System interface management method and device based on block chain, computer equipment, readable storage medium and program product

Abstract

The invention relates to a system interface management method and device based on a block chain, computer equipment, a readable storage medium and a program product. The method comprises the following steps: setting a plurality of common service options on a service distribution window based on development of an access system application, then generating an application ID and a system ID in a background based on check operation and confirmation operation of a user on the service options, establishing an association relationship among the application ID, the system ID and a user login account, and generating a corresponding application interface list; the application interface list generated by the background is displayed, so that different allowable service ranges can be allocated to users, the corresponding application interface list is given based on the allowable service ranges, and the users are supported to start or stop the interfaces opened on the application interface list display interface for user management, so that the user experience is improved, and the user experience is improved. The differentiated management of interface access services under multiple roles is ensured, and the data security is improved.

Description

Technical Field

[0001] The present application relates to the technical field of blockchain interface management, and in particular to a blockchain-based system interface management method, device, computer equipment, readable storage medium and program product. Background Art

[0002] The power grid asset management platform is connected to multiple asset management systems and involves multiple roles. In the process of implementing the power grid asset management platform based on blockchain, the user registration security of multiple roles is very important for the data governance process. Therefore, access management under multi-user role access is very important to ensure the validity of the on-chain data, which is conducive to ensuring the data reliability and security under the multi-role interaction of the power grid. Summary of the invention

[0003] Based on this, it is necessary to provide a blockchain-based system interface management method, device, computer equipment, readable storage medium and program product that can achieve data access security for multiple systems and multiple roles in response to the above technical problems.

[0004] In a first aspect, the present application provides a system interface management method based on blockchain, the method comprising:

[0005] In response to the user login operation, if the verification is passed, the operation interface for creating the access system is displayed;

[0006] In response to the user's input trigger operation on the operation interface of creating an access system, a service allocation window pops up; the service allocation window is provided with a plurality of commonly used service options; the access system is created under the power grid asset management system application created in the blockchain database;

[0007] In response to the user's check operation and confirmation operation on the service option, generate an application ID and a system ID, as well as an association relationship between the application ID and the system ID and the user's login account, and generate a corresponding application interface list;

[0008] Display the application interface list;

[0009] In response to a start operation or stop operation performed by a user on an interface opened on the application interface list display interface, the corresponding interface is opened or closed accordingly.

[0010] In one embodiment, in response to the user's check operation and confirmation operation on the service option, an application ID and a system ID, as well as an association relationship between the application ID and the system ID and the user login account are generated, and a corresponding application interface list is generated, including:

[0011] Based on the application ID and system ID, obtain the corresponding user login account;

[0012] Get the user information corresponding to the user's login account, including the region, unit name, department and position;

[0013] Determine the allowed service scope corresponding to the user based on user information and a pre-trained service scope allocation model;

[0014] Based on the service scope and the interface mapping table, an application interface list is obtained, wherein the interface mapping table is a mapping relationship between the service scope and the application interface.

[0015] In one embodiment, the training step of the service range allocation model includes:

[0016] Obtain historical operation logs corresponding to multiple different user information from the blockchain;

[0017] Eliminate log records of alarms that exceed the service scope in historical operation logs;

[0018] Perform feature extraction on the historical operation logs after elimination to extract application ID, system ID and service scope;

[0019] Based on the extracted application ID and system ID, determine the corresponding user information;

[0020] Input the user information into a preset neural network model, and compare the output result with the service scope corresponding to the user information in the training set, and train the neural network model based on the comparison result until the maximum number of iterations is reached or the deviation of the comparison result is less than the preset deviation;

[0021] Use the trained neural network model as the service range allocation model.

[0022] In one embodiment, the service scope includes a core data service scope and a non-core data service scope; after the step of determining the allowed service scope corresponding to the user, based on the service scope and the interface mapping table, before the step of obtaining the application interface list, the following step is further included:

[0023] If the determined service scope includes the core data service scope, an approval request is sent to the system administrator;

[0024] If the system administrator sends approval information, the process proceeds to the step of obtaining the application interface list based on the service scope and interface mapping table.

[0025] If the system administrator informs you that the application has failed the review, an alarm will be issued.

[0026] In one embodiment, the method further comprises:

[0027] Record the operation logs of the application interface and upload them to the blockchain for storage.

[0028] In one embodiment, the method further comprises:

[0029] In response to the audit trigger operation of the user on the application interface list display interface, display the audit interface;

[0030] In response to the selection operation of the log screening condition on the audit interface, a list of logs to be audited is displayed; the log screening condition includes the application interface name, time period, system ID and application ID.

[0031] In a second aspect, a system interface management device based on blockchain is provided, the device comprising:

[0032] A login verification module is used to respond to the user's login operation and display the operation interface for creating an access system if the verification is successful;

[0033] The service allocation window trigger module is used to pop up the service allocation window in response to the user's input trigger operation on the operation interface of creating the access system; the service allocation window is provided with multiple commonly used service options; the access system is created under the power grid asset management system application created in the blockchain database;

[0034] An application interface list generation module, for generating an application ID and a system ID, as well as an association relationship between the application ID and the system ID and a user login account, and generating a corresponding application interface list in response to a user's check operation and confirmation operation on a service option;

[0035] Application interface list display module, used to display the application interface list;

[0036] The application interface call response module is used to respond to the start operation or stop operation performed by the user on the open interface on the application interface list display interface, and correspondingly open or close the corresponding interface.

[0037] In a third aspect, a computer device is provided, including a memory and a processor, wherein the memory stores a computer program, and the processor implements the steps of the above method when executing the computer program.

[0038] In a fourth aspect, a computer-readable storage medium is provided, on which a computer program is stored, and when the computer program is executed by a processor, the steps of the above method are implemented.

[0039] In a fifth aspect, a computer program product is provided, comprising a computer program, which implements the steps of the above method when executed by a processor.

[0040] The above-mentioned blockchain-based system interface management method, device, computer equipment, readable storage medium and program product. Based on the development of the access permission system application, a plurality of commonly used service options are provided on the service allocation window, and then based on the user's check operation and confirmation operation of the service option, the background generates the application ID and the system ID, and establishes the association relationship between the application ID, the system ID and the user login account, and generates the corresponding application interface list; the application interface list generated by the background is displayed, so that different "allowed service scopes" can be allocated to each user, and the corresponding application interface list is given based on the "allowed service scope", supporting users to start or stop the open interface on the application interface list display interface for user management, ensuring the differentiated management of interface access services under multiple roles and improving data security. BRIEF DESCRIPTION OF THE DRAWINGS

[0041] In order to more clearly illustrate the technical solutions in the embodiments of the present application or related technologies, the drawings required for use in the embodiments of the present application or related technical descriptions will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0042] Figure 1 A flowchart of a system interface management method based on blockchain in one embodiment;

[0043] Figure 2 A schematic diagram of a check interface for commonly used service options in an embodiment;

[0044] Figure 3 A schematic flow chart of steps for generating an application ID and a system ID, as well as an association between the application ID and the system ID and a user login account, and generating a corresponding application interface list in response to a user's check operation and confirmation operation on a service option in one embodiment;

[0045] Figure 4 A flowchart of a system interface management method based on blockchain in another embodiment;

[0046] Figure 5 A flowchart of a system interface management method based on blockchain in another embodiment;

[0047] Figure 6 A flowchart of a system interface management method based on blockchain in another embodiment;

[0048] Figure 7 It is a structural block diagram of a system interface management device based on blockchain in one embodiment;

[0049] Figure 8 FIG. 4 is a diagram showing the internal structure of a computer device in one embodiment. DETAILED DESCRIPTION

[0050] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0051] In an exemplary embodiment, Figure 1 As shown, a system interface management method based on blockchain is provided, the method comprising:

[0052] S101, in response to a user login operation, if the verification is passed, an operation interface for creating an access system is displayed.

[0053] The process of verification based on the user login operation may be a login verification based on a password or a login verification based on JWT (JSON Web Tokens). Specifically, when the login verification is based on a password, the specific steps may include:

[0054] The user enters the username and password on the login interface and submits the login form. The username and password are sent to the server via HTTP request. After receiving the username and password, the server first searches the database for the username. If the username exists, the corresponding password hash value is retrieved. The password entered by the user is hashed using the same hash algorithm, and the result is compared with the hash value stored in the database. If the hash values ​​match, it means the password is correct and the user is authenticated. If the hash values ​​do not match, it means the password is incorrect and the user is authenticated.

[0055] When it comes to JWT-based login verification, the specific steps may include:

[0056] The user enters the username and password on the login interface and submits the login form. The username and password are sent to the server via an HTTP request. The server verifies the correctness of the username and password in a similar way to password-based login verification, which will not be described here. If the hash value matches, the server generates a JWT, which consists of three parts: header, payload, and signature. The header usually contains the type of token (JWT) and the signature algorithm used (such as HS256). The payload contains the user's information (such as user ID, username, etc.), but does not contain sensitive information (such as passwords). The signature is obtained by signing the hash value of the header and payload using the server key to ensure the security and integrity of the token during transmission.

[0057] The server returns the generated JWT to the client as a response. The client uses the JWT and adds the JWT to the request header (Authorization: Bearer) in subsequent application interface creation and other operation requests. <token>) is sent to the server.

[0058] After receiving the request, the server verifies the signature and validity period of the JWT. If the verification succeeds, it processes the request and returns a response.

[0059] When using the JWT verification method, the server does not save session information, which improves scalability. The payload part of the JWT can be customized to add required fields. JWT has corresponding implementations and support in various platforms and programming languages, which is beneficial to the power grid asset management system, which involves the blockchain platform connecting to various types of asset management systems.

[0060] S102, in response to the user's input trigger operation on the operation interface of creating the access system, a service allocation window pops up; the service allocation window is provided with multiple commonly used service options; the access system is created under the power grid asset management system application created in the blockchain database. There is a correspondence between commonly used service options and user login accounts. There are differences in the application interfaces commonly used by users in different departments and positions. Based on historical operation data or customizing the correspondence between user login accounts and commonly used service options, other users can create application interface lists in the following way. Figure 2 As shown, multiple service options matching the service are displayed on the service allocation window, which helps the user to quickly configure.

[0061] S103, in response to the user's check operation and confirmation operation on the service option, generate an application ID and a system ID, as well as an association relationship between the application ID and the system ID and the user's login account, and generate a corresponding application interface list.

[0062] The application ID is a unique identifier for an application on the blockchain platform. It allows the blockchain platform to distinguish requests from different applications and ensure that each application can be correctly identified and processed. Through the application ID, the blockchain platform can implement fine-grained permission control. Different application IDs may correspond to different permission levels. The platform can restrict or allow certain operations based on the application ID to ensure the security of sensitive data and resources. When a security incident occurs or an investigation is required, the application ID can serve as an important basis for tracking and auditing. The platform can trace and locate problems by viewing the request and operation records related to a specific application ID. Based on the association between the application ID and system ID and the user login account, the extracted system can be traced back through the application ID and system ID.

[0063] The system ID is the identity identifier of the blockchain platform itself, which is used to verify the identity and permissions of the blockchain platform when interacting with other asset management systems, helping to prevent unauthorized access and tampering. The power grid blockchain platform has multi-user and multi-system applications. The system ID can help achieve isolation between different systems or applications. By assigning a unique system ID to each system, the platform can ensure that the data and operations between them do not interfere with each other, thereby enhancing the security and stability of the system.

[0064] S104, displaying a list of application interfaces;

[0065] S105, in response to a start operation or a stop operation performed by the user on an interface opened on the application interface list display interface, the corresponding interface is opened or closed accordingly.

[0066] Specifically, based on the development of the access permission system application, multiple commonly used service options are set on the service allocation window, and then based on the user's check operation and confirmation operation on the service options, the background generates an application ID and a system ID, and establishes an association between the application ID, the system ID and the user login account, and generates a corresponding application interface list; the application interface list generated by the background is displayed, so that different "allowed service scopes" can be allocated to each user, and a corresponding application interface list is given based on the "allowed service scope", which supports users to start or stop the interfaces opened on the application interface list display interface for user management, thereby ensuring differentiated management of interface access services under multiple roles and improving data security.

[0067] In one embodiment, if Figure 3 As shown, in response to the user's check operation and confirmation operation on the service option, the application ID and the system ID, as well as the association relationship between the application ID and the system ID and the user login account, and the step S103 of generating the corresponding application interface list include:

[0068] S301, based on the application ID and system ID, obtain the corresponding user login account. Based on the previously established association between the application ID and system ID and the user login account, the user login account can be quickly obtained.

[0069] S302, obtaining user information corresponding to the user login account, the user information including the region, unit name, department and position.

[0070] S303, based on the user information and the pre-trained service range allocation model, determine the allowed service range corresponding to the user. Optionally, a user feature vector can be constructed based on the user's historical operation log and user information, and the user feature vector is input into the pre-trained service range allocation model. Optionally, the determined service range is sent to the smart contract in the blockchain network, and the smart contract updates the user's service range record according to the service range allocation result, and records the timestamp, executor and other information of the allocation operation.

[0071] S304, based on the service scope and the interface mapping table, obtain an application interface list, wherein the interface mapping table is a mapping relationship representing the service scope and the application interface.

[0072] Different service contents correspond to different application interfaces that need to be accessed, which can be pre-configured. For example, if you want to access IT asset data, you need to access the IT asset data management system, and if you want to view user information, you need to access the user information management system.

[0073] By personalizing the service scope based on the user's login account, the differences in permissions among power grid users in different positions and posts are fully considered. Then, based on the allocated service scope and interface mapping table, the list of application interfaces corresponding to the user is obtained to ensure that the application interfaces in the list are all accessible to the user, thereby ensuring data security.

[0074] In one embodiment, if Figure 4 As shown, the training steps of the service range allocation model include:

[0075] S401, obtaining historical operation logs corresponding to multiple different user information from the blockchain;

[0076] S402: Remove the log records of the alarm situation of exceeding the service scope in the historical operation log. The historical operation log includes the alarm information.

[0077] S403, performing feature extraction on the removed historical operation logs to extract application ID, system ID and service scope;

[0078] S404, determining corresponding user information based on the extracted application ID and system ID;

[0079] S405, inputting the user information into a preset neural network model, and comparing the output result with the service scope corresponding to the user information in the training set, and training the neural network model based on the comparison result until the maximum number of iterations is reached or the deviation of the comparison result is less than the preset deviation;

[0080] S406, using the trained neural network model as a service range allocation model.

[0081] Specifically, by screening historical operation logs based on the presence or absence of alarm information, model training can be performed to ensure that the service scope matches the user's historical operation logs, which can ensure that the trained model accurately reflects the differences in the service scope allowed for users in different departments and positions. The service scope determined by the service scope allocation model can ensure the security of application interface access.

[0082] In one embodiment, if Figure 5 As shown, the service scope includes a core data service scope and a non-core data service scope; after the step of determining the allowed service scope corresponding to the user, before the step of obtaining the application interface list based on the service scope and the interface mapping table, the following steps are also included:

[0083] S501, if the determined service scope includes the core data service scope, sending an approval request to the system administrator;

[0084] S502, if the approval information is received from the system administrator, the process proceeds to the step of obtaining the application interface list based on the service scope and the interface mapping table;

[0085] S503: If the system administrator sends a message that the application has failed the review, an alarm is generated.

[0086] For core data, if data leakage or change occurs, it will have unpredictable consequences for the safe operation of the power grid. Therefore, for the allowed service scope, in addition to automatic generation based on the service scope allocation model, for the service scope involving core data, a manual approval node is set up to take into account the speed and security of service scope allocation.

[0087] In one embodiment, if the system administrator receives a message that the approval is not passed, an alarm is issued and the operation log is uploaded, and the service scope allocation model is optimized based on the operation log. This ensures that when the service scope is allocated based on the same user information (the user information that determines the authority, such as user region, user department, user position, etc., is the same), the service scope allocation model will not automatically allocate the core data service scope that has not passed the approval.

[0088] In one embodiment, the method further comprises:

[0089] Record the operation logs of the application interface and upload them to the blockchain for storage. The operation logs are uploaded to the blockchain for subsequent tracing, auditing, and query based on the application ID.

[0090] In one embodiment, if Figure 6 As shown, the above method also includes:

[0091] S601, in response to the audit triggering operation of the user on the application interface list display interface, displaying the audit interface;

[0092] S602, in response to the selection operation of the log screening condition on the audit interface, displaying a list of logs to be audited; the log screening condition includes the application interface name, time period, system ID and application ID.

[0093] By entering at least one filter condition, the corresponding audit log list can be called up. The audit log list includes multiple logs, but does not display the specific content. It mainly provides the application interface name, time period, system ID and application ID to simplify the interface display content. When the user clicks on a specific log, the specific log content will be displayed.

[0094] In the method provided by the embodiment of the present application, the user logs in to the blockchain database platform, enters the user management module, creates an interface user for the application, and receives a private key. Subsequent users enter the "interface access system" based on user login to register and manage interfaces. In the interface access system, the service range allowed under each user login account can be allocated. When IT asset data is subsequently extracted, constraints can be imposed based on the "allowed services" to avoid unauthorized data extraction and modification. In addition, the start and stop control of the "allowed service interface" can also be performed under the access system to manage the interface, and during the operation, the operation data is stored on the chain for subsequent auditing. In addition, the audit interface of the access system also supports tracing and viewing of historical operations of each interface.

[0095] Based on the development of access system applications, through front-end interface optimization + back-end blockchain data management, different "allowed services" can be assigned to each user, and a corresponding application interface list is given based on the "allowed services" for user management. During the management process, the operation process data is stored on the chain for subsequent auditing. This not only ensures differentiated management of interface access services under multiple roles and improves data security, but also supports operation traceability and assigns responsibilities to individuals.

[0096] It should be understood that, although the various steps in the flowcharts involved in the above-mentioned embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps does not have a strict order restriction, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above-mentioned embodiments can include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily to be carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0097] In one embodiment, a system interface management device based on blockchain is provided, such as Figure 7 As shown, the device includes: a login verification module 701, a service allocation window triggering module 702, an application interface list generating module 703, an application interface list displaying module 704, and an application interface calling response module 705.

[0098] Among them, the login verification module is used to respond to the user login operation. If the verification is passed, the operation interface of the access system creation is displayed. The service allocation window trigger module is used to respond to the user's input trigger operation on the access system creation operation interface, and pop up the service allocation window; the service allocation window is provided with multiple commonly used service options; the access system creation is created under the power grid asset management system application created in the blockchain database.

[0099] The application interface list generation module is used to generate an application ID and a system ID, as well as an association relationship between the application ID and the system ID and a user login account, and generate a corresponding application interface list in response to a user's check operation and confirmation operation on a service option;

[0100] The application interface list display module is used to display the application interface list;

[0101] The application interface call response module is used to respond to the start operation or stop operation performed by the user on the open interface on the application interface list display interface, and correspondingly open or close the corresponding interface.

[0102] It should be noted that the definitions of various terms in the blockchain-based system interface management device can be found in the description in the above embodiments and will not be repeated here.

[0103] Each module in the above-mentioned blockchain-based system interface management device can be implemented in whole or in part by software, hardware, or a combination thereof. Each of the above-mentioned modules can be embedded in or independent of a processor in a computer device in the form of hardware, or can be stored in a memory in a computer device in the form of software, so that the processor can call and execute the operations corresponding to each of the above modules.

[0104] In an exemplary embodiment, a computer device is provided. The computer device may be a server, and its internal structure diagram may be as shown in FIG. Figure 8 As shown. The computer device includes a processor, a memory, an input / output interface (Input / Output, referred to as I / O) and a communication interface. Among them, the processor, the memory and the input / output interface are connected through a system bus, and the communication interface is connected to the system bus through the input / output interface. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the computer device is used to store data such as a service range allocation model. The input / output interface of the computer device is used to exchange information between the processor and an external device. The communication interface of the computer device is used to communicate with an external terminal through a network connection. When the computer program is executed by the processor, a system interface management method based on blockchain is implemented.

[0105] Those skilled in the art will understand that Figure 8 The structure shown in the figure is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0106] In an exemplary embodiment, a computer device is provided, including a memory and a processor, wherein a computer program is stored in the memory, and when the processor executes the computer program, some or all of the steps of the above-mentioned blockchain-based system interface management method are implemented to realize corresponding functions, which will not be described in detail herein.

[0107] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, some or all of the steps of the above-mentioned blockchain-based system interface management method are implemented to achieve corresponding functions, which will not be described in detail here.

[0108] In one embodiment, a computer program product is provided, including a computer program. When the computer program is executed by a processor, it implements some or all of the steps of the above-mentioned blockchain-based system interface management method to implement corresponding functions, which will not be described in detail here.

[0109] It should be noted that the user information (including but not limited to user login information, application ID and system ID, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with relevant regulations.

[0110] A person of ordinary skill in the art can understand that all or part of the processes in the above-mentioned embodiment method can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in the present application can include at least one of non-volatile memory and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, an artificial intelligence (AI) processor, etc., but are not limited to this.

[0111] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this application.

[0112] The above-described embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.< / token>

Claims

1. A system interface management method based on blockchain, characterized in that: The method comprises: In response to the user login operation, if the verification is passed, the operation interface for creating the access system is displayed; In response to the user's input trigger operation on the operation interface of creating an access system, a service allocation window pops up; the service allocation window is provided with a plurality of commonly used service options; the creation access system is created under the power grid asset management system application created in the blockchain database; In response to the user's check operation and confirmation operation on the service option, generate an application ID and a system ID, as well as an association relationship between the application ID and the system ID and the user's login account, and generate a corresponding application interface list; Displaying the application interface list; In response to a start operation or a stop operation performed by a user on an interface opened on the application interface list display interface, the corresponding interface is opened or closed accordingly.

2. The method according to claim 1, characterized in that: In response to the user's check operation and confirmation operation on the service option, an application ID and a system ID are generated, as well as an association relationship between the application ID and the system ID and a user login account, and a corresponding application interface list is generated, including: Based on the application ID and the system ID, obtain a corresponding user login account; Obtaining user information corresponding to the user login account, the user information including the region, unit name, department and position; Determine the allowed service range corresponding to the user based on the user information and a pre-trained service range allocation model; Based on the service scope and the interface mapping table, an application interface list is obtained, wherein the interface mapping table represents a mapping relationship between the service scope and the application interface.

3. The method according to claim 1, characterized in that The training steps of the service range allocation model include: Obtain historical operation logs corresponding to multiple different user information from the blockchain; Eliminate the log records of the historical operation logs that contain alarm conditions that exceed the service scope; Perform feature extraction on the historical operation logs after elimination to extract application ID, system ID and service scope; Determine corresponding user information based on the extracted application ID and system ID; Inputting the user information into a preset neural network model, and comparing the output result with the service scope corresponding to the user information in the training set, and training the neural network model based on the comparison result until a maximum number of iterations is reached or the deviation of the comparison result is less than a preset deviation; The trained neural network model is used as the service range allocation model.

4. The method according to claim 2, characterized in that: The service scope includes a core data service scope and a non-core data service scope; after the step of determining the allowed service scope corresponding to the user, before the step of obtaining the application interface list based on the service scope and the interface mapping table, the step further includes: If the determined service scope includes the core data service scope, an approval request is sent to the system administrator; If the approval information is received from the system administrator, the step of obtaining the application interface list based on the service scope and the interface mapping table is entered; If the system administrator informs you that the application has failed the review, an alarm will be issued.

5. The method according to claim 1, characterized in that The method further comprises: Record the operation logs of the application interface and upload them to the blockchain for storage.

6. The method according to claim 5, characterized in that The method further comprises: In response to an audit trigger operation by a user on the application interface list display interface, displaying an audit interface; In response to the selection operation of the log screening condition on the audit interface, a list of logs to be audited is displayed; the log screening condition includes the application interface name, time period, system ID and application ID.

7. A system interface management device based on blockchain, characterized in that: The device comprises: A login verification module is used to respond to the user's login operation and display the operation interface for creating an access system if the verification is successful; A service allocation window trigger module is used to pop up a service allocation window in response to a user input trigger operation on the operation interface of creating an access system; the service allocation window is provided with a plurality of commonly used service options; the access system is created under the power grid asset management system application created in the blockchain database; An application interface list generation module, for generating an application ID and a system ID, as well as an association relationship between the application ID and the system ID and a user login account, and generating a corresponding application interface list in response to a user's check operation and a confirmation operation on the service option; An application interface list display module, used to display the application interface list; The application interface call response module is used to respond to the start operation or stop operation performed by the user on the interface opened on the application interface list display interface, and correspondingly open or close the corresponding interface.

8. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 6 are implemented.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

10. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

Images