A code-free security points management system development method and device

Abstract

The present invention provides a codeless security points management system development method and device in the field of security management technology, including: step S1, creating security points management rules and parsing to obtain management nodes; step S2, encapsulating management nodes as technical components and entering them into component warehouses; step S3, creating data models and business objects through data modeling tools of a codeless development platform; step S4, creating system interfaces through page designers and page components; step S5, defining services and declaring service interfaces for technical components, data models, and business objects through service modeling tools; step S6, binding services to page components through page event definers, and defining interaction logic; step S7, publishing through publishing tools. The advantages of the present invention are: greatly improving the convenience, efficiency, and scalability of the development of a security points management system, and greatly improving the security of the use of a security points management system.

Description

Technical Field

[0001] The present invention relates to the technical field of security management, and in particular to a method and device for developing a code-free security points management system. Background Art

[0002] The safety point management system is a safety management system based on point rewards, which aims to motivate employees or operators to pay attention to safety, comply with safety regulations, and actively participate in safety management activities through points. The safety point management system is widely used in fields that require a high level of safety awareness, such as construction sites, hazardous chemical enterprise management, etc. The safety point management rules and processes of the safety point management system vary depending on the industry, region, enterprise size, work environment and specific needs.

[0003] With the development of software engineering, especially the specialized division of labor, complex systems can be split into multiple components, each of which is deeply researched, developed and optimized by professional companies and teams. This specialized division of labor enables each component to reach a higher technical level and quality standards. For example, front-end components, back-end data calculation and processing components, databases, face recognition, maps, etc. can all be developed by professional companies and personnel.

[0004] Traditionally, security points management systems are developed based on code and component technology. Different components are developed by different component manufacturers, and they need to be assembled, debugged, tested and deployed later. These component manufacturers only provide professional programming interfaces, so the subsequent work needs to be completed by programmers with a computer professional background. In order to cope with the differences in security points management rules and processes, it is often necessary to write multiple sets of codes, which has the problems of high technical threshold, low development efficiency, team collaboration, high cost and poor system scalability. In addition, the traditionally developed security points management system only uses account and password for identity authentication, which has poor security and poses a risk of illegal access.

[0005] Therefore, how to provide a code-free security points management system development method and device to improve the convenience, efficiency and scalability of the security points management system development and improve the security of the use of the security points management system has become a technical problem that needs to be solved urgently. Summary of the invention

[0006] The technical problem to be solved by the present invention is to provide a code-free security points management system development method and device, so as to improve the convenience, efficiency and scalability of the development of the security points management system and improve the security of the use of the security points management system.

[0007] In a first aspect, the present invention provides a method for developing a code-free security points management system, comprising the following steps:

[0008] Step S1, creating a safety point management rule, and parsing the safety point management rule by using a UML tool to obtain a component diagram including a plurality of management nodes;

[0009] Step S2: Encapsulate each of the management nodes into a corresponding technical component, set the configuration information of each of the technical components including at least component attributes, input parameters, output parameters, event descriptions, and behavior descriptions through XML, and then enter each of the technical components into the component warehouse of the codeless development platform;

[0010] Step S3: Based on the security points management rules, create a data model and business objects of the security points management system through a data modeling tool of the codeless development platform;

[0011] Step S4: dragging the page components in the component warehouse in an interactive drag-and-drop manner through the page designer of the codeless development platform to create a system interface of the security points management system;

[0012] Step S5: Using the service modeling tool of the codeless development platform, perform service definition and service interface declaration for the technical components, data models, and business objects;

[0013] Step S6: Bind the service to the page components of the system interface through the page event definer of the codeless development platform, and define the interaction logic of each of the page components;

[0014] Step S7: Package the system interface and services into a security points management system through the publishing tool of the codeless development platform, set the security verification mechanism of the security points management system, and then publish the security points management system to the container orchestration system based on the input publishing instructions.

[0015] Furthermore, in step S3, the data model of the safety points management system created by the data modeling tool of the codeless development platform is specifically:

[0016] Defining a data source including a database type and connection address information through a data source definition tool of a codeless development platform; the connection address information includes at least an IP address, a port, and a database name;

[0017] Based on the safety score management rules, outputting the ER diagram through a database design tool;

[0018] Through the data modeling tool of the codeless development platform, the ER diagram is converted into a data model including a logical model and a physical model based on the database paradigm, the data model is published to the data source, and the metadata of the data model is stored in a pre-created metadata table.

[0019] Furthermore, the step S4 is specifically as follows:

[0020] Through the page designer of the codeless development platform, the page components in the component repository are dragged in an interactive manner to layout each of the page components, set the style of each of the page components, and store the display parameters including the layout and style in HTML format and CSS format to create a system interface of the security points management system including several sub-interfaces, and generate a unique interface identifier for each of the sub-interfaces to complete the creation of the system interface of the security points management system.

[0021] Furthermore, in step S5, the service definition at least includes definitions of service data objects, service input parameters, service output parameters and business logic.

[0022] Furthermore, the step S6 is specifically as follows:

[0023] By using the page event definer of the codeless development platform, the service is bound to the page components of the system interface, and the interaction logic of each of the page components is defined, including at least a triggering event and associated behaviors;

[0024] In step S7, the container orchestration system is kubernetes;

[0025] The verification process of the security verification mechanism is specifically as follows:

[0026] Parse the access request of the security points management system to obtain ciphertext data, signature data, timestamp and MAC value; the calculation process of the ciphertext data is: encrypt the account password, device ID, and the public key used to verify the signature data by the IDEA algorithm to obtain the first-level encrypted data, map each character of the first-level encrypted data by the preset first mapping rule to obtain the second-level encrypted data, encrypt the second-level encrypted data by the RSA algorithm to obtain the third-level encrypted data, map each character of the third-level encrypted data by the preset second mapping rule to obtain the fourth-level encrypted data, encrypt the fourth-level encrypted data by the ECDSA algorithm to obtain the fifth-level encrypted data, map each character of the fifth-level encrypted data by the preset third mapping rule to obtain the sixth-level encrypted data, and encrypt the sixth-level encrypted data by the 3DES algorithm to obtain the ciphertext data; the MAC value is obtained by performing MAC calculation on the ciphertext data, signature data and timestamp;

[0027] After the integrity of the ciphertext data, signature data and timestamp is checked by the MAC value, the timeliness is checked by the timestamp, and then the ciphertext data is decrypted to obtain the account password, device ID and public key, and then the signature data is verified by the public key, and the first legitimacy check is performed on the device ID through the preset device management table, and finally the second legitimacy check is performed on the account password through the preset password management table;

[0028] The decryption process of the ciphertext data is as follows:

[0029] The ciphertext data is decrypted by the 3DES algorithm to obtain level 6 encrypted data, each character of the level 6 encrypted data is mapped by the preset third mapping rule to obtain level 5 encrypted data, the level 5 encrypted data is decrypted by the ECDSA algorithm to obtain level 4 encrypted data, each character of the level 4 encrypted data is mapped by the preset second mapping rule to obtain level 3 encrypted data, the level 3 encrypted data is decrypted by the RSA algorithm to obtain level 2 encrypted data, each character of the level 2 encrypted data is mapped by the preset first mapping rule to obtain level 1 encrypted data, and the level 1 encrypted data is decrypted by the IDEA algorithm to obtain the account password, device ID and public key.

[0030] In a second aspect, the present invention provides a code-free security points management system development device, including the following modules:

[0031] A safety score management rule parsing module is used to create a safety score management rule and parse the safety score management rule through a UML tool to obtain a component diagram including several management nodes;

[0032] A technical component creation module, used to encapsulate each of the management nodes into a corresponding technical component, and after setting the configuration information of each of the technical components including at least component attributes, input parameters, output parameters, event descriptions, and behavior descriptions through XML, enter each of the technical components into the component warehouse of the codeless development platform;

[0033] A data model and business object creation module, which is used to create a data model and business objects of the security points management system through a data modeling tool of a codeless development platform based on the security points management rules;

[0034] A system interface creation module, used to drag page components in the component warehouse in a drag-and-drop interactive manner through a page designer of a codeless development platform to create a system interface of a security points management system;

[0035] A service definition module, used to perform service definition and service interface declaration for the technical components, data models, and business objects through a service modeling tool of a codeless development platform;

[0036] An interactive logic definition module, used to bind the service to the page components of the system interface through the page event definer of the codeless development platform, and define the interactive logic of each of the page components;

[0037] The publishing module is used to package the system interface and services into a security points management system through the publishing tool of the codeless development platform, set the security verification mechanism of the security points management system, and then publish the security points management system to the container orchestration system based on the input publishing instructions.

[0038] Furthermore, in the data model and business object creation module, the data model of the security points management system created by the data modeling tool of the codeless development platform is specifically:

[0039] Defining a data source including a database type and connection address information through a data source definition tool of a codeless development platform; the connection address information includes at least an IP address, a port, and a database name;

[0040] Based on the safety score management rules, outputting the ER diagram through a database design tool;

[0041] Through the data modeling tool of the codeless development platform, the ER diagram is converted into a data model including a logical model and a physical model based on the database paradigm, the data model is published to the data source, and the metadata of the data model is stored in a pre-created metadata table.

[0042] Furthermore, the system interface creation module is specifically used for:

[0043] Through the page designer of the codeless development platform, the page components in the component repository are dragged in an interactive manner to layout each of the page components, set the style of each of the page components, and store the display parameters including the layout and style in HTML format and CSS format to create a system interface of the security points management system including several sub-interfaces, and generate a unique interface identifier for each of the sub-interfaces to complete the creation of the system interface of the security points management system.

[0044] Furthermore, in the service definition module, the service definition at least includes definitions of service data objects, service input parameters, service output parameters and business logic.

[0045] Furthermore, the interaction logic definition module is specifically used for:

[0046] By using the page event definer of the codeless development platform, the service is bound to the page components of the system interface, and the interaction logic of each of the page components is defined, including at least a triggering event and associated behaviors;

[0047] In the publishing module, the container orchestration system is kubernetes;

[0048] The verification process of the security verification mechanism is specifically as follows:

[0049] Parse the access request of the security points management system to obtain ciphertext data, signature data, timestamp and MAC value; the calculation process of the ciphertext data is: encrypt the account password, device ID, and the public key used to verify the signature data by the IDEA algorithm to obtain the first-level encrypted data, map each character of the first-level encrypted data by the preset first mapping rule to obtain the second-level encrypted data, encrypt the second-level encrypted data by the RSA algorithm to obtain the third-level encrypted data, map each character of the third-level encrypted data by the preset second mapping rule to obtain the fourth-level encrypted data, encrypt the fourth-level encrypted data by the ECDSA algorithm to obtain the fifth-level encrypted data, map each character of the fifth-level encrypted data by the preset third mapping rule to obtain the sixth-level encrypted data, and encrypt the sixth-level encrypted data by the 3DES algorithm to obtain the ciphertext data; the MAC value is obtained by performing MAC calculation on the ciphertext data, signature data and timestamp;

[0050] After the integrity of the ciphertext data, signature data and timestamp is checked by the MAC value, the timeliness is checked by the timestamp, and then the ciphertext data is decrypted to obtain the account password, device ID and public key, and then the signature data is verified by the public key, and the first legitimacy check is performed on the device ID through the preset device management table, and finally the second legitimacy check is performed on the account password through the preset password management table;

[0051] The decryption process of the ciphertext data is:

[0052] The ciphertext data is decrypted by the 3DES algorithm to obtain level 6 encrypted data, each character of the level 6 encrypted data is mapped by the preset third mapping rule to obtain level 5 encrypted data, the level 5 encrypted data is decrypted by the ECDSA algorithm to obtain level 4 encrypted data, each character of the level 4 encrypted data is mapped by the preset second mapping rule to obtain level 3 encrypted data, the level 3 encrypted data is decrypted by the RSA algorithm to obtain level 2 encrypted data, each character of the level 2 encrypted data is mapped by the preset first mapping rule to obtain level 1 encrypted data, and the level 1 encrypted data is decrypted by the IDEA algorithm to obtain the account password, device ID and public key.

[0053] The advantages of the present invention are:

[0054] 1. Create security points management rules, parse the security points management rules through UML tools to obtain component diagrams including several management nodes, encapsulate each management node into a corresponding technical component, set the configuration information of each technical component including at least component attributes, input parameters, output parameters, event descriptions and behavior descriptions, and then enter each technical component into the component warehouse of the codeless development platform; then, based on the security points management rules, create the data model and business objects of the security points management system through the data modeling tool of the codeless development platform, drag the page components in the component warehouse in an interactive way through the page designer to create the system interface of the security points management system, define services and declare service interfaces for technical components, data models and business objects through the service modeling tool, bind the services to the page components of the system interface through the page event definer, and define each page component The interactive logic of the components is constructed, and finally the system interface and services are packaged into a security points management system through the publishing tool. After the security verification mechanism of the security points management system is set, the security points management system is published to the container orchestration system based on the input publishing instructions; that is, technical components are created based on the security points management rules and entered into the component warehouse of the no-code development platform. The no-code development platform develops a WYSIWYG security points management system based on the technical components, without the need for programmers with a computer professional background, and the technical components can be expanded as needed later. Before the security points management system is released, a security verification mechanism including integrity verification, timeliness verification, signature verification, first legitimacy verification and second legitimacy verification is set to prevent the security points management system from being illegally accessed, thereby greatly improving the convenience, efficiency and scalability of the development of the security points management system, and greatly improving the security of the use of the security points management system.

[0055] 2. By setting the access request to carry ciphertext data, signature data, timestamp and MAC value, the ciphertext data is obtained by multi-level encryption of the account password, device ID, and the public key used to verify the signature data. Subsequently, integrity verification can be performed based on the MAC value, timeliness verification can be performed based on the timestamp, signature verification can be performed based on the public key, a first legitimacy verification can be performed based on the device ID, and a second legitimacy verification can be performed based on the account password; the account password, device ID, and public key are encrypted by the IDEA algorithm to obtain first-level encrypted data, each character of the first-level encrypted data is mapped by the preset first mapping rule to obtain second-level encrypted data, the second-level encrypted data is encrypted by the RSA algorithm to obtain third-level encrypted data, and the third-level encrypted data is encrypted by the preset second mapping rule. Map each character of the third-level encrypted data to obtain fourth-level encrypted data, encrypt the fourth-level encrypted data through the ECDSA algorithm to obtain fifth-level encrypted data, map each character of the fifth-level encrypted data through the preset third mapping rule to obtain sixth-level encrypted data, and encrypt the sixth-level encrypted data through the 3DES algorithm to obtain ciphertext data. If the corresponding encryption algorithm or mapping rule is not known, the ciphertext data cannot be cracked. At least 12 security measures are taken (IDEA algorithm, first mapping rule, RSA algorithm, second mapping rule, ECDSA algorithm, third mapping rule, 3DES algorithm, MAC value, timestamp, public key, device ID, account password), which greatly improves the security of the use of the security points management system. BRIEF DESCRIPTION OF THE DRAWINGS

[0056] The present invention will be further described below in conjunction with embodiments with reference to the accompanying drawings.

[0057] Figure 1 The present invention is a flowchart of a method for developing a code-free safety points management system.

[0058] Figure 2 It is a structural schematic diagram of a code-free safety points management system development device of the present invention. DETAILED DESCRIPTION

[0059] The technical solution in the embodiments of the present application has the following overall idea: based on the security points management rules, technical components are created and entered into the component warehouse of the codeless development platform. The codeless development platform develops a WYSIWYG security points management system based on the technical components. There is no need for programmers with a computer professional background, and the technical components can be expanded as needed later. Before the security points management system is released, a security verification mechanism including integrity check, timeliness check, signature check, first legitimacy check and second legitimacy check is set to avoid illegal access to the security points management system, so as to improve the convenience, efficiency and scalability of the development of the security points management system and improve the security of the use of the security points management system.

[0060] Please refer to Figure 1 to Figure 2 As shown, a preferred embodiment of a method for developing a code-free security points management system of the present invention comprises the following steps:

[0061] Step S1, creating a safety point management rule, parsing the safety point management rule by using a UML (Unified Modeling Language) tool (such as Visio) to obtain a component diagram including a plurality of management nodes;

[0062] Step S2: Encapsulate each of the management nodes into a corresponding technical component, set the configuration information of each of the technical components including at least component attributes, input parameters, output parameters, event descriptions, and behavior descriptions through XML (Extensible Markup Language), and then enter each of the technical components into a component warehouse of a codeless development platform; the component warehouse is provided with components for data query, data update, data insertion, etc.;

[0063] Step S3: Based on the security points management rules, a data model and business objects of the security points management system are created through a data modeling tool of a codeless development platform; the codeless development platform is a technical platform that can be used for software development without writing code. Through a graphical interface and pre-built modules, non-professional programmers can also quickly build applications. It provides rich functions and tools, including online form design, report generation, data visualization, etc., aiming to lower the threshold of software development and improve development efficiency.

[0064] The business object (BO) is an abstract representation of information related to people, things, objects, places, etc. It is a mapping of actual business in the information world, a component for retrieving and processing data, and a software abstraction of the real world. The business object is usually located in the middle layer or business logic layer, and is an important part of the digitalization-digital architecture-business architecture-business object-data model-data asset chain. The business object has the following characteristics: ① Combination of data and behavior: business objects contain not only data (such as attributes), but also behaviors (such as methods) for operating these data; ② Reusability: business objects can be reused by multiple systems or applications to improve development efficiency and interoperability between systems; ③ Business logic encapsulation: business objects encapsulate business logic, allowing developers to focus more on the implementation of business logic rather than underlying data processing.

[0065] Step S4: dragging the page components in the component warehouse in an interactive drag-and-drop manner through the page designer of the codeless development platform to create a system interface of the security points management system;

[0066] Step S5: Using the service modeling tool of the codeless development platform, the technical components, data models, and business objects are defined and service interfaces are declared; in specific implementation, the defined services may be re-orchestrated to form a new aggregated service;

[0067] Step S6: Bind the service to the page components of the system interface through the page event definer of the codeless development platform, and define the interaction logic of each of the page components to form a page form used by the end user;

[0068] Step S7: using the publishing tool of the codeless development platform, the system interface and the service are packaged into a security points management system, after setting the security verification mechanism of the security points management system, the security points management system is published to the container orchestration system based on the input publishing instruction;

[0069] The verification process of the security verification mechanism is specifically as follows:

[0070] Parse the access request of the security points management system to obtain ciphertext data, signature data, timestamp and MAC value; the calculation process of the ciphertext data is: encrypt the account password, device ID, and the public key used to verify the signature data by the IDEA algorithm to obtain the first-level encrypted data, map each character of the first-level encrypted data by the preset first mapping rule to obtain the second-level encrypted data, encrypt the second-level encrypted data by the RSA algorithm to obtain the third-level encrypted data, map each character of the third-level encrypted data by the preset second mapping rule to obtain the fourth-level encrypted data, encrypt the fourth-level encrypted data by the ECDSA algorithm to obtain the fifth-level encrypted data, map each character of the fifth-level encrypted data by the preset third mapping rule to obtain the sixth-level encrypted data, and encrypt the sixth-level encrypted data by the 3DES algorithm to obtain the ciphertext data; the MAC value is obtained by performing MAC calculation on the ciphertext data, signature data and timestamp;

[0071] After the integrity of the ciphertext data, signature data and timestamp is checked through the MAC value, the timeliness is checked through the timestamp, and then the ciphertext data is decrypted to obtain the account password, device ID and public key. The signature data is then verified through the public key, and the first legitimacy check is performed on the device ID through the preset device management table. Finally, the second legitimacy check is performed on the account password through the preset password management table.

[0072] By setting the access request to carry ciphertext data, signature data, timestamp and MAC value, the ciphertext data is obtained by multi-level encryption of the account password, device ID, and the public key used to verify the signature data. Subsequently, integrity verification can be performed based on the MAC value, timeliness verification can be performed based on the timestamp, signature verification can be performed based on the public key, a first legitimacy verification can be performed based on the device ID, and a second legitimacy verification can be performed based on the account password; the account password, device ID, and public key are encrypted by the IDEA algorithm to obtain first-level encrypted data, each character of the first-level encrypted data is mapped by the preset first mapping rule to obtain second-level encrypted data, the second-level encrypted data is encrypted by the RSA algorithm to obtain third-level encrypted data, and the second-level encrypted data is encrypted by the preset second mapping rule. Each character of the third-level encrypted data is mapped to obtain the fourth-level encrypted data, the fourth-level encrypted data is encrypted by the ECDSA algorithm to obtain the fifth-level encrypted data, the each character of the fifth-level encrypted data is mapped by the preset third mapping rule to obtain the sixth-level encrypted data, and the sixth-level encrypted data is encrypted by the 3DES algorithm to obtain the ciphertext data. If the corresponding encryption algorithm or mapping rule is not known, the ciphertext data cannot be cracked. At least 12 security measures are taken before and after (IDEA algorithm, first mapping rule, RSA algorithm, second mapping rule, ECDSA algorithm, third mapping rule, 3DES algorithm, MAC value, timestamp, public key, device ID, account password), which greatly improves the security of the use of the security points management system.

[0073] In step S3, the data model of the security points management system created by the data modeling tool of the codeless development platform is specifically:

[0074] A data source including a database type and connection address information is defined by a data source definition tool of a codeless development platform; the connection address information includes at least an IP address, a port, and a database name; the database type is mysql, sqlserver, or oracle;

[0075] Based on the safety score management rules, outputting the ER diagram through a database design tool;

[0076] Through the data modeling tool of the codeless development platform, based on the database paradigm (a series of rules and guiding methods followed in relational databases, aimed at reducing data redundancy in the database and improving data consistency and integrity), the ER diagram (Entity-Relationship Diagram) is converted into a data model including a logical model and a physical model, the data model is published to the data source, and the metadata of the data model is stored in a pre-created metadata table.

[0077] The step S4 is specifically as follows:

[0078] Through the page designer of the codeless development platform, the page components in the component warehouse are dragged in an interactive manner to layout each of the page components, set the style of each of the page components, and store the display parameters including the layout and style in HTML format (a standard markup language for creating web pages) and CSS format (for describing the presentation of HTML or XML documents) to create a system interface of the security points management system including several sub-interfaces, and generate a unique interface identifier (GUID) for each of the sub-interfaces to complete the creation of the system interface of the security points management system. When a user initiates a page request through the security points management system, the unique interface identifier will be brought along, and the pre-written page parsing interface of the security points management system will search the database for the corresponding page layout and style data according to the unique interface identifier and return it to the front-end browser.

[0079] In step S5, the service definition at least includes a service data object, a service input parameter, a service output parameter and a definition of a business logic. The service input parameter and the service output parameter may be a business object or a plurality of independent formal parameters.

[0080] The step S6 is specifically as follows:

[0081] By using the page event definer of the codeless development platform, the service is bound to the page components of the system interface, and the interaction logic of each of the page components is defined, including at least a triggering event and associated behaviors;

[0082] In step S7, the container orchestration system is Kubernetes, which is used to automatically deploy, expand and manage containerized applications;

[0083] The decryption process of the ciphertext data is as follows:

[0084] The ciphertext data is decrypted by the 3DES algorithm to obtain level 6 encrypted data, each character of the level 6 encrypted data is mapped by the preset third mapping rule to obtain level 5 encrypted data, the level 5 encrypted data is decrypted by the ECDSA algorithm to obtain level 4 encrypted data, each character of the level 4 encrypted data is mapped by the preset second mapping rule to obtain level 3 encrypted data, the level 3 encrypted data is decrypted by the RSA algorithm to obtain level 2 encrypted data, each character of the level 2 encrypted data is mapped by the preset first mapping rule to obtain level 1 encrypted data, and the level 1 encrypted data is decrypted by the IDEA algorithm to obtain the account password, device ID and public key.

[0085] A preferred embodiment of a code-free security points management system development device of the present invention includes the following modules:

[0086] A safety point management rule parsing module is used to create a safety point management rule, and parse the safety point management rule through a UML (Unified Modeling Language) tool (such as Visio) to obtain a component diagram including several management nodes;

[0087] A technical component creation module is used to encapsulate each of the management nodes into a corresponding technical component, and after setting the configuration information of each of the technical components including at least component attributes, input parameters, output parameters, event descriptions and behavior descriptions through XML (Extensible Markup Language), each of the technical components is entered into a component warehouse of the codeless development platform; the component warehouse is provided with components for data query, data update, data insertion, etc.;

[0088] A data model and business object creation module, which is used to create a data model and business objects of the security points management system based on the security points management rules through the data modeling tool of the no-code development platform; the no-code development platform is a technical platform that can be used for software development without writing code. Through a graphical interface and pre-built modules, non-professional programmers can also quickly build applications, and provide rich functions and tools, including online form design, report generation, data visualization, etc., aiming to lower the threshold of software development and improve development efficiency;

[0089] The business object (BO) is an abstract representation of information related to people, things, objects, places, etc. It is a mapping of actual business in the information world, a component for retrieving and processing data, and a software abstraction of the real world. The business object is usually located in the middle layer or business logic layer, and is an important part of the digitalization-digital architecture-business architecture-business object-data model-data asset chain. The business object has the following characteristics: ① Combination of data and behavior: business objects contain not only data (such as attributes), but also behaviors (such as methods) for operating these data; ② Reusability: business objects can be reused by multiple systems or applications to improve development efficiency and interoperability between systems; ③ Business logic encapsulation: business objects encapsulate business logic, allowing developers to focus more on the implementation of business logic rather than underlying data processing.

[0090] A system interface creation module, used to drag page components in the component warehouse in a drag-and-drop interactive manner through a page designer of a codeless development platform to create a system interface of a security points management system;

[0091] The service definition module is used to define services and declare service interfaces for the technical components, data models, and business objects through the service modeling tool of the codeless development platform; in specific implementation, the already defined services can be re-orchestrated to form a new aggregate service;

[0092] An interactive logic definition module is used to bind the service to the page components of the system interface through the page event definer of the codeless development platform, and define the interactive logic of each of the page components to form a page form used by the end user;

[0093] A publishing module, used to package the system interface and services into a security points management system through a publishing tool of a codeless development platform, set a security verification mechanism for the security points management system, and publish the security points management system to a container orchestration system based on an input publishing instruction;

[0094] The verification process of the security verification mechanism is specifically as follows:

[0095] Parse the access request of the security points management system to obtain ciphertext data, signature data, timestamp and MAC value; the calculation process of the ciphertext data is: encrypt the account password, device ID, and the public key used to verify the signature data by the IDEA algorithm to obtain the first-level encrypted data, map each character of the first-level encrypted data by the preset first mapping rule to obtain the second-level encrypted data, encrypt the second-level encrypted data by the RSA algorithm to obtain the third-level encrypted data, map each character of the third-level encrypted data by the preset second mapping rule to obtain the fourth-level encrypted data, encrypt the fourth-level encrypted data by the ECDSA algorithm to obtain the fifth-level encrypted data, map each character of the fifth-level encrypted data by the preset third mapping rule to obtain the sixth-level encrypted data, and encrypt the sixth-level encrypted data by the 3DES algorithm to obtain the ciphertext data; the MAC value is obtained by performing MAC calculation on the ciphertext data, signature data and timestamp;

[0096] After the integrity of the ciphertext data, signature data and timestamp is checked through the MAC value, the timeliness is checked through the timestamp, and then the ciphertext data is decrypted to obtain the account password, device ID and public key. The signature data is then verified through the public key, and the first legitimacy check is performed on the device ID through the preset device management table. Finally, the second legitimacy check is performed on the account password through the preset password management table.

[0097] By setting the access request to carry ciphertext data, signature data, timestamp and MAC value, the ciphertext data is obtained by multi-level encryption of the account password, device ID, and the public key used to verify the signature data. Subsequently, integrity verification can be performed based on the MAC value, timeliness verification can be performed based on the timestamp, signature verification can be performed based on the public key, a first legitimacy verification can be performed based on the device ID, and a second legitimacy verification can be performed based on the account password; the account password, device ID, and public key are encrypted by the IDEA algorithm to obtain first-level encrypted data, each character of the first-level encrypted data is mapped by the preset first mapping rule to obtain second-level encrypted data, the second-level encrypted data is encrypted by the RSA algorithm to obtain third-level encrypted data, and the second-level encrypted data is encrypted by the preset second mapping rule. Each character of the third-level encrypted data is mapped to obtain the fourth-level encrypted data, the fourth-level encrypted data is encrypted by the ECDSA algorithm to obtain the fifth-level encrypted data, the each character of the fifth-level encrypted data is mapped by the preset third mapping rule to obtain the sixth-level encrypted data, and the sixth-level encrypted data is encrypted by the 3DES algorithm to obtain the ciphertext data. If the corresponding encryption algorithm or mapping rule is not known, the ciphertext data cannot be cracked. At least 12 security measures are taken before and after (IDEA algorithm, first mapping rule, RSA algorithm, second mapping rule, ECDSA algorithm, third mapping rule, 3DES algorithm, MAC value, timestamp, public key, device ID, account password), which greatly improves the security of the use of the security points management system.

[0098] In the data model and business object creation module, the data model of the security points management system created by the data modeling tool of the codeless development platform is specifically:

[0099] A data source including a database type and connection address information is defined by a data source definition tool of a codeless development platform; the connection address information includes at least an IP address, a port, and a database name; the database type is mysql, sqlserver, or oracle;

[0100] Based on the safety score management rules, outputting the ER diagram through a database design tool;

[0101] Through the data modeling tool of the codeless development platform, based on the database paradigm (a series of rules and guiding methods followed in relational databases, aimed at reducing data redundancy in the database and improving data consistency and integrity), the ER diagram (Entity-Relationship Diagram) is converted into a data model including a logical model and a physical model, the data model is published to the data source, and the metadata of the data model is stored in a pre-created metadata table.

[0102] The system interface creation module is specifically used for:

[0103] Through the page designer of the codeless development platform, the page components in the component warehouse are dragged in an interactive manner to layout each of the page components, set the style of each of the page components, and store the display parameters including the layout and style in HTML format (a standard markup language for creating web pages) and CSS format (for describing the presentation of HTML or XML documents) to create a system interface of the security points management system including several sub-interfaces, and generate a unique interface identifier (GUID) for each of the sub-interfaces to complete the creation of the system interface of the security points management system. When a user initiates a page request through the security points management system, the unique interface identifier will be brought along, and the pre-written page parsing interface of the security points management system will search the database for the corresponding page layout and style data according to the unique interface identifier and return it to the front-end browser.

[0104] In the service definition module, the service definition at least includes the definition of service data object, service input parameter, service output parameter and business logic. The service input parameter and service output parameter can be business objects or multiple independent formal parameters.

[0105] The interaction logic definition module is specifically used for:

[0106] By using the page event definer of the codeless development platform, the service is bound to the page components of the system interface, and the interaction logic of each of the page components is defined, including at least a triggering event and associated behaviors;

[0107] In the release module, the container orchestration system is Kubernetes, which is used to automatically deploy, expand and manage containerized applications;

[0108] The decryption process of the ciphertext data is as follows:

[0109] The ciphertext data is decrypted by the 3DES algorithm to obtain level 6 encrypted data, each character of the level 6 encrypted data is mapped by the preset third mapping rule to obtain level 5 encrypted data, the level 5 encrypted data is decrypted by the ECDSA algorithm to obtain level 4 encrypted data, each character of the level 4 encrypted data is mapped by the preset second mapping rule to obtain level 3 encrypted data, the level 3 encrypted data is decrypted by the RSA algorithm to obtain level 2 encrypted data, each character of the level 2 encrypted data is mapped by the preset first mapping rule to obtain level 1 encrypted data, and the level 1 encrypted data is decrypted by the IDEA algorithm to obtain the account password, device ID and public key.

[0110] In summary, the advantages of the present invention are:

[0111] 1. Create security points management rules, parse the security points management rules through UML tools to obtain component diagrams including several management nodes, encapsulate each management node into a corresponding technical component, set the configuration information of each technical component including at least component attributes, input parameters, output parameters, event descriptions and behavior descriptions, and then enter each technical component into the component warehouse of the codeless development platform; then, based on the security points management rules, create the data model and business objects of the security points management system through the data modeling tool of the codeless development platform, drag the page components in the component warehouse in an interactive way through the page designer to create the system interface of the security points management system, define services and declare service interfaces for technical components, data models and business objects through the service modeling tool, bind the services to the page components of the system interface through the page event definer, and define each page component The interactive logic of the components is constructed, and finally the system interface and services are packaged into a security points management system through the publishing tool. After the security verification mechanism of the security points management system is set, the security points management system is published to the container orchestration system based on the input publishing instructions; that is, technical components are created based on the security points management rules and entered into the component warehouse of the no-code development platform. The no-code development platform develops a WYSIWYG security points management system based on the technical components, without the need for programmers with a computer professional background, and the technical components can be expanded as needed later. Before the security points management system is released, a security verification mechanism including integrity verification, timeliness verification, signature verification, first legitimacy verification and second legitimacy verification is set to prevent the security points management system from being illegally accessed, thereby greatly improving the convenience, efficiency and scalability of the development of the security points management system, and greatly improving the security of the use of the security points management system.

[0112] 2. By setting the access request to carry ciphertext data, signature data, timestamp and MAC value, the ciphertext data is obtained by multi-level encryption of the account password, device ID, and the public key used to verify the signature data. Subsequently, integrity verification can be performed based on the MAC value, timeliness verification can be performed based on the timestamp, signature verification can be performed based on the public key, a first legitimacy verification can be performed based on the device ID, and a second legitimacy verification can be performed based on the account password; the account password, device ID, and public key are encrypted by the IDEA algorithm to obtain first-level encrypted data, each character of the first-level encrypted data is mapped by the preset first mapping rule to obtain second-level encrypted data, the second-level encrypted data is encrypted by the RSA algorithm to obtain third-level encrypted data, and the third-level encrypted data is encrypted by the preset second mapping rule. Map each character of the third-level encrypted data to obtain fourth-level encrypted data, encrypt the fourth-level encrypted data through the ECDSA algorithm to obtain fifth-level encrypted data, map each character of the fifth-level encrypted data through the preset third mapping rule to obtain sixth-level encrypted data, and encrypt the sixth-level encrypted data through the 3DES algorithm to obtain ciphertext data. If the corresponding encryption algorithm or mapping rule is not known, the ciphertext data cannot be cracked. At least 12 security measures are taken (IDEA algorithm, first mapping rule, RSA algorithm, second mapping rule, ECDSA algorithm, third mapping rule, 3DES algorithm, MAC value, timestamp, public key, device ID, account password), which greatly improves the security of the use of the security points management system.

[0113] Although the specific implementation modes of the present invention are described above, those skilled in the art should understand that the specific implementation modes described are only illustrative and are not intended to limit the scope of the present invention. Equivalent modifications and changes made by those skilled in the art in accordance with the spirit of the present invention should be included in the scope of protection of the claims of the present invention.

Claims

1. A code-free safety points management system development method, characterized by: The steps include: Step S1, creating a safety point management rule, and parsing the safety point management rule by using a UML tool to obtain a component diagram including a plurality of management nodes; Step S2: Encapsulate each of the management nodes into a corresponding technical component, set the configuration information of each of the technical components including at least component attributes, input parameters, output parameters, event descriptions, and behavior descriptions through XML, and then enter each of the technical components into the component warehouse of the codeless development platform; Step S3: Based on the security points management rules, create a data model and business objects of the security points management system through a data modeling tool of the codeless development platform; Step S4: dragging the page components in the component warehouse in an interactive drag-and-drop manner through the page designer of the codeless development platform to create a system interface of the security points management system; Step S5: Using the service modeling tool of the codeless development platform, perform service definition and service interface declaration for the technical components, data models, and business objects; Step S6: Bind the service to the page components of the system interface through the page event definer of the codeless development platform, and define the interaction logic of each of the page components; Step S7: using the publishing tool of the codeless development platform, the system interface and the service are packaged into a security points management system, after setting the security verification mechanism of the security points management system, the security points management system is published to the container orchestration system based on the input publishing instruction; The verification process of the security verification mechanism is specifically as follows: Parse the access request of the security points management system to obtain ciphertext data, signature data, timestamp and MAC value; the calculation process of the ciphertext data is: encrypt the account password, device ID, and the public key used to verify the signature data by the IDEA algorithm to obtain the first-level encrypted data, map each character of the first-level encrypted data by the preset first mapping rule to obtain the second-level encrypted data, encrypt the second-level encrypted data by the RSA algorithm to obtain the third-level encrypted data, map each character of the third-level encrypted data by the preset second mapping rule to obtain the fourth-level encrypted data, encrypt the fourth-level encrypted data by the ECDSA algorithm to obtain the fifth-level encrypted data, map each character of the fifth-level encrypted data by the preset third mapping rule to obtain the sixth-level encrypted data, and encrypt the sixth-level encrypted data by the 3DES algorithm to obtain the ciphertext data; the MAC value is obtained by performing MAC calculation on the ciphertext data, signature data and timestamp; After the integrity of the ciphertext data, signature data and timestamp is checked by the MAC value, the timeliness is checked by the timestamp, and then the ciphertext data is decrypted to obtain the account password, device ID and public key, and then the signature data is verified by the public key, and the first legitimacy check is performed on the device ID through the preset device management table, and finally the second legitimacy check is performed on the account password through the preset password management table; The decryption process of the ciphertext data is: The ciphertext data is decrypted by the 3DES algorithm to obtain level 6 encrypted data, each character of the level 6 encrypted data is mapped by the preset third mapping rule to obtain level 5 encrypted data, the level 5 encrypted data is decrypted by the ECDSA algorithm to obtain level 4 encrypted data, each character of the level 4 encrypted data is mapped by the preset second mapping rule to obtain level 3 encrypted data, the level 3 encrypted data is decrypted by the RSA algorithm to obtain level 2 encrypted data, each character of the level 2 encrypted data is mapped by the preset first mapping rule to obtain level 1 encrypted data, and the level 1 encrypted data is decrypted by the IDEA algorithm to obtain the account password, device ID and public key.

2. A code-free security points management system development method as claimed in claim 1, characterized in that: In step S3, the data model of the security points management system created by the data modeling tool of the codeless development platform is specifically: Defining a data source including a database type and connection address information through a data source definition tool of a codeless development platform; the connection address information includes at least an IP address, a port, and a database name; Based on the safety score management rules, outputting the ER diagram through a database design tool; Through the data modeling tool of the codeless development platform, the ER diagram is converted into a data model including a logical model and a physical model based on the database paradigm, the data model is published to the data source, and the metadata of the data model is stored in a pre-created metadata table.

3. A code-free security points management system development method as claimed in claim 1, characterized in that: The step S4 is specifically as follows: Through the page designer of the codeless development platform, the page components in the component repository are dragged in an interactive manner to layout each of the page components, set the style of each of the page components, and store the display parameters including the layout and style in HTML format and CSS format to create a system interface of the security points management system including several sub-interfaces, and generate a unique interface identifier for each of the sub-interfaces to complete the creation of the system interface of the security points management system.

4. A code-free security points management system development method as claimed in claim 1, characterized in that: In step S5, the service definition at least includes the definition of service data objects, service input parameters, service output parameters and business logic.

5. A code-free security points management system development method as claimed in claim 1, characterized in that: The step S6 is specifically as follows: By using the page event definer of the codeless development platform, the service is bound to the page components of the system interface, and the interaction logic of each of the page components is defined, including at least a triggering event and associated behaviors; In step S7, the container orchestration system is Kubernetes.

6. A code-free safety points management system development device, characterized in that: Includes the following modules: A safety point management rule parsing module is used to create a safety point management rule and parse the safety point management rule through a UML tool to obtain a component diagram including several management nodes; A technical component creation module, used to encapsulate each of the management nodes into a corresponding technical component, and after setting the configuration information of each of the technical components including at least component attributes, input parameters, output parameters, event descriptions, and behavior descriptions through XML, enter each of the technical components into the component warehouse of the codeless development platform; A data model and business object creation module, which is used to create a data model and business objects of the security points management system through a data modeling tool of a codeless development platform based on the security points management rules; A system interface creation module, used to drag page components in the component warehouse in a drag-and-drop interactive manner through a page designer of a codeless development platform to create a system interface of a security points management system; A service definition module, used to perform service definition and service interface declaration for the technical components, data models, and business objects through a service modeling tool of a codeless development platform; An interactive logic definition module, used to bind the service to the page components of the system interface through the page event definer of the codeless development platform, and define the interactive logic of each of the page components; A publishing module, used to package the system interface and services into a security points management system through a publishing tool of a codeless development platform, set a security verification mechanism for the security points management system, and publish the security points management system to a container orchestration system based on an input publishing instruction; The verification process of the security verification mechanism is specifically as follows: Parse the access request of the security points management system to obtain ciphertext data, signature data, timestamp and MAC value; the calculation process of the ciphertext data is: encrypt the account password, device ID, and the public key used to verify the signature data by the IDEA algorithm to obtain the first-level encrypted data, map each character of the first-level encrypted data by the preset first mapping rule to obtain the second-level encrypted data, encrypt the second-level encrypted data by the RSA algorithm to obtain the third-level encrypted data, map each character of the third-level encrypted data by the preset second mapping rule to obtain the fourth-level encrypted data, encrypt the fourth-level encrypted data by the ECDSA algorithm to obtain the fifth-level encrypted data, map each character of the fifth-level encrypted data by the preset third mapping rule to obtain the sixth-level encrypted data, and encrypt the sixth-level encrypted data by the 3DES algorithm to obtain the ciphertext data; the MAC value is obtained by performing MAC calculation on the ciphertext data, signature data and timestamp; After the integrity of the ciphertext data, signature data and timestamp is checked by the MAC value, the timeliness is checked by the timestamp, and then the ciphertext data is decrypted to obtain the account password, device ID and public key, and then the signature data is verified by the public key, and the first legitimacy check is performed on the device ID through the preset device management table, and finally the second legitimacy check is performed on the account password through the preset password management table; The decryption process of the ciphertext data is: The ciphertext data is decrypted by the 3DES algorithm to obtain level 6 encrypted data, each character of the level 6 encrypted data is mapped by the preset third mapping rule to obtain level 5 encrypted data, the level 5 encrypted data is decrypted by the ECDSA algorithm to obtain level 4 encrypted data, each character of the level 4 encrypted data is mapped by the preset second mapping rule to obtain level 3 encrypted data, the level 3 encrypted data is decrypted by the RSA algorithm to obtain level 2 encrypted data, each character of the level 2 encrypted data is mapped by the preset first mapping rule to obtain level 1 encrypted data, and the level 1 encrypted data is decrypted by the IDEA algorithm to obtain the account password, device ID and public key.

7. A code-free security points management system development device as claimed in claim 6, characterized in that: In the data model and business object creation module, the data model of the security points management system created by the data modeling tool of the codeless development platform is specifically: Defining a data source including a database type and connection address information through a data source definition tool of a codeless development platform; the connection address information includes at least an IP address, a port, and a database name; Based on the safety score management rules, outputting the ER diagram through a database design tool; Through the data modeling tool of the codeless development platform, the ER diagram is converted into a data model including a logical model and a physical model based on the database paradigm, the data model is published to the data source, and the metadata of the data model is stored in a pre-created metadata table.

8. A code-free security points management system development device as claimed in claim 6, characterized in that: The system interface creation module is specifically used for: Through the page designer of the codeless development platform, the page components in the component repository are dragged in an interactive manner to layout each of the page components, set the style of each of the page components, and store the display parameters including the layout and style in HTML format and CSS format to create a system interface of the security points management system including several sub-interfaces, and generate a unique interface identifier for each of the sub-interfaces to complete the creation of the system interface of the security points management system.

9. A code-free security points management system development device as claimed in claim 6, characterized in that: In the service definition module, the service definition at least includes definitions of service data objects, service input parameters, service output parameters and business logic.

10. A code-free security points management system development device as claimed in claim 6, characterized in that: The interaction logic definition module is specifically used for: By using the page event definer of the codeless development platform, the service is bound to the page components of the system interface, and the interaction logic of each of the page components is defined, including at least a triggering event and associated behaviors; In the publishing module, the container orchestration system is Kubernetes.

Images