Visual auditing rule configuration method based on template guide

Abstract

The invention discloses a template guide-based visual audit rule configuration method, which comprises the following steps of: S1, starting a configuration guide, and providing an option for selecting a template through a user interface; s2, displaying a configurable auditing rule parameter list based on the selected template; s3, a user carries out parameter configuration through a visual interface, and a dragging operation and a real-time preview function are supported; s4, after application configuration is completed, the integrity and logic correctness of the set auditing rule are automatically verified; s5, performing storage processing on the configured auditing rule; s6, integrating a data interface technology to realize data interaction with an external system; and S7, implementing security and authority management measures, and enhancing the security of the system through user role definition and operation log records. The method has the advantages that the configuration process is simplified, the user friendliness is improved, the rule management efficiency is enhanced, the data integration accuracy and consistency are ensured, and the system safety is improved.

Description

Technical Field

[0001] The present invention relates to the technical field of rule configuration, and in particular to a visual audit rule configuration method based on a template wizard. Background Art

[0002] With the rapid development of information technology, the complexity and diversity of enterprise information systems are also increasing. Audit rule configuration, as an important part of information system security and compliance management, is particularly important. However, traditional audit rule configuration methods have many shortcomings and cannot effectively cope with the current complex information system environment and changing security threats.

[0003] In the existing technology, traditional audit rule configuration usually relies on manual operation and static configuration. These methods are incapable of coping with large-scale and diversified information systems, as shown in the following aspects:

[0004] 1. Complex configuration process: Traditional audit rule configuration requires professional technicians to manually write and adjust rules, which is cumbersome and error-prone. For non-technical users, the high complexity of this process leads to inefficient configuration and difficulty in effective application.

[0005] 2. Lack of user-friendliness: The existing audit rule configuration tool interface is usually complex and the operation is not intuitive, which is not conducive to user understanding and use. It is difficult for users to preview and adjust rules in real time during the configuration process, which increases the possibility of errors.

[0006] 3. Low management efficiency: Traditional methods are inadequate in rule management and version control, lacking effective storage, query, modification and deletion mechanisms for rules. Users cannot easily track and manage historical versions, resulting in an opaque and difficult-to-maintain configuration process.

[0007] 4. Difficulties in data integration: Existing technologies often face problems such as inconsistent interfaces and incompatible data formats when integrating data with external systems, which makes the data extraction, transformation and loading (ETL) process complex and error-prone, affecting the accuracy and consistency of the data.

[0008] 5. Weak security and authority management: Traditional audit rule configuration systems have loopholes in security and authority management, lack effective user role management, operation log recording and data encryption processing mechanisms, and are prone to unauthorized operations and data leakage risks.

[0009] Therefore, how to provide a visual audit rule configuration method based on a template wizard is an urgent problem that technicians in this field need to solve. Summary of the invention

[0010] One object of the present invention is to propose a visual audit rule configuration method based on a template wizard. The present invention makes full use of template wizard technology, visualization technology, data integration and interface technology, and enhanced security and authority management technology, and describes in detail the process of intelligently implementing audit rule configuration. It has the advantages of simplifying the configuration process, improving user-friendliness, enhancing rule management efficiency, ensuring data integration accuracy and consistency, and improving system security.

[0011] A template wizard-based visual audit rule configuration method according to an embodiment of the present invention is characterized by comprising the following steps:

[0012] S1. Start the configuration wizard and provide the option of selecting a template through the user interface, allowing the user to select a preset audit rule template and create a new template;

[0013] S2. Based on the selected template, display the list of configurable audit rule parameters, and provide descriptions and configuration suggestions of relevant parameters to help users understand each parameter;

[0014] S3. Users configure parameters through a visual interface, which supports drag-and-drop operations and real-time preview functions, allowing users to intuitively modify and view the effects of audit rule configuration in real time;

[0015] S4. After the application configuration is completed, the integrity and logical correctness of the set audit rules are automatically verified;

[0016] S5. Save and process the configured audit rules, including storage, query, modification and deletion of rules. It supports version control and allows users to track historical versions and perform rollback operations.

[0017] S6. Integrate data interface technology to achieve data interaction with external systems, including data extraction, conversion and loading;

[0018] S7. Implement security and permission management measures, strengthen system security through user role definition and operation log recording, encrypt sensitive data, and use multi-factor authentication for security authentication.

[0019] Optionally, the S1 specifically includes:

[0020] S11, initialize the user interface. When the user starts the configuration wizard, the system loads the available audit rule template library, including predefined templates and templates created by the user. Each template is defined as T i , where i is the template index;

[0021] S12. Display the template list through the user interface. Each template T i Display its name N i and a brief description Di , this interface includes a search box that allows users to enter a keyword K. The search algorithm filters and displays results based on the degree of match M between the keyword and the template name and description:

[0022] M(K,N i ,D i )=α·f(K,N i )+(1-α)·f(K,D i );

[0023] Where f(K,X) represents the matching function between keyword K and string X, and parameter α (0≤α≤1) is a weight factor used to adjust the relative importance of name matching and description matching in the total matching degree;

[0024] S13. The user selects a specific template T by clicking the template name in the interface. i , the system records the selected template and loads the corresponding configuration parameter set;

[0025] S14. In addition to selecting a preset template, the user also selects the "Create New Template" option, which allows the user to create a new template from a blank or existing template. j Create a new template. During the creation of a new template, the user can define the name of the new template. new and description D new , and you can choose to copy an existing template T j The parameter settings are used as initial settings;

[0026] S15. After the user completes the template selection, click the "Confirm" button and the system will save the selected template to the system. i and the newly created template T new The relevant configuration parameters are loaded into the configuration wizard.

[0027] Optionally, the S2 specifically includes:

[0028] S21. Load selected template T i The parameter configuration interface shows the template parameter list P, where each parameter p j Represented as a set of tuples (p j ,v j,def ,v j,range ,v j,desc ), p j is the parameter identifier, v j,def is the default value of the parameter, v j,range is the allowed value range of the parameter, v j,desc is the description of the parameter;

[0029] S22, for each parameter p jProvide input controls in the interface, allowing users to select the appropriate input method based on the nature of the parameter, and display the default value v j,def and parameter description v j,desc ;

[0030] S23, introduce parameter value verification mechanism, each parameter value v entered by the user j Verify to ensure v j The value range v that meets the definition j,range :

[0031]

[0032] Where V is a verification function, which returns 1 if the parameter value is valid and 0 if it is invalid.

[0033] S24. Provide parameter configuration suggestions based on best practices and historical configuration data hist , the system automatically recommends parameter value v j,rec , the recommendation algorithm R calculates the recommendation value based on historical data and parameter utility U:

[0034]

[0035] Among them, p j is the parameter identifier, v j is the parameter value, D hist is a set of K historical configuration data points, d hist,k is the kth historical data point, g k (p j ,v j ,d hist,k ) is the kth data point for parameter p j and consider the value v j The utility contribution of l is the weight coefficient, indicating the historical data point d hist,k Importance in utility calculations;

[0036] S25, to achieve real-time parameter adjustment feedback, when the user changes any parameter v j When the system is adjusted, it will instantly display a preview of the adjusted configuration effect in the form of graphics and numerical values ​​to help users understand the immediate impact of parameter adjustments;

[0037] S26. After finally confirming all parameter configurations, the user clicks the "Save" button, and the system stores all parameter values ​​in configuration file C, providing a basis for the execution of subsequent audit tasks.

[0038] Optionally, the S3 specifically includes:

[0039] S31, display configuration interface, display the parameter settings of the current audit rule configuration through the visual component, the user-visible parameters p j Through the interface element E j Indicates that each interface element E j is initialized to its corresponding parameter p j The current value v j,current ;

[0040] S32, realize the drag function, the user drags the interface element E j Adjust the parameter value v j , the drag operation triggers the immediate update of the parameter value:

[0041] v j,new =v j,current +β·Δx;

[0042] Among them, v j,current is the parameter value before dragging, Δx is the position change of the interface element caused by the dragging action, β is the conversion coefficient, which is used to convert the position change into the parameter value change, and v j,new is the new parameter value after dragging;

[0043] S33, real-time preview function, the system will update the new parameter value v j,new Calculate the effect of the audit rules in real time and display them in the preview area preview Display:

[0044]

[0045] Among them, p j is the parameter identifier of the adjustment, v j,new is the new parameter value after adjustment, h n (p j ,v j,new ) is a function that takes a parameter p j and its new value v j,new Calculate the specific contribution of this parameter to the effect of the audit rule, c n is the coefficient, R preview It is a preview result, which is a composite metric representing the weighted sum of all relevant audit rule factors;

[0046] S34, providing undo and redo operations, so that the user can manage the changes made during the configuration process, which is achieved through the historical state stack H. The state modified by the user each time is saved. The undo operation is performed by rolling back to the previous state in the stack, and the redo operation is performed by moving forward to the next state in the stack;

[0047] S35. After the user is satisfied with the parameter configuration, click the "Apply" button B apply, the system will all adjust the parameter value v j,new Officially applied to the audit rule configuration to complete the entire parameter adjustment process.

[0048] Optionally, the S4 specifically includes:

[0049] S41, start the automatic verification module, the system will complete the parameter configuration and click the "Verify" button B verify After that, the verification process is started immediately;

[0050] S42, perform integrity check, the system checks all required parameters p j Has it been set by the user?

[0051]

[0052] Among them, I(p j ) is an integrity verification function, which returns 1 if the parameter has been set, and returns 0 if the parameter has not been set;

[0053] S43, perform logical correctness verification. The system verifies each parameter p one by one according to the predefined logical rule set L. j Whether the settings conform to the logical rules:

[0054]

[0055] Among them, L(p j ) is a logic verification function, Rules(p j ) represents the parameter p j The logical rules that need to be met, return 1 if the logic is correct, return 0 if the logic is wrong;

[0056] S44, comprehensive integrity and logical correctness results, the system generates a verification report R verify , the report includes each parameter p j The verification status S j :

[0057] S j =I(p j )·L(p j )+W·(1-I(p j )·L(p j ));

[0058] Among them, I(p j ) is the integrity verification function, indicating that the parameter p j Whether it has been set, the value is 1, 0, L(p j ) is a logic verification function, indicating that the parameter p jWhether it complies with the logical rules, the value is 1 or 0. W is the warning coefficient, which usually takes a value between 0 and 1 and is used to indicate the warning level when the parameter does not pass the verification completely. S j is the parameter p j Verification state, when S j A value of 1 indicates that the verification has passed, and a value between 0 and 1 indicates that there is a warning;

[0059] S45, display the verification results, the system will verify the report R verify Displayed on the user interface, users can view the verification status of each parameter and specific verification information;

[0060] S46. Provide corrective suggestions for parameters that fail verification. j , the system generates corrective suggestions based on common errors and best practices C j , helping users to modify parameter settings:

[0061]

[0062] Among them, C j For parameter p j Correction suggestions, M is the total number of common error types predefined in the system, γ m is the weight coefficient for each error type, e m (p j ) is a function that generates a j Specific correction suggestions for the mth error type;

[0063] S47, after the user makes changes according to the correction suggestions, verification is performed again until all parameters p j All have been verified for completeness and logical correctness.

[0064] Optionally, the S5 specifically includes:

[0065] S51, start the rule saving module, the user completes all parameter configurations and clicks the "Save" button B save After that, the system starts the rule saving process;

[0066] S52, storage rule configuration, the system will store all current parameters p j Configuration value v j,new Save to the configuration database DB, the storage format of each parameter is (p j ,v j,new ):

[0067] DB=DB∪{(p j ,v j,new )};

[0068] Among them, DB represents the configuration database, ∪ represents the union operation of sets;

[0069] S53, generate a configuration snapshot. While saving the configuration, the system generates a snapshot of the current configuration. snapshot , including all parameters p j The current value v j,new :

[0070] S snapshot ={(p1,v 1，new ),(p2,v 2,new ),…,(p n ,v n,new )};

[0071] Where n is the total number of currently configured parameters;

[0072] S54. Provide version control function. The system generates a unique version identifier V for each saved configuration. id , and record the storage time T save :

[0073] V=V∪{(V id ,T save ,S snapshot )};

[0074] Where V represents the version control record, ∪ represents the union operation of sets;

[0075] S55, support rule query, users can query the historical configuration version V through the interface id , the system retrieves the corresponding version of the configuration snapshot S from the configuration database DB according to the user query request snapshot :

[0076] S snapshot ={(p j ,v j,new )∣(p j ,v j,new )∈DB and V id =V id,query};

[0077] Among them, V id,query The version identifier representing the user's query;

[0078] S56, implement rule modification and deletion, the user selects a historical version V id For modification and deletion operations, the system will select the configuration snapshot S snapshot Load it into the configuration interface, and the user can make adjustments based on it and save it as a new version. For deletion operations, the system will remove the corresponding configuration record from the configuration database DB:

[0079] DB=DB-{(p j ,v j,new )∣V id =V id,delete};

[0080] Among them, - represents the difference operation of sets, V id,delete The version identifier that indicates the version that the user has chosen to delete;

[0081] S57, support configuration rollback, users can choose to roll back to any historical version when encountering problems id , the system will select the configuration snapshot S of the version snapshot Revert to the current configuration:

[0082] (p j ,v j,current )=(p j ,v j,rollback )∣(p j ,v j,rollback )∈S snapshot,rollback ;

[0083] Among them, S snapshot,rollback Represents a configuration snapshot that the user has chosen to roll back to.

[0084] Optionally, the S6 specifically includes:

[0085] S61, start the data integration module. After the user confirms and saves the configuration, the system starts the data integration process with the external system;

[0086] S62, data extraction, the system extracts the required data set from the external system through a standardized API interface ext :

[0087] D ext =API_extract(S ext ,Q);

[0088] Among them, S ext represents the external system, Q represents the query condition, and API_extract represents the data extraction function;

[0089] S63, data conversion, the system extracts the data set D ext Convert the format to meet the requirements of the audit rule configuration:

[0090] D trans =transform(D ext ,F rules );

[0091] Among them, D transrepresents the transformed data set, transform represents the data transformation function, and F rules表 Show conversion rules;

[0092] S64, data loading, the system will convert the data set D trans Load into internal database DB int middle:

[0093] DB int =DB int ∪D trans ;

[0094] Among them, DB int represents the internal database, ∪ represents the union operation of sets;

[0095] S65, data verification, the system verifies the data loaded into the internal database:

[0096]

[0097] Among them, V data Represents the data validation function, validate(D trans ) represents the validation data set D trans The function returns 1 if the verification is successful, and returns 0 if the verification is not successful.

[0098] S66. Handling data conflicts. The system detects and handles data conflicts that may occur during data integration:

[0099] C confilict ={(r i ,c i )|r i ∈DB int andr i ≠r j forr j ∈D trans};

[0100] Among them, C conflict represents the conflict set, r i and r j Represent the records in the internal database and the transformed dataset, respectively;

[0101] S67, Data synchronization, the system regularly synchronizes the data in the internal database with the data in the external system to maintain data consistency:

[0102] D Bint,new =DB int ∪(S ext -DB int );

[0103] Among them, DB int,new Represents the internal database after synchronization, DB int represents the internal database before synchronization, S ext represents the data set of the external system, - represents the difference operation of the set, which means removing the data already existing in the internal database from the data set of the external system, and ∪ represents the union operation of the set, which adds the new data after the difference operation to the internal database.

[0104] Optionally, the S7 specifically includes:

[0105] S71, start the security and authority management module. After the user confirms and saves the configuration, the system starts the security and authority management process;

[0106] S72, user role definition, the system assigns different permissions P according to the user's role R, and the mapping relationship between roles and permissions is:

[0107]

[0108] Among them, P represents the set of permissions assigned to the user, R i represents the i-th role of the user, f(R i ) represents the role R i The corresponding permission set, n represents the number of roles the user has, ∪ represents the union operation of the set, and the permission sets corresponding to all roles are merged into the user's final permission set;

[0109] S73, authority verification. When the user performs configuration operations, the system verifies in real time whether the user's authority meets the operation requirements. The verification formula is:

[0110]

[0111] Among them, V perm Represents the permission verification function, O represents the operation that the user is trying to perform, returning 1 means the permission verification is successful, and returning 0 means the permission verification is not successful;

[0112] S74, operation log record, the system logs each operation O of the user:

[0113] L op =L op ∪{(U,O,T op )};

[0114] Among them, L op represents the operation log, U represents the user, O represents the operation, T op represents the operation time, ∪ represents the union operation of sets;

[0115] S75, data encryption processing, the system encrypts the sensitive data and uses encryption function E for encryption:

[0116] D enc =E(K,D sens );

[0117] Among them, D enc Indicates the encrypted data, D sens represents sensitive data, E represents the encryption function, and K represents the key used for encryption;

[0118] S76, Multi-factor authentication. When the user performs sensitive operations, the system starts multi-factor authentication MFA. The authentication process includes more independent verification factors:

[0119] MFA={F1,F2,…,F n};

[0120] Among them, F i represents the i-th verification factor, and n represents the total number of verification factors;

[0121] S77, authentication result verification, the system verifies the result of multi-factor authentication:

[0122]

[0123] Among them, V MFA Represents the authentication result verification function. Returning 1 indicates that the authentication is successful, and returning 0 indicates that the authentication is not successful.

[0124] The beneficial effects of the present invention are:

[0125] 1. The present invention combines template wizard technology to guide users to gradually complete the configuration of audit rules. Compared with traditional methods, it significantly simplifies the configuration process and reduces the difficulty of operation, so that non-technical users can easily complete complex configuration tasks, thereby improving the usability and popularity of the system.

[0126] 2. The present invention introduces a visual user interface that supports drag-and-drop operations and real-time preview functions. Users can configure parameters through an intuitive graphical interface and immediately view the configuration effect, reducing configuration errors and significantly improving user experience.

[0127] 3. The present invention provides comprehensive rule management functions, including rule storage, query, modification, deletion and version control. Users can conveniently manage audit rules, track historical versions, roll back and restore, improve the efficiency and accuracy of rule management, and ensure the stability and consistency of configuration.

[0128] 4. The present invention simplifies the data integration process with external systems, provides a standardized API interface, supports data extraction, transformation and loading (ETL), ensures data consistency and accuracy, and enhances the interoperability and flexibility of the system.

[0129] 5. The present invention improves the security of the system through user role management, operation log recording and data encryption processing technologies. Multi-factor authentication is used to ensure security authentication, prevent unauthorized operations and data leakage, and meet security and compliance requirements. BRIEF DESCRIPTION OF THE DRAWINGS

[0130] The accompanying drawings are used to provide a further understanding of the present invention and constitute a part of the specification. Together with the embodiments of the present invention, they are used to explain the present invention and do not constitute a limitation of the present invention. In the accompanying drawings:

[0131] Figure 1 A flowchart of a template wizard-based visual audit rule configuration method proposed by the present invention;

[0132] Figure 2 A schematic diagram of a user interface of a template wizard-based visual audit rule configuration method proposed by the present invention;

[0133] Figure 3 A schematic diagram of the rule management and version control functions of a template wizard-based visual audit rule configuration method proposed in the present invention. DETAILED DESCRIPTION

[0134] The present invention will now be described in further detail with reference to the accompanying drawings. These drawings are simplified schematic diagrams, which only illustrate the basic structure of the present invention in a schematic manner, and therefore only show the components related to the present invention.

[0135] refer to Figure 1-Figure 3 A visual audit rule configuration method based on a template wizard, characterized in that it includes the following steps:

[0136] S1. Start the configuration wizard and provide the option of selecting a template through the user interface, allowing the user to select a preset audit rule template and create a new template;

[0137] In this implementation, S1 specifically includes:

[0138] S11, initialize the user interface. When the user starts the configuration wizard, the system loads the available audit rule template library, including predefined templates and templates created by the user. Each template is defined as T i , where i is the template index;

[0139] S12. Display the template list through the user interface. Each template T iDisplay its name N i and a brief description D i , this interface includes a search box that allows users to enter a keyword K. The search algorithm filters and displays results based on the degree of match M between the keyword and the template name and description:

[0140] M(K,N i ,D i )=α·f(K,N i )+(1-α)·F(K,D i );

[0141] Where f(K,X) represents the matching function between keyword K and string X, and parameter α (0≤α≤1) is a weight factor used to adjust the relative importance of name matching and description matching in the total matching degree;

[0142] S13. The user selects a specific template T by clicking the template name in the interface. i , the system records the selected template and loads the corresponding configuration parameter set;

[0143] S14. In addition to selecting a preset template, the user also selects the "Create New Template" option, which allows the user to create a new template from a blank or existing template. j Create a new template. During the creation of a new template, the user can define the name of the new template. new and description D new , and you can choose to copy an existing template T j The parameter settings are used as initial settings;

[0144] S15. After the user completes the template selection, click the "Confirm" button and the system will save the selected template to the system. i and the newly created template T new The relevant configuration parameters are loaded into the configuration wizard.

[0145] S2. Based on the selected template, display the list of configurable audit rule parameters, and provide descriptions and configuration suggestions of relevant parameters to help users understand each parameter;

[0146] In this implementation, S2 specifically includes:

[0147] S21. Load selected template T i The parameter configuration interface shows the template parameter list P, where each parameter p j Represented as a set of tuples (p j ,v j,def ,v j,range ,v j,desc ), p j is the parameter identifier, v j,def is the default value of the parameter, v j,rangeis the allowed value range of the parameter, v j,desc is the description of the parameter;

[0148] S22, for each parameter p j Provide input controls in the interface, allowing users to select the appropriate input method based on the nature of the parameter, and display the default value v j,def and parameter description v j,desc ;

[0149] S23, introduce parameter value verification mechanism, each parameter value v entered by the user j Verify to ensure v j The value range v that meets the definition j,range :

[0150]

[0151] Where V is a verification function, which returns 1 if the parameter value is valid and 0 if it is invalid.

[0152] S24. Provide parameter configuration suggestions based on best practices and historical configuration data hist , the system automatically recommends parameter value v j,rec , the recommendation algorithm R calculates the recommendation value based on historical data and parameter utility U:

[0153]

[0154] Among them, p j is the parameter identifier, v j is the parameter value, D hist is a set of K historical configuration data points, d hist,k is the kth historical data point, g k (p j ,v j ,d hist,k ) is the kth data point for parameter p j and consider the value v j The utility contribution of k is the weight coefficient, indicating the historical data point d hist,k Importance in utility calculations;

[0155] S25, to achieve real-time parameter adjustment feedback, when the user changes any parameter v j When the system is adjusted, it will instantly display a preview of the adjusted configuration effect in the form of graphics and numerical values ​​to help users understand the immediate impact of parameter adjustments;

[0156] S26. After finally confirming all parameter configurations, the user clicks the "Save" button, and the system stores all parameter values ​​in configuration file C, providing a basis for the execution of subsequent audit tasks.

[0157] S3. Users configure parameters through a visual interface, which supports drag-and-drop operations and real-time preview functions, allowing users to intuitively modify and view the effects of audit rule configuration in real time;

[0158] In this implementation, S3 specifically includes:

[0159] S31, display configuration interface, display the parameter settings of the current audit rule configuration through the visual component, the user-visible parameters p j Through the interface element E j Indicates that each interface element E j is initialized to its corresponding parameter p j The current value v j,current ;

[0160] S32, realize the drag function, the user drags the interface element E j Adjust the parameter value v j , the drag operation triggers the immediate update of the parameter value:

[0161] v j,new =v j,current +β·Δx;

[0162] Among them, v j,current is the parameter value before dragging, Δx is the position change of the interface element caused by the dragging action, β is the conversion coefficient, which is used to convert the position change into the parameter value change, and v j,new is the new parameter value after dragging;

[0163] S33, real-time preview function, the system will update the new parameter value v j,new Calculate the effect of the audit rules in real time and display them in the preview area preview Display:

[0164]

[0165] Among them, p j is the parameter identifier of the adjustment, v j,new is the new parameter value after adjustment, h n (p j ,v j,new ) is a function that takes a parameter p j and its new value v j,new Calculate the specific contribution of this parameter to the effect of the audit rule, c n is the coefficient, R preview It is a preview result, which is a composite metric representing the weighted sum of all relevant audit rule factors;

[0166] S34, providing undo and redo operations, so that the user can manage the changes made during the configuration process, which is achieved through the historical state stack H. The state modified by the user each time is saved. The undo operation is performed by rolling back to the previous state in the stack, and the redo operation is performed by moving forward to the next state in the stack;

[0167] S35. After the user is satisfied with the parameter configuration, click the "Apply" button B apply , the system will all adjust the parameter value v j,new Officially applied to the audit rule configuration to complete the entire parameter adjustment process.

[0168] S4. After the application configuration is completed, the integrity and logical correctness of the set audit rules are automatically verified;

[0169] In this implementation, S4 specifically includes:

[0170] S41, start the automatic verification module, the system will complete the parameter configuration and click the "Verify" button B verify After that, the verification process is started immediately;

[0171] S42, perform integrity check, the system checks all required parameters p j Has it been set by the user?

[0172]

[0173] Among them, I(p j ) is an integrity verification function, which returns 1 if the parameter has been set, and returns 0 if the parameter has not been set;

[0174] S43, perform logical correctness verification. The system verifies each parameter p one by one according to the predefined logical rule set L. j Whether the settings conform to the logical rules:

[0175]

[0176] Among them, L(p j ) is a logic verification function, Rules(p j ) represents the parameter p j The logical rules that need to be met, return 1 if the logic is correct, return 0 if the logic is wrong;

[0177] S44, comprehensive integrity and logical correctness results, the system generates a verification report R verify , the report includes each parameter p j The verification status S j :

[0178] S j =I(pj )·L(p j )+W·(1-I(p j )·L(p j ));

[0179] Among them, I(p j ) is the integrity verification function, indicating that the parameter p j Whether it has been set, the value is 1, 0, L(p j ) is a logic verification function, indicating that the parameter p j Whether it complies with the logical rules, the value is 1 or 0. W is the warning coefficient, which usually takes a value between 0 and 1 and is used to indicate the warning level when the parameter does not pass the verification completely. S j is the parameter p j Verification state, when S j A value of 1 indicates that the verification has passed, and a value between 0 and 1 indicates that there is a warning;

[0180] S45, display the verification results, the system will verify the report R verify Displayed on the user interface, users can view the verification status of each parameter and specific verification information;

[0181] S46. Provide corrective suggestions for parameters that fail verification. j , the system generates corrective suggestions based on common errors and best practices C j , helping users to modify parameter settings:

[0182]

[0183] Among them, C j For parameter p j Correction suggestions, M is the total number of common error types predefined in the system, γ m is the weight coefficient for each error type, e m (p j ) is a function that generates a j Specific correction suggestions for the mth error type;

[0184] S47, after the user makes changes according to the correction suggestions, verification is performed again until all parameters p j All have been verified for completeness and logical correctness.

[0185] S5. Save and process the configured audit rules, including storage, query, modification and deletion of rules. It supports version control and allows users to track historical versions and perform rollback operations.

[0186] In this implementation, S5 specifically includes:

[0187] S51, start the rule saving module, the user completes all parameter configurations and clicks the "Save" button B save After that, the system starts the rule saving process;

[0188] S52, storage rule configuration, the system will store all current parameters p j Configuration value v j,new Save to the configuration database DB, the storage format of each parameter is (p j ,v j,new ):

[0189] DB=DB∪{(p j ,v j,new )};

[0190] Among them, DB represents the configuration database, ∪ represents the union operation of sets;

[0191] S53, generate a configuration snapshot. While saving the configuration, the system generates a snapshot of the current configuration. snapshot , including all parameters p j The current value v j,new :

[0192] S snapshot＝ {(p1,v 1,new ),(p2,v 2,new ),…,(p n ,v n,new )};

[0193] Where n is the total number of currently configured parameters;

[0194] S54. Provide version control function. The system generates a unique version identifier V for each saved configuration. id , and record the storage time T save :

[0195] V=V∪{(V id ,T save ,S snapshot )};

[0196] Where V represents the version control record, ∪ represents the union operation of sets;

[0197] S55, support rule query, users can query the historical configuration version V through the interface id , the system retrieves the corresponding version of the configuration snapshot S from the configuration database DB according to the user query request snapshot :

[0198] S snapshot ={(p j ,v j,new )∣(p j,v j,new )∈DB and V id =V id,query};

[0199] Among them, V id,query The version identifier representing the user's query;

[0200] S56, implement rule modification and deletion, the user selects a historical version V id For modification and deletion operations, the system will select the configuration snapshot S snapshot Load it into the configuration interface, and the user can make adjustments based on it and save it as a new version. For deletion operations, the system will remove the corresponding configuration record from the configuration database DB:

[0201] DB=DB-{(p j ,v j,new )∣V id =V id,delete};

[0202] Among them, - represents the difference operation of sets, V id,delete The version identifier that indicates the version that the user has chosen to delete;

[0203] S57, support configuration rollback, users can choose to roll back to any historical version when encountering problems id , the system will select the configuration snapshot S of the version snapshot Revert to the current configuration:

[0204] (p j ,v j,current )=(p j ,v j,rollback )∣(p j ,v j,rollback )∈S snapshot,rollback ;

[0205] Among them, S snapshot,rollback Represents a configuration snapshot that the user has chosen to roll back to.

[0206] S6. Integrate data interface technology to achieve data interaction with external systems, including data extraction, conversion and loading;

[0207] In this implementation, S6 specifically includes:

[0208] S61, start the data integration module. After the user confirms and saves the configuration, the system starts the data integration process with the external system;

[0209] S62, data extraction, the system extracts the required data set from the external system through a standardized API interface est :

[0210] D ext =API_extract(S ext ,Q);

[0211] Among them, S ext represents the external system, Q represents the query condition, and API_extract represents the data extraction function;

[0212] S63, data conversion, the system extracts the data set D ext Convert the format to meet the requirements of the audit rule configuration:

[0213] D trans =transform(D ext ,F rules );

[0214] Among them, D trans represents the transformed data set, transform represents the data transformation function, and F rules Represents the conversion rule;

[0215] S64, data loading, the system will convert the data set D trans Load into internal database DB int middle:

[0216] DB int =DB int ∪D trans ;

[0217] Among them, DB int represents the internal database, ∪ represents the union operation of sets;

[0218] S65, data verification, the system verifies the data loaded into the internal database:

[0219]

[0220] Among them, V data Represents the data validation function, validate(D trans ) represents the validation data set D taans The function returns 1 if the verification is successful, and returns 0 if the verification is not successful.

[0221] S66. Handling data conflicts. The system detects and handles data conflicts that may occur during data integration:

[0222] C confilct ={(r i ,c i )|r i ∈DB int andri ≠r j forr j ∈D trans};

[0223] Among them, C conflict represents the conflict set, r i and r j Represent the records in the internal database and the transformed dataset, respectively;

[0224] S67, Data synchronization, the system regularly synchronizes the data in the internal database with the data in the external system to maintain data consistency:

[0225] DB int,new =DB int ∪(S ext -DB int );

[0226] Among them, DB int,new Represents the internal database after synchronization, DB int represents the internal database before synchronization, S ext represents the data set of the external system, - represents the difference operation of the set, which means removing the data already existing in the internal database from the data set of the external system, and ∪ represents the union operation of the set, which adds the new data after the difference operation to the internal database.

[0227] S7. Implement security and permission management measures, strengthen system security through user role definition and operation log recording, encrypt sensitive data, and use multi-factor authentication for security authentication.

[0228] In this implementation, S7 specifically includes:

[0229] S71, start the security and authority management module. After the user confirms and saves the configuration, the system starts the security and authority management process;

[0230] S72, user role definition, the system assigns different permissions P according to the user's role R, and the mapping relationship between roles and permissions is:

[0231]

[0232] Among them, P represents the set of permissions assigned to the user, R i represents the i-th role of the user, f(R i ) represents the role R i The corresponding permission set, n represents the number of roles the user has, ∪ represents the union operation of the set, and the permission sets corresponding to all roles are merged into the user's final permission set;

[0233] S73, authority verification. When the user performs configuration operations, the system verifies in real time whether the user's authority meets the operation requirements. The verification formula is:

[0234]

[0235] Among them, V perm Represents the permission verification function, O represents the operation that the user is trying to perform, returning 1 means the permission verification is successful, and returning 0 means the permission verification is not successful;

[0236] S74, operation log record, the system logs each operation O of the user:

[0237] L op =L op ∪{(U,O,T op )};

[0238] Among them, L op represents the operation log, U represents the user, O represents the operation, T op represents the operation time, ∪ represents the union operation of sets;

[0239] S75, data encryption processing, the system encrypts the sensitive data and uses encryption function E for encryption:

[0240] D enc =E(K,D sens );

[0241] Among them, D enc Indicates the encrypted data, D sens represents sensitive data, E represents the encryption function, and K represents the key used for encryption;

[0242] S76, Multi-factor authentication. When the user performs sensitive operations, the system starts multi-factor authentication MFA. The authentication process includes more independent verification factors:

[0243] MFA={F1,F2,…,F n};

[0244] Among them, F i represents the i-th verification factor, and n represents the total number of verification factors;

[0245] S77, authentication result verification, the system verifies the result of multi-factor authentication:

[0246]

[0247] Among them, V MFA Represents the authentication result verification function. Returning 1 indicates that the authentication is successful, and returning 0 indicates that the authentication is not successful.

[0248] Embodiment 1:

[0249] In order to verify the feasibility of the present invention, we applied it to a large manufacturing company, Company B. Company B has extremely high requirements for audit rule configuration due to its complex production process and huge amount of data. However, the traditional manual configuration method is not only time-consuming and labor-intensive, but also prone to errors and cannot meet the needs of Company B. Therefore, Company B decided to adopt the template wizard-based visual audit rule configuration method of the present invention.

[0250] Before applying the present invention, Company B mainly faced the following problems:

[0251] 1. The configuration process is complex and tedious, and technical personnel need to spend a lot of time and energy to write and adjust audit rules.

[0252] 2. The configuration tool interface is not user-friendly, making it difficult for users to intuitively understand and operate, resulting in frequent configuration errors.

[0253] 3. Lack of rule management and version control, inability to effectively track and manage historical versions, and opaque configuration process.

[0254] 4. Data integration with external systems is difficult, and the data extraction, conversion and loading processes are complex and error-prone.

[0255] 5. Weak security and permission management can easily lead to unauthorized operations and data leakage risks.

[0256] In this embodiment, Company B adopts the method of the present invention to configure audit rules and applies it to the entire production management system. The specific implementation steps are as follows:

[0257] First, start the configuration wizard, and the system loads the available audit rule template library, including predefined templates and templates created by users in the past. The template list is displayed through the user interface, and users can select preset templates or create new templates. After selecting a template, the system displays a list of configurable audit rule parameters and provides descriptions of relevant parameters and configuration suggestions to help users understand each parameter. Users configure parameters through a visual interface, which supports drag-and-drop operations and real-time preview functions, allowing users to intuitively modify and view the effects of audit rule configurations in real time.

[0258] After the user completes the configuration, the system automatically verifies the integrity and logical correctness of the set audit rules. The configured audit rules are saved, including the storage, query, modification and deletion of the rules. Version control is supported, allowing users to track historical versions and perform rollback operations. The system also simplifies the data integration process with external systems, provides standardized API interfaces, supports data extraction, transformation and loading (ETL), and ensures data consistency and accuracy.

[0259] In terms of security and permission management, the system improves security through user role definition, operation log recording, and data encryption processing. Multi-factor authentication is used to ensure security authentication, prevent unauthorized operations and data leakage, and meet security and compliance requirements. The following is a data comparison of the implementation effect:

[0260] Table 1 Comparison of the effects of Company B before and after the configuration of audit rules

[0261] Data Category Before deploying the system After deploying the system Configuration time 8 hours 1 hour Configuration Error Rate 15％ 2％ Version management efficiency 4 hours 0.5 hours Data Integration Accuracy 85％ 99％ Data breach incidents 3 times 0 times Security incident response time 45 minutes 5 minutes

[0262] It can be seen from the above data that after deploying the method of the present invention, the efficiency of audit rule configuration of Company B has been significantly improved, the configuration time has been reduced from an average of 8 hours to 1 hour, and the configuration error rate has been reduced from 15% to 2%. At the same time, the efficiency of version management has been greatly improved, and the time required to manage and track historical versions has been reduced from 4 hours to 0.5 hours. The accuracy of data integration has also been significantly improved, and the success rate of data extraction, conversion and loading has increased from 85% to 99%. Most significantly, data leakage incidents have been reduced from 3 times per month to 0 times, and the response time for security incidents has been shortened from 45 minutes to 5 minutes.

[0263] In a specific application scenario, during a system configuration, the user selected a predefined audit rule template and adjusted the parameters based on it. Through the visual interface, the user can intuitively see the effect of each adjustment and preview it in real time. After the configuration is completed, the system automatically verifies the integrity and logical correctness, discovers and corrects a potential logical error, and ensures the correctness of the configuration.

[0264] In the process of rule management, the system generates a unique version identifier for each saved configuration and records the saving time, so that users can easily query, modify and delete historical versions. In terms of data integration, the system extracts production data from external systems through standardized API interfaces, converts the format, and loads it into the internal database to ensure data consistency and accuracy.

[0265] In terms of security and permission management, the system ensures the security of sensitive operations through multi-factor authentication, encrypts sensitive data, and logs all operations, effectively preventing unauthorized operations and data leakage.

[0266] The above description is only a preferred specific implementation manner of the present invention, but the protection scope of the present invention is not limited thereto. Any technician familiar with the technical field can make equivalent replacements or changes according to the technical scheme and inventive concept of the present invention within the technical scope disclosed by the present invention, which should be covered by the protection scope of the present invention.

Claims

1. A visual audit rule configuration method based on a template wizard, characterized in that: The steps include: S1. Start the configuration wizard and provide the option of selecting a template through the user interface, allowing the user to select a preset audit rule template and create a new template; S2. Based on the selected template, display the list of configurable audit rule parameters, and provide descriptions and configuration suggestions of relevant parameters to help users understand each parameter; S3. Users configure parameters through a visual interface, which supports drag-and-drop operations and real-time preview functions, allowing users to intuitively modify and view the effects of audit rule configuration in real time; S4. After the application configuration is completed, the integrity and logical correctness of the set audit rules are automatically verified; S5. Save and process the configured audit rules, including storage, query, modification and deletion of rules. It supports version control and allows users to track historical versions and perform rollback operations. S6. Integrate data interface technology to achieve data interaction with external systems, including data extraction, conversion and loading; S7. Implement security and permission management measures, strengthen system security through user role definition and operation log recording, encrypt sensitive data, and use multi-factor authentication for security authentication.

2. According to the template wizard-based visual audit rule configuration method of claim 1, it is characterized in that: The S1 specifically includes: S11, initialize the user interface. When the user starts the configuration wizard, the system loads the available audit rule template library, including predefined templates and templates created by the user. Each template is defined as T i , where i is the template index; S12. Display the template list through the user interface. Each template T i Display its name N i and a brief description D i , this interface includes a search box that allows users to enter a keyword K. The search algorithm filters and displays results based on the degree of match M between the keyword and the template name and description: M(K,N i ,D i )=α·f(K,N i )+(1-α)·f(K,D i ); Where f(K, X) represents the matching function between keyword K and string X, and parameter α (0≤α≤1) is a weight factor used to adjust the relative importance of name matching and description matching in the total matching degree; S13. The user selects a specific template T by clicking the template name in the interface. i , the system records the selected template and loads the corresponding configuration parameter set; S14. In addition to selecting a preset template, the user also selects the "Create New Template" option, which allows the user to create a template from blank and existing templates. j Create a new template. During the creation of a new template, the user can define the name of the new template. new and description D new , and you can choose to copy an existing template T j The parameter settings are used as initial settings; S15. After the user completes the template selection, click the "Confirm" button and the system will save the selected template to the system. i and the newly created template T new The relevant configuration parameters are loaded into the configuration wizard.

3. According to the template wizard-based visual audit rule configuration method of claim 2, it is characterized in that: The S2 specifically includes: S21. Load selected template T i The parameter configuration interface shows the template parameter list P, where each parameter p j Represented as a set of tuples (p j , v j,def ,v j,range ,v j,desc ), p j is the parameter identifier, v j,def is the default value of the parameter, v j,range is the allowed value range of the parameter, v j,desc is the description of the parameter; S22, for each parameter p j Provide input controls in the interface, allowing users to select the appropriate input method based on the nature of the parameter, and display the default value v j,def and parameter description v j,desc ; S23, introduce parameter value verification mechanism, each parameter value v entered by the user j Verify to ensure v j The value range v that meets the definition j，range : Where V is a verification function, which returns 1 if the parameter value is valid and 0 if it is invalid. S24. Provide parameter configuration suggestions based on best practices and historical configuration data hist , the system automatically recommends parameter value v j,rec , the recommendation algorithm R calculates the recommendation value based on historical data and parameter utility U: Among them, p j is the parameter identifier, v j is the parameter value, D hist is a set of K historical configuration data points, d hist,k is the kth historical data point, g k (p j ,v j , d hist,k ) is the kth data point for parameter p j and consider the value v j The utility contribution of k is the weight coefficient, indicating the historical data point d hist,k Importance in utility calculations; S25, to achieve real-time parameter adjustment feedback, when the user changes any parameter v j When the system is adjusted, it will instantly display a preview of the adjusted configuration effect in the form of graphics and numerical values ​​to help users understand the immediate impact of parameter adjustments; S26. After finally confirming all parameter configurations, the user clicks the "Save" button, and the system stores all parameter values ​​in configuration file C, providing a basis for the execution of subsequent audit tasks.

4. According to claim 3, a method for configuring visual audit rules based on a template wizard is characterized in that: The S3 specifically includes: S31, display configuration interface, display the parameter settings of the current audit rule configuration through the visual component, the user-visible parameters p j Through the interface element E j Indicates that each interface element E j is initialized to its corresponding parameter p j The current value v j，current ; S32, realize the drag function, the user drags the interface element E j Adjust the parameter value v j , the drag operation triggers the immediate update of the parameter value: in j，new =in j,current +β·Δx; Among them, v j,current is the parameter value before dragging, Δx is the position change of the interface element caused by the dragging action, β is the conversion coefficient, which is used to convert the position change into the parameter value change, and v j,new is the new parameter value after dragging; S33, real-time preview function, the system will update the new parameter value v j,new Calculate the effect of the audit rules in real time and display them in the preview area preview Display: Among them, p j is the parameter identifier of the adjustment, v j,new is the new parameter value after adjustment, h n (p j , v j，new ) is a function that takes a parameter p j and its new value v j，new Calculate the specific contribution of this parameter to the effect of the audit rule, c n is the coefficient, R preview It is a preview result, which is a composite metric representing the weighted sum of all relevant audit rule factors; S34, providing undo and redo operations, so that the user can manage the changes made during the configuration process, which is achieved through the historical state stack H. The state modified by the user each time is saved. The undo operation is performed by rolling back to the previous state in the stack, and the redo operation is performed by moving forward to the next state in the stack; S35. After the user is satisfied with the parameter configuration, click the "Apply" button B apply , the system will all adjust the parameter value v j,new Officially applied to the audit rule configuration to complete the entire parameter adjustment process.

5. A template wizard-based visual audit rule configuration method according to claim 4, characterized in that: The S4 specifically includes: S41, start the automatic verification module, the system will complete the parameter configuration and click the "Verify" button B verify After that, the verification process is started immediately; S42, perform integrity check, the system checks all required parameters p j Has it been set by the user? Among them, I(p j ) is an integrity verification function, which returns 1 if the parameter has been set, and returns 0 if the parameter has not been set; S43, perform logical correctness verification. The system verifies each parameter p one by one according to the predefined logical rule set L. j Whether the settings conform to the logical rules: Among them, L(p j ) is a logic verification function, Rules(p j ) represents the parameter p j The logical rules that need to be met, return 1 if the logic is correct, return 0 if the logic is wrong; S44, comprehensive integrity and logical correctness results, the system generates a verification report R verify , the report includes each parameter p j The verification status S j : S j =I(p j )·L(p j )+W·(1-I(p j )·L(p j )); Among them, I(p j ) is the integrity verification function, indicating that the parameter p j Whether it has been set, the value is 1, 0, L(p j ) is a logic verification function, indicating that the parameter p j Whether it complies with the logical rules, the value is 1 or 0. W is the warning coefficient, which usually takes a value between 0 and 1 and is used to indicate the warning level when the parameter does not pass the verification completely. S j is the parameter p j Verification state, when S j A value of 1 indicates that the verification has passed, and a value between 0 and 1 indicates that there is a warning; S45, display the verification results, the system will verify the report R verify Displayed on the user interface, users can view the verification status of each parameter and specific verification information; S46. Provide corrective suggestions for parameters that fail verification. j , the system generates corrective suggestions based on common errors and best practices C j , helping users to modify parameter settings: Among them, C j For parameter p j Correction suggestions, M is the total number of common error types predefined in the system, γ m is the weight coefficient for each error type, e m (p j ) is a function that generates a j Specific correction suggestions for the mth error type; S47, after the user makes changes according to the correction suggestions, verification is performed again until all parameters p j All have been verified for completeness and logical correctness.

6. A template wizard-based visual audit rule configuration method according to claim 5, characterized in that: The S5 specifically includes: S51, start the rule saving module, the user completes all parameter configurations and clicks the "Save" button B save After that, the system starts the rule saving process; S52, storage rule configuration, the system will store all current parameters p j Configuration value v j，new Save to the configuration database DB, the storage format of each parameter is (p j , v j,new ): DB=DB∪{(p j ,v j，new )}; Among them, DB represents the configuration database, ∪ represents the union operation of sets; S53, generate a configuration snapshot. While saving the configuration, the system generates a snapshot of the current configuration. snapshot , including all parameters p j The current value v j,new : With snapshot ={(p1,v 1,new ),(p2,v 2,new ),...,(p n ,in n，new )}; Where n is the total number of currently configured parameters; S54. Provide version control function. The system generates a unique version identifier V for each saved configuration. id , and record the storage time T save : V=V∪{(V id ,T save ,S snapshot )}; Where V represents the version control record, ∪ represents the union operation of sets; S55, support rule query, users can query the historical configuration version V through the interface id , the system retrieves the corresponding version of the configuration snapshot S from the configuration database DB according to the user query request snapshot : S snapshot ={(p j , v j,new )|(p j , v j,new )∈DB and V id =V id,query }; Among them, V id,query The version identifier representing the user's query; S56, implement rule modification and deletion, the user selects a historical version V id For modification and deletion operations, the system will select the configuration snapshot S snapshot Load it into the configuration interface, and the user can make adjustments based on it and save it as a new version. For deletion operations, the system will remove the corresponding configuration record from the configuration database DB: DB=DB-{(p j ,v j,new )|V id =V id,delete }; Among them, - represents the difference operation of sets, V id,delete The version identifier that indicates the version that the user has chosen to delete; S57, support configuration rollback, users can choose to roll back to any historical version when encountering problems id , the system will select the configuration snapshot S of the version snapshot Revert to the current configuration: (p j ,in j,current )=(p j ,in j,rollback )|(p j ,in j,rollback )∈S snapshot,rollback ; Among them, S snapshot,rollback Represents a configuration snapshot that the user has chosen to roll back to.

7. A template wizard-based visual audit rule configuration method according to claim 6, characterized in that: The S6 specifically includes: S61, start the data integration module. After the user confirms and saves the configuration, the system starts the data integration process with the external system; S62, data extraction, the system extracts the required data set from the external system through a standardized API interface ext : D ext =API_extract(S ext ,Q); Among them, S ext represents the external system, Q represents the query condition, and API_extract represents the data extraction function; S63, data conversion, the system extracts the data set D ext Convert the format to meet the requirements of the audit rule configuration: D trans =transform(D ext ,F rules ); Among them, D trans represents the transformed data set, transform represents the data transformation function, and F rules Represents the conversion rule; S64, data loading, the system will convert the data set D trans Load into internal database DB int middle: DB int =DB int ∪D trans ; Among them, DB int represents the internal database, ∪ represents the union operation of sets; S65, data verification, the system verifies the data loaded into the internal database: Among them, V data Represents the data validation function, validate(D trans ) represents the validation data set D trans The function returns 1 if the verification is successful, and returns 0 if the verification is not successful. S66. Handling data conflicts. The system detects and handles data conflicts that may occur during data integration: C conflict ={(r i ,c i )|r i ∈DB int andr i ≠r j forr j ∈D trans }; Among them, C conflict represents the conflict set, r i and r j Represent the records in the internal database and the transformed dataset, respectively; S67, Data synchronization, the system regularly synchronizes the data in the internal database with the data in the external system to maintain data consistency: DB int,new =DB int ∪(S ext -DB int ); Among them, DB int,new Represents the internal database after synchronization, DB int represents the internal database before synchronization, S ext represents the data set of the external system, - represents the difference operation of the set, which means removing the data already existing in the internal database from the data set of the external system, and ∪ represents the union operation of the set, which adds the new data after the difference operation to the internal database.

8. A template wizard-based visual audit rule configuration method according to claim 7, characterized in that: The S7 specifically includes: S71, start the security and authority management module. After the user confirms and saves the configuration, the system starts the security and authority management process; S72, user role definition, the system assigns different permissions P according to the user's role R, and the mapping relationship between roles and permissions is: Among them, P represents the set of permissions assigned to the user, R i represents the i-th role of the user, f(R i ) represents the role R i The corresponding permission set, n represents the number of roles the user has, ∪ represents the union operation of the set, and the permission sets corresponding to all roles are merged into the user's final permission set; S73, authority verification. When the user performs configuration operations, the system verifies in real time whether the user's authority meets the operation requirements. The verification formula is: Among them, V perm Represents the permission verification function, O represents the operation that the user is trying to perform, returning 1 means the permission verification is successful, and returning 0 means the permission verification is not successful; S74, operation log record, the system logs each operation O of the user: L op =L op ∪{(U,O,T op )}; Among them, L op represents the operation log, U represents the user, O represents the operation, T op represents the operation time, ∪ represents the union operation of sets; S75, data encryption processing, the system encrypts the sensitive data and uses encryption function E for encryption: D enc =E(K,D sens ); Among them, D enc Indicates the encrypted data, D sens represents sensitive data, E represents encryption function, and K represents the key used for encryption; S76, Multi-factor authentication. When the user performs sensitive operations, the system starts multi-factor authentication MFA. The authentication process includes more independent verification factors: MFA={F1,F2,...,F n }; Among them, F i represents the i-th verification factor, and n represents the total number of verification factors; S77, authentication result verification, the system verifies the result of multi-factor authentication: Among them, V MFA Represents the authentication result verification function. Returning 1 indicates that the authentication is successful, and returning 0 indicates that the authentication is not successful.

Images