User authority management method and device, equipment and storage medium

Abstract

The invention provides a user permission management method and device, equipment and a storage medium, and belongs to the field of information processing, the method comprises the steps that attribute information of a permission application user is acquired, and the attribute information comprises at least one feature attribute; obtaining a preset feature attribute permission application frequency table, wherein the preset feature attribute permission application frequency table is established in advance based on historical feature attributes and permission application frequencies; determining a resource application sub-vector corresponding to each feature attribute of the user according to the attribute information and the preset feature attribute permission application frequency table; according to the resource application sub-vector corresponding to each feature attribute, constructing a resource application vector, and sending the resource application vector to a permission approval terminal, so that the permission approval terminal performs permission approval according to the resource application vector; and obtaining a target permission resource granted by the permission approval end. According to the invention, the efficiency and accuracy of user authority management are greatly improved.

Description

Technical Field

[0001] The present application relates to the field of information processing technology, and in particular to a user authority management method, apparatus, device and storage medium. Background Art

[0002] With the rapid development of computer and network communication technology, more and more enterprise-level network applications are deployed in open network platforms, and information security has become the focus of network application system research. The diversification of information and its transmission methods and the increase in the number of users have made the traditional method of direct access control of users more complicated, and a new permission control method is urgently needed to replace it. At present, the traditional permission control method is role-based permission management, but with the development of the Internet, role-based management cannot fully adapt to new organizational relationships. There are problems such as large workload in the allocation of permissions, complex permission allocation application and review.

[0003] Therefore, how to accurately and efficiently allocate permission resources to users is an urgent problem to be solved. Summary of the invention

[0004] The main purpose of this application is to provide a user authority management method, device, equipment and storage medium, aiming to improve the efficiency and accuracy of authority resource allocation.

[0005] In a first aspect, the present application provides a user rights management method, which is applied to a rights application end, and the user rights management method comprises the following steps:

[0006] Acquire attribute information of a user applying for permission, wherein the attribute information includes at least one characteristic attribute;

[0007] Obtaining a preset characteristic attribute permission application frequency table, wherein the preset characteristic attribute permission application frequency table is pre-established based on historical characteristic attributes and permission application frequency;

[0008] Determine a resource application subvector corresponding to each characteristic attribute of the user according to the attribute information and the preset characteristic attribute permission application frequency table;

[0009] Constructing a resource application vector according to the resource application sub-vector corresponding to each characteristic attribute, and sending the resource application vector to the authority approval end, so that the authority approval end performs authority approval according to the resource application vector;

[0010] Obtain the target permission resource granted by the permission approval end.

[0011] In a second aspect, the present application further provides a user rights management method, which is applied to a rights approval end, and the method includes:

[0012] Obtaining a resource application vector and user attribute information sent by the permission application end, and determining a resource verification vector according to the user attribute information;

[0013] Verify the resource application vector according to the resource verification vector to obtain an authorized first authority resource;

[0014] Verifying unverified resource application items in the resource verification vector to obtain authorized second permission resources;

[0015] A target authority resource is determined according to the first authority resource and the second authority resource, and the target authority resource is sent to the authority applying end.

[0016] In a third aspect, the present application further provides a user rights management device, the user rights management device comprising an acquisition module, a determination module, a construction module and a sending module, wherein:

[0017] The acquisition module is used to acquire attribute information of the user applying for permission, wherein the attribute information includes at least one characteristic attribute;

[0018] The acquisition module is further used to acquire a preset characteristic attribute permission application frequency table, wherein the preset characteristic attribute permission application frequency table is pre-established based on historical characteristic attributes and permission application frequency;

[0019] The determination module is used to determine the resource application sub-vector corresponding to each characteristic attribute of the user according to the attribute information and the preset characteristic attribute permission application frequency table;

[0020] The construction module is used to construct a resource application vector according to the resource application sub-vector corresponding to each characteristic attribute;

[0021] The sending module is used to send the resource application vector to the authority approval end, so that the authority approval end performs authority approval according to the resource application vector;

[0022] The acquisition module is also used to acquire the target authority resource granted by the authority approval end.

[0023] In a fourth aspect, the present application also provides a computer device, comprising a processor, a memory, and a computer program stored in the memory and executable by the processor, wherein when the computer program is executed by the processor, the steps of the user authority management method as described above are implemented.

[0024] In a fifth aspect, the present application also provides a computer-readable storage medium, on which a computer program is stored, wherein when the computer program is executed by a processor, the steps of the user authority management method as described above are implemented.

[0025] The present application provides a user authority management method, apparatus, device and storage medium. The present application obtains attribute information of a user who applies for authority, and the attribute information includes at least one characteristic attribute; obtains a preset characteristic attribute authority application frequency table, and the preset characteristic attribute authority application frequency table is pre-established based on historical characteristic attributes and authority application frequency; determines the resource application sub-vector corresponding to each characteristic attribute of the user according to the attribute information and the preset characteristic attribute authority application frequency table; constructs a resource application vector according to the resource application sub-vector corresponding to each characteristic attribute, and sends the resource application vector to the authority approval end, so that the authority approval end performs authority approval according to the resource application vector; obtains the target authority resource granted by the authority approval end. The present application can accurately determine the resource application vector corresponding to the authority resource to be applied for by the user according to the user's attribute information and the preset characteristic attribute authority application frequency table, and sends the resource application vector to the authority approval end, so that the authority approval end can effectively and accurately review the user's authority resource application, greatly improving the efficiency and accuracy of user authority management. BRIEF DESCRIPTION OF THE DRAWINGS

[0026] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0027] Figure 1 A flowchart of a user rights management method provided in an embodiment of the present application;

[0028] Figure 2 for Figure 1 A schematic diagram of the sub-step flow chart of the user rights management method in FIG.

[0029] Figure 3 A flowchart of another user rights management method provided in an embodiment of the present application;

[0030] Figure 4 A schematic block diagram of a user rights management device provided in an embodiment of the present application;

[0031] Figure 5 for Figure 4 A schematic block diagram of a submodule of a user rights management device in;

[0032] Figure 6 A schematic block diagram of the structure of a computer device provided in an embodiment of the present application.

[0033] The realization of the purpose, functional features and advantages of this application will be further explained in conjunction with embodiments and with reference to the accompanying drawings. DETAILED DESCRIPTION

[0034] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0035] The flowcharts shown in the accompanying drawings are only examples and do not necessarily include all the contents and operations / steps, nor must they be executed in the order described. For example, some operations / steps may also be decomposed, combined or partially merged, so the actual execution order may change according to actual conditions.

[0036] The embodiments of the present application can acquire and process relevant data based on artificial intelligence technology. Among them, artificial intelligence (AI) is the theory, method, technology and application system that uses digital computers or machines controlled by digital computers to simulate, extend and expand human intelligence, perceive the environment, acquire knowledge and use knowledge to obtain the best results.

[0037] AI basic technologies generally include sensors, dedicated AI chips, cloud computing, distributed storage, big data processing technology, operation / interaction systems, mechatronics, etc. AI software technologies mainly include computer vision technology, robotics technology, biometrics technology, speech processing technology, natural language processing technology, and machine learning / deep learning.

[0038] With the rapid development of computer and network communication technology, more and more enterprise-level network applications are deployed in open network platforms, and information security has become the focus of network application system research. The diversification of information and its transmission methods and the increase in the number of users have made the traditional method of direct access control of users more complicated, and a new permission control method is urgently needed to replace it. At present, the traditional permission control method is role-based permission management, but with the development of the Internet, role-based management cannot fully adapt to new organizational relationships. There are problems such as large workload in the allocation of permissions, complex permission allocation application and review.

[0039] To solve the above problems, the embodiments of the present application provide a user rights management method, apparatus, device and storage medium. The user rights management method includes: obtaining attribute information of the user who applies for rights, wherein the attribute information includes at least one characteristic attribute; obtaining a preset characteristic attribute permission application frequency table, wherein the preset characteristic attribute permission application frequency table is pre-established based on historical characteristic attributes and permission application frequency; determining the resource application sub-vector corresponding to each characteristic attribute of the user according to the attribute information and the preset characteristic attribute permission application frequency table; constructing a resource application vector according to the resource application sub-vector corresponding to each characteristic attribute, and sending the resource application vector to the permission approval end, so that the permission approval end performs permission approval according to the resource application vector; and obtaining the target permission resource granted by the permission approval end.

[0040] Among them, the user authority management method can be applied to computer devices, and the computer devices can be electronic devices such as mobile phones, tablet computers, laptops, desktop computers, personal digital assistants and wearable devices.

[0041] In conjunction with the accompanying drawings, some embodiments of the present application are described in detail below. In the absence of conflict, the following embodiments and features in the embodiments can be combined with each other.

[0042] Please refer to Figure 1 , Figure 1 A flowchart of a user rights management method provided in an embodiment of the present application.

[0043] like Figure 1 As shown, the user rights management method includes steps S101 to S105.

[0044] Step S101: Acquire attribute information of a user applying for permission, wherein the attribute information includes at least one characteristic attribute.

[0045] The attribute information includes but is not limited to position, company, job title, type of work, gender, department, etc.

[0046] In some embodiments, the attribute information of the permission application user is obtained, and the attribute information includes at least one characteristic attribute. By obtaining the user's attribute information, the permission resource that the user needs to apply for can be known more quickly.

[0047] For example, if the permission application user is an employee of an insurance company, the attribute information of the employee is obtained, and the attribute information includes company, department, position, gender, level, etc. For another example, if the permission application user is a doctor in a hospital, the attribute information includes hospital name, department, position, gender, title, etc.

[0048] Step S102: obtaining a preset characteristic attribute permission application frequency table, wherein the preset characteristic attribute permission application frequency table is established in advance based on historical characteristic attributes and permission application frequency.

[0049] Among them, the preset characteristic attribute permission application frequency table is pre-established based on historical characteristic attributes and permission application frequency. The preset characteristic attribute permission application frequency table can be established according to actual conditions, and the embodiment of the present invention does not make specific limitations on this.

[0050] In some embodiments, historical attribute information is obtained, and historical characteristic attribute 1 in the historical attribute information and the permission resource status of each permission resource applied for are obtained and recorded, wherein the permission resource status includes permission resource application or permission resource non-application; the steps of obtaining historical attribute information, obtaining historical characteristic attribute 1 in the historical attribute information and the permission resource status of each permission resource applied for are obtained and recorded in a loop until a preset number of times is reached, and the permission resource status corresponding to each permission resource of the historical characteristic attribute 1 is superimposed to obtain the total number of permission resource applications for each permission resource of the historical characteristic attribute 1. Among them, the preset number of times can be set according to actual conditions, and the embodiments of the present invention do not make specific limitations on this. For example, the preset number of times can be set to 500. By cyclically superimposing the permission resource status of each permission resource applied for the historical characteristic attribute 1 in the historical attribute information, a preset characteristic attribute permission application number table can be accurately obtained.

[0051] Exemplarily, the permission resources include permission resource a, permission resource b, permission resource c, permission resource d, and permission resource e; historical attribute information of user 1 is obtained, and the characteristic attribute position of the historical attribute information has applied for permission resource a, permission resource b, and permission resource c, but has not applied for permission resource d and permission resource e; historical attribute information of user 2 is obtained, and the characteristic attribute position of the historical attribute information has applied for permission resource a, permission resource b, and permission resource c, but has not applied for permission resource d and permission resource e; historical attribute information of user 3 is obtained, and the characteristic attribute position of the historical attribute information has applied for permission resource a, permission resource b, permission resource c, but has not applied for permission resource d and permission resource e Source d and permission resource e, but not permission resource c; obtain historical attribute information of user 4, the characteristic attribute position of this historical attribute information has applied for permission resource a and permission resource b, but not for permission resource c, permission resource d, and permission resource e; obtain historical attribute information of user 5, the characteristic attribute position of this historical attribute information has applied for permission resource a, permission resource b, and permission resource d, but not for permission resource c and permission resource e; then the number of times the characteristic attribute position has applied for permission resource a is 5 times, the number of times permission resource b is 5 times, the number of times permission resource c is 3 times, the number of times permission resource d is 2 times, and the number of times permission resource e is 1 time.

[0052] It should be noted that, by repeatedly executing the aforementioned steps, the number of characteristic attribute permission application times corresponding to each characteristic attribute is established, and then a preset characteristic attribute permission application times table can be obtained.

[0053] Step S103: Determine a resource application subvector corresponding to each characteristic attribute of the user according to the attribute information and the preset characteristic attribute permission application frequency table.

[0054] The resource application sub-vector is a vector corresponding to the characteristic attribute, and the resource application sub-vector includes multiple elements.

[0055] In some embodiments, Figure 2 As shown, step S103 includes sub-steps S1031 and S1032.

[0056] Sub-step S1031: Determine the element value of each element for constructing the resource application sub-vector according to each of the characteristic attributes and the application times corresponding to each permission in the preset characteristic attribute permission application times table.

[0057] The element value includes 0 or 1.

[0058] In some embodiments, the preset application threshold of each permission corresponding to the characteristic attribute is obtained; the element value of the element corresponding to the permission whose application times are greater than the preset application threshold is set to 1; the element value of the element corresponding to the permission whose application times are less than or equal to the preset application threshold is set to 0. The preset application threshold can be set according to actual conditions, and the embodiment of the present invention does not specifically limit this. For example, the preset application threshold can be set to 50.

[0059] Exemplarily, the preset application threshold is 50, and the attribute information is that the number of applications for the corresponding permission resource a of the position is 200, the number of applications for the corresponding permission resource b is 10, the number of applications for the corresponding permission resource c is 70, the number of applications for the corresponding permission resource d is 0, and the number of applications for the corresponding permission resource e is 120. Then, the element value of the corresponding element of the permission resource a whose application threshold is greater than 50 is set to 1, the element value of the corresponding element of the permission resource b whose application threshold is less than 50 is set to 0, the element value of the corresponding element of the permission resource c whose application threshold is greater than 50 is set to 1, the element value of the corresponding element of the permission resource d whose application threshold is less than 50 is set to 1, and the element value of the corresponding element of the permission resource e whose application threshold is greater than 50 is set to 1.

[0060] Sub-step S1032: construct a vector of the element values ​​of each of the elements to generate a resource application sub-vector of the characteristic attribute.

[0061] The element values ​​of the elements corresponding to the permission resource are constructed as vectors to obtain the resource application sub-vector of the characteristic attribute. By constructing the element values ​​of the elements as vectors, the resource application sub-vector of the characteristic attribute can be accurately obtained, which greatly improves the efficiency and accuracy of permission resource application.

[0062] Exemplarily, the permission resources corresponding to the position include permission resource a, permission resource b, permission resource c, permission resource d and permission resource e; wherein the element value of the element corresponding to permission resource a is 1, the element value of the element corresponding to permission resource b is 0, the element value of the element corresponding to permission resource c is 1, the element value of the element corresponding to permission resource d is 1, and the element value of the element corresponding to permission resource e is 1. A vector is constructed for the element values ​​of the elements corresponding to permission resource a, 1, 0, 1, 1, 1 and 1, and the resource application sub-vector of the position is 10111.

[0063] Step S104: construct a resource application vector according to the resource application sub-vector corresponding to each characteristic attribute, and send the resource application vector to the authority approval end, so that the authority approval end performs authority approval according to the resource application vector.

[0064] In some embodiments, the weight coefficient of each characteristic attribute is obtained, and the resource application sub-vector corresponding to each characteristic attribute is multiplied by the corresponding weight coefficient to obtain the target resource application sub-vector corresponding to each characteristic attribute; vector addition operation is performed on each target resource application sub-vector to obtain the resource application vector. By operating each resource application sub-vector based on the weight coefficient of each characteristic attribute, the target resource application sub-vector corresponding to each characteristic attribute can be accurately obtained, and each target resource application sub-vector is superimposed to accurately obtain the resource application vector.

[0065] It should be noted that the sum of the weight coefficients of each characteristic attribute is unit 1, and the weight coefficients of each characteristic attribute may be the same or different. For example, the characteristic attributes include characteristic attribute 1, characteristic attribute 2, characteristic attribute 3, and characteristic attribute 4, the weight coefficient of characteristic attribute 1 is 0.25, the weight coefficient of characteristic attribute 2 is 0.25, the weight coefficient of characteristic attribute 3 is 0.25, and the weight coefficient of characteristic attribute 4 is 0.25; for another example, the characteristic attributes include characteristic attribute 5, characteristic attribute 6, characteristic attribute 7, and characteristic attribute 8, the weight coefficient of characteristic attribute 1 is 0.3, the weight coefficient of characteristic attribute 2 is 0.2, the weight coefficient of characteristic attribute 3 is 0.4, and the weight coefficient of characteristic attribute 4 is 0.1. The weight coefficients of each characteristic attribute may be set according to actual conditions, and the embodiments of the present invention do not specifically limit this.

[0066] In some embodiments, the resource application information input by the user is obtained, and the first resource application vector corresponding to the resource application information is determined, and the source application vector and the first resource application vector are merged to obtain the target resource application vector, and the target resource application vector is sent to the permission approval end. By obtaining the resource application information manually input by the user, merging the first resource application vector and the resource application vector corresponding to the manually input resource application information, the target resource application vector can be accurately obtained. This enables the approval end to review the permission resources corresponding to the user's characteristic attributes and the permission resources actively applied for by the user, greatly improving the comprehensiveness of the permission resource application.

[0067] It should be noted that the permission application end and the permission approval end establish a communication connection, and the mode of the communication connection can be selected according to actual conditions. The embodiment of the present invention does not specifically limit this. For example, the mode of the communication connection includes but is not limited to WiFi connection, 4G network and 5G network.

[0068] In some embodiments, after obtaining the resource application vector, the resource application vector is sent to the authority approval end so that the authority approval end performs authority approval according to the resource application vector. By sending the resource application vector to the authority approval end, the authority approval end can quickly perform authority approval on the resource application vector.

[0069] In some embodiments, the permission approval end obtains the resource application vector and the user's attribute information sent by the permission application end, and determines the resource verification vector according to the user's attribute information; verifies the resource application vector according to the resource verification vector to obtain the authorized first permission resource; verifies the unverified resource application items in the resource verification vector to obtain the authorized second permission resource; determines the target permission resource according to the first permission resource and the second permission resource, and sends the target permission resource to the permission application end. The permission approval end can accurately approve the user's permission resources according to the resource application vector and the user's attribute information sent by the permission application end, which greatly improves the efficiency and accuracy of permission resource approval.

[0070] Step S105: Acquire the target authority resource granted by the authority approval end.

[0071] Get the target permission resource granted and sent by the permission approval end to accurately obtain the permission resource.

[0072] The user authority management method provided in the above embodiment obtains the attribute information of the user applying for authority, and the attribute information includes at least one characteristic attribute; obtains a preset characteristic attribute authority application frequency table, and the preset characteristic attribute authority application frequency table is pre-established based on historical characteristic attributes and authority application frequency; determines the resource application sub-vector corresponding to each characteristic attribute of the user according to the attribute information and the preset characteristic attribute authority application frequency table; constructs a resource application vector according to the resource application sub-vector corresponding to each characteristic attribute, and sends the resource application vector to the authority approval end, so that the authority approval end performs authority approval according to the resource application vector; obtains the target authority resource granted by the authority approval end. This application can accurately determine the resource application vector corresponding to the authority resource to be applied for by the user according to the user's attribute information and the preset characteristic attribute authority application frequency table, and sends the resource application vector to the authority approval end, so that the authority approval end can effectively and accurately review the user's authority resource application, greatly improving the efficiency and accuracy of user authority management.

[0073] Please refer to Figure 3 , Figure 3 A flowchart of another user rights management method provided in an embodiment of the present application.

[0074] like Figure 3 As shown, the user rights management method includes steps S201 to S204.

[0075] Step S201: Obtain a resource application vector and user attribute information sent by the permission application terminal, and determine a resource verification vector according to the user attribute information.

[0076] In some embodiments, a preset feature attribute permission application frequency table is obtained, and a resource check vector is determined according to the preset feature attribute permission application frequency table and the user's attribute information. The preset feature attribute permission application frequency table is established in advance based on historical feature attributes and permission application frequency, and the preset feature attribute permission application frequency table can be established according to actual conditions, and the embodiments of the present invention do not specifically limit this.

[0077] In some embodiments, the resource check sub-vector corresponding to each characteristic attribute of the user is determined according to the attribute information and the preset characteristic attribute permission application frequency table; and a resource check vector is constructed according to the resource check sub-vector corresponding to each characteristic attribute.

[0078] In some embodiments, the method for determining the resource check sub-vector corresponding to each characteristic attribute of the user according to the attribute information and the preset characteristic attribute permission application frequency table can be: determining the element value of each element for constructing the resource check sub-vector according to each characteristic attribute and the application frequency corresponding to each permission in the preset characteristic attribute permission application frequency table; performing vector construction on the element value of each element to generate the resource check sub-vector of the characteristic attribute.

[0079] In some embodiments, according to each characteristic attribute and the number of applications corresponding to each permission in the preset characteristic attribute permission application number table, the element value of each element of the resource check sub-vector can be determined by: obtaining the preset application threshold of each permission corresponding to the characteristic attribute; setting the element value of the element corresponding to the permission with the number of applications greater than the preset application threshold to 1; setting the element value of the element corresponding to the permission with the number of applications less than or equal to the preset application threshold to 0. The preset application threshold can be set according to actual conditions, and the embodiment of the present invention does not specifically limit this.

[0080] In some embodiments, based on the resource check sub-vector corresponding to each characteristic attribute, a method for constructing a resource check vector can be: obtaining the weight coefficient of each characteristic attribute, and multiplying the resource check sub-vector corresponding to each characteristic attribute with the respective corresponding weight coefficient to obtain the target resource check sub-vector corresponding to each of the characteristic attributes; performing vector addition operation on each target resource check sub-vector to obtain the resource check vector.

[0081] Step S202: Verify the resource application vector according to the resource verification vector to obtain an authorized first authority resource.

[0082] The resource verification vector and the resource application vector are compared, and the authority resource where the resource verification vector intersects with the resource application vector is determined as the first authority resource that can be authorized.

[0083] Exemplarily, the permission resources represented by the resource application vector include permission resource 1, permission resource 2, permission resource 3, permission resource 4, permission resource 5 and permission resource 6; the permission resources represented by the resource verification vector include permission resource 1, permission resource 3 and limited resource 5, then the first permission resource includes permission resource 1, permission resource 3 and limited resource 5.

[0084] Step S203: verify the unverified resource application items in the resource verification vector to obtain the authorized second permission resource.

[0085] In some embodiments, when it is determined that there are unverified resource application items according to the resource verification vector, the unverified resource application items are displayed to the authority auditor; the audit result of the authority auditor on the unverified resource application items is obtained to obtain the authorized second authority resource. By displaying the unverified resource application items to the authority auditor, the authority auditor can quickly verify the resource application items, which greatly improves the efficiency and accuracy of the authority resource audit.

[0086] It should be noted that, if there is no unverified resource application item, the first permission resource is the target permission resource applied for by the user.

[0087] Step S204: determine a target authority resource according to the first authority resource and the second authority resource, and send the target authority resource to the authority applying end.

[0088] The first authority resource and the second authority resource are superimposed to obtain a target authority resource, and the target authority resource is sent to the authority applying end so that the authority applying end obtains the target authority resource, which greatly improves the efficiency and accuracy of the authority resource application.

[0089] The above-mentioned user authority management method obtains the resource application vector and the user's attribute information sent by the authority application end, and determines the resource verification vector according to the user's attribute information; verifies the resource application vector according to the resource verification vector to obtain the authorized first authority resource; verifies the unverified resource application items in the resource verification vector to obtain the authorized second authority resource; determines the target authority resource according to the first authority resource and the second authority resource, and sends the target authority resource to the authority application end. So that the authority application end can obtain the target authority resource, which greatly improves the efficiency and accuracy of the authority resource application.

[0090] See also Figure 4 , Figure 4 A schematic block diagram of a user rights management device provided in an embodiment of the present application.

[0091] like Figure 4 As shown, the user rights management device 300 includes an acquisition module 310, a determination module 320, a construction module 330 and a sending module 340, wherein:

[0092] The acquisition module 310 is used to acquire attribute information of the user applying for permission, wherein the attribute information includes at least one characteristic attribute;

[0093] The acquisition module 310 is further used to acquire a preset characteristic attribute permission application frequency table, wherein the preset characteristic attribute permission application frequency table is pre-established based on historical characteristic attributes and permission application frequency;

[0094] The determination module 320 is used to determine the resource application sub-vector corresponding to each characteristic attribute of the user according to the attribute information and the preset characteristic attribute permission application frequency table;

[0095] The construction module 330 is used to construct a resource application vector according to the resource application sub-vector corresponding to each characteristic attribute;

[0096] The sending module 340 is used to send the resource application vector to the authority approval end, so that the authority approval end performs authority approval according to the resource application vector;

[0097] The acquisition module 310 is further used to acquire the target authority resource granted by the authority approval end.

[0098] In some embodiments, Figure 5 As shown, the determination module 320 includes a determination submodule 321 and a generation submodule 322, wherein:

[0099] The determination submodule 321 is used to determine the element value of each element of the resource application subvector according to each characteristic attribute and the application number corresponding to each permission in the preset characteristic attribute permission application number table;

[0100] The generating submodule 322 is used to construct a vector of the element values ​​of each of the elements to generate a resource application subvector of the characteristic attribute.

[0101] In some embodiments, the determining submodule 321 is further used to:

[0102] Obtaining a preset application threshold for each permission corresponding to the characteristic attribute;

[0103] The element value of the element corresponding to the permission whose application times are greater than the preset application threshold is set to 1;

[0104] The element value of the element corresponding to the permission whose application times is less than or equal to the preset application threshold is set to 0.

[0105] In some embodiments, the building module 330 is further used to:

[0106] Obtaining a weight coefficient of each characteristic attribute, and multiplying the resource application sub-vector corresponding to each characteristic attribute by the corresponding weight coefficient, to obtain a target resource application sub-vector corresponding to each characteristic attribute;

[0107] A vector addition operation is performed on each of the target resource application sub-vectors to obtain the resource application vector.

[0108] In some embodiments, the sending module 340 is further used to:

[0109] Acquire resource application information input by a user, and determine a first resource application vector corresponding to the resource application information;

[0110] The resource application vector and the first resource application vector are combined to obtain a target resource application vector, and the target resource application vector is sent to the authority approval end.

[0111] In some embodiments, the user rights management 300 is also used to:

[0112] Obtaining a resource application vector and user attribute information sent by the permission application end, and determining a resource verification vector according to the user attribute information;

[0113] Verify the resource application vector according to the resource verification vector to obtain an authorized first authority resource;

[0114] Verifying unverified resource application items in the resource verification vector to obtain authorized second permission resources;

[0115] A target authority resource is determined according to the first authority resource and the second authority resource, and the target authority resource is sent to the authority applying end.

[0116] In some embodiments, the user rights management 300 is also used to:

[0117] When it is determined according to the resource verification vector that there are unverified resource application items, the unverified resource application items are displayed to the authority auditor;

[0118] The audit result of the unaudited resource application item audited by the authority auditor is obtained to obtain the authorized second authority resource.

[0119] It should be noted that those skilled in the art can clearly understand that for the convenience and brevity of description, the specific working process of the above-mentioned user authority management device can refer to the corresponding process in the aforementioned user authority management method embodiment, and will not be repeated here.

[0120] See also Figure 6 , Figure 6 A schematic block diagram of the structure of a computer device provided in an embodiment of the present application.

[0121] like Figure 6 As shown, the computer device 400 includes a processor 402 and a memory 403 connected via a system bus 401 , wherein the memory 403 may include a storage medium and an internal memory.

[0122] The storage medium can store a computer program. The computer program includes program instructions, and when the program instructions are executed, the processor can execute any user rights management method.

[0123] The processor 402 is used to provide computing and control capabilities and support the operation of the entire computer device.

[0124] The internal memory provides an environment for the operation of the computer program in the storage medium. When the computer program is executed by the processor, the processor can execute any user authority management method.

[0125] Those skilled in the art will understand that Figure 6 The structure shown in the figure is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0126] It should be understood that the processor 402 may be a central processing unit (CPU), and the processor may also be other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. Among them, the general-purpose processor may be a microprocessor or the processor may also be any conventional processor, etc.

[0127] In one embodiment, the processor 402 is used to run a computer program stored in the memory to implement the following steps:

[0128] Acquire attribute information of a user applying for permission, wherein the attribute information includes at least one characteristic attribute;

[0129] Obtaining a preset characteristic attribute permission application frequency table, wherein the preset characteristic attribute permission application frequency table is pre-established based on historical characteristic attributes and permission application frequency;

[0130] Determine a resource application subvector corresponding to each characteristic attribute of the user according to the attribute information and the preset characteristic attribute permission application frequency table;

[0131] Constructing a resource application vector according to the resource application sub-vector corresponding to each characteristic attribute, and sending the resource application vector to the authority approval end, so that the authority approval end performs authority approval according to the resource application vector;

[0132] Obtain the target permission resource granted by the permission approval end.

[0133] In one embodiment, when the processor 402 determines the resource application sub-vector corresponding to each characteristic attribute of the user according to the attribute information and the preset characteristic attribute permission application frequency table, it is used to implement:

[0134] Determine the element value of each element for constructing the resource application sub-vector according to each of the characteristic attributes and the application times corresponding to each permission in the preset characteristic attribute permission application times table;

[0135] Vector construction is performed on the element values ​​of each of the elements to generate a resource application sub-vector of the characteristic attribute.

[0136] In one embodiment, when the processor 402 determines the element value of each element for constructing the resource application sub-vector according to each of the characteristic attributes and the number of applications corresponding to each permission in the preset characteristic attribute permission application number table, it is used to implement:

[0137] Obtaining a preset application threshold for each permission corresponding to the characteristic attribute;

[0138] The element value of the element corresponding to the permission whose application times are greater than the preset application threshold is set to 1;

[0139] The element value of the element corresponding to the permission whose application times is less than or equal to the preset application threshold is set to 0.

[0140] In one embodiment, when implementing the construction of the resource application vector according to the resource application sub-vector corresponding to each characteristic attribute, the processor 402 is configured to implement:

[0141] Obtaining a weight coefficient of each characteristic attribute, and multiplying the resource application sub-vector corresponding to each characteristic attribute by the corresponding weight coefficient, to obtain a target resource application sub-vector corresponding to each characteristic attribute;

[0142] A vector addition operation is performed on each of the target resource application sub-vectors to obtain the resource application vector.

[0143] In one embodiment, when implementing the sending of the resource application vector to the authority approval end, the processor 402 is used to implement:

[0144] Acquire resource application information input by a user, and determine a first resource application vector corresponding to the resource application information;

[0145] The resource application vector and the first resource application vector are combined to obtain a target resource application vector, and the target resource application vector is sent to the authority approval end.

[0146] In one embodiment, the processor 402 is further configured to implement:

[0147] Obtaining a resource application vector and user attribute information sent by the permission application end, and determining a resource verification vector according to the user attribute information;

[0148] Verify the resource application vector according to the resource verification vector to obtain an authorized first authority resource;

[0149] Verifying unverified resource application items in the resource verification vector to obtain authorized second permission resources;

[0150] A target authority resource is determined according to the first authority resource and the second authority resource, and the target authority resource is sent to the authority applying end.

[0151] In one embodiment, when the processor 402 verifies the unverified resource application item in the resource verification vector to obtain the authorized second permission resource, it is configured to implement:

[0152] When it is determined according to the resource verification vector that there are unverified resource application items, the unverified resource application items are displayed to the authority auditor;

[0153] The audit result of the unaudited resource application item audited by the authority auditor is obtained to obtain the authorized second authority resource.

[0154] It should be noted that those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working process of the computer device described above can refer to the corresponding process in the aforementioned user authority management method embodiment, which will not be repeated here.

[0155] An embodiment of the present application also provides a computer-readable storage medium, on which a computer program is stored. The computer program includes program instructions. The method implemented when the program instructions are executed can refer to the various embodiments of the user authority management method of the present application.

[0156] The computer-readable storage medium may be an internal storage unit of the computer device described in the foregoing embodiment, such as a hard disk or memory of the computer device. The computer-readable storage medium may be non-volatile or volatile. The computer-readable storage medium may also be an external storage device of the computer device, such as a plug-in hard disk, a smart memory card (Smart Media Card, SMC), a secure digital (Secure Digital, SD) card, a flash card (Flash Card), etc., equipped on the computer device.

[0157] Furthermore, the computer-readable storage medium may mainly include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application required for at least one function, etc.; the data storage area may store data created according to the use of the blockchain node, etc.

[0158] The blockchain referred to in this invention is a new application mode of computer technologies such as distributed data storage, peer-to-peer transmission, consensus mechanism, encryption algorithm, etc. Blockchain is essentially a decentralized database, a string of data blocks generated by cryptographic methods. Each data block contains a batch of network transaction information, which is used to verify the validity of its information (anti-counterfeiting) and generate the next block. Blockchain can include the underlying blockchain platform, platform product service layer, and application service layer.

[0159] It should be understood that the terms used in this application specification are only for the purpose of describing specific embodiments and are not intended to limit the application. As used in this application specification, unless the context clearly indicates otherwise, the singular forms "a", "an" and "the" are intended to include plural forms.

[0160] It should also be understood that the term "and / or" used in the present specification refers to any combination of one or more of the associated listed items and all possible combinations, including these combinations. It should be noted that, in this article, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or system including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or system. In the absence of further restrictions, an element defined by the sentence "including a..." does not exclude the presence of other identical elements in the process, method, article or system including the element.

[0161] The serial numbers of the embodiments of the present application are for description only and do not represent the advantages and disadvantages of the embodiments. The above description is only a specific implementation mode of the present application, but the protection scope of the present application is not limited thereto. Any technician familiar with the technical field can easily think of various equivalent modifications or replacements within the technical scope disclosed in the present application, and these modifications or replacements should be included in the protection scope of the present application.

Claims

1. A user rights management method, characterized in that: The method is applied to the permission application end, and the method includes: Acquire attribute information of a user applying for permission, wherein the attribute information includes at least one characteristic attribute; Obtaining a preset characteristic attribute permission application frequency table, wherein the preset characteristic attribute permission application frequency table is pre-established based on historical characteristic attributes and permission application frequency; Determine a resource application subvector corresponding to each characteristic attribute of the user according to the attribute information and the preset characteristic attribute permission application frequency table; Constructing a resource application vector according to the resource application sub-vector corresponding to each characteristic attribute, and sending the resource application vector to the authority approval end, so that the authority approval end performs authority approval according to the resource application vector; Obtain the target permission resource granted by the permission approval end.

2. The user rights management method according to claim 1, characterized in that: The determining, according to the attribute information and the preset attribute permission application frequency table, a resource application sub-vector corresponding to each attribute of the user includes: Determine the element value of each element for constructing the resource application sub-vector according to each of the characteristic attributes and the application times corresponding to each permission in the preset characteristic attribute permission application times table; Vector construction is performed on the element values ​​of each of the elements to generate a resource application sub-vector of the characteristic attribute.

3. The user rights management method according to claim 2, characterized in that: Determining the element value of each element of the resource application sub-vector according to each of the characteristic attributes and the application number corresponding to each permission in the preset characteristic attribute permission application number table includes: Obtaining a preset application threshold for each permission corresponding to the characteristic attribute; The element value of the element corresponding to the permission whose application times are greater than the preset application threshold is set to 1; The element value of the element corresponding to the permission whose application times is less than or equal to the preset application threshold is set to 0.

4. The user rights management method according to claim 1, characterized in that: The constructing a resource application vector according to the resource application sub-vector corresponding to each characteristic attribute includes: Obtaining a weight coefficient of each characteristic attribute, and multiplying the resource application sub-vector corresponding to each characteristic attribute by the corresponding weight coefficient, to obtain a target resource application sub-vector corresponding to each characteristic attribute; A vector addition operation is performed on each of the target resource application sub-vectors to obtain the resource application vector.

5. The user rights management method according to claim 1, characterized in that: The sending the resource application vector to the authority approval end includes: Acquire resource application information input by a user, and determine a first resource application vector corresponding to the resource application information; The resource application vector and the first resource application vector are combined to obtain a target resource application vector, and the target resource application vector is sent to the authority approval end.

6. A user rights management method, characterized in that: The method is applied to the permission approval end, and the method includes: Obtaining a resource application vector and user attribute information sent by the permission application end, and determining a resource verification vector according to the user attribute information; Verify the resource application vector according to the resource verification vector to obtain an authorized first authority resource; Verifying unverified resource application items in the resource verification vector to obtain authorized second permission resources; A target authority resource is determined according to the first authority resource and the second authority resource, and the target authority resource is sent to the authority applying end.

7. The user rights management method according to claim 6, characterized in that: The verifying the unverified resource application item in the resource verification vector to obtain the authorized second authority resource includes: When it is determined according to the resource verification vector that there are unverified resource application items, the unverified resource application items are displayed to the authority auditor; The audit result of the unaudited resource application item audited by the authority auditor is obtained to obtain the authorized second authority resource.

8. A user rights management device, characterized in that: The user rights management device includes an acquisition module, a determination module, a construction module and a sending module, wherein: The acquisition module is used to acquire attribute information of the user applying for permission, wherein the attribute information includes at least one characteristic attribute; The acquisition module is further used to acquire a preset characteristic attribute permission application frequency table, wherein the preset characteristic attribute permission application frequency table is pre-established based on historical characteristic attributes and permission application frequency; The determination module is used to determine the resource application sub-vector corresponding to each characteristic attribute of the user according to the attribute information and the preset characteristic attribute permission application frequency table; The construction module is used to construct a resource application vector according to the resource application sub-vector corresponding to each characteristic attribute; The sending module is used to send the resource application vector to the authority approval end, so that the authority approval end performs authority approval according to the resource application vector; The acquisition module is also used to acquire the target authority resource granted by the authority approval end.

9. A computer device, characterized in that: The computer device includes a processor, a memory, and a computer program stored in the memory and executable by the processor, wherein when the computer program is executed by the processor, the steps of the user rights management method according to any one of claims 1 to 7 are implemented.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, wherein when the computer program is executed by a processor, the steps of the user rights management method according to any one of claims 1 to 7 are implemented.

Images