User authority control method and device, equipment and medium

Abstract

The invention relates to the field of data processing and financial science and technology, and discloses a user authority control method and device, equipment and a medium, and the method comprises the steps: receiving a login request of a user side, and verifying the login request according to a preset condition; if the login request passes the verification, performing permission configuration on a login account of the user according to a preset rule to obtain a user basic permission; creating an administrator role according to a preset permission set, and performing permission adjustment on the login account of the user through a preset management interface to obtain a user adjustment permission; performing data fusion on the user adjustment permission and the user basic permission by using a preset framework to obtain a user authorization permission; controlling the user authorization authority based on the administrator role; according to the invention, the intensity of user identity verification is increased, the supervision quality can be comprehensively improved, the authority supervision effect is further improved, the business demand can be responded more quickly, and the operation efficiency and the user experience are improved.

Description

Technical Field

[0001] The present invention relates to the fields of data processing and financial technology, and in particular to a user authority control method, device, equipment and medium. Background Art

[0002] In today's digital and globalized financial environment, financial services are highly complex and diverse. With the continuous advancement of financial innovation, various emerging financial services and products are emerging one after another, and users, especially commercial users (referred to as "merchants"), are increasingly involved in financial services.

[0003] On the one hand, the rapid development of financial services has brought more business opportunities to users, but it has also brought a series of risks and challenges. For example, users may cause financial fraud, illegal operations, data leakage and other problems due to improper permission settings or abuse of permissions, which will not only cause losses to the users themselves, but also threaten the stability and security of the entire financial system. On the other hand, traditional user permission supervision methods often have many limitations. They may rely on manual review and regular inspections, which is not only inefficient, but also difficult to detect and respond to permission-related risks in real time. In addition, the lack of uniformity in permission management standards and systems among different financial institutions makes information sharing and collaborative supervision difficult, increasing the cost and difficulty of supervision.

[0004] With the widespread application of emerging technologies such as big data, artificial intelligence, and blockchain in the financial field, new ideas and means have been provided for user rights supervision. Using these technologies, real-time monitoring, risk warning, intelligent analysis, and automated processing of user rights can be achieved, thereby improving the accuracy and timeliness of supervision.

[0005] Currently, there are some solutions, products and technologies for user rights management in the industry. These solutions often combine functions such as identity authentication, role and permission management, and audit logs to meet the needs of user rights management; but there are generally some defects and shortcomings: first, in a large-scale open banking system, the number of users may be large, and each user may have different permission requirements; managing a large number of users and corresponding permissions can become complicated, and traditional methods do not have good scalability; secondly, user rights management involves access control to sensitive data and system resources. Traditional methods are difficult to fully meet regulatory requirements in terms of ensuring a high level of security, as well as the strength of identity authentication, data encryption, and prevention of lateral penetration. Summary of the invention

[0006] The present invention provides a user authority control method, device, computer equipment and medium to solve the technical problem that the strength of identity authentication is low, it is difficult to fully meet the supervision requirements, and then the authority supervision effect is poor.

[0007] In a first aspect, a user authority control method is provided, comprising:

[0008] Receive a login request from a user terminal, and verify the login request according to preset conditions;

[0009] If the login request passes the verification, the user's login account is authorized according to the preset rules to obtain the user's basic permissions;

[0010] Create an administrator role according to a preset permission set, and adjust the permissions of the user's login account through a preset management interface to obtain user adjustment permissions;

[0011] Use the preset framework to merge the user adjustment permissions with the user basic permissions to obtain the user authorization permissions;

[0012] The user authorization authority is controlled based on the administrator role.

[0013] In a second aspect, a user authority control device is provided, comprising:

[0014] A login verification module, used to receive a login request from a user terminal and verify the login request according to preset conditions;

[0015] A permission configuration module, used to configure the permission of the user's login account according to preset rules to obtain the user's basic permission if the login request passes the verification;

[0016] The permission adjustment module is used to create an administrator role according to a preset permission set, and adjust the permissions of the user's login account through a preset management interface to obtain the user's adjustment permissions;

[0017] The data fusion module is used to fuse the user adjustment permissions with the user basic permissions using a preset framework to obtain the user authorization permissions;

[0018] The role supervision module is used to control the user authorization rights based on the administrator role.

[0019] In a third aspect, a computer device is provided, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the steps of the above-mentioned user authority control method when executing the computer program.

[0020] In a fourth aspect, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the above-mentioned user authority control method are implemented.

[0021] In the scheme implemented by the above-mentioned user authority control method, device, computer equipment and storage medium, it is possible to quickly and accurately conduct a comprehensive evaluation of the input login request, so as to determine whether there is a potential login risk that may threaten the system security or user rights; it ensures the standardization and normalization of authority configuration, improves the efficiency of authority configuration, can quickly and accurately assign authority to users, and the basic authority configured based on user type and level is reasonable and applicable, which can effectively meet the needs of users to conduct normal business; by providing a authority display panel and a simplified operation process, users can easily view and adjust their authority, reducing the dependence on open operation and maintenance technicians and interaction costs, and can respond to business needs more quickly, improve operational efficiency and user experience; using a preset framework for data fusion can effectively improve the efficiency, security, consistency and scalability of user authority management, and provide users with more convenient and reliable authority management services; using administrator roles to supervise user authorization authorities can effectively improve platform security and management efficiency, ensure the normal operation of the platform, and protect user interests. BRIEF DESCRIPTION OF THE DRAWINGS

[0022] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the accompanying drawings required for use in the description of the embodiments of the present invention will be briefly introduced below. Obviously, the accompanying drawings in the following description are only some embodiments of the present invention. For ordinary technicians in this field, other accompanying drawings can be obtained based on these accompanying drawings without paying creative labor.

[0023] Figure 1 is a schematic diagram of an application environment of a user authority control method in an embodiment of the present invention;

[0024] Figure 2 It is a flowchart of a method for controlling user rights in one embodiment of the present invention;

[0025] Figure 3 is a structural diagram of a user authority control device in one embodiment of the present invention;

[0026] Figure 4 is a schematic diagram of a structure of a computer device in one embodiment of the present invention;

[0027] Figure 5 It is another structural schematic diagram of a computer device in one embodiment of the present invention. DETAILED DESCRIPTION

[0028] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0029] The user authority control method provided by the embodiment of the present invention can be applied in Figure 1 In an application environment, the client communicates with the server through a network. The server can receive a login request from the user through the client, and verify the login request according to preset conditions; if the login request passes the verification, the user's login account is configured with permissions according to preset rules to obtain basic user permissions; an administrator role is created according to a preset permission set, and permissions are adjusted for the user's login account through a preset management interface to obtain user adjustment permissions; the user adjustment permissions are merged with the user's basic permissions using a preset framework to obtain user authorization permissions; and the user authorization permissions are controlled based on the administrator role. Among them, the client can be, but is not limited to, various personal computers, laptops, smart phones, tablet computers, and portable wearable devices. The server can be implemented with an independent server or a server cluster consisting of multiple servers. The present invention is described in detail below through specific embodiments.

[0030] See also Figure 2 As shown, Figure 2 A flowchart of a user authority control method provided by an embodiment of the present invention includes the following steps:

[0031] S1. Receive a login request from a user terminal, and verify the login request according to preset conditions.

[0032] The user authority control method provided by the present invention can be applied to authority supervision engines such as user authority or intelligent supervision in various application scenarios. The authority supervision engine is usually implemented through a server, which can receive user requests in real time.

[0033] In an embodiment of the present invention, a user's login request refers to a request containing the user's identity information (such as user name, password, verification code, etc.) sent by the user to a related server or service end in order to obtain access rights to a specific system or platform; this request is intended to allow the system to confirm the user's identity and provide it with corresponding functions and data access rights based on its preset permission level; the issuance of a login request is usually a prerequisite for the user to carry out business operations, query information, manage accounts and other activities. The system's processing and verification of the login request ensures the security and legality of the interaction between the user and the system and prevents unauthorized access and operations; the preset conditions include the accuracy and completeness of the login information provided by the user, such as whether the user name is consistent with the pre-registered one, whether the password is correct, and whether the necessary identity authentication steps (such as SMS verification code, dynamic identification, etc.) have been passed.

[0034] Utilize the preset server to receive the login request from the user terminal;

[0035] In an embodiment of the present invention, verifying the login request according to a preset condition includes:

[0036] Splitting the login request into verification information;

[0037] Using preset verification conditions to perform data matching on the verification information to obtain a matching result;

[0038] If the matching result is no match, it is determined that the login request has not passed the verification;

[0039] If the matching result is a match, it is determined that the verification information login request passes the verification.

[0040] The verifying the login request according to the preset condition also includes:

[0041] Splitting the login request into address information;

[0042] If the matching result is a match, a preset risk system is used to determine whether the address information has a potential login risk;

[0043] If the potential login risk does not exist, confirming that the login request has passed the verification;

[0044] If the potential login risk exists, calling a preset dynamic token to verify the login request and obtaining a dynamic token verification result;

[0045] If the dynamic token verification result is passed, confirming that the login request has passed the verification;

[0046] If the dynamic token verification result is failure, it is confirmed that the login request has not passed the verification.

[0047] In the embodiment of the present invention, verification information refers to key data used to confirm the user's identity and the legitimacy of the login; it includes the user name, password, dynamic verification code or other specific identity authentication elements set and entered by the user; the accuracy and completeness of the verification information directly determines whether the user can successfully log in to the system; by comparing and verifying these verification information, the system can determine whether the user who submitted the login request has legal access rights; address information refers to the specific details of the network or system access path related to the user's login operation; this may cover the network address (such as IP address) of the device used by the user when initiating the login request, the specific domain name or URL address requested to be accessed, and the relevant identification of the internal network segment or subnet that may be involved; the role of the address information is to help the system determine the source of the login request Source and destination for accurate routing and access control; it enables the system to identify where the user initiated the login attempt, and then determine whether the request meets the expected access mode and security policy; preset verification conditions are a series of pre-set rules and standards used to accurately determine the validity and accuracy of verification information, which mainly includes whether the username and password match; the preset risk system determines whether the address information has potential login risks, including detection rules for abnormal login locations, frequently changing IP addresses, and access from network areas marked as high-risk; dynamic token is a constantly changing and time-sensitive verification code or credential; dynamic tokens are usually generated in real time by a special generation algorithm and presented to users in a specific way, such as through mobile applications, text messages or hardware devices.

[0048] In detail, a login request initiated by a user is received through a preset dedicated server; thereafter, the login request is split and processed into two parts, namely, verification information and address information; whether the user name and password match is verified according to the verification conditions, and a corresponding matching result is obtained; if the matching result is not a match, it is determined that the login request has not passed the verification; if the matching result is a match, it is determined that the login request has passed the verification, and a preset risk system is used to determine whether the address information has potential login risks such as abnormal login locations, frequently changed IP addresses, and access from network areas marked as high-risk areas; if the potential login risk does not exist, it is confirmed that the login request has passed the verification; if the potential login risk exists, a preset dynamic token is called to verify the login request to obtain a dynamic token verification result; if the dynamic token verification result is passed, it is confirmed that the login request has passed the verification; if the dynamic token verification result is not passed, it is confirmed that the login request has not passed the verification; this step ensures the security, accuracy and efficiency of the login from multiple levels, and protects the rights and interests of users and the stability of the system to the greatest extent.

[0049] In the embodiment of the present invention, an input login request can be comprehensively evaluated quickly and accurately to determine whether there is a potential login risk that may threaten system security or user rights.

[0050] S2. Determine whether the login request passes verification.

[0051] If the login request fails the verification, S3 is executed to reject the login request of the user.

[0052] If the login request passes the verification, S4 is executed to configure the permissions of the user's login account according to preset rules to obtain basic user permissions.

[0053] In the embodiment of the present invention, the preset rule refers to matching different users by their user types and user levels to grant different permissions.

[0054] In the embodiment of the present invention, the configuration of permissions for the login account of the user according to the preset rules to obtain the basic permissions of the user includes:

[0055] Acquire the user type and user level according to the verification information;

[0056] Searching for basic permission information of the user according to the user type and the user level;

[0057] The basic permission information is assigned to the user's login account to obtain the user's basic permissions.

[0058] In an embodiment of the present invention, the verification information is the user name, password, dynamic verification code or other specific identity authentication elements when the user logs in; the user type refers to the classification of the nature of the user's business or the industry to which the user belongs; for example, users may be divided into different types such as catering, retail, and service, each type having its own unique business characteristics and business model; the user level is a comprehensive assessment level of the user based on a series of evaluation criteria; these evaluation criteria may cover multiple aspects such as the user's business scale, credit status, performance, and compliance level; user levels usually have different levels, such as senior, intermediate, and low, or are represented by specific numerical levels; basic permissions refer to the most basic and core operations and access rights that users should be granted based on their type and level. Basic permissions cover the scope and extent of a series of specific activities that users can perform in the system or platform; including but not limited to the viewing, modification, and addition of specific data, the use of certain functional modules, the participation and decision-making rights in specific business processes, etc.

[0059] In detail, based on the user's username and password and other verification information obtained, the user is analyzed and judged in depth, and the specific user type and corresponding user level of the user are obtained; based on the user type and user level, basic permission information matching the user type and level is obtained, and the basic permission information found is assigned to the corresponding user, granting the user the corresponding basic permissions; this step provides the user with permission configuration appropriate to his or her type and level, which can not only ensure that the user conducts business activities within a reasonable range, but also ensure the security and stability of the system, reduce potential risks, and reduce the possibility of misoperation and data leakage.

[0060] In the embodiments of the present invention, the standardization and normalization of permission configuration are ensured, the efficiency of permission configuration is improved, permissions can be quickly and accurately assigned to users, the basic permissions configured based on user types and levels are reasonable and applicable, and can effectively meet the needs of users to conduct normal business.

[0061] S5. Create an administrator role according to a preset permission set, and adjust the permissions of the user's login account through a preset management interface to obtain user adjustment permissions.

[0062] In an embodiment of the present invention, the administrator role refers to a set of supervision and management mechanisms built based on a preset permission set, which strictly controls and reasonably adjusts the user's permissions, covers a series of rules, processes and tools, and can be used to monitor the user's current permission usage and determine whether it complies with the preset permission set and related regulations; the preset management interface refers to an interactive window or operating platform pre-designed and constructed specifically for permission management and adjustment operations. The preset management interface is usually intuitive and easy to use, so that permission supervisors can clearly see the user's various permission information and perform corresponding operations; it may present the user's existing permissions in the form of a graphic, tabular or classified list, and provide clear operation buttons or options, such as "add permissions", "delete permissions", "modify permissions", etc.; the preset management interface can also be equipped with corresponding search, filtering and sorting functions to quickly locate the permission information of a specific user.

[0063] In the embodiment of the present invention, the step of creating an administrator role according to a preset permission set, adjusting the permissions of the user's login account through a preset management interface, and obtaining the user adjustment permissions includes:

[0064] Associating a preset supervision tool, a preset log collection system, a preset behavior supervision system, and a preset information verification system with a pre-created virtual role to obtain an administrator role;

[0065] Obtain permission adjustment information through the preset permission display panel;

[0066] Establishing a permission adjustment application according to the permission adjustment information and the verification information;

[0067] Determine whether the permission adjustment application exceeds the preset user permission index through a preset verification system;

[0068] If the preset verification system determines that the permission adjustment application does not exceed the preset user permission index, the permission adjustment application is passed to obtain the user adjustment permission;

[0069] If the preset verification system determines that the permission adjustment application exceeds the preset user permission index, the permission adjustment application is sent to the administrator role through a preset data sending terminal;

[0070] Receiving the adjustment result application through the preset data receiving end;

[0071] Triggering the preset information verification system through the adjustment result application;

[0072] Using the preset information verification system to initiate preset identity information verification to the user terminal to obtain a verification result;

[0073] If the verification result is failure, then confirming that the adjustment result application has failed the verification;

[0074] If the verification result is passed, then the adjustment result application is confirmed to have passed the verification.

[0075] In the embodiment of the present invention, the preset supervision tool refers to a series of means or software applications for supervising and managing user-related activities, which can force the user to go offline. The preset supervision tool may include but is not limited to a data monitoring tool for real-time tracking of the user's business data and operation behavior; the preset log collection system is a system for collecting and storing relevant data of the user's daily operations, which can automatically capture and record various important information related to user operations, system interactions, and permission changes, including the time of user login and logout, specific operations performed, pages or data accessed, and historical records of permission adjustments; these log information are stored in a structured and orderly manner for subsequent query, analysis, and audit; the preset behavior supervision system is a mechanism for comprehensively monitoring and evaluating user behavior, which can capture various operations and activity details of users in the system in real time, and compare and analyze these behavior data with preset behavior patterns and rules, including users' routine operations, such as transaction frequency, transaction amount, and types of resources accessed. The preset behavior supervision system is equipped with an intelligent risk assessment model that can predict possible risk trends and abnormal situations based on the user's behavior characteristics and historical data; the preset information The information verification system is a mechanism to ensure the accuracy and security of information; including but not limited to password verification, fingerprint recognition, SMS verification code, face recognition and other verification methods and technologies, in the scenario of user identity confirmation, to verify and confirm the relevant information; the preset permission display panel is an interface for intuitively presenting information related to user permissions, which centrally displays the details of the permissions currently owned by the user, which may include the use permissions of various specific functions, the scope and level of data access, etc.; the preset verification system is a mechanism for evaluating and reviewing permission adjustment applications; the system contains a series of complex rules, algorithms and standards, which can compare and analyze the contents of the permission adjustment application in detail with the pre-set user permission indicators, and can comprehensively consider user type, level, business needs, historical permission usage and the overall security and stability requirements of the system; the preset user permission indicators refer to the standards and boundaries used to measure the scope and degree of permissions that users can have. The indicators are usually formulated based on many considerations, including but not limited to the type of user (such as large enterprise users, small individual users), business areas (such as finance, retail, services, etc.), credit ratings, compliance records, and the overall security strategy and resource allocation planning of the system.

[0076] In an embodiment of the present invention, a data receiving end is used to receive data from the data sending end; a preset information verification system is a mechanism to ensure information accuracy and security; including but not limited to verification means and techniques such as password verification, fingerprint recognition, SMS verification code, and face recognition, and in scenarios such as user identity confirmation, relevant information is verified and confirmed; a preset permission display panel is an interface for intuitively presenting information related to user permissions, centrally displaying the details of the permissions currently owned by the user, which may include the usage permissions of various specific functions, the scope and level of data access, etc.; preset identity information verification refers to a verification measure for confirming the authenticity and legitimacy of the user's identity; this verification may include a combination of multiple methods, such as requiring the user to enter a specific password, provide a pre-registered mobile phone number to receive a verification code, answer security questions that only the user knows, and perform biometric identification (such as fingerprint, facial recognition).

[0077] In detail, the pre-set supervision tools, log collection system, behavior supervision system and information verification system are associated with the pre-created virtual roles to obtain the administrator role, which is used to realize the supervision of user rights; through the permission display panel, users can easily and comprehensively obtain various information about permission adjustment. At the same time, users use the permission display panel to adjust permissions, which can delete redundant permissions and increase the permissions required by the users themselves, thereby obtaining permission adjustment information; based on the obtained permission adjustment information and the user's own user name and password and other verification information, a permission adjustment application is established; thereafter, the preset verification system is used to judge the permission adjustment application to measure whether it exceeds the pre-set user permission indicators. If the preset verification system determines that the permission adjustment application does not exceed the preset user permission indicators, then the permission adjustment application will be successfully approved, and the user will be granted the corresponding adjustment rights. limit; if the preset verification system concludes that the permission adjustment application exceeds the preset user permission indicators, then the permission adjustment application will be sent to the administrator role through the pre-set data sending end, waiting for further review and processing; this method ensures the scientificity and rationality of the permission adjustment, and effectively balances the needs of users with the standardized management of the system; after the preset data receiving end receives the adjustment result application submitted by the user, it can trigger the preset information verification system to verify the user's identity information; the verification system will verify the user's identity according to the preset rules and return the verification result; if the verification result is not passed, it means that the user's identity information cannot be confirmed and the adjustment result application will be rejected; on the contrary, if the verification result is passed, it is confirmed that the user's identity is legal, the adjustment result application is verified, and subsequent operations can continue; this method can effectively improve the security of the adjustment result application and prevent malicious users or illegal operations.

[0078] In an embodiment of the present invention, by providing a permission display panel and a simplified operation process, users can easily view and adjust their permissions, reducing dependence on open operation and maintenance technicians and interaction costs, and can respond to business needs more quickly, improving operational efficiency and user experience.

[0079] S6. Use the preset framework to merge the user adjustment permissions with the user basic permissions to obtain the user authorization permissions.

[0080] In the embodiments of the present invention, the preset framework refers to a structure or pattern for processing and integrating permission data; the framework includes a series of rules, processes and algorithms for integrating two different sources and types of permission data: user adjustment permissions and user basic permissions.

[0081] In the embodiment of the present invention, the user adjustment authority and the user basic authority are merged by using a preset framework to obtain the user authorization authority, including:

[0082] Analyze the user's permission adjustment using a preset function to obtain permission increase information and permission reduction information;

[0083] Use preset fusion logic to build a fusion framework;

[0084] The fusion framework is used to superimpose the permission increase information with the user basic permission information, and the permission reduction information is deleted from the user basic permission information to obtain the user authorization permission.

[0085] In an embodiment of the present invention, a preset function refers to a program code or algorithm used to perform specific processing and analysis on user adjustment permissions, and its input is relevant data of the user adjustment permissions; it can disassemble, classify and calculate these input data according to pre-set logic and calculation methods; the preset fusion logic refers to a set of clear and rule-defined ideas and methods for integrating different permission information; the preset fusion logic first determines the order, priority and processing rules in the permission fusion process; for example: it stipulates how to superimpose the user's basic permission information without conflict when encountering permission increase information, to ensure that the new permissions can be accurately added to the basic permissions, and no duplication or conflict will occur.

[0086] In detail, the user's adjusted permissions are parsed through preset functions, and the permission increase information and permission reduction information are extracted respectively. Then, the fusion framework constructed by the preset fusion logic is used to superimpose the permission increase information with the user's basic permission information, and at the same time, the permission reduction information is deleted from the user's basic permission information, and finally the updated user authorization permissions are obtained; this process realizes permission adjustment efficiently and accurately, ensuring the accuracy and timely updating of permission information.

[0087] In the embodiment of the present invention, the use of a preset framework for data fusion can effectively improve the efficiency, security, consistency and scalability of user rights management, and provide users with more convenient and reliable rights management services.

[0088] S7. Control the user authorization authority based on the administrator role.

[0089] In an embodiment of the present invention, the administrator role refers to a supervision and management mechanism built based on a preset permission set, which strictly controls and reasonably adjusts the user's permissions, covers a series of rules, processes and tools, and can be used to monitor the user's current permission usage and determine whether it complies with the preset permission set and related regulations.

[0090] In the embodiment of the present invention, the controlling the user authorization authority based on the administrator role includes:

[0091] Utilize the preset log collection system to record and collect every operation of the user end to obtain user behavior data;

[0092] Building a user behavior model based on the user behavior data;

[0093] Using the preset behavior supervision system to determine whether the user behavior model has potential behavior risks;

[0094] If there is a potential behavior risk in the user behavior model, initiating a preset identity information verification to the user terminal through the preset information verification system to obtain a verification result;

[0095] If the verification result is passed, the behavior risk is recorded through a preset record panel;

[0096] If the verification result is failure, the user will be forced to log off through the preset supervision tool.

[0097] In the embodiment of the present invention, the preset log collection system is a system for collecting and storing data related to the daily operations of users, which can automatically capture and record various important information related to user operations, system interactions, and permission changes, including the time of user login and logout, specific operations performed, pages or data accessed, historical records of permission adjustments, etc.; these log information are stored in a structured and orderly manner for subsequent query, analysis and audit; the preset behavior supervision system is a mechanism for comprehensively monitoring and evaluating user behavior, which can capture the details of various operations and activities of users in the system in real time, and compare and analyze these behavior data with preset behavior patterns and rules, including users' routine operations, such as transaction frequency, transaction amount, and types of resources accessed. The preset behavior supervision system is equipped with intelligent The risk assessment model can predict possible risk trends and abnormal situations based on the user's behavioral characteristics and historical data; the preset information verification system is a mechanism to ensure the accuracy and security of information; including but not limited to password verification, fingerprint recognition, SMS verification code, face recognition and other verification methods and technologies, in the user identity confirmation and other scenarios, to verify and confirm the relevant information; the user behavior model is a mathematical or logical model based on a series of operations of the user to describe and analyze their behavior patterns and characteristics; the model integrates the data of each user operation obtained from the preset log collection system, including the time, frequency, type of operation, data range involved and other information; through the analysis and processing of these data, the user behavior model can abstract the user's common behavior patterns, rules and possible trends.

[0098] In detail, the preset log collection system is used to record and collect every operation of the user end. These data will be used to build a user behavior model; based on the user behavior data, combined with the preset rules and algorithms, a model that can reflect the user behavior pattern is built. The preset behavior supervision system will analyze the model to determine whether there is a potential behavioral risk; for example: if the system finds that a user frequently conducts high-value transactions, or his / her operation mode is significantly different from previous habits, it may be determined that there is a potential risk. For example, if the system finds that a user frequently conducts high-value transactions, or his / her operation mode is significantly different from previous habits, it may be determined that there is a potential risk. Once a potential behavioral risk is found, the system The system will initiate identity authentication for the user through the preset information verification system, and verify the user's identity according to the preset rules, such as requiring password entry, verifying mobile phone numbers, etc. If the verification result passes, it means that the user's identity is legal, and the system will record the risk in the preset record panel; if the verification result fails, it means that the user's identity information cannot be confirmed, or there is malicious behavior; the user will be forced to go offline through the preset supervision tool to prevent him from continuing to perform illegal operations, to protect the platform security and user interests; through the preset system and tools, real-time monitoring and management of user behavior is realized, which effectively improves the security and stability of the platform and provides users with safer and more reliable services.

[0099] In the embodiment of the present invention, the administrator role is used to supervise the user authorization rights, which can effectively improve the platform security and management efficiency, ensure the normal operation of the platform, and protect the interests of users.

[0100] In one embodiment, a user authority control device is provided, which corresponds one-to-one to the user authority control method in the above embodiment. Figure 3 As shown, the user authority control includes a login verification module 101, an authority configuration module 102, an authority adjustment module 103, a data fusion module 104 and a role supervision module 105. The detailed description of each functional module is as follows:

[0101] The login verification module 101 is used to receive a login request from a user terminal and verify the login request according to preset conditions;

[0102] The permission configuration module 102 is used to configure the permission of the user's login account according to preset rules to obtain the user's basic permission if the login request passes the verification;

[0103] The authority adjustment module 103 is used to create an administrator role according to a preset authority set, and adjust the authority of the user's login account through a preset management interface to obtain the user's adjustment authority;

[0104] The data fusion module 104 is used to fuse the user adjustment authority with the user basic authority by using a preset framework to obtain the user authorization authority;

[0105] The role supervision module 105 is used to control the user authorization authority based on the administrator role.

[0106] In one embodiment, the acquisition module 101, when receiving a login request from a user terminal and verifying the login request according to a preset condition, is used to:

[0107] Splitting the login request into verification information;

[0108] Performing data matching on the verification information using preset verification conditions to obtain a matching result;

[0109] If the matching result is no match, it is determined that the login request has not passed the verification;

[0110] If the matching result is a match, it is determined that the verification information login request passes the verification.

[0111] In one embodiment, the acquisition module 101, when receiving a login request from a user terminal and verifying the login request according to a preset condition, is further configured to:

[0112] Splitting the login request into address information;

[0113] If the matching result is a match, a preset risk system is used to determine whether the address information has a potential login risk;

[0114] If the potential login risk does not exist, confirming that the login request has passed the verification;

[0115] If the potential login risk exists, calling a preset dynamic token to verify the login request and obtaining a dynamic token verification result;

[0116] If the dynamic token verification result is passed, confirming that the login request has passed the verification;

[0117] If the dynamic token verification result is failure, it is confirmed that the login request has not passed the verification.

[0118] In one embodiment, the permission configuration module 102, when performing permission configuration on the login account of the user according to a preset rule to obtain the basic permission of the user, is used to:

[0119] Acquire the user type and user level according to the verification information;

[0120] Searching for basic permission information of the user according to the user type and the user level;

[0121] The basic permission information is assigned to the user's login account to obtain the user's basic permissions.

[0122] In one embodiment, the authority adjustment module 103, when creating an administrator role according to a preset authority set and adjusting the authority of the user's login account through a preset management interface to obtain the user's adjustment authority, is used to:

[0123] Associating a preset supervision tool, a preset log collection system, a preset behavior supervision system, and a preset information verification system with a pre-created virtual role to obtain an administrator role;

[0124] Obtain permission adjustment information through the preset permission display panel;

[0125] Establishing a permission adjustment application according to the permission adjustment information and the verification information;

[0126] Determine whether the permission adjustment application exceeds the preset user permission index through a preset verification system;

[0127] If the preset verification system determines that the permission adjustment application does not exceed the preset user permission index, the permission adjustment application is passed to obtain the user adjustment permission;

[0128] If the preset verification system determines that the permission adjustment application exceeds the preset user permission index, the permission adjustment application is sent to the administrator role through a preset data sending terminal;

[0129] Receiving the adjustment result application through the preset data receiving end;

[0130] Triggering the preset information verification system through the adjustment result application;

[0131] Using the preset information verification system to initiate preset identity information verification to the user terminal to obtain a verification result;

[0132] If the verification result is failure, then confirming that the adjustment result application has failed the verification;

[0133] If the verification result is passed, then the adjustment result application is confirmed to have passed the verification.

[0134] In one embodiment, the data fusion module 104, when fusing the user adjustment permission with the user basic permission by using a preset framework to obtain the user authorization permission, is used to:

[0135] Analyze the user's permission adjustment using a preset function to obtain permission increase information and permission reduction information;

[0136] Use preset fusion logic to build a fusion framework;

[0137] The fusion framework is used to superimpose the permission increase information with the user basic permission information, and the permission reduction information is deleted from the user basic permission information to obtain the user authorization permission.

[0138] In one embodiment, the role supervision module 105, when controlling the user authorization authority based on the administrator role, is used to:

[0139] Utilize the preset log collection system to record and collect every operation of the user end to obtain user behavior data;

[0140] Building a user behavior model based on the user behavior data;

[0141] Using the preset behavior supervision system to determine whether the user behavior model has potential behavior risks;

[0142] If there is a potential behavior risk in the user behavior model, initiating a preset identity information verification to the user terminal through the preset information verification system to obtain a verification result;

[0143] If the verification result is passed, the behavior risk is recorded through a preset record panel;

[0144] If the verification result is failure, the user will be forced to log off through the preset supervision tool.

[0145] The present invention provides a user authority control device, which uses a preset log collection system to record and collect each operation of the user end, and these data will be used to build a user behavior model; according to the user behavior data, combined with preset rules and algorithms, a model that can reflect the user behavior pattern is built, and the preset behavior supervision system will analyze the model to determine whether there is a potential behavior risk; for example: if the system finds that a certain user frequently conducts high-value transactions, or that his operation mode is greatly different from previous habits, it may be determined that there is a potential risk. For example, if the system finds that a certain user frequently conducts high-value transactions, or that his operation mode is greatly different from previous habits, it may be determined that there is a potential risk. Once a potential risk is found For behavioral risks, the system will initiate identity authentication for the user through the preset information verification system, and verify the user's identity according to the preset rules, such as requiring password entry, verifying mobile phone numbers, etc. If the verification result passes, it means that the user's identity is legal, and the system will record the risk in the preset record panel; if the verification result fails, it means that the user's identity information cannot be confirmed, or there is malicious behavior; the user will be forced to go offline through the preset supervision tool to prevent him from continuing to violate the regulations and protect the platform security and user interests; through the preset system and tools, real-time monitoring and management of user behavior is realized, which effectively improves the security and stability of the platform and provides users with safer and more reliable services.

[0146] For the specific definition of the user authority control device, please refer to the definition of the user authority control method above, which will not be repeated here. Each module in the above-mentioned user authority control device can be implemented in whole or in part by software, hardware and a combination thereof. The above-mentioned modules can be embedded in or independent of the processor in the computer device in the form of hardware, or can be stored in the memory in the computer device in the form of software, so that the processor can call and execute the operations corresponding to the above modules.

[0147] In one embodiment, a computer device is provided. The computer device may be a server, and its internal structure diagram may be as follows: Figure 4 As shown. The computer device includes a processor, a memory, a network interface and a database connected via a system bus. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile and / or volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The network interface of the computer device is used to communicate with an external client via a network connection. When the computer program is executed by the processor, it implements the functions or steps of a user authority control method server side.

[0148] In one embodiment, a computer device is provided. The computer device may be a client, and its internal structure diagram may be as follows: Figure 5 As shown. The computer device includes a processor, a memory, a network interface, a display screen and an input device connected through a system bus. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The network interface of the computer device is used to communicate with an external server through a network connection. When the computer program is executed by the processor, it implements the functions or steps of the client side of a user authority control method.

[0149] In one embodiment, a computer device is provided, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the following steps when executing the computer program:

[0150] Receive a login request from a user terminal, and verify the login request according to preset conditions;

[0151] If the login request passes the verification, the user's login account is authorized according to the preset rules to obtain the user's basic permissions;

[0152] Create an administrator role according to a preset permission set, and adjust the permissions of the user's login account through a preset management interface to obtain user adjustment permissions;

[0153] Use the preset framework to merge the user adjustment permissions with the user basic permissions to obtain the user authorization permissions;

[0154] The user authorization authority is controlled based on the administrator role.

[0155] In one embodiment, a computer readable storage medium is provided, on which a computer program is stored, and when the computer program is executed by a processor, the following steps are implemented:

[0156] Receive user questions, and perform question recall processing from a preset standard question library according to the user questions to obtain multiple candidate questions;

[0157] Receive a login request from a user terminal, and verify the login request according to preset conditions;

[0158] If the login request passes the verification, the user's login account is authorized according to the preset rules to obtain the user's basic permissions;

[0159] Create an administrator role according to a preset permission set, and adjust the permissions of the user's login account through a preset management interface to obtain user adjustment permissions;

[0160] Use the preset framework to merge the user adjustment permissions with the user basic permissions to obtain the user authorization permissions;

[0161] The user authorization authority is controlled based on the administrator role.

[0162] It should be noted that the above functions or steps that can be implemented by the computer-readable storage medium or computer device can refer to the relevant descriptions on the server side and the client side in the aforementioned method embodiment. To avoid repetition, they will not be described one by one here.

[0163] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to memory, storage, database or other media used in the embodiments provided in this application can include non-volatile and / or volatile memory. Non-volatile memory can include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM) or flash memory. Volatile memory can include random access memory (RAM) or external cache memory. As an illustration and not limitation, RAM is available in many forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous link (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM).

[0164] Those skilled in the art can clearly understand that for the convenience and simplicity of description, only the division of the above-mentioned functional units and modules is used as an example. In actual applications, the above-mentioned functions can be distributed and completed by different functional units and modules as needed, that is, the internal structure of the device can be divided into different functional units or modules to complete all or part of the functions described above.

[0165] It should be noted that if software tools or components other than those of our company appear in the embodiments of the present application, they are only used for illustrative purposes and do not represent actual use.

[0166] The embodiments described above are only used to illustrate the technical solutions of the present invention, rather than to limit the same. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that the technical solutions described in the aforementioned embodiments may still be modified, or some of the technical features may be replaced by equivalents. Such modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention, and should all be included in the protection scope of the present invention.

Claims

1. A user authority control method, characterized in that: include: Receive a login request from a user terminal, and verify the login request according to preset conditions; If the login request passes the verification, the user's login account is authorized according to the preset rules to obtain the user's basic permissions; Create an administrator role according to a preset permission set, and adjust the permissions of the user's login account through a preset management interface to obtain user adjustment permissions; Use the preset framework to merge the user adjustment permissions with the user basic permissions to obtain the user authorization permissions; The user authorization authority is controlled based on the administrator role.

2. The user authority control method according to claim 1, characterized in that: The verifying the login request according to the preset condition includes: Splitting the login request into verification information; Performing data matching on the verification information using preset verification conditions to obtain a matching result; If the matching result is no match, it is determined that the login request has not passed the verification; If the matching result is a match, it is determined that the verification information login request passes the verification.

3. The user authority control method according to claim 2, characterized in that: The verifying the login request according to the preset condition also includes: Splitting the login request into address information; If the matching result is a match, a preset risk system is used to determine whether the address information has a potential login risk; If the potential login risk does not exist, confirming that the login request has passed the verification; If the potential login risk exists, calling a preset dynamic token to verify the login request and obtaining a dynamic token verification result; If the dynamic token verification result is passed, confirming that the login request has passed the verification; If the dynamic token verification result is failure, it is confirmed that the login request has not passed the verification.

4. The user authority control method according to claim 1, characterized in that: The step of configuring the user's login account permissions according to preset rules to obtain the user's basic permissions includes: Acquire the user type and user level according to the verification information; Searching for basic permission information of the user according to the user type and the user level; The basic permission information is assigned to the user's login account to obtain the user's basic permissions.

5. The user authority control method according to claim 1, characterized in that: The step of creating an administrator role according to a preset permission set and adjusting the permissions of the user's login account through a preset management interface to obtain the user's adjustment permissions includes: Associating a preset supervision tool, a preset log collection system, a preset behavior supervision system, and a preset information verification system with a pre-created virtual role to obtain an administrator role; Obtain permission adjustment information through the preset permission display panel; Establishing a permission adjustment application according to the permission adjustment information and the verification information; Determine whether the permission adjustment application exceeds the preset user permission index through a preset verification system; If the preset verification system determines that the permission adjustment application does not exceed the preset user permission index, the permission adjustment application is passed to obtain the user adjustment permission; If the preset verification system determines that the permission adjustment application exceeds the preset user permission index, the permission adjustment application is sent to the administrator role through a preset data sending terminal; Receiving the adjustment result application through the preset data receiving end; Triggering the preset information verification system through the adjustment result application; Using the preset information verification system to initiate preset identity information verification to the user terminal to obtain a verification result; If the verification result is failure, then confirming that the adjustment result application has failed the verification; If the verification result is passed, then the adjustment result application is confirmed to have passed the verification.

6. The user authority control method according to claim 1, characterized in that: The method of using a preset framework to merge the user adjustment permissions with the user basic permissions to obtain the user authorization permissions includes: Analyze the user's permission adjustment using a preset function to obtain permission increase information and permission reduction information; Use preset fusion logic to build a fusion framework; The fusion framework is used to superimpose the permission increase information with the user basic permission information, and the permission reduction information is deleted from the user basic permission information to obtain the user authorization permission.

7. The user authority control method according to claim 1, characterized in that: The controlling of the user authorization authority based on the administrator role includes: Utilize the preset log collection system to record and collect every operation of the user end to obtain user behavior data; Building a user behavior model based on the user behavior data; Using the preset behavior supervision system to determine whether the user behavior model has potential behavior risks; If there is a potential behavior risk in the user behavior model, initiating a preset identity information verification to the user terminal through the preset information verification system to obtain a verification result; If the verification result is passed, the behavior risk is recorded through a preset record panel; If the verification result is failure, the user will be forced to log off through the preset supervision tool.

8. A user authority control device, characterized in that: include: A login verification module, used to receive a login request from a user terminal and verify the login request according to preset conditions; A permission configuration module, for configuring the permission of the user's login account according to preset rules to obtain the user's basic permission if the login request passes the verification; The permission adjustment module is used to create an administrator role according to a preset permission set, and adjust the permissions of the user's login account through a preset management interface to obtain the user's adjustment permissions; The data fusion module is used to fuse the user adjustment permissions with the user basic permissions using a preset framework to obtain the user authorization permissions; The role supervision module is used to control the user authorization rights based on the administrator role.

9. A computer device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the steps of the user authority control method according to any one of claims 1 to 7 are implemented.

10. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the steps of the user authority control method according to any one of claims 1 to 7 are implemented.

Images