A big data SAAS model customer relationship management system
By combining component configuration modules, risk management modules, and behavior analysis modules, the security and functional configuration issues of the SaaS-based customer relationship management system are resolved, enabling flexible system configuration and enhanced security.
Patent Information
- Application Number
- CN202411604666.8
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2024-11-12
- Publication Date
- 2025-10-28
- Estimated Expiration
- 2044-11-12
AI Technical Summary
Existing SaaS-based customer relationship management systems have security risks such as data leakage, easy tampering of authentication mechanisms, lagging and imprecise behavioral analysis, insufficiently precise access control that is easily bypassed, and reliance on third-party cloud services.
The system employs a component configuration module for flexible configuration of functional components, combines a risk management module for security authentication and behavioral analysis, utilizes a data management module for secure storage and operational risk assessment, and leverages a behavioral analysis module for behavioral and risk assessment.
It enables flexible configuration of functional components, improves system security and stability, ensures the security of data storage and operation, reduces the risk of information leakage, and enhances system security and the timeliness of function updates.
Smart Images

Figure CN119538263B_ABST
Abstract
Description
Technical Field
[0001] This invention belongs to the field of management systems, and specifically relates to a big data SaaS-based customer relationship management system. Background Technology
[0002] In today's digital age, businesses have an ever-growing need for customer relationship management (CRM). Traditional CRM systems suffer from high deployment costs, maintenance difficulties, and untimely feature updates. With the development of big data technology and the rise of the SaaS model, big data SaaS-based CRM systems have emerged. These systems utilize cloud computing technology to reduce enterprise costs and enable rapid deployment and updates. Simultaneously, through big data analytics, they can deeply mine the value of customer data, providing businesses with precise customer insights and decision support, helping them improve customer satisfaction and market competitiveness.
[0003] However, SaaS-based customer relationship management systems have certain security drawbacks. Data storage encryption may be cracked, leading to information leakage; timestamps and other data in the authentication mechanism may be tampered with, and random number generation may have vulnerabilities; behavioral analysis is performed retrospectively, which may result in misjudgments and makes it difficult to prevent malicious behavior in a timely manner; access control is not granular enough and can be bypassed; reliance on third-party cloud services is risky, and data transmitted over the network may be intercepted and stolen. Summary of the Invention
[0004] To address the aforementioned technical issues, this invention provides a big data SaaS-based customer relationship management system, comprising a component configuration module, a data management module, a risk management module, and a behavior analysis module. The component configuration module is used to configure the application functions of the customer relationship management system. Administrators configure the functional components used in the currently authorized function library through the component configuration module, perform function summary marking on the enabled functional components, generate application locators, and after checking and updating the application locators, enable the updated functional components and generate modification operation information.
[0005] Before using the component configuration module, you need to go through the risk management module for authentication and modification risk management to determine the risk side. After the functional component is configured, use the behavior analysis module to analyze and evaluate the configuration behavior, obtain the behavior analysis results, and send the behavior analysis results to the risk management module for behavior risk assessment.
[0006] The data management module is used to manage the data generated in the management system, including secure storage, secure retrieval, and classification of the data. When operating on sensitive data, the data management module assesses the operator's operational risk level through the risk management module and analyzes the operator's operational behavior through the behavior analysis module. The operational risk level assessment data includes at least the current operator's account's historical login information, historical operation characteristic information, historical operation result information, and historical sensitive data reading frequency information. The operational behavior includes access to sensitive data, current login information, and data operation behavior.
[0007] The steps for configuring components using the component configuration module include:
[0008] Step S101: Query the current authorized function library and obtain the available function indication information in the authorized function library. The indication information is used to determine the mapping dictionary information of the available functions. The indication information is displayed as a visual selection box, and the administrator can perform function summary marking by checking the visual selection box.
[0009] Step S102: Submit the function summary tagging process and generate an application locator based on the enabled function. The application locator is used to locate the enabled function path.
[0010] Step S103: The application locator is checked through the component configuration module to see if the current application locator status needs to be updated. After the update is completed, the mapping information of the available functions is updated.
[0011] The risk management module performs authentication management through dynamic data authentication. Dynamic data authentication involves the risk management module authenticating the integrity and correctness of dynamic data authentication data objects. Each dynamic data authentication data object includes at least the timestamp information of the authentication request, the encrypted authentication data packet, the authentication data key type and version number, and the authentication data packet hash value. The risk management module also manages modification risks through preset modification behaviors. These preset modification behaviors extract the importance characteristics of functional components from the authorized function library, mark the usage and modification scores of functional components, calculate the weighted value of the usage and modification scores of functional components based on the preset modification behaviors, and calculate the similarity between the actual score and the preset modification behavior score. The degree of similarity is used to classify the modification risk level.
[0012] When an operator securely stores and retrieves data from the management system through the data management module, the risk management module must first perform security authentication. This authentication process includes:
[0013] In step S201, the operator initiates a secure storage and secure read operation request. The data management module notifies the risk management module to start security authentication. The risk management module generates a random number and encrypts the random number. It then returns the random number and the encrypted ciphertext to the data management module. The data management module decrypts the ciphertext and verifies whether the random numbers are the same.
[0014] In step S202, if the data and authentication data are the same, the data management module returns the encrypted authentication data list to the risk management module. The authentication data list includes at least the operator's identity information, the operator's authentication level, and the operator's historical operation list. If the data and authentication data are different, the data management module returns a failure flag, and the risk management module records the failure record of the current operator's current session.
[0015] In step S203, the risk management module parses the authentication data list. If there are no risky data items in the authentication data list, the risk management module returns an activation code to the data management module. When the data management module performs subsequent operations on sensitive data, it includes the activation code information in the request.
[0016] The working steps of the behavior analysis module include:
[0017] Step S301: Receive configuration behavior data. After the configuration of the functional components is completed, the behavior analysis module will receive the configuration behavior data, including the operation records of the functional components and changes in system status.
[0018] Step S302: Perform analysis and evaluation. The behavior analysis module uses analysis algorithms and models to analyze the received configuration behavior data, compares the configuration behavior data with preset standards and specifications, and identifies potential problems and risks.
[0019] Step S303: Generate and send results. The behavior analysis module will generate behavior analysis results and send them to the risk management module.
[0020] The beneficial effects of this invention compared with the prior art are: (1) By setting up a component configuration module, this invention can select and disable functions within the system through flexible configuration of functional components, thereby achieving flexible function configuration; (2) This invention can protect the security of the management system when modifying and viewing sensitive data through a risk management module, thereby improving the stability of the system. Attached Figure Description
[0021] Figure 1 An exemplary step for configuring components according to the present invention.
[0022] Figure 2 This is an example block diagram illustrating the system configuration of the present invention.
[0023] Figure 3An exemplary step for performing security authentication on the risk management module of this invention.
[0024] Figure 4 This is an exemplary step in the operation of the behavior analysis module of the present invention. Detailed Implementation
[0025] Example: Figure 2 The big data SaaS-based customer relationship management system shown includes a component configuration module, a data management module, a risk management module, and a behavior analysis module. The component configuration module is used to configure the application functions of the customer relationship management system. Administrators can configure the functional components used in the currently authorized function library through the component configuration module, perform function summary marking on the enabled functional components, generate application locators, and after checking and updating the application locators, enable the updated functional components and generate modification operation information.
[0026] In this embodiment, the component configuration module can offer richer and more flexible functionality. For example, the visual selection boxes can be categorized and displayed according to different function types, such as customer information management functions, sales process management functions, and marketing activity management functions, so that managers can quickly find the functional components they need to configure.
[0027] When administrators perform feature summary marking, they can add detailed annotations to help other administrators better understand the purpose and characteristics of the feature component. Furthermore, the generated application locator can not only be used to locate the enabled feature path, but also record information such as the feature component's configuration time and the person who configured it, facilitating version management and auditing.
[0028] When checking for updated application locators, an automatic update mechanism can be introduced. When the system detects the release of a new feature component or an update to an existing feature component, it automatically prompts administrators to check for updates, ensuring that the system is always up-to-date with the latest functionality.
[0029] Before using the component configuration module, you need to go through the risk management module for authentication and modification risk management to determine the risk side. After the functional component is configured, use the behavior analysis module to analyze and evaluate the configuration behavior, obtain the behavior analysis results, and send the behavior analysis results to the risk management module for behavior risk assessment.
[0030] The data management module is used to manage the data generated in the system, including the secure storage, secure retrieval, and classification of data. When operating on sensitive data, the data management module assesses the risk level of the operator's operation through the risk management module and analyzes the operator's operation behavior through the behavior analysis module. The operation risk level assessment data includes at least the current operator's account's historical login information, historical operation characteristic information, historical operation result information, and historical sensitive data reading frequency information; operation behavior includes access to sensitive data, current login information, and data operation behavior.
[0031] In this embodiment, in addition to authenticating timestamp information, encrypted authentication data packets, authentication data key type and version number, and authentication data packet hash value, verification of the IP address of the authentication request source can be added to prevent malicious attacks. For the encryption algorithm of the encrypted authentication data packets, more advanced encryption technologies, such as quantum encryption, can be used to improve data security. An authentication log is established to record detailed information for each authentication, including authentication time, authentication result, and authentication request source, for security auditing and troubleshooting.
[0032] like Figure 1 The following steps are shown in this embodiment for configuring components using the component configuration module application function:
[0033] Step S101: Query the current authorized function library, obtain the available function indication information in the authorized function library, the indication information is used to determine the mapping dictionary information of the available functions; the indication information is mapped and displayed as a visual selection box, and the administrator can perform function summary marking by checking the visual selection box.
[0034] Step S102: Submit feature summary tagging processing, generate application locator based on enabled features, and use application locator to locate the enabled feature path.
[0035] Step S103: The application locator is checked through the component configuration module to see if the current application locator status needs to be updated. After the update is completed, the mapping information of the available functions is updated.
[0036] The risk management module manages authentication through dynamic data authentication. Dynamic data authentication verifies the integrity and correctness of data objects. Each dynamic data authentication data object contains at least the timestamp information of the authentication request, the encrypted authentication data packet, the authentication data key type and version number, and the authentication data packet hash value. The risk management module manages modification risks through preset modification behaviors. Preset modification behaviors extract the importance characteristics of functional components from the authorized function library, mark the usage and modification scores of functional components, calculate the weighted value of the usage and modification scores of functional components, and calculate the similarity between the actual score and the preset modification behavior score, classifying the modification risk level based on the similarity.
[0037] like Figure 3 As shown in this embodiment, when an operator securely stores and retrieves data from the management system through the data management module, the risk management module must first perform security authentication. The authentication process includes...
[0038] In step S201, the operator initiates a secure storage and secure read operation request. The data management module notifies the risk management module to start security authentication. The risk management module generates a random number and encrypts the random number. It then returns the random number and the encrypted ciphertext to the data management module. The data management module decrypts the ciphertext and verifies whether the random numbers are the same.
[0039] In step S202, if the data and authentication data are the same, the data management module returns the encrypted authentication data list to the risk management module. The authentication data list includes at least the operator's identity information, the operator's authentication level, and the operator's historical operation list. If the data and authentication data are different, the data management module returns a failure flag, and the risk management module records the failure record of the current operator's current session.
[0040] In step S203, the risk management module parses the authentication data list. If there are no risky data items in the authentication data list, the risk management module returns an activation code to the data management module. When the data management module performs subsequent operations on sensitive data, it includes the activation code information in the request.
[0041] like Figure 4 The diagram shows the working steps of the behavior analysis module in this embodiment, including:
[0042] Step S301: Receive configuration behavior data. After the configuration of the functional components is completed, the behavior analysis module will receive the configuration behavior data, including the operation records of the functional components and changes in system status.
[0043] Step S302: Perform analysis and evaluation. The behavior analysis module uses analysis algorithms and models to analyze the received configuration behavior data, compares the configuration behavior data with preset standards and specifications, and identifies potential problems and risks.
[0044] Step S303: Generate and send results. The behavior analysis module will generate behavior analysis results and send them to the risk management module.
[0045] The above description is merely an example and illustration of the present invention. Those skilled in the art can make various modifications or additions to the specific embodiments described, or use similar methods to replace them, as long as they do not deviate from the invention or exceed the scope defined in the claims, they should all fall within the protection scope of the present invention.
Claims
1. A big data SaaS-based customer relationship management system, characterized in that: It includes a component configuration module, a data management module, a risk management module, and a behavior analysis module. The component configuration module is used to configure the application functions of the customer relationship management system. The administrator can configure the functional components used in the currently authorized function library through the component configuration module, perform function summary marking on the enabled functional components, generate application locators, and after the component configuration module checks and updates the application locators, enable the updated functional components and generate modification operation information at the same time. Before using the component configuration module, you need to go through the risk management module to authenticate and modify the risk management, and then judge the risk side. After the functional component is configured, use the behavior analysis module to analyze and evaluate the configuration behavior, obtain the behavior analysis results, and send the behavior analysis results to the risk management module for behavior risk assessment. The risk management module performs authentication management through dynamic data authentication. The dynamic data authentication is the authentication of data integrity and correctness of dynamic data authentication data objects by the risk management module. The dynamic data authentication data object includes at least the timestamp information of the authentication request, the encrypted authentication data packet, the authentication data key type and version number, and the HASH value of the authentication data packet. The risk management module manages modification risks through preset modification behaviors. The preset modification behaviors extract the importance characteristics of functional components from the authorized function library, mark the usage and modification scores of functional components, calculate the weighted value of the usage and modification scores of functional components through preset modification behaviors, and calculate the similarity between the actual score and the preset modification behavior score, and classify the modification risk level based on the similarity. The data management module is used to manage the data generated in the management system, including secure storage, secure retrieval, and classification of the data. When operating on sensitive data, the data management module assesses the operator's operational risk level through the risk management module and analyzes the operator's operational behavior through the behavior analysis module. The operational risk level assessment data includes at least the current operator's account's historical login information, historical operation characteristic information, historical operation result information, and historical sensitive data reading frequency information. The operational behavior includes access to sensitive data, current login information, and data operation behavior.
2. The big data SaaS-based customer relationship management system according to claim 1, characterized in that: The steps for configuring components using the component configuration module include: Step S101: Query the current authorized function library, obtain the available function indication information in the authorized function library, the indication information is used to determine the mapping dictionary information of the available functions; the indication information is mapped and displayed as a visual selection box, and the administrator can perform function summary marking processing by checking the visual selection box; Step S102: Submit the function summary tagging process and generate an application locator based on the enabled function. The application locator is used to locate the enabled function path. Step S103: The application locator is checked through the component configuration module to see if the current application locator status needs to be updated. After the update is completed, the mapping information of available functions is returned.
3. The big data SaaS-based customer relationship management system according to claim 1, characterized in that: When an operator securely stores and retrieves data from the management system through the data management module, the risk management module must first perform security authentication. The authentication process... include, In step S201, the operator initiates a secure storage and secure read operation request. The data management module notifies the risk management module to start security authentication. The risk management module generates a random number and encrypts the random number. It then returns the random number and the encrypted ciphertext to the data management module. The data management module decrypts the ciphertext and verifies whether the random numbers are the same. Step S202: If they are the same, the data management module returns the encrypted authentication data list to the risk management module. The authentication data list includes at least the operator's identity information, the operator's authentication level, and the operator's historical operation list. If they are different, the data management module returns a failure flag, and the risk management module records the failure record of the current operator's current session. In step S203, the risk management module parses the authentication data list. If there are no risky data items in the authentication data list, the risk management module returns an activation code to the data management module. When the data management module performs subsequent operations on sensitive data, it includes the activation code information in the request.
4. The big data SaaS-based customer relationship management system according to claim 1, characterized in that: The working steps of the behavior analysis module include: Step S301: Receive configuration behavior data. After the configuration of the functional components is completed, the behavior analysis module will receive the configuration behavior data, including the operation records of the functional components and changes in system status. Step S302: Perform analysis and evaluation. The behavior analysis module uses analysis algorithms and models to analyze the received configuration behavior data, compares the configuration behavior data with preset standards and specifications, and identifies potential problems and risks. Step S303: Generate and send results. The behavior analysis module will generate behavior analysis results and send them to the risk management module.
Citation Information
Patent Citations
System and method for securing an enterprise computing environment
CN107409126A
Configuration checking method and device for big data cluster component and computing equipment
CN110880990A