A security and access control method and system based on multi-dimensional tool encapsulation

Abstract

The present application provides a security and access control method and system based on multi-dimensional tool encapsulation, which includes the following steps: configuring page docking; designing menu integration; configuring permission control; and setting track retention. In the above technical solution, not only the security of the system is enhanced, but also the performance and flexibility of the system are improved, the integration difficulty is reduced, and the diversified needs of enterprise-level applications are met.

Description

Background Art

[0002] The prior art has the following disadvantages:

[0003] Inadequate security: Existing access control mechanisms may rely on only a single authentication method, such as a password or API key, which is vulnerable to advanced attacks.

[0004] Poor flexibility: Traditional access control policies are often fixed, making it difficult to dynamically adjust permissions according to different application scenarios, making it difficult to achieve a balance between security and user experience.

[0005] High complexity: Although multi-layer or multi-factor authentication improves security, it also increases the complexity of the system and the difficulty of user operation.

[0006] Poor scalability: As the system scales up, existing access control solutions cannot efficiently manage a large number of users and resources, resulting in performance bottlenecks.

[0007] Lack of fine-grained control: The existing access control mechanism cannot perform fine-grained permission management for specific operations or data, resulting in security vulnerabilities.

[0008] Insufficient auditing and monitoring: The existing system lacks effective auditing and monitoring mechanisms, and is unable to detect and respond to potential security threats in a timely manner. Summary of the invention

[0009] The present application provides a security and access control method and system based on multi-dimensional tool encapsulation, which is used to achieve comprehensive and secure embedding of pages and ensure the security of data during transmission and display.

[0010] In a first aspect, a security and access control method based on multi-dimensional tool encapsulation is provided, comprising the following steps:

[0011] Configure page docking;

[0012] Design menu integration;

[0013] Configure permission control;

[0014] Set up track retention.

[0015] In the above technical solution, the overall performance and security of the report embedding system are significantly improved by configuring page docking, designing menu integration, configuring permission control, and setting track retention: First, through multi-layer authentication mechanism and data encryption technology, the security of data during transmission and display is ensured, and data leakage and unauthorized access are effectively prevented; secondly, it supports fine-grained permission management, allowing administrators to configure different access rights for different users and roles to ensure data security and compliance; in addition, by optimizing data loading and caching mechanisms, the system's response speed and high concurrent processing capabilities are improved to provide a stable user experience; finally, it provides comprehensive auditing and tracking functions to record user operation tracks, which is convenient for administrators to perform log queries and troubleshoot problems.

[0016] In a specific implementation method, the step of configuring page docking specifically includes:

[0017] Get the report page;

[0018] Use in the target page <iframe>The tag is embedded in the report page;

[0019] Handle cross-domain issues;

[0020] Adjust the style of the iframe.

[0021] In a specific implementation scheme, the steps of designing menu integration specifically include:

[0022] Obtain report menu data;

[0023] Parsing the report menu data;

[0024] Integrate into the target system menu;

[0025] Bind click event. In a specific implementation scheme, the step of configuring the authority control specifically includes: Perform user authentication; Perform authority configuration; Perform authority check;

[0030] Perform dynamic loading.

[0031] In a specific implementation scheme, the step of setting up the track retention specifically includes:

[0032] Record user login, access, and operation behaviors;

[0033] Storing log data in a database or log file;

[0034] Perform log query and analysis.

[0035] In a specific implementation scheme, the step of configuring permission control adopts RBAC or ABAC permission model.

[0036] In a second aspect, a security and access control system based on multi-dimensional tool encapsulation is provided, comprising:

[0037] A page docking module, used to configure page docking;

[0038] A menu integration module, used to design menu integration;

[0039] An authority control module, used to configure authority control;

[0040] The track retention module is used to set the track retention.

[0041] In the above technical scheme, by configuring page docking, designing menu integration, configuring permission control, and setting track retention, the overall performance and security of the report embedding system are significantly improved: first, through multi-layer authentication mechanism and data encryption technology, the security of data during transmission and display is ensured, and data leakage and unauthorized access are effectively prevented; secondly, fine-grained permission management is supported, allowing administrators to configure different access rights for different users and roles, ensuring data security and compliance; in addition, by optimizing data loading and caching mechanisms, the system's response speed and high concurrent processing capabilities are improved, providing a stable user experience; finally, comprehensive auditing and tracking functions are provided to record user operation tracks, making it convenient for administrators to perform log queries and troubleshooting.

[0042] In a specific implementation scheme, configuring page docking specifically includes:

[0043] Get report page; Use in target page<iframe> The tag is embedded in the report page;

[0045] Handling cross-domain issues;

[0046] Adjust the style of the iframe.

[0047] In a specific implementation scheme, designing menu integration specifically includes:

[0048] Obtain report menu data;

[0049] Parsing the report menu data;

[0050] Integrate into the target system menu;

[0051] Bind click event.

[0052] In a specific feasible embodiment, the configuration of permission control specifically includes:

[0053] Performing user authentication;

[0054] Performing permission configuration;

[0055] Performing permission check;

[0056] Performing dynamic loading.BRIEF DESCRIPTION OF THE DRAWINGS

[0057] Figure 1 is a flowchart of a security and access control method based on multi-dimensional tool encapsulation provided by an embodiment of the present application;

[0058] Figure 2 is a structural block diagram of a security and access control system based on multi-dimensional tool encapsulation provided by an embodiment of the present application;

[0059] Figure 3 is a specific flowchart of a security and access control method based on multi-dimensional tool encapsulation provided by an embodiment of the present application.DETAILED DESCRIPTION

[0060] The present application will be further described in detail below with reference to the drawings and embodiments. Through these descriptions, the features and advantages of the present application will become more clearly defined.

[0061] The special word "exemplary" here means "serving as an example, an embodiment or an illustration". Any embodiment described here as "exemplary" does not have to be construed as superior or better than other embodiments. Although various aspects of the embodiments are shown in the drawings, the drawings do not have to be drawn to scale unless otherwise specified.

[0062] In addition, the technical features involved in different embodiments of the present application described below can be combined with each other as long as they do not conflict with each other.

[0063] To facilitate understanding of the security and access control method and system based on multidimensional tool encapsulation provided by the embodiment of the present application, its application scenario is first explained. The security and access control method and system based on multidimensional tool encapsulation provided by the embodiment of the present application are used to achieve comprehensive security embedding of pages, ensuring the security of data during transmission and display. The existing embedded solutions have the following disadvantages: Insufficient security: The existing access control mechanism may only rely on a single authentication method, such as a password or API key, which is vulnerable when facing advanced attacks. Poor flexibility: Traditional access control policies are often fixed, and it is difficult to dynamically adjust permissions according to different application scenarios, resulting in a balance between security and user experience that is difficult to achieve. High complexity: Although multi-layer or multi-factor authentication improves security, it also increases the complexity of the system and the difficulty of user operation. Poor scalability: As the scale of the system expands, the existing access control scheme cannot efficiently manage a large number of users and resources, resulting in performance bottlenecks. Lack of fine-grained control: The existing access control mechanism cannot perform fine-grained permission management on specific operations or data, resulting in security vulnerabilities. Insufficient auditing and monitoring: The existing system lacks an effective auditing and monitoring mechanism, and cannot promptly discover and respond to potential security threats. To this end, the embodiment of the present application provides a security and access control method and system based on multi-dimensional tool encapsulation to achieve comprehensive and secure embedding of pages and ensure the security of data during transmission and display. The following is a detailed description of the embodiment in conjunction with specific drawings.

[0064] Referring to FIGS. 1 to 3, FIG. 1 is a flowchart of a security and access control method based on multi-dimensional tool encapsulation provided by an embodiment of the present application; FIG. 2 is a structural block diagram of a security and access control system based on multi-dimensional tool encapsulation provided by an embodiment of the present application; FIG. 3 is a specific flowchart of a security and access control method based on multi-dimensional tool encapsulation provided by an embodiment of the present application.

[0065] In FIG. 1, an embodiment of the present application provides a security and access control method based on multi-dimensional tool encapsulation, including the following steps:

[0066] Configure the page docking;

[0067] Design the menu integration;

[0068] Configure the permission control;

[0069] Set the track retention.

[0070] In the above technical solution, by configuring page docking, designing menu integration, configuring permission control, and setting track retention, the overall performance and security of the report embedding system are significantly improved: First, through a multi-layer authentication mechanism and data encryption technology, the security of data during transmission and display is ensured, effectively preventing data leakage and unauthorized access; Second, it supports fine-grained permission management, allowing administrators to configure different access permissions for different users and roles to ensure data security and compliance; In addition, by optimizing the data loading and caching mechanism, the response speed and high-concurrency processing ability of the system are improved, providing a stable user experience; Finally, it provides comprehensive auditing and tracking functions, records user operation tracks, and facilitates administrators to query logs and troubleshoot problems.

[0071] Referring to Figure 3, the security and access control method based on multi-dimensional tool encapsulation includes: During page docking, first conduct a requirements analysis to determine page functions and data requirements, then develop the page using Vue.js and integrate the backend API, design the page style and layout to ensure a good user experience, and conduct unit and integration tests to ensure normal functions.

[0072] Next, in the menu configuration stage, design the menu structure and style, store the menu data in the backend database and provide it to the front end through the API interface, and the front end dynamically loads menu items according to user permissions and uses route guards for permission verification.

[0073] In terms of permission configuration, design the RBAC or ABAC permission model, define the relationships between roles, permissions, and resources, manage permission allocation through the backend API, and conduct permission verification on the front end to ensure that users can only access the operations and data they have permissions for.

[0074] Finally, in the track retention link, record the operation logs of users, including behaviors such as login, access, and modification, for auditing and monitoring to ensure the security and stability of the system.

[0075] In the above technical solution, the security and access control method based on multi-dimensional tool encapsulation not only enhances the security and availability of the report, but also greatly expands its application scenarios, and is applicable to various environments such as enterprise internal systems and third-party platforms; it has the following beneficial effects: 1. Security authentication: adopt a multi-level authentication mechanism, including user identity authentication, rights management and data encryption, to ensure that only authorized users can access sensitive data; 2. Flexible configuration: supports multiple embedding modes, such as iframe, API call, etc., which can be flexibly selected according to actual needs to adapt to different application scenarios; 3. High performance: Optimized data loading and rendering mechanism ensures fast response in high-concurrency scenarios and improves user experience;

[0079] 4. Ease of use: Provide a simple configuration interface and detailed documentation support to reduce integration difficulty and speed up the development process.

[0080] In a specific implementation method, the step of configuring page docking specifically includes:

[0081] Get report page; Use in target page<iframe> The tag is embedded in the report page;

[0083] Handling cross-domain issues;

[0084] Adjust the style of the iframe.

[0085] In a specific implementation scheme, the steps of designing menu integration specifically include:

[0086] Obtain report menu data;

[0087] Parsing the report menu data;

[0088] Integrate into target system menu;

[0089] Bind click event.

[0090] In a specific implementation scheme, the step of configuring the authority control specifically includes: Perform user authentication; Perform authority configuration; Performing authority check;

[0094] Perform dynamic loading.

[0095] In a specific implementation method, the step of setting the track retention specifically includes:

[0096] Record user login, access, and operation behaviors;

[0097] Storing log data in a database or log file;

[0098] Perform log query and analysis.

[0099] In a specific implementation scheme, the step of configuring permission control adopts the RBAC or ABAC permission model.

[0100] Specifically, the security and access control method based on multi-dimensional tool encapsulation includes the following steps: Step 1 : Page docking:

[0102] Obtain report page URL: obtain the URL of the report page from the report platform;

[0103] Use iframe embedding: Use in the target page<iframe> Tags are embedded in the report page;

[0104] Handling cross-domain issues: Ensure that the reporting platform supports cross-domain requests, or use a proxy server to solve cross-domain issues;

[0105] Style adjustment: adjust the style of the iframe to ensure that the report page is consistent with the style of the target system.Step 2 : Menu Integration:

[0107] Obtain report menu data: obtain menu data from the report platform, usually in JSON format;

[0108] Parsing menu data: parsing report menu data in the target system and extracting menu items and links;

[0109] Integrate into target system menu: Add the report menu item to the target system's navigation menu, ensuring consistent style and layout;

[0110] Bind click event: Bind click event to menu item to ensure that the corresponding report page can be jumped after clicking. Step 3 : Authority Control:

[0112] User authentication: Verify user identity through the login interface and obtain user information and role;

[0113] Permission configuration: configure permissions for different roles in the reporting platform and define which users can access which reports;

[0114] Permission check: Perform permission checks on the front end and back end to ensure that users can only access reports that they are authorized to access;

[0115] Dynamic loading: Dynamically load and display report data based on user permissions. Step 4 : Track preservation:

[0117] The user's login, access, operation and other behaviors are recorded at the front end and back end.

[0118] Log data is stored in a database or log file to ensure the integrity and traceability of the data.

[0119] Provide log query and analysis functions to facilitate administrators to conduct audits and troubleshoot problems.

[0120] In the above technical solution, the overall performance and security of the report embedding system are significantly improved by the security and access control method encapsulated by the multidimensional tool: first, the security of data during transmission and display is ensured by the multi-layer authentication mechanism and data encryption technology, effectively preventing data leakage and unauthorized access. Secondly, fine-grained authority management is supported, allowing administrators to configure different access rights for different users and roles, ensuring the security and compliance of data. In addition, by optimizing the data loading and caching mechanism, the response speed and high concurrent processing capability of the system are improved, providing a stable user experience.Finally, comprehensive auditing and tracking functions are provided to record the user operation traces, facilitating administrators to query logs and troubleshoot problems. In summary, this application not only enhances the security of the system, but also improves the system performance and flexibility, reduces the integration difficulty, and meets the diverse requirements of enterprise-level applications.

[0121] In Figure 2, an embodiment of this application provides a security and access control system based on multi-dimensional tool encapsulation, including:

[0122] A page docking module for configuring page docking;

[0123] A menu integration module for designing menu integration;

[0124] A permission control module for configuring permission control;

[0125] A track retention module for setting track retention.

[0126] In the above technical solution, by configuring page docking, designing menu integration, configuring permission control, and setting track retention, the overall performance and security of the report embedding system are significantly improved: First, through a multi-layer authentication mechanism and data encryption technology, the security of data during transmission and display is ensured, effectively preventing data leakage and unauthorized access; Second, fine-grained permission management is supported, allowing administrators to configure different access permissions for different users and roles to ensure data security and compliance; In addition, by optimizing the data loading and caching mechanism, the system response speed and high-concurrency processing ability are improved, providing a stable user experience; Finally, comprehensive auditing and tracking functions are provided to record the user operation traces, facilitating administrators to query logs and troubleshoot problems.

[0127] In a specific feasible implementation, configuring page docking specifically includes:

[0128] Obtaining the report page;

[0129] Embedding the report page in the target page using the <iframe> tag;

[0130] Handling cross-domain problems;

[0131] Adjusting the style of the iframe.In a specific implementation scheme, designing menu integration specifically includes:

[0133] Obtain report menu data;

[0134] parsing the report menu data;

[0135] Integrate into target system menu;

[0136] Bind click event. In a specific implementation scheme, configuring the permission control specifically includes: Perform user authentication; Perform authority configuration; Performing permission check;

[0141] Perform dynamic loading.

[0142] Those skilled in the art know that the present application can be implemented as a system, method or computer program product.

[0143] Therefore, the present disclosure may be specifically implemented in the following forms, namely: it may be complete hardware, it may be complete software (including firmware, resident software, microcode, etc.), or it may be a combination of hardware and software, generally referred to herein as "circuit", "module" or "system". In addition, in some embodiments, the present application may also be implemented in the form of a computer program product in one or more computer-readable media, wherein the computer-readable medium contains computer-readable program code. Any combination of one or more computer-readable media can be adopted.Computer-readable media can be computer-readable signal media or computer-readable storage media.Computer-readable storage media can be, for example, but not limited to, a system, device or device of electricity, magnetism, light, electromagnetism, infrared rays or semiconductor, or any combination thereof.More specific examples (non-exhaustive list) of computer-readable storage media include: electrical connection with one or more wires, portable computer disk, hard disk, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fiber, portable compact disk read-only memory (CD-ROM), optical storage device, magnetic storage device or any suitable combination thereof.In this document, computer readable storage media may be any tangible media that can contain or store a program for use by or in connection with an instruction execution system, apparatus, or device. Although the embodiments of the present application have been shown and described above , it is to be understood that the above-described embodiments are exemplary and cannot be construed as limitations to the present application, and those of ordinary skill in the art can change, modify, replace and modify the above-described embodiments within the scope of the present application. On this basis, the present application can be subjected to multiple replacements and improvements, which all fall within the protection scope of the present application.< / iframe>

Claims

1. A security and access control method based on multi-dimensional tool encapsulation, characterized in that: The following steps are involved: Configure page docking; Design menu integration; Configure permission control; Set up track retention.

2. The security and access control method based on multi-dimensional tool encapsulation according to claim 1 is characterized in that: The steps for configuring page docking include: Get the report page; Use in the target page <iframe>The tag is embedded in the report page; Dealing with cross-domain issues; Adjust the style of the iframe.

3. The security and access control method based on multi-dimensional tool encapsulation according to claim 2 is characterized in that: The steps to design menu integration include: Get report menu data; Parsing the report menu data; Integrate into target system menu; Bind click event.

4. The security and access control method based on multi-dimensional tool encapsulation according to claim 3 is characterized in that: The steps to configure permission control include: Perform user authentication; Configure permissions; Perform permission checks; Dynamic loading.

5. The security and access control method based on multi-dimensional tool encapsulation according to claim 4 is characterized in that: The steps for setting track retention include: Record users’ login, access, and operation behaviors; Store log data in a database or log file; Perform log query and analysis.

6. The security and access control method based on multi-dimensional tool encapsulation according to claim 5 is characterized in that: The steps for configuring permission control use the RBAC or ABAC permission model.

7. A security and access control system based on multi-dimensional tool packaging, characterized in that: include: Page docking module, used to configure page docking; Menu integration module, used to design menu integration; The permission control module is used to configure the permission control; The track retention module is used to set track retention.

8. The security and access control system based on multi-dimensional tool packaging according to claim 7, characterized in that: Configuring page docking specifically includes: Get the report page; Use in the target page<iframe> The tag is embedded in the report page; Dealing with cross-domain issues; Adjust the style of the iframe.

9. The security and access control system based on multi-dimensional tool packaging according to claim 8, characterized in that: Designing menu integration specifically includes: Get report menu data; Parsing the report menu data; Integrate into target system menu; Bind click event.

10. The security and access control system based on multi-dimensional tool packaging according to claim 9, characterized in that: Configuring permission control specifically includes: Perform user authentication; Configure permissions; Perform permission checks; Dynamic loading. .< / iframe>

Images