Audit process and authority control management system and method applied to data sharing

Abstract

The invention discloses an auditing process and authority control management system and method applied to data sharing, belongs to the auditing process and authority control management system and method applied to data sharing, and aims to solve the technical problem of how to realize management control of an auditing process and resource use authority of resource sharing. Comprising a resource data management module, a resource application management module, a resource authorization monitoring module, an authority management module and a message management module, and can realize strict control of auditing processes and use authorities related to resource authorization in a data sharing process. The resource authorization monitoring module and the authority management module are matched to strictly control the use range and the use time limit of resources, and the resource use reasonability and the resource application correctness are guaranteed; rapid application methods such as resource application search, batch application and form content default are provided, the application efficiency is greatly improved, functions such as auditing verification, information notification and batch auditing are provided, and the auditing efficiency is effectively improved.

Description

Technical Field

[0001] The present invention relates to the technical field of data sharing, and in particular to an audit process and authority control management system and method applied to data sharing. Background Art

[0002] The construction of the data sharing and exchange platform has broken down the information barriers of government big data, comprehensively promoted the demand for big data sharing in government affairs, accelerated the circulation and use of government data, and optimized the government service process.

[0003] However, during the resource sharing process, the rationality of resource use and the correctness of resource application cannot be guaranteed, and resource authorization exceeding the scope of use or exceeding the time limit cannot be controlled. After resource sharing, the review process and resource use rights should be strictly controlled.

[0004] How to implement the audit process for resource sharing and manage and control resource usage permissions is a technical problem that needs to be solved. Summary of the invention

[0005] The technical task of the present invention is to address the above deficiencies and provide an audit process and authority control management system and method for data sharing to solve the technical problem of how to implement the audit process of resource sharing and the management and control of resource usage permissions.

[0006] In a first aspect, the present invention provides an audit process and authority control management system for data sharing, including a resource data management module, a resource application management module, a resource authorization monitoring module, a authority management module and a message management module;

[0007] The resource data management module is used to obtain the data resources disclosed by the resource provider and display the data resources through the relevant directory. For authorized resource applications, it is used to provide the authorized resource requester with a service call interface and provide the specified data resources through the service call interface;

[0008] The resource application management module interacts with resource providers, resource requesters and administrators as users through the resource application management interface, and is used to support resource requesters in editing and submitting resource applications, and is used to display resource applications and update the status of resource applications. The status of resource applications includes pending review, approved review, rejected review and rejected revision. For resource applications in the pending review status, it is used to support administrators and resource providers to conduct resource reviews based on the predetermined review process and issue review notices. For resource applications in the rejected revision status, it is used to support resource requesters to re-edit and submit resource applications based on the rejection reasons specified in the review notice. For resource applications that have been approved and authorized, it is used to record resource applications, and record the resource requesters and data resources specified in the resource applications through the record.

[0009] The resource authorization monitoring module is used to record the resource application operations of the resource requester and generate application logs, and to record the resource review operations of the administrator and resource provider and form review logs. For the registered resource applications, it is used to monitor the use of data resources by the resource requester and form authorization monitoring logs;

[0010] The authority management module interacts with the resource provider and resource requester as users through the authority management interface to support the resource requester to revoke the resource application and support the resource provider to revoke the resource of the authorized resource requester and data resources;

[0011] The message management module is used to manage the messages generated during resource application, resource review and resource withdrawal.

[0012] Preferably, for authorized resource applications, the resource data management module is used to support the authorized resource requester to subscribe to the specified data resources, and to provide an authorization code calling interface for the authorized data resources, and the resource requester obtains the specified data resources through the service calling interface;

[0013] For a resource requester that submits a resource revocation operation, the resource data management module is used to support the resource requester in canceling the subscription to the data resource;

[0014] For resource applications or resource requesters who submit resource revocation operations from resource providers, the resource data management module is used to revoke the authorization code calling interface for the corresponding data resource requesters and support the resource requesters to cancel their subscriptions to related data resources.

[0015] Preferably, a resource application form template is configured in the resource application management module to support the resource requester to fill in the resource application form template and submit the resource application in the form of submitting the resource application form.

[0016] Preferably, the resource application management module is used to display resource applications in the form of a list, and supports resource requesters, administrators and resource providers to query and view related resource applications, including querying and viewing specified resource applications and querying and viewing resource applications in specified statuses.

[0017] Preferably, the resource application management module is used to support resource requesters to edit and submit resource applications in batch application mode, and correspondingly, supports administrators and resource providers to review resource applications in batch review mode.

[0018] Preferably, for each resource application, the resource application module is used to set the review process and the review period of each review process for the relevant administrators and resource providers; for the review process that exceeds the review period, it is used to generate resource review warning information and push the resource review warning information to the relevant administrators and resource providers; for the review process that has been processed, it is used to update the corresponding resource review warning information to a processed status, and supports administrators and resource providers to query resource review warning information in a pending status and resource review warning information in a processed status.

[0019] Preferably, for authorized resource requests, the service call interface is configured with a call frequency;

[0020] The authority management module is used to support resource requesters to apply for changes to the call frequency of the service call interface. Correspondingly, the authority management module is used to support administrators and demand providers to review and authorize change applications.

[0021] For resource applications that have been submitted but not reviewed, the authority management module is used to support the resource requester to revoke the resource application;

[0022] For resource applications that have been approved and authorized, the authority management module is used to support the resource requester to revoke the resource application;

[0023] For approved and authorized resource applications, the authority management module is used to support the resource requester to query and view the authorization status;

[0024] For authorized resource applications or resource requesters, the permission management module is used to support resource providers in submitting resource revocation applications.

[0025] Preferably, the message management module interacts with the demand requester, administrator and demand provider as users through the message management interface, and is used to notify and manage messages generated during resource request, resource review and resource withdrawal, including message push, message viewing and message editing, and the pushed messages can be marked as read or unread through message editing;

[0026] Among them, the messages generated during the resource application and resource review process include the new application message generated when the resource requester submits the resource application, the review notification message formed based on the issued review notification, and the warning message issued by the review warning information;

[0027] The messages generated during the resource revocation process include revocation messages generated when the resource requester submits a resource revocation operation and when the resource provider submits a revocation operation.

[0028] Preferably, for resource applications with expired authorization rights, the resource application management module is used to support the resource requester to edit and resubmit the resource application to execute an extension authorization application.

[0029] In a second aspect, the present invention provides a method for managing an audit process and authority control applied to data sharing, which implements management of the audit process and authority control in data sharing exchange through an audit process and authority control management system applied to data sharing as described in any one of the first aspects, and the method comprises the following steps:

[0030] Data resource management: obtain the data resources disclosed by the resource provider and display the data resources through the relevant directory. For authorized resource applications, provide the authorized resource requester with a service call interface and provide the specified data resources through the service call interface.

[0031] Resource application management: The resource requester edits and submits the resource application, displays the voluntary application submitted by the resource requester, and updates the status of the resource application. The status of the resource application includes pending review, approved, rejected, and rejected and corrected. For resource applications in the pending review status, the administrator and the resource provider conduct resource review based on the predetermined review process and issue a review notice. For resource applications in the rejected and corrected status, the resource requester re-edits and submits the resource application based on the rejection reason specified in the review notice. For resource applications that have passed the review and authorization, the resource application is filed, and the resource requester and data resources specified in the resource application are recorded through the filing;

[0032] Resource authorization monitoring: record resource application operations of resource requesters, generate application logs, and record resource audit operations of administrators and resource providers, form audit logs. For registered resource applications, monitor the use of data resources by resource requesters and form authorization monitoring logs.

[0033] Permission management: The resource requester can revoke the resource application, and the resource provider can revoke the resource for the authorized resource requester and data resources.

[0034] Message management: Manage the messages generated during resource application, resource review and resource withdrawal.

[0035] The audit process and authority control management method and system for data sharing of the present invention have the following advantages:

[0036] 1. It can realize strict control over the review process and usage rights related to resource authorization in the process of data sharing;

[0037] 2. The resource authorization monitoring module and the authority management module can cooperate to strictly control the scope and time limit of resource use, so that the rationality of resource use and the correctness of resource application are guaranteed;

[0038] 3. Provide quick application methods such as resource application search, batch application, default form content, etc., which greatly improve application efficiency, and provide review verification, information notification, batch review and other functions, effectively improving review efficiency. BRIEF DESCRIPTION OF THE DRAWINGS

[0039] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0040] The present invention is further described below in conjunction with the accompanying drawings.

[0041] Figure 1 Embodiment 1 A review process and usage process of a permission control management system applied to data exchange. DETAILED DESCRIPTION

[0042] The present invention is further described below in conjunction with the accompanying drawings and specific embodiments so that those skilled in the art can better understand the present invention and implement it. However, the embodiments are not intended to limit the present invention. In the absence of conflict, the embodiments of the present invention and the technical features in the embodiments may be combined with each other.

[0043] The embodiment of the present invention provides an audit process and authority control management system method applied to data sharing, which is used to solve the technical problem of how to implement the audit process of resource sharing and the management and control of resource use authority.

[0044] Embodiment 1:

[0045] The present invention discloses an audit process and authority control management system applied to data sharing, comprising a resource data management module, a resource application management module, a resource authorization monitoring module, an authority management module and a message management module.

[0046] The resource data management module is used to obtain the data resources disclosed by the resource provider and display the data resources through the relevant directory. For authorized resource applications, it is used to provide the specified data resources by providing a service call interface to the authorized resource requester through the service call interface.

[0047] As a specific implementation of the resource data management module, for authorized resource applications, this module is used to support authorized resource requesters to subscribe to specified data resources, and to provide an authorization code calling interface for authorized data resources. The resource requester obtains the specified data resources through the service calling interface; for resource requesters who submit resource revocation operations, this module is used to support the resource requester to cancel the subscription to data resources; for resource applications or resource requesters who submit resource revocation operations by resource providers, this module is used to withdraw the authorization code calling interface for the corresponding data resource requester, and support the resource requester to cancel the subscription to related data resources.

[0048] The resource application management module interacts with resource providers, resource requesters and administrators as users through the resource application management interface. It is used to support resource requesters in editing and submitting resource applications, and to display resource applications and update their status. The resource application status includes pending review, approved review, rejected review and rejected correction. For resource applications in the pending review status, it is used to support administrators and resource providers to conduct resource reviews based on the predetermined review process and issue review notices. For resource applications in the rejected correction status, it is used to support resource requesters to re-edit and submit resource applications based on the rejection reasons specified in the review notice. For resource applications that have been approved and authorized, it is used to file the resource applications, and record the resource requesters and data resources specified in the resource applications through filing.

[0049] As a specific implementation of the resource application management module, a resource application form template is configured in the module to support the resource requester to fill in the resource application form template and submit the resource application in the form of submitting the resource application form.

[0050] As a specific implementation of the resource application management module, this module is used to display resource applications in the form of a list, and supports resource requesters, administrators and resource providers to query and view relevant resource applications, including querying and viewing specified resource applications and querying and viewing resource applications in specified status.

[0051] In the configuration of the resource application management module, for resource requesters, after submitting a resource application, they can view the submitted resource application information through the resource application management interface, provide inquiries for submitted resource applications through the My Application function, and display the resource application information in a list; for administrators and resource providers, the resource application management interface provides inquiries for pending and processed resource application information, and displays the resource application information in a list. Based on this module, administrators and resource providers can query the submitted resource application information. The application query includes functions such as resource application review status query, resource application review status query, and completed application query. Resource providers and administrators can query all applied resources and the status of each resource application.

[0052] As a specific implementation of the resource application management module, during resource application and resource review, this module is used to support resource requesters to edit and submit resource applications in batches, and correspondingly, supports administrators and resource providers to review resource applications in batches.

[0053] For each resource application, the resource application module of this embodiment is used to set the review process and the review period of each review process for the relevant administrators and resource providers. For the review process that exceeds the review period, it is used to generate resource review warning information and push the resource review warning information to the relevant administrators and resource providers. For the review process that has been processed, it is used to update the corresponding resource review warning information to a processed status, and supports administrators and resource providers to query resource review warning information in a pending status and resource review warning information in a processed status.

[0054] As a specific process of resource review, after accepting the resource application provided by the resource requester, the administrator reviews the resource application. If there is a problem with the resource application that needs to be corrected, a rejection correction notice will be issued. If the resource application is not approved, a rejection notice will be issued and the rejection reason will be specified. If the review is passed, the resource provider will view the resource application submitted by the resource demander in the resource applications to be reviewed, and then review it, approve it, reject it, etc.; after the resource application is reviewed and approved, the resource demander can subscribe to the specified data resource through the data resource management module, and obtain the data resource through the authorized service call interface. The data resource can be subscribed in the form of a library table or file resource.

[0055] The audit in this embodiment has two operations: audit approval and audit rejection. If the audit is approved, the resource subscription can be carried out; if the audit is rejected, the rejection reason is filled in (supplemental application information), and the resource requester operator modifies the resource application information and reapplies; if the audit is rejected, the rejection reason is filled in (not meeting the application conditions), and the resource requester cannot apply for this resource.

[0056] For resource applications whose authorization has expired, the resource application management module of this embodiment supports the resource requester to edit and resubmit the resource application to execute an extension authorization application.

[0057] The resource authorization monitoring module is used to record the resource application operations of the resource requester and generate application logs, and to record the resource review operations of the administrator and resource provider and form review logs. For registered resource applications, it is used to monitor the use of data resources by the resource requester and form authorization monitoring logs.

[0058] The authority management module interacts with the resource provider and resource requester as users through the authority management interface, and is used to support the resource requester to revoke resource applications, and to support the resource provider to revoke resources from authorized resource requesters and data resources.

[0059] In this embodiment, for authorized resource applications, the service call interface is configured with a call frequency; correspondingly, the authority management module is used to support the resource requester in applying for changes to the call frequency of the service call interface, and correspondingly, the authority management module is used to support the administrator and the demand provider in reviewing and authorizing the change application.

[0060] As a specific implementation of the permission management module, for submitted but unreviewed resource applications, this module is used to support the resource requester to revoke the resource application; for reviewed and authorized resource applications, this module is used to support the resource requester to revoke the resource application; for approved and authorized resource applications, this module is used to support the resource requester to query and view the authorization status; for authorized resource applications or resource requesters, this module is used to support the resource provider to submit a resource revocation application.

[0061] In this embodiment, the authority management interface provided by the authority management module supports the resource requester and the resource provider to view the authorized resource application and revoke the resource application.

[0062] The message management module is used to manage the messages generated during resource application, resource review and resource withdrawal.

[0063] In this embodiment, the message management module interacts with the demand requester, administrator and demand provider as users through the message management interface, and is used to notify and manage the messages generated in the resource request, resource review and resource withdrawal process, including message push, message viewing and message editing, and the pushed messages are marked as read or unread through message editing; among them, the messages generated in the resource application and resource review process include the new application message generated when the resource requester submits the resource application, the audit notification message formed based on the issued audit notification, and the warning message issued by the audit warning information; the messages generated in the resource withdrawal process include the revocation message generated when the resource requester submits the resource revocation operation and the resource provider submits the revocation operation.

[0064] In this embodiment, after the resource application is submitted, the auditor shall conduct the review within the specified working day, and an early warning message will be issued if the deadline is exceeded. After the resource application is submitted, if the auditor fails to conduct the review within the specified time, an early warning message will be received. The auditor can query the pending resource review early warning information, and the early warning information will be automatically processed after the auditor completes the review. After the auditor processes the resource review early warning information, it can query the processed resource review early warning information.

[0065] Message management mainly manages the messages generated during resource application, resource withdrawal, and resource review, including message notification management, resource withdrawal notification, etc.

[0066] Users can view received messages in the message notification management, which displays messages generated during resource application and resource review, including functions such as message notification viewing and marking messages as read or unread.

[0067] When a resource provider cancels or removes resources that have expired or do not meet usage requirements, it needs to send a resource cancellation notification to the resource user.

[0068] The usage process of the system in this embodiment is as follows Figure 1 As shown, after the resource requester submits the resource application, the administrator will review it. If the review fails, a rejection notice or a rejection correction notice will be issued. If the review passes, the resource provider will review it. If the review fails, a rejection notice or a rejection correction notice will be issued. If the review passes, the resource application will be filed and the resource usage will be monitored. For authorized resource applications, the resource requester or resource provider can perform resource revocation operations. For resource applications with expired authorization, the resource requester can resubmit the resource application to apply for an authorization extension. Among them, the rejection reason needs to be specified in the rejection notice issued. Based on the rejection correction notice issued, the resource requester can correct the resource application information and resubmit it.

[0069] Embodiment 2:

[0070] The present invention provides a method for managing audit flow and authority control applied to data sharing, and implements the management of audit flow and authority control in data sharing exchange through the system disclosed in Example 1. The method includes five steps: resource data management, resource application management, resource authorization monitoring, authority management and message management.

[0071] Step S100: Data resource management: obtain the data resources disclosed by the resource provider, and display the data resources through the relevant directory. For authorized resource applications, provide a service call interface for the authorized resource requester and provide the specified data resources through the service call interface.

[0072] As a specific implementation of resource data management, for authorized resource applications, the authorized resource requester subscribes to the specified data resources and provides an authorization code calling interface for the authorized data resources. The resource requester obtains the specified data resources through the service calling interface; for the resource requester who submits a resource revocation operation, the resource requester can cancel the subscription to the data resource; for the resource application or resource requester who submits a resource revocation operation by the resource provider, the authorization code calling interface is withdrawn for the corresponding data resource requester, and the resource requester is supported to cancel the subscription to the relevant data resources.

[0073] Step S200 Resource Application Management: The resource requester edits and submits the resource application, displays the voluntary application submitted by the resource requester, and updates the status of the resource application. The status of the resource application includes pending review, approved, rejected, and rejected and corrected. For resource applications in the pending review status, the administrator and the resource provider conduct resource review based on the predetermined review process and issue a review notice. For resource applications in the rejected and corrected status, the resource requester re-edits and submits the resource application based on the rejection reason specified in the review notice. For resource applications that have passed the review and authorization, the resource application is filed, and the resource requester and data resources specified in the resource application are recorded in the filing.

[0074] As a specific implementation of resource application management, it supports the resource requester to fill in application information based on a pre-configured resource application form and submit the resource application in the form of submitting the resource application form.

[0075] As a specific implementation of resource application management, resource applications are displayed in the form of a list, and resource requesters, administrators, and resource providers can query and view relevant resource applications, including querying and viewing specified resource applications and querying and viewing resource applications in specified statuses.

[0076] For resource requesters, after submitting a resource application, they can view the submitted resource application information through the resource application management interface, provide inquiries for submitted resource applications through the My Application function, and display the resource application information in a list; for administrators and resource providers, the resource application management interface provides inquiries for pending and processed resource application information, and displays the resource application information in a list. Based on this module, administrators and resource providers can query the submitted resource application information. The application query includes functions such as resource application review status query, resource application review status query, and completed application query. Resource providers and administrators can query all applied resources and the status of each resource application.

[0077] As a specific implementation of resource application management, during resource application and resource review, the resource requester can edit and submit the resource application in batch application mode, and correspondingly, the administrator and resource provider can review the resource application in batch review mode.

[0078] For each resource application, the resource application of this embodiment sets the review process and the review period of each review process for the relevant administrators and resource providers. For the review process that exceeds the review period, resource review warning information is generated and pushed to the relevant administrators and resource providers. For the review process that has been processed, the corresponding resource review warning information is updated to the processed status. The administrators and resource providers query the resource review warning information in the pending status and the resource review warning information in the processed status.

[0079] As a specific process of resource review, after accepting the resource application provided by the resource requester, the administrator reviews the resource application. If there is a problem with the resource application that needs to be corrected, a rejection correction notice will be issued. If the resource application is not approved, a rejection notice will be issued and the rejection reason will be specified. If the review is passed, the resource provider will view the resource application submitted by the resource demander in the resource applications to be reviewed, and then review it, approve it, reject it, etc.; after the resource application is reviewed and approved, the resource demander can subscribe to the specified data resource through the data resource management module, and obtain the data resource through the authorized service call interface. The data resource can be subscribed in the form of a library table or file resource.

[0080] The audit in this embodiment has two operations: audit passed and audit rejected. If the audit is passed, the resource subscription can be carried out; if the audit is rejected, the reason for rejection is filled in (supplemental application information), and the resource requester operator modifies the resource application information and reapplies; if the audit is rejected, the reason for rejection is filled in (not meeting the application conditions), and the resource requester cannot apply for this resource.

[0081] For resource applications whose authorization has expired, the resource application management of this embodiment supports the resource requester to edit and resubmit the resource application to execute the extension authorization application.

[0082] Step S300 Resource authorization monitoring: record the resource application operation of the resource requester and generate an application log, and record the resource review operation of the administrator and resource provider and form an review log. For the registered resource application, monitor the use of data resources by the resource requester and form an authorization monitoring log.

[0083] Step S400: Rights management: the resource requester performs a resource revocation operation on the resource application, and the resource provider performs a resource revocation operation on the authorized resource requester and data resources.

[0084] In this embodiment, for authorized resource applications, the service call interface is configured with a call frequency; accordingly, the resource requester can apply for a change in the call frequency of the service call interface, and accordingly, the administrator and the demand provider can review and authorize the change application.

[0085] As a specific implementation of permission management, for submitted but unreviewed resource applications, the resource requester shall revoke the resource application; for reviewed and authorized resource applications, the resource requester shall revoke the resource application; for approved and authorized resource applications, the resource requester shall query and check the authorization status; for authorized resource applications or resource requesters, the resource provider shall submit a resource revocation application.

[0086] In this embodiment, the resource requester and the resource provider can view the authorized resource application and revoke the resource application.

[0087] Step S500: Message management: managing messages generated during resource application, resource review and resource revocation.

[0088] In this embodiment, the message management notifies and manages the messages generated during the resource request, resource review and resource revocation process, including message push, message viewing and message editing, and the pushed messages are marked as read or unread through message editing; wherein, the messages generated during the resource application and resource review process include the new application message generated when the resource requester submits the resource application, the audit notification message formed based on the issued audit notification, and the warning message issued by the audit warning information; the messages generated during the resource revocation process include the revocation message generated when the resource requester submits the resource revocation operation and the resource provider submits the revocation operation.

[0089] In this embodiment, after the resource application is submitted, the auditor shall conduct the review within the specified working day, and an early warning message will be issued if the deadline is exceeded. After the resource application is submitted, if the auditor fails to conduct the review within the specified time, an early warning message will be received. The auditor can query the pending resource review early warning information, and the early warning information will be automatically processed after the auditor completes the review. After the auditor processes the resource review early warning information, it can query the processed resource review early warning information.

[0090] Message management mainly manages the messages generated during resource application, resource withdrawal, and resource review, including message notification management, resource withdrawal notification, etc.

[0091] Users can view received messages in the message notification management, which displays messages generated during resource application and resource review, including functions such as message notification viewing and marking messages as read or unread.

[0092] When a resource provider cancels or removes resources that have expired or do not meet usage requirements, it needs to send a resource cancellation notification to the resource user.

[0093] The present invention has been shown and described in detail above through the accompanying drawings and preferred embodiments. However, the present invention is not limited to these disclosed embodiments. Based on the above multiple embodiments, those skilled in the art can know that the means in the above different embodiments can be combined to obtain more embodiments of the present invention, and these embodiments are also within the protection scope of the present invention.

Claims

1. An audit process and authority control management system for data sharing, characterized in that: It includes resource data management module, resource application management module, resource authorization monitoring module, authority management module and message management module; The resource data management module is used to obtain the data resources disclosed by the resource provider and display the data resources through the relevant directory. For authorized resource applications, it is used to provide the authorized resource requester with a service call interface and provide the specified data resources through the service call interface; The resource application management module interacts with resource providers, resource requesters and administrators as users through the resource application management interface, and is used to support resource requesters in editing and submitting resource applications, and is used to display resource applications and update the status of resource applications. The status of resource applications includes pending review, approved review, rejected review and rejected revision. For resource applications in the pending review status, it is used to support administrators and resource providers to conduct resource reviews based on the predetermined review process and issue review notices. For resource applications in the rejected revision status, it is used to support resource requesters to re-edit and submit resource applications based on the rejection reasons specified in the review notice. For resource applications that have been approved and authorized, it is used to record resource applications, and record the resource requesters and data resources specified in the resource applications through the record. The resource authorization monitoring module is used to record the resource application operations of the resource requester and generate application logs, and to record the resource review operations of the administrator and resource provider and form review logs. For the registered resource applications, it is used to monitor the use of data resources by the resource requester and form authorization monitoring logs; The authority management module interacts with the resource provider and resource requester as users through the authority management interface to support the resource requester to revoke the resource application and support the resource provider to revoke the resource of the authorized resource requester and data resources; The message management module is used to manage the messages generated during resource application, resource review and resource withdrawal.

2. The audit process and authority control management system for data sharing according to claim 1 is characterized in that: For authorized resource applications, the resource data management module is used to support the authorized resource requester to subscribe to the specified data resources, and to provide an authorization code calling interface for the authorized data resources. The resource requester obtains the specified data resources through the service calling interface; For a resource requester that submits a resource revocation operation, the resource data management module is used to support the resource requester in canceling the subscription to the data resource; For resource applications or resource requesters who submit resource revocation operations from resource providers, the resource data management module is used to revoke the authorization code calling interface for the corresponding data resource requesters and support the resource requesters to cancel their subscriptions to related data resources.

3. The audit process and authority control management system for data sharing according to claim 1 is characterized in that: The resource application management module is configured with a resource application form template, which is used to support the resource requester to fill in the resource application form template and submit the resource application in the form of submitting the resource application form.

4. The audit process and authority control management system for data sharing according to claim 1 is characterized in that: The resource application management module is used to display resource applications in the form of a list, and supports resource requesters, administrators and resource providers to query and view related resource applications, including querying and viewing specified resource applications and querying and viewing resource applications in specified status.

5. The audit process and authority control management system for data sharing according to claim 1 is characterized in that: The resource application management module is used to support resource requesters to edit and submit resource applications in batches, and correspondingly, supports administrators and resource providers to review resource applications in batches.

6. The audit process and authority control management system for data sharing according to claim 1, characterized in that: For each resource application, the resource application module is used to set the review process and the review period for each review process for the relevant administrators and resource providers. For the review process that exceeds the review period, it is used to generate resource review warning information and push the resource review warning information to the relevant administrators and resource providers. For the review process that has been processed, it is used to update the corresponding resource review warning information to the processed status, and supports administrators and resource providers to query the resource review warning information in the pending status and the resource review warning information in the processed status.

7. The audit process and authority control management system for data sharing according to claim 1 is characterized in that: For authorized resource requests, the service call interface is configured with a call frequency; The authority management module is used to support resource requesters to apply for changes to the call frequency of the service call interface. Correspondingly, the authority management module is used to support administrators and demand providers to review and authorize change applications. For resource applications that have been submitted but not reviewed, the authority management module is used to support the resource requester to revoke the resource application; For resource applications that have been approved and authorized, the authority management module is used to support the resource requester to revoke the resource application; For approved and authorized resource applications, the authority management module is used to support the resource requester to query and view the authorization status; For authorized resource applications or resource requesters, the permission management module is used to support resource providers in submitting resource revocation applications.

8. The audit process and authority control management system for data sharing according to claim 1, characterized in that: The message management module is used to interact with the demand requester, administrator and demand provider as users through the message management interface. It is used to notify and manage the messages generated during the resource request, resource review and resource withdrawal process, including message push, message viewing and message editing. The pushed messages can be marked as read or unread through message editing. Among them, the messages generated during the resource application and resource review process include the new application message generated when the resource requester submits the resource application, the review notification message formed based on the issued review notification, and the warning message issued by the review warning information; The messages generated during the resource revocation process include revocation messages generated when the resource requester submits a resource revocation operation and when the resource provider submits a revocation operation.

9. The audit process and authority control management system for data sharing according to claim 1, characterized in that: For resource applications with expired authorization rights, the resource application management module is used to support the resource requester to edit and resubmit the resource application to execute the extension authorization application.

10. A review process and authority control management method for data sharing, characterized in that: The management of the audit process and authority control in data sharing exchange is realized by a review process and authority control management system applied to data sharing as claimed in any one of claims 1 to 9, and the method comprises the following steps: Data resource management: obtain the data resources disclosed by the resource provider and display the data resources through the relevant directory. For authorized resource applications, provide the authorized resource requester with a service call interface and provide the specified data resources through the service call interface. Resource application management: The resource requester edits and submits the resource application, displays the voluntary application submitted by the resource requester, and updates the status of the resource application. The status of the resource application includes pending review, approved, rejected, and rejected correction. For resource applications in the pending review status, the administrator and resource provider conduct resource review based on the predetermined review process and issue a review notice. For resource applications in the rejected correction status, the resource requester re-edits and submits the resource application based on the rejection reason specified in the review notice. For resource applications that have passed the review and authorization, the resource application is filed, and the resource requester and data resources specified in the resource application are recorded through the filing; Resource authorization monitoring: record resource application operations of resource requesters, generate application logs, and record resource audit operations of administrators and resource providers, form audit logs. For registered resource applications, monitor the use of data resources by resource requesters and form authorization monitoring logs. Permission management: The resource requester can revoke the resource application, and the resource provider can revoke the resource for the authorized resource requester and data resources. Message management: Manage the messages generated during resource application, resource review and resource withdrawal.

Images