to verify whether the random number is the same.

[0039] Step S202, if they are the same, the data management module returns the ciphertext of the authentication data list to the risk management module, and the authentication data list includes at least the operator's identity information, the operator's authentication level, and the operator's historical operation list; if they are different, the data management module returns a failure flag, and the risk management module records the failure record of the current operator's current session.

[0040] Step S203, the risk management module parses the authentication data list. If there is no risk data item in the authentication data list, the risk management module returns an activation code to the data management module. When the data management module subsequently operates on sensitive data, the activation code information is attached in the request.

[0041] like Figure 4 The working steps of the behavior analysis module of this embodiment include:

[0042] Step S301, receiving configuration behavior data. When the configuration of the functional component is completed, the behavior analysis module will receive the configuration behavior data, including the operation record of the functional component and the system status change.

[0043] Step S302 , performing analysis and evaluation, the behavior analysis module uses analysis algorithms and models to analyze the received configuration behavior data, compares the configuration behavior data with preset standards and specifications, and identifies potential problems and risks.

[0044] Step S303, generating and sending results. The behavior analysis module generates behavior analysis results and sends them to the risk management module.

[0045] The above contents are merely examples and explanations of the present invention. Those skilled in the art may make various modifications or additions to the specific embodiments described or replace them in a similar manner. As long as they do not deviate from the invention or exceed the scope defined by the claims, they shall all fall within the protection scope of the present invention.

Claims

1. A big data SAAS customer relationship management system, characterized by: It includes a component configuration module, a data management module, a risk management module, and a behavior analysis module. The component configuration module is used to configure the application functions of the customer relationship management system. The management personnel configure the functional components used in the currently authorized function library through the component configuration module, perform function summary marking processing on the enabled functional components, and generate application locators. After the component configuration module checks and updates the application locators, it enables the updated functional components and generates modification operation information at the same time. Before using the component configuration module, it is necessary to authenticate and modify the risk management through the risk management module to determine the risk side. After the configuration of the functional component is completed, the behavior analysis module is used to analyze and evaluate the configuration behavior to obtain the behavior analysis results, and the behavior analysis results are sent to the risk management module for behavior risk assessment; The data management module is used to manage the data generated in the management system, including the secure storage, secure reading, and classification and summary of the data. When the data management module operates on sensitive data, it evaluates the operator's operation risk level through the risk management module and analyzes the operator's operation behavior through the behavior analysis module. The operation risk level evaluation data at least includes the historical login information, historical operation feature information, historical operation result information, and historical sensitive data reading frequency information of the current operator account; the operation behavior includes access to sensitive data, current login information, and data operation behavior.

2. According to claim 1, a big data SAAS model customer relationship management system is characterized by: The steps of configuring components through the component configuration module application function include: Step S101, query the current authorized function library, obtain the available function indication information in the authorized function library, and the indication information is used to determine the mapping dictionary information of the available functions; the indication information is mapped and displayed in a visual selection box, and the management personnel performs function summary marking processing by checking the visual selection box; Step S102, submitting the function summary marking process, generating an application locator according to the enabled function, the application locator being used to locate the enabled function path; Step S103, the application locator is checked by the component configuration module to check whether the current application locator state needs to be updated. After the update is completed, the mapping information of the available functions is obtained.

3. A big data SAAS customer relationship management system according to claim 1, characterized in that: The risk management module performs authentication management through dynamic data authentication, and the dynamic data authentication is that the risk management module performs data integrity and correctness authentication on the dynamic data authentication data object, and the dynamic data authentication data object at least includes the timestamp information of initiating the authentication request, the ciphertext of the authentication data packet, the authentication data key type and version number, and the HASH value of the authentication data packet; The risk management module performs modification risk management through preset modification behaviors. The preset modification behaviors extract the usage importance features of functional components in the authorized function library, mark the usage and modification scores of the functional components, calculate the weighted values ​​of the usage and modification scores of the functional components, and calculate the degree of similarity between the actual score value and the preset modification behavior score, and divide the modification risk level according to the degree of similarity.

4. A big data SAAS customer relationship management system according to claim 1, characterized in that: When the operator uses the data management module to securely store and read the data in the management system, the risk management module must first be used for security authentication. include, Step S201: The operator initiates a secure storage and secure reading operation request. The data management module notifies the risk management module that the security authentication starts. The risk management module generates a random number and encrypts the random number. The random number and the encrypted ciphertext are returned to the data management module. The data management module decrypts the ciphertext and verifies whether the random number is the same. Step S202: If they are the same, the data management module returns the ciphertext of the authentication data list to the risk management module, wherein the authentication data list includes at least the identity information of the operator, the authentication level of the operator, and the operator's historical operation list; if they are different, the data management module returns a failure flag, and the risk management module records the failure record of the current session of the current operator; Step S203, the risk management module parses the authentication data list. If there is no risk data item in the authentication data list, the risk management module returns an activation code to the data management module. When the data management module subsequently operates on sensitive data, the activation code information is attached in the request.

5. A big data SAAS customer relationship management system according to claim 1, characterized in that: The working steps of the behavior analysis module include: Step S301, receiving configuration behavior data. When the configuration of the functional component is completed, the behavior analysis module will receive the configuration behavior data, including the operation record of the functional component and the system state change; Step S302, performing analysis and evaluation, the behavior analysis module uses analysis algorithms and models to analyze the received configuration behavior data, compares the configuration behavior data with preset standards and specifications, and identifies potential problems and risks; Step S303, generating and sending results. The behavior analysis module generates behavior analysis results and sends them to the risk management module.

Citation Information

Patent Citations

  • System and method for securing an enterprise computing environment

    CN107409126A

  • Configuration checking method and device for big data cluster component and computing equipment

    CN110880990A

  • Saas configuration and security analysis engine

    US20180351989A1