Blockchain-based system interface management method and related products

Abstract

The application relates to a blockchain-based system interface management method and related products. Based on the development of an access admission system application, a plurality of commonly used service options are arranged on a service distribution window, then based on the check operation and the confirmation operation of a user on the service options, an application ID and a system ID are generated in the background, an association between the application ID, the system ID and a user login account is established, and a corresponding application interface list is generated; the application interface list generated in the background is displayed, so that different "allowed service ranges" can be allocated to each user, and a corresponding application interface list is given based on the "allowed service range", the user can start or stop the operation of the interface opened on the application interface list display interface, and the user can manage the interface, so that differentiated management of interface access services under multiple roles is ensured, and data security is improved.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of block chain interface management, in particular to a system interface management method and device based on block chain, computer equipment, readable storage medium and program product. BACKGROUND

[0002] The power grid asset management platform interfaces multiple asset management systems and involves multiple roles. In the implementation process of the power grid asset management platform based on block chain, the user registration security of the multiple roles is very important for the data governance process. Therefore, the access management under the multiple user roles is very important for ensuring the effectiveness of the on-chain data and is conducive to ensuring the data reliability and security under the interaction of the multiple roles of the power grid. SUMMARY

[0003] Therefore, it is necessary to provide a system interface management method, device, computer equipment, readable storage medium and program product based on block chain, which can realize data access security of multiple systems and multiple roles.

[0004] In a first aspect, the present application provides a system interface management method based on block chain, which comprises:

[0005] In response to a user login operation, if the verification is passed, an operation interface for creating an access system is displayed;

[0006] In response to an entry trigger operation of a user on the operation interface for creating the access system, a service allocation window is popped up. The service allocation window is provided with a plurality of commonly used service options. The access system is created for the power grid asset management system application created in the block chain database;

[0007] In response to a check operation of a user on the service options and a confirmation operation, an application ID and a system ID are generated, and an association relationship between the application ID and the system ID and the user login account is generated, and a corresponding application interface list is generated;

[0008] The application interface list is displayed;

[0009] In response to a start operation or a stop operation of a user on an open interface of the application interface list display interface, the corresponding interface is started or closed.

[0010] In one of the embodiments, in response to a check operation of a user on the service options and a confirmation operation, an application ID and a system ID are generated, and an association relationship between the application ID and the system ID and the user login account is generated, and a corresponding application interface list is generated, which comprises:

[0011] Based on the application ID and the system ID, the corresponding user login account is obtained;

[0012] obtain user information corresponding to the user login account, the user information including a region, a unit name, a department, and a position;

[0013] determine an allowed service range of the user based on the user information and a pre-trained service range allocation model;

[0014] obtain an application interface list based on the service range and an interface mapping table, wherein the interface mapping table represents a mapping relationship between the service range and the application interface.

[0015] In one embodiment, the training step of the service range allocation model includes:

[0016] obtain historical operation logs corresponding to a plurality of different user information from a blockchain;

[0017] remove log records in the historical operation logs that have a service range alarm;

[0018] extract features from the removed historical operation logs, including an application ID, a system ID, and a service range;

[0019] determine corresponding user information based on the extracted application ID and system ID;

[0020] input the user information into a preset neural network model, compare an output result with a service range corresponding to the user information in a training set, train the neural network model based on a comparison result until a maximum iteration number is reached or a deviation of the comparison result is less than a preset deviation;

[0021] use the trained neural network model as the service range allocation model.

[0022] In one embodiment, the service range includes a core data service range and a non-core data service range; after the step of determining the allowed service range of the user, before the step of obtaining the application interface list based on the service range and the interface mapping table, the method further includes:

[0023] if the determined service range includes the core data service range, send an approval request to a system administrator;

[0024] if an approval pass information fed back by the system administrator is received, proceed to the step of obtaining the application interface list based on the service range and the interface mapping table;

[0025] if an approval fail information fed back by the system administrator is received, alarm.

[0026] In one embodiment, the method further includes:

[0027] Log the operation of the application interface and upload to the blockchain storage.

[0028] In one of the embodiments, the method further comprises:

[0029] In response to the audit trigger operation of the user on the application interface list display interface, display the audit interface;

[0030] In response to the selection operation of the log filtering condition on the audit interface, display the to-be-audited log list; the log filtering condition includes the application interface name, the time period, the system ID and the application ID.

[0031] In a second aspect, a system interface management device based on the blockchain is provided, and the device comprises:

[0032] The login verification module is configured to, in response to the user login operation, if the verification is passed, display the operation interface for creating the access system;

[0033] The service allocation window trigger module is configured to, in response to the input trigger operation of the user on the operation interface for creating the access system, pop up the service allocation window; the service allocation window is provided with a plurality of commonly used service options; the access system to be created is created under the power grid asset management system application in the blockchain database;

[0034] The application interface list generation module is configured to, in response to the check operation of the user on the service option and the confirmation operation, generate the application ID and the system ID, and the association relationship between the application ID and the system ID and the user login account, and generate the corresponding application interface list;

[0035] The application interface list display module is configured to display the application interface list;

[0036] The application interface calling response module is configured to, in response to the start operation or the stop operation of the user on the interface opened on the application interface list display interface, start or close the corresponding interface.

[0037] In a third aspect, a computer device is provided, comprising a memory and a processor, the memory stores a computer program, and the processor implements the steps of the above method when executing the computer program.

[0038] In a fourth aspect, a computer readable storage medium is provided, which stores a computer program, and the computer program is executed by the processor to implement the steps of the above method.

[0039] In a fifth aspect, a computer program product is provided, comprising a computer program, and the computer program is executed by the processor to implement the steps of the above method.

[0040] The blockchain-based system interface management method, device, computer equipment, readable storage medium and program product. Based on the development of the access admission system application, a plurality of commonly used service options are provided on the service distribution window, and then based on the check operation of the user on the service option and the confirmation operation, the application ID and the system ID are generated in the background, the association between the application ID, the system ID and the user login account is established, and the corresponding application interface list is generated; the application interface list generated by the background is displayed, that is, the different "allowed service range" for each user is allocated, and the corresponding application interface list is given based on the "allowed service range", the user can start or stop the operation on the interface opened on the application interface list display interface, and the user can manage it, which ensures the differentiated management of interface access services under multiple roles and improves the data security. BRIEF DESCRIPTION OF DRAWINGS

[0041] In order to more clearly illustrate the technical solutions in the embodiments of the present application or the related art, the drawings needed to be used in the description of the embodiments of the present application or the related art will be briefly introduced. Obviously, the drawings in the following description are only some embodiments of the present application, and for those skilled in the art, other related drawings can also be obtained without creative labor.

[0042] Figure 1 A flowchart of a blockchain-based system interface management method in an embodiment;

[0043] Figure 2 A flowchart of the steps of generating an application ID and a system ID, and the association between the application ID, the system ID and the user login account, and generating the corresponding application interface list in response to the check operation of the user on the service option and the confirmation operation in an embodiment;

[0044] Figure 3 A flowchart of a blockchain-based system interface management method in another embodiment;

[0045] Figure 4 A flowchart of a blockchain-based system interface management method in another embodiment;

[0046] Figure 5 A flowchart of a blockchain-based system interface management method in another embodiment;

[0047] Figure 6 A block diagram of a blockchain-based system interface management device in an embodiment;

[0048] Figure 7 An internal structure diagram of a computer equipment in an embodiment. DETAILED DESCRIPTION

[0049] For the purposes of the present application, the technical solutions and advantages thereof are more clearly apparent, the present application is further described in detail below in conjunction with the accompanying drawings and examples. It should be understood that the specific examples described herein are merely intended to explain the present application, and are not intended to limit the present application.

[0050] In one exemplary embodiment, as shown in Figure 1 A blockchain-based system interface management method is provided, the method comprising:

[0051] S101, in response to a user login operation, if the verification is passed, an operation interface for creating an access system is displayed.

[0052] The verification process based on the user login operation can be password-based login verification or JWT (JSON Web Token)-based login verification. Specifically, when the password-based login verification is used, the specific steps can include:

[0053] The user inputs a username and a password in the login interface and submits a login form, the username and the password are sent to the server through an HTTP request, after the server receives the username and the password, it first checks whether the username exists in the database, if the username exists, the corresponding password hash value of the user is taken out. The user's input password is hashed using the same hash algorithm, and the processing result is compared with the hash value stored in the database; if the hash values match, it means the password is correct, and the user verification is passed; if the hash values do not match, it means the password is incorrect, and the user verification fails.

[0054] When the JWT-based login verification is used, the specific steps can include:

[0055] The user inputs a username and a password in the login interface and submits a login form, the username and the password are sent to the server through an HTTP request; the server verifies the correctness of the username and the password, the method is similar to the password-based login verification, which is not described here. If the hash values match, the server will generate a JWT, which contains three parts: header (Header), payload (Payload) and signature (Signature), wherein the header usually contains the type of the token (JWT) and the signature algorithm used (such as HS256), the payload contains the user's information (such as user ID, username, etc.), but does not contain sensitive information (such as password), and the signature is obtained by signing the hash value of the header and the payload using the server key, to ensure the security and integrity of the token during transmission.

[0056] The server returns the generated JWT as a response to the user end, and the user end uses the JWT. In subsequent application interface creation and other operation requests, the user end adds the JWT to the header of the request (Authorization: Bearer <token>) to the server.

[0057] After the server receives the request, it verifies the signature and validity period of the JWT. If the verification is successful, it processes the request and returns a response.

[0058] In the JWT authentication mode, the server does not save session information, improving scalability. The payload part of the JWT can be customized to add the required fields. JWT has corresponding implementations and supports in various platforms and programming languages, which is beneficial for the power asset management system which involves the integration of various types of asset management systems with the blockchain platform.

[0059] S102, in response to the user's input trigger operation on the operation interface of the creation access system, a service allocation window is popped up; the service allocation window is provided with a plurality of commonly used service options; the creation access system is created for the power asset management system application created under the blockchain database. There is a corresponding relationship between the commonly used service options and the user login account. The application interface commonly used by users in different departments and different posts is different. Based on the historical operation data or the self-defined corresponding relationship between the user login account and the commonly used service options, the application interface list is generated. When other users create the application interface list in the future, the plurality of service options matched with them are displayed on the service allocation window, which helps the user to quickly configure.

[0060] S103, in response to the user's check operation on the service option and the confirmation operation, the application ID and the system ID are generated, and the association relationship between the application ID and the system ID and the user login account is generated, and the corresponding application interface list is generated.

[0061] The application ID is a unique identifier for an application on the blockchain platform. It allows the blockchain platform to distinguish requests from different applications, ensuring that each application can be correctly identified and processed. Through the application ID, the blockchain platform can implement fine-grained permission control. Different application IDs may correspond to different permission levels. The platform can limit or allow certain operations according to the application ID, thereby ensuring the security of sensitive data and resources. In the event of a security incident or the need for investigation, the application ID can serve as an important basis for tracking and auditing. The platform can trace and locate problems by viewing the request and operation records related to a specific application ID. Based on the association relationship between the application ID and the system ID and the user login account, the extracted system can be traced and extracted through the application ID and the system ID in the future.

[0062] The system ID is an identity identifier of the blockchain platform itself, which is used to verify the identity and authority of the blockchain platform when interacting with other asset management systems, helping to prevent unauthorized access and tampering. In the power grid blockchain platform, there are multiple user and system applications. The system ID can help to isolate different systems or applications. By assigning a unique system ID to each system, the platform can ensure that data and operations between them do not interfere with each other, thereby enhancing the security and stability of the system.

[0063] S104, display the application interface list;

[0064] S105, in response to the user's start operation or stop operation on the interface opened on the application interface list display interface, the corresponding interface is opened or closed.

[0065] Specifically, based on the development of access admission system applications, a plurality of service options are provided on the service allocation window, and then based on the user's check operation on the service options and the confirmation operation, the application ID and the system ID are generated in the background, and the association between the application ID, the system ID and the user login account is established, and the corresponding application interface list is generated; the application interface list generated by the background is displayed, which can realize the allocation of different "allowed service ranges" to each user, and based on the "allowed service range", the corresponding application interface list is given, and the user can start operation or stop operation on the interface opened on the application interface list display interface, for user management, ensuring differentiated management of interface access services under multiple roles, and improving data security.

[0066] In one embodiment, as shown in Figure 2 In response to the user's check operation on the service options and the confirmation operation, the application ID and the system ID are generated, and the association between the application ID and the system ID and the user login account is established, and the corresponding application interface list is generated.

[0067] S301, based on the application ID and the system ID, the corresponding user login account is obtained. Based on the previously established association between the application ID and the system ID and the user login account, the user login account can be quickly obtained

[0068] S302, obtain the user information corresponding to the user login account, including the region, the unit name, the department and the position.

[0069] S303, determine the allowed service range corresponding to the user based on the user information and the pre-trained service range allocation model. Optionally, a user feature vector can be constructed according to the user historical operation log and the user information, and the user feature vector is input into the pre-trained service range allocation model. Optionally, the determined service range is sent to a smart contract in a blockchain network, and the smart contract updates the service range record of the user according to the service range allocation result, and records the timestamp, performer and other information of the allocation operation.

[0070] S304, obtain an application interface list based on the service range and an interface mapping table, wherein the interface mapping table represents the mapping relationship between the service range and the application interface.

[0071] Different service contents correspond to different application interfaces that need to be accessed, which can be pre-configured. For example, if IT asset data is accessed, the IT asset data management system needs to be accessed, and if user information is viewed, the user information management system needs to be accessed.

[0072] Through personalized allocation of the service range based on the user login account, the differences in permissions of the power grid users in different posts and different positions are fully considered, and then based on the allocated service range and the interface mapping table, the application interface list corresponding to the user is obtained, so as to ensure that the application interfaces in the list are all accessible interfaces of the user and guarantee data security.

[0073] In one of the embodiments, as shown in Figure 3 the training steps of the service range allocation model include:

[0074] S401, obtain historical operation logs corresponding to a plurality of different user information from a blockchain;

[0075] S402, remove log records with super-service range alarm in the historical operation logs. The historical operation logs include alarm information.

[0076] S403, perform feature extraction on the removed historical operation logs, and extract application ID, system ID and service range;

[0077] S404, determine corresponding user information based on the extracted application ID and system ID;

[0078] S405, input the user information into a pre-set neural network model, compare the output result with the service range corresponding to the user information in the training set, train the neural network model based on the comparison result, and stop until the maximum iteration number is reached or the deviation of the comparison result is less than a pre-set deviation;

[0079] S406, use the trained neural network model as a service range allocation model.

[0080] Specifically, by performing historical operation log screening based on whether there is alarm information, it is ensured that the historical operation log of the user matched in the service range is used for model training, so that the trained model can accurately reflect the differences in the allowed service range of users in different departments and different posts. Based on the service range determined by the service range allocation model, the security of application interface access can be ensured.

[0081] In one of the embodiments, as shown in Figure 4 The service range includes a core data service range and a non-core data service range. After the step of determining the allowed service range of the user, before the step of obtaining the application interface list based on the service range and the interface mapping table, the method further includes:

[0082] S501, if the determined service range includes the core data service range, sending an approval request to the system administrator;

[0083] S502, if the approval pass information fed back by the system administrator is received, entering the step of obtaining the application interface list based on the service range and the interface mapping table;

[0084] S503, if the approval fail information fed back by the system administrator is received, alarming.

[0085] For core data, if data leakage or change occurs, it will cause unpredictable consequences to the safety of power grid operation. Therefore, in addition to automatically generating the allowed service range based on the service range allocation model, for the core data service range, a manual approval node is set to balance the speed and safety of service range allocation.

[0086] In one of the embodiments, if the approval fail information fed back by the system administrator is received, the operation log is uploaded and the service range allocation model is optimized based on the operation log. It is ensured that the service range allocation model will not automatically allocate the core data service range with approval fail in the future based on the same user information (referring to the user region, user department, user post and other user information that determine the permission).

[0087] In one of the embodiments, the method further includes:

[0088] Recording the operation log about the application interface and uploading it to the blockchain storage. The operation log is chained to facilitate subsequent tracing, auditing, querying and the like based on the application ID.

[0089] In one of the embodiments, as shown in Figure 5 The method further includes:

[0090] S601, in response to a user's audit triggering operation on the application interface list display interface, display an audit interface;

[0091] S602, in response to a selection operation of a log filtering condition on the audit interface, display a list of logs to be audited; the log filtering condition includes an application interface name, a time period, a system ID, and an application ID.

[0092] By entering at least one filtering condition, the corresponding audit log list can be called up, which includes multiple logs but does not display specific content, mainly including the application interface name, time period, system ID, and application ID, to simplify the interface display content. When the user specifically clicks on a log, the specific log content is displayed.

[0093] The method provided by the embodiments of the present application is that the user logs in to the blockchain database platform and enters the user management module to create an interface user of the application and obtain a private key. Subsequently, the user logs in based on the user to register and manage the interface in the interface access system. In the interface access system, the allowed service range of each user login account can be allocated, and subsequent IT asset data extraction can be based on the allowed service to be restricted to avoid unauthorized data extraction, modification, etc. In addition, the start and stop control of the allowed service interface can be performed in the access system to manage the interface, and the operation data in the operation process are all stored on the chain for subsequent auditing. In addition, the audit interface of the access system also supports tracing and viewing the historical operations of each interface.

[0094] Based on the development of the access system application, through front-end interface optimization + back-end blockchain data management, different allowed services can be allocated to each user, and the corresponding application interface list is given based on the allowed service for user management. In the management process, the operation process data are all stored on the chain for subsequent auditing, which not only ensures differentiated management of interface access services under multiple roles and improves data security, but also supports operation traceability and personal responsibility.

[0095] It should be understood that, although each step in the flowchart involved in each embodiment as described above is displayed in sequence according to the arrow, these steps are not necessarily executed in sequence according to the arrow. Unless otherwise specified herein, the execution of these steps is not strictly limited in sequence, and these steps can be executed in other sequences. Moreover, at least part of the steps in the flowchart involved in each embodiment as described above can include multiple steps or stages, which are not necessarily executed at the same time, but can be executed at different times, and the execution sequence of these steps or stages is not necessarily sequential, but can be executed in rotation or alternation with at least part of other steps or steps or stages in other steps.

[0096] In one embodiment, a blockchain-based system interface management apparatus is provided, as shown in the figure, the apparatus comprises: a login verification module 701, a service allocation window triggering module 702, an application interface list generating module 703, an application interface list displaying module 704, and an application interface calling response module 705. Figure 6

[0097] The login verification module is configured to, in response to a user login operation, display an operation interface for creating an access system if the verification is passed.The service allocation window triggering module is configured to, in response to a user entry triggering operation on the operation interface for creating an access system, pop up a service allocation window, wherein the service allocation window is provided with a plurality of commonly used service options.

[0098] The application interface list generating module is configured to, in response to a user check operation on a service option and a confirmation operation, generate an application ID and a system ID, and an association between the application ID and the system ID and a user login account, and generate a corresponding application interface list.

[0099] The application interface list displaying module is configured to display the application interface list.

[0100] The application interface calling response module is configured to, in response to a user start operation or stop operation on an open interface on the application interface list display interface, start or stop the corresponding interface.

[0101] It should be noted that the definitions of the terms in the blockchain-based system interface management apparatus can be referred to the descriptions in the above embodiments, which will not be repeated here.

[0102] The above modules of the blockchain-based system interface management apparatus can be realized by software, hardware, or a combination thereof. The above modules can be embedded in or independent of the processor in the computer device in hardware form, or stored in the memory in the computer device in software form, so as to be called and executed by the processor to perform the operations corresponding to the above modules.

[0103] In one exemplary embodiment, a computer device is provided, which can be a server, and the internal structure diagram thereof can be as shown in the figure. Figure 7 As shown in the figure. The computer device includes a processor, a memory, an input / output interface (Input / Output, referred to as I / O) and a communication interface. Among them, the processor, the memory and the input / output interface are connected through the system bus, and the communication interface is connected to the system bus through the input / output interface. Among them, the processor of the computer device is used to provide computing and control capability. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the computer device is used to store data such as service range allocation model. The input / output interface of the computer device is used to exchange information between the processor and the external device. The communication interface of the computer device is used to communicate with the terminal outside through the network connection. The computer program is executed by the processor to realize a kind of system interface management method based on block chain.

[0104] Those skilled in the art can understand that, Figure 7 The structure shown in the figure is only a block diagram of part of the structure related to the scheme of the present application, and does not constitute a limitation on the computer device to which the scheme of the present application is applied. The specific computer device can include more or fewer components than those shown in the figure, or combine certain components, or have a different component arrangement.

[0105] In one exemplary embodiment, a computer device is provided, including a memory and a processor, the memory stores a computer program, and the processor executes the computer program to implement part or all of the steps of the above-mentioned system interface management method based on block chain to correspondingly implement the corresponding functions, which are not described here.

[0106] In one embodiment, a computer readable storage medium is provided, which stores a computer program, and the computer program is executed by the processor to implement part or all of the steps of the above-mentioned system interface management method based on block chain to correspondingly implement the corresponding functions, which are not described here.

[0107] In one embodiment, a computer program product is provided, including a computer program, which is executed by the processor to implement part or all of the steps of the above-mentioned system interface management method based on block chain to correspondingly implement the corresponding functions, which are not described here.

[0108] It should be noted that the user information (including but not limited to user login information, application ID and system ID, etc.) and data (including but not limited to data for analysis, stored data, displayed data, etc.) involved in the present application are all information and data authorized by the user or authorized by all parties, and the collection, use and processing of related data need to comply with relevant regulations.

[0109] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program. The computer program can be stored in a non-volatile computer readable storage medium, and when executed, can include the processes of the above-mentioned embodiment methods. Any reference to memory, database or other medium used in the embodiments provided in the present application can include at least one of non-volatile memory and volatile memory. The non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical storage, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetoresistive random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. The volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration but not limitation, the RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM), etc. The database involved in the embodiments provided in the present application can include at least one of a relational database and a non-relational database. The non-relational database can include a distributed database based on a block chain, etc., without being limited thereto. The processor involved in the embodiments provided in the present application can be a general-purpose processor, a central processing unit, a graphics processing unit, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, an artificial intelligence (AI) processor, etc., without being limited thereto.

[0110] The technical features of the above embodiments can be combined in any manner. To make the description concise, not all possible combinations of the technical features in the above embodiments are described, but as long as the combinations of the technical features do not exist, they should be considered as the scope of the present application.

[0111] The above-described embodiments are merely illustrative of several embodiments of the present application, which are described in more detail and in a specific manner, but should not be construed as limiting the scope of the patent of the present application. It should be noted that, for those of ordinary skill in the art, several modifications and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application should be subject to the appended claims.< / token>

Claims

1. A system interface management method based on blockchain, characterized in that, The method includes: In response to a user login attempt, if the verification is successful, the interface for creating an access control system will be displayed. In response to the user's input trigger operation on the operation interface of the access control system creation, a service allocation window pops up; the service allocation window has several commonly used service options; the access control system creation is created under the power grid asset management system application created in the blockchain database; In response to the user's selection and confirmation of the service options, an application ID and a system ID are generated, along with the association between the application ID, the system ID, and the user's login account. A corresponding list of application interfaces is also generated. The application ID is a unique identifier for the application on the blockchain platform, used to distinguish requests from different applications. Different application IDs correspond to different permission levels, and the blockchain platform uses the application ID to restrict or allow user operations on the application. The system ID is the blockchain platform's own identity identifier, used to verify the blockchain platform's identity and permissions when interacting with other power grid asset management systems. Each power grid asset management system is assigned a unique system ID, which the blockchain platform uses to isolate applications from different power grid asset management systems or different power grid asset management systems based on the system ID. Display the list of application interfaces; In response to the user's start or stop operation on the open interfaces displayed on the application interface list interface, the corresponding interface is turned on or off.

2. The method according to claim 1, characterized in that, In response to the user's selection and confirmation of the service options, an application ID and a system ID are generated, along with the association between the application ID and the system ID and the user's login account. A corresponding list of application interfaces is also generated, including: Based on the application ID and the system ID, obtain the corresponding user login account; Obtain the user information corresponding to the user login account, including the user's region, company name, department, and position; Based on the user information and the pre-trained service range allocation model, the allowed service range for each user is determined. Based on the service scope and interface mapping table, a list of application interfaces is obtained, wherein the interface mapping table represents the mapping relationship between the service scope and the application interfaces.

3. The method according to claim 2, characterized in that, The training steps for the service coverage allocation model include: Obtain historical operation logs corresponding to multiple different user information from the blockchain; Remove log records from the historical operation logs that contain alarms indicating out-of-service range. Feature extraction is performed on the removed historical operation logs to extract application ID, system ID, and service scope; Based on the extracted application ID and system ID, the corresponding user information is determined; The user information is input into a preset neural network model, and the output result is compared with the service range corresponding to the user information in the training set. The neural network model is trained based on the comparison result until the maximum number of iterations is reached or the deviation of the comparison result is less than the preset deviation. The trained neural network model is used as the service scope allocation model.

4. The method according to claim 2, characterized in that, The service scope includes core data service scope and non-core data service scope; after the step of determining the allowed service scope for a user and before the step of obtaining the application interface list based on the service scope and the interface mapping table, the following is also included: If the defined service scope includes core data services, then send an approval request to the system administrator; If the system administrator confirms approval, proceed to the step of obtaining the application interface list based on the service scope and interface mapping table. An alert will be issued if the system administrator sends a notification that the approval was not approved.

5. The method according to claim 1, characterized in that, The method further includes: Record operation logs related to the application interface and upload them to blockchain storage.

6. The method according to claim 5, characterized in that, The method further includes: In response to a user's audit trigger operation on the application interface list display interface, the audit interface is displayed; In response to the selection of log filtering conditions on the audit interface, a list of logs to be audited is displayed; the log filtering conditions include application interface name, time period, system ID, and application ID.

7. A blockchain-based system interface management device, characterized in that, The device includes: The login verification module is used to respond to user login operations. If the verification is successful, the operation interface for creating an access control system will be displayed. The service allocation window trigger module is used to respond to the user's input trigger operation on the operation interface of the access control system creation platform and pop up the service allocation window; the service allocation window has several commonly used service options; the access control system creation platform is created under the power grid asset management system application created in the blockchain database; The application interface list generation module is used to generate an application ID and a system ID in response to the user's selection and confirmation of the service options, as well as the association between the application ID, the system ID, and the user's login account, and to generate a corresponding application interface list. The application ID is a unique identifier for the application on the blockchain platform, and the blockchain platform uses the application ID to distinguish requests from different applications. Different application IDs correspond to different permission levels, and the blockchain platform uses the application ID to restrict or allow user operations on the application. The system ID is the identity identifier of the blockchain platform itself, and the system ID is used to verify the identity and permissions of the blockchain platform when interacting with other power grid asset management systems. Each power grid asset management system is assigned a unique system ID, and the blockchain platform uses the system ID to isolate applications from different power grid asset management systems. The application interface list display module is used to display the application interface list; The application interface call response module is used to respond to the user's start or stop operation on the open interfaces displayed on the application interface list interface, and to open or close the corresponding interface accordingly.

8. A computer device comprising a memory and a processor, wherein the memory stores a computer program, characterized in that, When the processor executes the computer program, it implements the steps of the method according to any one of claims 1 to 6.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by a processor, it implements the steps of the method according to any one of claims 1 to 6.

10. A computer program product, comprising a computer program, characterized in that, When the computer program is executed by a processor, it implements the steps of the method according to any one of claims 1 to 6.

Images