Information interaction method and system of security management platform
By building a digital blockchain and a multi-level verification mechanism, the problems of sensitive data security and access rights allocation in the security management platform are solved, and the data security and management process optimization is achieved.
Patent Information
- Application Number
- CN202411648399.4
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-11-19
- Publication Date
- 2025-03-11
- Estimated Expiration
- 2044-11-19
AI Technical Summary
How to build a multi-level verification mechanism to ensure the security of sensitive data and reasonable allocation of access rights in the security management platform.
By defining user attributes and configuration approval processes, build a blockchain and insert a multi-level verification mechanism between them. After the user completes the verification of the order pointing, the access scope is summarized and split into sensitive areas and secure areas, and access permissions are opened according to the verification results.
Improve data security, avoid data leakage, optimize security management processes, reduce resource consumption, ensure the security of sensitive information while maintaining the fluency and stability of the access range.
Smart Images

Figure CN119598486A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the technical field of information interaction, and in particular to an information interaction method and system for a security management platform. Background Art
[0002] Information interaction on the safety management platform refers to the transmission and sharing of data and information between various units within the platform, usually including the exchange of data such as risk assessment, hidden danger investigation, emergency plans and accident reports. The units here are generally different departments and different positions. This interaction enables each department to obtain the latest safety information in a timely manner for analysis and decision-making, ensuring the smooth transmission of information between different levels and positions.
[0003] In the above process, in order to protect the security of management data, different operation permissions are configured for each user to ensure that sensitive data can only be viewed or modified by authorized personnel; therefore, "how to build a multi-level verification mechanism" is the technical problem that the present invention needs to solve. Summary of the invention
[0004] The purpose of the present invention is to provide an information interaction method and system for a security management platform to solve the problem of "how to build a multi-level authentication mechanism" raised in the above background technology.
[0005] To achieve the above object, the present invention provides the following technical solutions:
[0006] An information interaction method for a security management platform, the method comprising:
[0007] S100: defining user attributes, configuring the approval process between users, constructing blocks corresponding to the users one by one, arranging the blocks according to the approval process, inserting sequence pointers between adjacent blocks, and embedding a multi-level verification mechanism into the sequence pointers to generate a block chain;
[0008] The multi-level verification mechanism is as follows: the current sequence pointing can be activated for verification only after the previous sequence pointing has completed verification;
[0009] S200: Divide the access range of each block, and when the user completes the verification of the sequence pointing, summarize the access ranges of all blocks before the sequence pointing to obtain a target range, so as to open the access rights of the target range to the user;
[0010] S300: Splitting the access range into a sensitive area and a safe area;
[0011] When a user accesses data in a sensitive area, the user's terminal is located, the external device linked to the terminal is found, and the user's action instructions in the sensitive area are collected. When the action instructions are the same as the action instructions in the preset monitoring table, a monitoring report is generated and sent to the next block in the block chain;
[0012] When a user accesses data in the security zone, verification is performed based on the sequential pointing, and the access permission is released if the verification passes.
[0013] Furthermore, the S100 includes:
[0014] Based on the attributes, determine the role of the user, map the approval process to the role, generate a process chain, and correct the digital chain;
[0015] The action instructions and monitoring reports are synchronized into several blocks.
[0016] Furthermore, the S100 further includes:
[0017] Using the roles, generating tags, and integrating the tags into blocks;
[0018] Insert a jump pointer into the block chain and switch the multi-level verification mechanism.
[0019] Furthermore, the S100 further includes:
[0020] Creating a storage node, establishing a corresponding relationship between the storage node and the data blocks, and transferring the data in the sensitive area to the storage node;
[0021] Build several data channels between the blocks and the storage nodes.
[0022] Further, the S200 includes:
[0023] Configure the corresponding relationship between the role, the block and the access scope, and synchronize the corresponding relationship to the block chain;
[0024] A coordination framework is constructed, and the access scope is integrated into the coordination framework to generate a target scope.
[0025] Further, the S300 includes:
[0026] Record the number of times the user reads the access range and add a timestamp;
[0027] The access frequency of each block is counted, and based on the access frequency, the block is divided into a plurality of sub-blocks.
[0028] Furthermore, the method further comprises:
[0029] Define special events to trigger the initiation of pre-built emergency response plans;
[0030] Obtain the release permission for the special event, and determine the activation method of the release permission.
[0031] Furthermore, the system comprises:
[0032] A generation module, used to define the attributes of users, configure the approval process between users, construct blocks corresponding to the users one by one, and arrange the blocks according to the approval process, insert sequence pointers between adjacent blocks, and embed a multi-level verification mechanism into the sequence pointers to generate a block chain;
[0033] The multi-level verification mechanism is as follows: the current sequence pointing can be activated for verification only after the previous sequence pointing has completed verification;
[0034] The opening module is used to divide the access range of each block, and when the user completes the verification of the sequence pointing, the access range of all blocks before the sequence pointing is summarized to obtain the target range, so as to open the access rights of the target range to the user;
[0035] A sending module, used for dividing the access range into a sensitive area and a safe area;
[0036] When a user accesses data in a sensitive area, the user's terminal is located, the external device linked to the terminal is found, and the user's action instructions in the sensitive area are collected. When the action instructions are the same as the action instructions in the preset monitoring table, a monitoring report is generated and sent to the next block in the block chain;
[0037] When a user accesses data in the security zone, verification is performed based on the sequential pointing, and the access permission is released if the verification passes.
[0038] Furthermore,
[0039] The generation module comprises:
[0040] A correction unit, used to determine the role of the user according to the attribute, and map the approval process to the role, generate a process chain, and correct the digital chain;
[0041] A synchronization unit, used for synchronizing the action instructions and monitoring reports into several blocks;
[0042] An integration unit, for generating a label using the role, and integrating the label into a number block;
[0043] A verification unit, used to insert a jump pointer into the block chain and switch the multi-level verification mechanism;
[0044] A transfer unit, used to create a storage node, establish a corresponding relationship between the storage node and the data block, and transfer the data in the sensitive area to the storage node;
[0045] A building unit, used for building a data channel between several blocks and the storage node;
[0046] The emergency response plan includes one or more of closing a sensitive area, sending an alarm message to a preset terminal, and increasing a user operation delay.
[0047] Furthermore, the sending module includes:
[0048] A configuration unit, configured to configure the corresponding relationship between the role, the block and the access scope, and synchronize the corresponding relationship into the block chain;
[0049] The generating unit is used to construct a coordinated framework and integrate the access scope into the coordinated framework to generate a target scope.
[0050] Compared with the prior art, the present invention has the following beneficial effects:
[0051] By building digital blocks, it is possible to establish approval process relationships between users, standardize security management processes, and improve management transparency. By building digital blockchains, it is possible to strengthen the division of labor in management processes and optimize security management. By building a multi-level verification mechanism, it is possible to further improve data security and avoid data leakage. By splitting the access scope into sensitive areas and secure areas, it is possible to fully utilize monitoring resources, reduce unnecessary resource consumption, and improve operational efficiency. In addition, it can better respond to the needs of different security levels, ensuring that while protecting the security of sensitive information, the smoothness and stability of the overall access scope are maintained. BRIEF DESCRIPTION OF THE DRAWINGS
[0052] Figure 1 A flowchart of an information interaction method of a security management platform described in some embodiments of the present invention;
[0053] Figure 2 A first sub-flow diagram of the information interaction method of the security management platform described in some embodiments of the present invention;
[0054] Figure 3 A second sub-flow diagram of the information interaction method of the security management platform described in some embodiments of the present invention;
[0055] Figure 4 A third sub-flow diagram of the information interaction method of the security management platform described in some embodiments of the present invention;
[0056] Figure 5A block diagram of the composition of the information interaction system of the security management platform described in some embodiments of the present invention;
[0057] Figure 6 A block diagram of the composition of a generation module in the information interaction system of a security management platform described in some embodiments of the present invention;
[0058] Figure 7 A block diagram of the composition of open modules in the information interaction system of the security management platform described in some embodiments of the present invention;
[0059] Figure 8 This is a block diagram of the composition of a sending module in the information interaction system of a security management platform described in some embodiments of the present invention. DETAILED DESCRIPTION
[0060] In order to make the purpose, technical solution and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not intended to limit the present invention.
[0061] Combination Figure 1 The present embodiment provides an information interaction method of a security management platform, and the implementation process of the method includes the following steps:
[0062] S100: Define the attributes of users, configure the approval process between users, build blocks corresponding to users one by one, and arrange the blocks according to the approval process, insert sequence pointers between adjacent blocks, and embed a multi-level verification mechanism into the sequence pointers to generate a block chain;
[0063] The multi-level verification mechanism is: only after the previous sequence pointer has completed verification, can the current sequence pointer be activated for verification. The specific verification method can be set as needed, such as password verification.
[0064] The attributes of the above-mentioned users include work attributes, which may be interns, operators, and technical managers, etc. According to the attributes, an approval process between users is configured, and the blocks are arranged according to the order of the approval process. Sequential pointers are inserted between two adjacent blocks, and a multi-level verification mechanism is embedded in the sequential pointers to generate a block chain; wherein the multi-level verification mechanism is composed of multiple verification schemes.
[0065] For example, in a certain security management platform, the approval process is: And build a blockchain as mentioned above; the access scope corresponding to the intern is generally basic parameters or public data, and if the operator wants to query his corresponding access scope, he needs to pass the verification pointing to A. If the section chief wants to query his corresponding access scope, he not only needs to pass the verification pointing to B, but also the verification pointing to A, and so on. If the workshop director needs to query his corresponding access scope, he needs to verify pointing to A, pointing to B, pointing to C and pointing to D in turn.
[0066] S200: Divide the access range of each block. When the user completes the verification of the sequential pointing, summarize the access ranges of all the blocks before the sequential pointing to obtain the target range, and open the access rights of the target range to the user.
[0067] Determine the access scope of each block, where each user has a different access scope. Only after the user completes the corresponding sequential pointing or all the previous pointings of the sequential pointing can he obtain the access rights of the target range.
[0068] S300: Splitting the access range into a sensitive area and a safe area as needed;
[0069] When a user accesses data in a sensitive area, the user's terminal is located, and the external device connected to the terminal is found, wherein the external device includes one or more of an image acquisition device (such as a camera), a keyboard, and a mouse. The external device may also include other existing devices such as a USB flash drive that can be connected to an applicable terminal. The user's action instructions in the sensitive area are collected through the external device. When the action instructions are the same as the action instructions in the preset monitoring table, a monitoring report is generated and sent to the next block in the block chain;
[0070] When a user accesses data in the security zone, verification is performed based on sequential pointing (receiving the password entered by the user and determining the correct number of digits in the password). Access permission is granted if the verification passes (the number of correct digits exceeds a preset threshold).
[0071] The access range is divided into a sensitive area and a safe area. If a user accesses data in a sensitive area, the user's terminal is located and the external device is determined. The external device can be a terminal camera used with the terminal, or a monitoring device in the terminal area, or a keyboard and mouse used with the terminal. These external devices are used to collect the user's action instructions in the sensitive area, and the collected action instructions are compared with the action instructions in the preset monitoring table. If the same action instructions appear, a monitoring report is generated and sent to the next block. For example,
[0072] When a section chief uses a laptop computer in the office area to query sensitive data in his corresponding access range, the camera in the laptop computer and the monitoring equipment in the office area are turned on to collect the section chief's action instructions and compare them with the monitoring table. If the collected action instructions are the same as those in the monitoring table (for example, taking pictures, copying using a USB flash drive, etc.), a monitoring report is generated and sent to the data block corresponding to the process director; the monitoring table is pre-prepared by the staff and consists of multiple action instructions.
[0073] If the user accesses data in the security zone, when the sequential pointing is used to verify the password entered by the user, if the correct number of digits in the password exceeds the preset threshold, access permission can be granted; for example, if the password in the sequential pointing is 123456, if the user accesses data in the security zone, access permission can be granted by answering only 5 digits correctly.
[0074] In some specific implementations, combined with Figure 2 The specific execution process of S100 includes:
[0075] S101: Based on the attributes, determine the role of the user, map the approval process to the role, generate a process chain, and correct the digital chain.
[0076] Determine the attributes of each user, and determine the user's role based on the attributes. The role is the specific work that the user is responsible for. In other words, operators in different job positions have different corresponding access scopes. The role is the specific work that each user is responsible for. Map the approval process to the role, and use the process chain to improve and correct the blockchain.
[0077] S102: Synchronize the action instructions and monitoring reports into several blocks.
[0078] In the digital block chain, when the user corresponding to the previous digital block queries the corresponding access range, the generated action instructions and monitoring reports are synchronized to the current digital block.
[0079] For example, when an operator queries his corresponding access range, the generated action instructions and monitoring reports will be synchronized to the data block corresponding to the section chief.
[0080] In some specific implementations, combined with Figure 2 The specific execution process of S100 also includes:
[0081] S103: Generate tags using the user's role, and integrate the tags into corresponding blocks.
[0082] According to the role, determine the label of each user and insert the label into the number block, that is, each user corresponds to a number block.
[0083] S104: Insert a jump pointer into the blockchain and switch the multi-level verification mechanism.
[0084] Insert a jump pointer into the block chain, where the jump pointer means that due to the particularity of some positions, a financial technician position may involve financial data that needs to be kept confidential, and his superior section chief, process director, etc. may not have query authority; therefore, the block corresponding to the technician should directly point to the workshop director. When the workshop director queries his corresponding access scope, he does not need to verify the above-mentioned pointers B, C, and D, but can directly verify the jump pointer. This verification method is one of multiple verification schemes.
[0085] In some specific implementations, combined with Figure 2 As shown in the content, after executing S104, the execution process of S100 also includes:
[0086] S105: creating a storage node, establishing a corresponding relationship between the storage node and the data blocks, and transferring the data in the sensitive area to the storage node.
[0087] A storage node is created for each block, and the data in the sensitive area is transferred to the storage node for storage.
[0088] S106: Building data channels between several blocks and the storage node.
[0089] The data in several blocks are read through the data channel, wherein additional verification can be added to the data channel to verify the user multiple times.
[0090] In some specific implementations, combined with Figure 3 The specific execution process of S200 includes:
[0091] S201: Configure the correspondence between roles, blocks and access scopes, and synchronize the correspondence to the block chain.
[0092] Determine the correspondence between roles, blocks, and access scopes, and synchronize the correspondence to the blockchain. This can prevent data in the blockchain from becoming disordered.
[0093] S202: Build a coordination framework, and integrate the access scope into the coordination framework to generate a target scope.
[0094] By using the overall planning framework, the access ranges of all users are summarized in order to obtain the target range, which is the sum of the access ranges corresponding to the current blocks.
[0095] For example, the access scope for interns is A, the access scope for operators is B, and the access scope for section chiefs is C. When a user completes the verification pointing to B, in addition to opening up access rights to C, access rights to A and B are also opened, and the target range is A+B+C.
[0096] In some specific implementations, combined with Figure 4 The specific execution process of S300 includes:
[0097] S301: Record the number of times the user reads the access range and add a timestamp.
[0098] Record the number of times the user reads the access range, add a timestamp, and record the user's access time.
[0099] S302: Count the access frequency of each block, and divide the block into a plurality of sub-blocks based on the access frequency.
[0100] The access frequency of each data block is counted. If the access frequency of a data block is greater than a preset threshold, the data block can be split again. The advantage of this is that it can improve the user's access efficiency and quickly find the required data.
[0101] In some specific implementations, the information interaction method of the security management platform also includes a special event processing method, and the special event processing method includes:
[0102] Define special events (special events may be safety accidents, production abnormalities or special working conditions, etc., and the definition of the special time can be set as needed using existing technologies according to common knowledge in the field, so it will not be elaborated here), trigger the start of a pre-built emergency response plan, where the emergency response plan may include: closing sensitive areas, sending alarm information to preset terminals, and increasing user operation delays. One or more, and may also include other customized plans;
[0103] Get the permission to release special events and determine how to activate the permission.
[0104] Special events are defined, and when they occur, emergency response plans are initiated; for example, a special event may be that a user verifies a certain direction multiple times, and the verification fails, in which case the sensitive area in the number block corresponding to the direction may be closed.
[0105] When a special event occurs, use the activation plan to obtain the authority to cancel the special event and cancel the special event.
[0106] For example, when pointing to B is frequently and repeatedly verified incorrectly, the sensitive area in the number block corresponding to the section chief is closed, and the authority to remove it is opened to the process director. The activation method is a special password verification, and the process director enters the password to reactivate the sensitive area in the number block corresponding to the section chief.
[0107] In actual use, the following blockchain is constructed: Each position level corresponds to a data block. If a certain position level wants to access the data within its authority, all the pointers before its position level must be verified; for example, if the process director wants to access the data within his authority, he must verify pointer A, pointer B and pointer C in turn.
[0108] In addition, the data within the authority of each job level is divided into sensitive areas and security areas. When accessing a sensitive area, the computer camera, area monitoring, etc. are turned on to monitor the user's action instructions. If an action instruction in the monitoring table appears, a monitoring report is generated and sent to the previous job level. When accessing a security area, only some digits of the password entered are correct to access (fuzzy verification).
[0109] Combination Figure 5 The content shown in the figure, this embodiment proposes an information interaction system of a security management platform, and the information interaction system 1 of the security management platform includes:
[0110] The generation module 11 is used to define the attributes of users, configure the approval process between users, construct blocks corresponding to users one by one, and arrange the blocks according to the approval process, insert sequence pointers between adjacent blocks, and embed a multi-level verification mechanism into the sequence pointers to generate a block chain;
[0111] The multi-level verification mechanism is as follows: the current sequence point can be activated for verification only after the previous sequence point completes the password verification;
[0112] The opening module 12 is used to divide the access range of each block. When the user completes the verification of the sequence pointing, the access ranges of all the blocks before the sequence pointing are summarized to obtain the target range, and the access rights of the target range are opened to the user.
[0113] The sending module 13 is used to split the access range into a sensitive area and a safe area;
[0114] When a user accesses data in a sensitive area, the user's terminal is located, and external devices linked to the terminal are found, wherein the external devices at least include: a terminal camera, a keyboard, and a mouse. The user's action instructions in the access range are collected through the external devices. When the action instructions are the same as the action instructions in the preset monitoring table, a monitoring report is generated and sent to the next block in the block chain;
[0115] When a user accesses data in the security zone, based on the sequential pointing, a password input by the user is received, and the correct number of digits of the password is determined. If the correct number of digits exceeds a preset threshold, access rights are granted.
[0116] In some specific implementations, combined with Figure 6 The content shown, the generation module 11 includes:
[0117] The correction unit 111 is used to determine the role of the user according to the user's attributes, map the approval process to the role, generate a process chain, and correct the digital chain;
[0118] A synchronization unit 112, for synchronizing the action instructions and the monitoring report into a number of blocks;
[0119] An integration unit 113, for generating tags using roles and integrating the tags into a number block;
[0120] Verification unit 114, used to insert jump pointers into the block chain and switch the multi-level verification mechanism;
[0121] The transfer unit 115 is used to create a storage node, establish a corresponding relationship between the storage node and the data block, and transfer the data in the sensitive area to the storage node;
[0122] The building unit 116 is used to build a data channel between the blocks and the storage nodes.
[0123] In some specific implementations, combined with Figure 7 As shown, the open module 12 includes:
[0124] The configuration unit 121 is used to configure the corresponding relationship between the role, the block and the access range, and synchronize the corresponding relationship to the block chain;
[0125] The generating unit 122 is used to construct a coordinated framework, integrate the access scope into the coordinated framework, and generate a target scope.
[0126] In some specific implementations, combined with Figure 8 The sending module 13 includes:
[0127] An adding unit 131 is used to record the number of times the user reads the access range and add a timestamp;
[0128] The segmentation unit 132 is used to count the access frequency of each block and segment the block into a plurality of sub-blocks based on the access frequency.
[0129] The generating module 11 is mainly used to complete step S100, the opening module 12 is mainly used to complete step S200, and the sending module 13 is mainly used to complete step S300;
[0130] The correction unit 111 is mainly used to complete step S101, the synchronization unit 112 is mainly used to complete step S102, the integration unit 113 is mainly used to complete step S103, the verification unit 114 is mainly used to complete step S104, the transfer unit 115 is mainly used to complete step S105, and the construction unit 116 is mainly used to complete step S106;
[0131] The configuration unit 121 is mainly used to complete step S201, and the generation unit 122 is mainly used to complete step S202;
[0132] The adding unit 131 is mainly used to complete step S301, and the dividing unit 132 is mainly used to complete step S302.
[0133] All the above-mentioned matters can be achieved by using existing technologies, so they will not be elaborated here.
[0134] The technical features of the above-described embodiments may be arbitrarily combined. To make the description concise, not all possible combinations of the technical features in the above-described embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.
[0135] The above-mentioned embodiments only express several implementation methods of the present invention, and the description thereof is relatively specific and detailed, but it cannot be understood as limiting the scope of the patent of the present invention. It should be pointed out that, for ordinary technicians in this field, several variations and improvements can be made without departing from the concept of the present invention, which all belong to the protection scope of the present invention. Therefore, the protection scope of the patent of the present invention shall be subject to the attached claims.
Claims
1. An information interaction method for a security management platform, characterized in that: The method comprises: S100: defining user attributes, configuring the approval process between users, constructing blocks corresponding to the users one by one, arranging the blocks according to the approval process, inserting sequence pointers between adjacent blocks, and embedding a multi-level verification mechanism into the sequence pointers to generate a block chain; The multi-level verification mechanism is as follows: the current sequence pointing can be activated for verification only after the previous sequence pointing has completed verification; S200: Divide the access range of each block, and when the user completes the verification of the sequence pointing, summarize the access ranges of all blocks before the sequence pointing to obtain a target range, so as to open the access rights of the target range to the user; S300: Splitting the access range into a sensitive area and a safe area; When a user accesses data in a sensitive area, the user's terminal is located, the external device linked to the terminal is found, and the user's action instructions in the sensitive area are collected. When the action instructions are the same as the action instructions in the preset monitoring table, a monitoring report is generated and sent to the next block in the block chain; When a user accesses data in the security zone, verification is performed based on the sequential pointing, and the access permission is released if the verification passes.
2. The information interaction method of the security management platform according to claim 1 is characterized in that: The S100 includes: Based on the attributes, determine the role of the user, map the approval process to the role, generate a process chain, and correct the digital chain; The action instructions and monitoring reports are synchronized into several blocks.
3. The information interaction method of the security management platform according to claim 2 is characterized in that: The S100 further includes: Using the roles, generating tags, and integrating the tags into blocks; Insert a jump pointer into the block chain and switch the multi-level verification mechanism.
4. The information interaction method of the security management platform according to claim 3 is characterized in that: The S100 further includes: Creating a storage node, establishing a corresponding relationship between the storage node and the data blocks, and transferring the data in the sensitive area to the storage node; Build several data channels between the blocks and the storage nodes.
5. The information interaction method of the security management platform according to claim 4 is characterized in that: The S200 includes: Configure the corresponding relationship between the role, the block and the access scope, and synchronize the corresponding relationship to the block chain; A coordination framework is constructed, and the access scope is integrated into the coordination framework to generate a target scope.
6. The information interaction method of the security management platform according to claim 5 is characterized in that: The S300 includes: Record the number of times the user reads the access range and add a timestamp; The access frequency of each block is counted, and based on the access frequency, the block is divided into a plurality of sub-blocks.
7. The information interaction method of the security management platform according to claim 1, characterized in that: The method further comprises: Define special events to trigger the initiation of pre-built emergency response plans; Obtain the release permission for the special event, and determine the activation method of the release permission.
8. An information interaction system for a security management platform, characterized in that: The system comprises: A generation module, used to define the attributes of users, configure the approval process between users, construct blocks corresponding to the users one by one, and arrange the blocks according to the approval process, insert sequence pointers between adjacent blocks, and embed a multi-level verification mechanism into the sequence pointers to generate a block chain; The multi-level verification mechanism is as follows: the current sequence pointing can be activated for verification only after the previous sequence pointing has completed verification; The opening module is used to divide the access range of each block, and when the user completes the verification of the sequence pointing, the access range of all blocks before the sequence pointing is summarized to obtain the target range, so as to open the access rights of the target range to the user; A sending module, used for dividing the access range into a sensitive area and a safe area; When a user accesses data in a sensitive area, the user's terminal is located, the external device linked to the terminal is found, and the user's action instructions in the sensitive area are collected. When the action instructions are the same as the action instructions in the preset monitoring table, a monitoring report is generated and sent to the next block in the block chain; When a user accesses data in the security zone, verification is performed based on the sequential pointing, and the access permission is released if the verification passes.
9. The information interaction system of the security management platform according to claim 8, characterized in that: The generation module comprises: A correction unit, used to determine the role of the user according to the attribute, and map the approval process to the role, generate a process chain, and correct the digital chain; A synchronization unit, used for synchronizing the action instructions and monitoring reports into several blocks; An integration unit, for generating a label using the role, and integrating the label into a number block; A verification unit, used to insert a jump pointer into the block chain and switch the multi-level verification mechanism; A transfer unit, used to create a storage node, establish a corresponding relationship between the storage node and the data block, and transfer the data in the sensitive area to the storage node; A building unit, used for building a data channel between several blocks and the storage node; The emergency response plan includes one or more of closing a sensitive area, sending an alarm message to a preset terminal, and increasing a user operation delay.
10. The information interaction system of the security management platform according to claim 9, wherein the sending module comprises: A configuration unit, configured to configure the corresponding relationship between the role, the block and the access scope, and synchronize the corresponding relationship into the block chain; The generating unit is used to construct a coordinated framework and integrate the access scope into the coordinated framework to generate a target scope.
Citation Information
Patent Citations
Supply chain tracing system based on multi-level block chain technology
CN112435128A
Process approval method and system, terminal equipment and computer readable storage medium
CN113592467A
Big data electronic information security monitoring system
CN115567233A
Business approval method
CN115759999A
Multi-cloud data processing control method and system
CN118611948A