A rights management method, device, equipment and medium

Abstract

The embodiment of the present invention provides a method, device, equipment and medium for authority management, the method comprising: obtaining an employee attendance sheet; determining an off-duty employee sheet and a vacation employee sheet according to the leave field and access control data in the employee attendance sheet; determining an authority change employee sheet according to the off-duty employee sheet and the vacation employee sheet; sending the authority change employee sheet to a target terminal, so that the target terminal performs authority management according to the authority change employee sheet. Through the technical solution of the embodiment of the present invention, the efficiency of authority management can be improved and the security of the terminal can be ensured.

Description

Technical Field

[0001] The present invention relates to the field of rights management, and in particular to a rights management method, device, equipment and medium. Background Art

[0002] As enterprises continue to advance digital transformation, information systems are taking on more and more critical business functions. At the same time, the use permissions of equipment and terminals at all levels of information systems are crucial, and the management and control of permissions is directly related to the security of information systems.

[0003] Furthermore, when an employee resigns, leaves his / her post or goes on vacation, the employee's permissions on devices at all levels cannot be updated in a timely manner, and permission management is chaotic, which may lead to data security risks, such as someone using the permissions of other former employees to steal data from the terminal. Summary of the invention

[0004] The present invention provides a method, device, equipment and medium for authority management. Through the method of the embodiment of the present invention, the efficiency of authority management of employees can be improved and the security of terminals can be improved.

[0005] In a first aspect, an embodiment of the present invention provides a rights management method, including:

[0006] Get employee attendance sheets;

[0007] Determine the off-duty employee table and the vacation employee table based on the leave field and access control data in the employee attendance table;

[0008] Determine the employee table with changed authority based on the off-duty employee table and the vacation employee table;

[0009] The authority-changed employee table is sent to a target terminal, so that the target terminal performs authority management according to the authority-changed employee table.

[0010] In a second aspect, an embodiment of the present invention provides a rights management device, including:

[0011] The acquisition module is used to obtain employee attendance sheets;

[0012] A parsing module, used to determine a table of off-duty employees and a table of vacation employees based on the leave field and access control data in the employee attendance table;

[0013] A change module, used for determining the authority to change the employee table according to the off-duty employee table and the vacation employee table;

[0014] The sending module is used to send the authority change employee table to the target terminal, so that the target terminal performs authority management according to the authority change employee table.

[0015] In a third aspect, an embodiment of the present invention provides an electronic device, the electronic device comprising:

[0016] at least one processor; and,

[0017] a memory communicatively connected to the at least one processor; wherein,

[0018] The memory stores a computer program executable by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the permission management method described in any one of the embodiments of the present invention.

[0019] In a fourth aspect, an embodiment of the present invention provides a computer-readable storage medium, wherein the computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement any one of the rights management methods described in the embodiments of the present invention when executed.

[0020] The embodiment of the present invention provides a method, device, equipment and medium for authority management, the method comprising: obtaining an employee attendance sheet; determining an off-duty employee table and a vacation employee table according to the leave field and access control data in the employee attendance sheet; determining an authority change employee table according to the off-duty employee table and the vacation employee table; sending the authority change employee table to a target terminal so that the target terminal performs authority management according to the authority change employee table. Specifically, by determining an authority change employee table according to the off-duty employee table and the vacation employee table, the employee whose authority needs to be changed can be accurately determined, and then the authority change employee table is sent to the target terminal, so that the authority management of the employee whose authority needs to be changed can be completed. Through the technical solution of the embodiment of the present invention, the authority management efficiency of the terminal can be improved, and the security of the terminal can be improved. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0022] Figure 1 A flowchart of a method for managing permissions provided in Embodiment 1 of the present invention;

[0023] Figure 2 A flowchart of a rights management method provided in Embodiment 2 of the present invention;

[0024] Figure 3 A schematic diagram of a rights management system provided by an embodiment of the present invention;

[0025] Figure 4 A schematic diagram of a framework of a permission processor in a permission management system provided by an embodiment of the present invention;

[0026] Figure 5 A schematic diagram of the structure of a rights management device provided in Embodiment 3 of the present invention;

[0027] Figure 6 This is a schematic diagram of the structure of an electronic device provided in Embodiment 4 of the present invention. DETAILED DESCRIPTION

[0028] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0029] It should be noted that the terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0030] It should be noted that the collection, storage, use, processing, transmission, provision and disclosure of employee personal information involved in the technical solution of this disclosure are in compliance with the relevant laws and regulations and do not violate public order and good morals.

[0031] Embodiment 1

[0032] Figure 1 A flowchart of a permission management method provided in Embodiment 1 of the present invention is provided. The method can be applicable to the situation of employee permission management, and in particular to the situation of permission management of employees who are on leave. The method can be executed by a permission management device, which can be composed of software and / or hardware and configured in a computer or server.

[0033] like Figure 1 As shown, including:

[0034] Step 110: Obtain employee attendance sheet.

[0035] The employee attendance sheet includes an employee ID representing the employee and leave information corresponding to the employee ID, and also includes access control data when the employee passes through the access control.

[0036] Step 120: Determine a table of off-duty employees and a table of vacation employees based on the leave field in the employee attendance table and the access control data.

[0037] The leave field can include the employee's leave time, and the access control data includes the time of passing the access control. The off-duty employee table includes employees who have resigned and left their jobs, and the vacation employee table includes employees who are on vacation. The vacation employee table can also include the time and duration of the vacation.

[0038] Specifically, the step includes:

[0039] Determine a candidate employee list based on the access control data of the employee attendance list;

[0040] Determine a leave employee table based on the candidate employee table and the leave field of the employee attendance table;

[0041] The off-duty employee list is determined based on the candidate employee list and the vacation employee list.

[0042] Among them, the candidate employee table includes employees who have not entered or exited the door for a preset period of time, the vacation employee table includes employees who are on vacation, and the off-duty employee table includes employees who have left their jobs or resigned.

[0043] Specifically, the access control data can be used to determine the employees who did not use the access control on that day, and the employees who did not pass the access control can be determined as candidate employees, and a candidate employee table can be generated. Furthermore, not using the access control may indicate that the employee is off duty or on leave. Therefore, based on the candidate employee table and the leave field of the employee attendance sheet, the employees who are on leave can be determined, and a leave employee table can be generated. Furthermore, the leave employee table can be determined by removing the leave employees from the candidate employee table.

[0044] Step 130: Determine a table of employees with changed authority based on the table of off-duty employees and the table of employees on vacation.

[0045] Among them, the employee table of authority changes includes employees who need authority changes, and also includes the specific content of the authority change, such as terminal control authority, usage authority or terminal usage time allowed or prohibited.

[0046] Specifically, different authority change methods can be formulated for off-duty employees and employees on vacation, and then recorded in the authority change employee table.

[0047] Step 140: Send the authority-changed employee table to a target terminal, so that the target terminal performs authority management according to the authority-changed employee table.

[0048] Specifically, the above-mentioned permission change employee table can be sent to the target terminal, and the target terminal will parse the content of the permission change employee table, determine the employees who need permission change and the corresponding change method, and then complete the permission management work. Optionally, the target terminal includes at least one of a time card puncher, an access control device, a bastion host, and a computer. Specifically, the permission change can be used to control the employee's access to the terminal, thereby ensuring the security of the terminal and improving the efficiency of permission management.

[0049] The embodiment of the present invention provides a method for authority management, which includes: obtaining an employee attendance sheet; determining an off-duty employee table and a vacation employee table based on the leave field and access control data in the employee attendance sheet; determining an authority change employee table based on the off-duty employee table and the vacation employee table; and sending the authority change employee table to a target terminal so that the target terminal performs authority management based on the authority change employee table. Specifically, by determining the authority change employee table based on the off-duty employee table and the vacation employee table, the employee whose authority needs to be changed can be accurately determined, and then the authority change employee table is sent to the target terminal to complete the authority management of the employee whose authority is changed. Through the technical solution of the embodiment of the present invention, the efficiency of employee authority management can be improved, and the security of the terminal can be improved.

[0050] Embodiment 2

[0051] Figure 2 This is a flowchart of a rights management method provided in Embodiment 2 of the present invention. The method is based on the above embodiments and further defines the steps of the rights management method, such as Figure 2 As shown, including:

[0052] Step 210: Obtain the employee attendance sheet, and determine the off-duty employee table and the vacation employee table according to the leave field and access control data in the employee attendance sheet.

[0053] Step 220: Obtain the operation and maintenance log, and determine the employee evaluation form based on the operation and maintenance log.

[0054] The operation and maintenance log includes data such as the name of the employee, the employee ID, the leave status, and the employee attributes (corporate employee, outsourced employee), as well as the employee's daily reward and punishment records. Furthermore, since there may be various performance and reward and punishment rules in the work, the employee can be assessed based on his or her daily work records, and the rights of employees who fail the assessment can be managed, such as disabling the employee's right to use the terminal.

[0055] Optionally, this step includes:

[0056] Obtaining a risk event scoring table, wherein the risk event scoring table includes risk events and risk scores corresponding to the risk events;

[0057] Determining risk events in the operation and maintenance log according to the risk event scoring table;

[0058] Based on the risk events and the risk event scoring table, the employee scoring results are determined, and the employee evaluation table is generated based on the employee scoring results.

[0059] The risk event scoring table includes risk events and the risk scores corresponding to the risk events. The risk event scoring table is used to determine the risk events of employees in the operation and maintenance log, and then score the work behavior of employees according to the risk events.

[0060] Specifically, there are many risk events in daily work, such as accidentally deleting important documents, being late or leaving early, etc. Therefore, risk events can be preset and corresponding risk scores can be determined, such as deducting 1 point for being late and 1 point for leaving early.

[0061] Specifically, the risk events in the operation and maintenance log can be determined based on the risk events recorded in the risk event scoring table. Then, the employee scoring results can be determined based on the risk events in the operation and maintenance log and the risk event scoring table. Then, an employee evaluation table is generated based on the employee scoring results, such as adding employees whose scores are lower than the preset threshold to the employee evaluation table.

[0062] Optionally, the risk event scoring table records include:

[0063] About attendance:

[0064] 1. Strictly abide by work discipline and operation and maintenance behavior norms, and no points will be deducted;

[0065] 2. In case of disciplinary violations, such as lateness, early departure, and absenteeism, 2 points will be deducted for each violation (lateness, early departure, and absenteeism will be handled in accordance with the attendance implementation rules for operation and maintenance personnel);

[0066] 3. The maximum score for this indicator is 5 points, and the deduction will end when all the points are deducted. Notes: 1. No points will be deducted if the rate of lateness or early departure is within 5%. If it exceeds 5% or exceeds 20 people, 2 points will be deducted; for every additional 5 people, 1 point will be deducted. (Calculated based on the highest data);

[0067] 4. For each absence due to various reasons, 1 point will be deducted (based on half a day as the statistical unit);

[0068] Failure to report, being on duty outside the office, asking for leave, adjusting leave, etc. without supporting evidence will be considered as absence from the card. Absence of the card reaching 5% or more than 20 times will be considered as absenteeism.

[0069] About operation and maintenance:

[0070] 1. Carry out routine operation and maintenance and technical support work such as inspection, testing, upgrading, and repair according to the agreed requirements to ensure the normal operation of the equipment, and submit operation and maintenance information and reports regularly as required. No points will be deducted if the information is complete and of high quality;

[0071] 2. Failure to regularly carry out routine operation and technical support work such as inspections, tests, upgrades, and repairs according to the agreed cycle will result in a deduction of 5 points for each failure;

[0072] 3. Failure to submit on time, incomplete submitted materials, or poor quality of materials will result in a deduction of 2 points for each rejection;

[0073] 4. The maximum score for this indicator is 20 points, and the score will be deducted once all the marks are deducted.

[0074] About safety:

[0075] 1. If the operation and maintenance personnel send illegal emails or make illegal external connections, 10 points will be deducted for each occurrence;

[0076] 2. Information and communication system security level incidents caused by operation and maintenance personnel: 50 points will be deducted for each level 8 incident; 100 points will be deducted for each level 7 or above incident;

[0077] 3. In case of leakage, report to the Ministry of Information and Communications for unified handling;

[0078] 4. This indicator is based on the total score and will be deducted until all points are deducted.

[0079] Step 230: Determine the authority-changed employee table based on the employee evaluation table, the off-duty employee table, and the vacation employee table.

[0080] Specifically, the employees in the employee evaluation table can be employees with low employee scores. The off-duty employee table can be employees who have resigned or left their jobs, and the vacation employee table can be employees who have asked for leave. Therefore, it is necessary to modify the corresponding permissions of employees in the employee evaluation table, off-duty employee table, and vacation employee table to prevent abuse of permissions.

[0081] Optionally, this step includes:

[0082] Determine the first target employee whose authority is to be changed based on the employee evaluation form and the off-duty employee form;

[0083] Determine a second target employee whose authority is to be changed according to the leave employee table;

[0084] Determine the permission blocking time and permission releasing time of the first target employee in the leave employee table according to the leave time corresponding to the first target employee in the leave employee table;

[0085] According to the employee identifications of the first target employee and the second target employee, the preset unlocking time and the permission blocking time and permission unlocking time of the first target employee, a permission change employee table is determined.

[0086] Specifically, the first target employee is an employee who has left his / her post or has a low score, so the first target employee can be managed according to the preset unlocking time. The second target employee is an employee who is on temporary leave, so the permission blocking time and permission unlocking time can be determined according to the corresponding leave time of the first target employee, so that the permission can be blocked during the leave and the permission can be restored in time after the leave.

[0087] Step 240: Send the authority-changed employee list to a target terminal, so that the target terminal performs authority management according to the authority-changed employee list.

[0088] Specifically, for employees in the authority change employee table, there may be a need for temporary authority use, so the embodiment of the present invention also provides a method for temporarily lifting the ban on employees with such needs.

[0089] Specifically, they include:

[0090] According to the temporary unblocking period corresponding to the temporary unblocking operation, updating the permission unblocking time of the target employee corresponding to the temporary unblocking operation in the permission change employee table, and sending the updated permission change employee table to the target terminal;

[0091] If the temporary unblocking period expires, the remaining blocking time is determined based on the target employee's permission unblocking time before update and the temporary unblocking period corresponding to the temporary unblocking operation, and the permission unblocking time of the target employee corresponding to the temporary unblocking operation in the permission change employee table is updated according to the remaining blocking time, and the updated permission change employee table is sent to the target terminal.

[0092] Among them, the temporary unblocking operation is an unblocking operation sent by the administrator to the target employee. When the temporary unblocking operation is received, the permission release time of the target employee can be updated according to the temporary unblocking operation, such as temporarily unblocking the target employee for a preset time, such as unblocking for one day.

[0093] Furthermore, after updating the target employee's permission unlocking time, the updated permission change employee table is sent to the target terminal. Furthermore, when the temporary unlocking period expires, it is necessary to stop the target user's permission use. Specifically, the remaining ban time can be determined based on the permission unlocking time before the update and the temporary unblocking period, and then the permission unlocking time of the target user and target employee corresponding to the temporary unblocking operation in the permission change employee table is updated according to the remaining ban time, and the updated permission change employee table is sent to the target terminal. So that the target terminal continues to ban the target user's permission.

[0094] For example, Figure 3 The schematic diagram of the permission management system provided by the embodiment of the present invention, specifically, the method of the embodiment of the present invention can be executed by the permission processor, the permission processor obtains the enterprise personnel list from the database, obtains the personnel name, personnel ID, leave status and employee attributes (enterprise employee, outsourced employee) and other data to form a basic personnel data information table in the permission processor. Furthermore, the employee attendance sheet can be obtained from the time clock and attendance machine, and then the basic data information table is compared with the employee attendance sheet to determine the off-duty employee table and the vacation employee table. Then, the permission management is performed on the employees in the off-duty employee table and the vacation employee table. Specifically, Figure 3 The connections between the components can be transmitted through the restful interface. At the same time, for the banned employees, reminders about the ban expiration can be issued daily.

[0095] Specifically, the method of the embodiment of the present invention may be executed by a rights manager. For example, Figure 4 The schematic diagram of the framework of the permission processor in the permission management system provided in the embodiment of the present invention is as follows. Specifically, the data collector can generate an employee permission change table by collecting employee attendance sheets and operation and maintenance logs, and then send the employee permission change table to the terminal for control.

[0096] The embodiment of the present invention provides a method for authority management. By determining the authority change employee table based on the off-duty employee table and the vacation employee table, the employee whose authority needs to be changed can be accurately determined, and then the authority change employee table is transferred to the target terminal, so as to complete the authority management of the employee whose authority is changed. Through the technical solution of the embodiment of the present invention, the efficiency of employee authority management can be improved, and the security of the terminal can be improved. Furthermore, risk events can be determined based on the operation and maintenance log, and then the employee score can be determined and an employee evaluation form can be generated, and then the employees in the employee evaluation form can be managed for authority. This method can ensure the comprehensiveness of authority management and improve the efficiency of authority management.

[0097] Embodiment 3

[0098] Figure 5 The schematic diagram of the structure of the rights management device provided in the embodiment of the present invention is a schematic diagram of the structure of the rights management device provided in the embodiment of the present invention, and the device can be used to execute any rights management method described in the embodiment of the present invention. The rights management device is configured in the rights processor.

[0099] like Figure 5 As shown, including:

[0100] The acquisition module 310 is used to acquire the employee attendance sheet.

[0101] The parsing module 320 is used to determine the off-duty employee list and the vacation employee list according to the leave field and the access control data in the employee attendance list.

[0102] The changing module 330 is used to determine the authority to change the employee table according to the off-duty employee table and the vacation employee table.

[0103] The sending module 340 is used to send the authority-changed employee table to the target terminal, so that the target terminal performs authority management according to the authority-changed employee table.

[0104] The embodiment of the present invention provides a rights management device, which can determine the rights change employee table according to the off-duty employee table and the vacation employee table, accurately determine the employees whose rights need to be changed, and then send the rights change employee table to the target terminal, so as to complete the rights management of the employees whose rights are changed. Through the technical solution of the embodiment of the present invention, the efficiency of employee rights management can be improved, and the security of the terminal can be improved.

[0105] Optionally, the parsing module 320 includes:

[0106] A candidate employee list determining unit, configured to determine a candidate employee list according to the access control data of the employee attendance list;

[0107] A vacation employee table determination unit, used to determine the vacation employee table according to the candidate employee table and the leave field of the employee attendance table;

[0108] The off-duty employee list determining unit is used to determine the off-duty employee list according to the candidate employee list and the vacation employee list.

[0109] Optionally, the acquisition module 310 further includes:

[0110] An operation and maintenance log determination unit, used to obtain the operation and maintenance log;

[0111] An employee evaluation form determination unit, used to determine the employee evaluation form according to the operation and maintenance log;

[0112] The change module 330 is specifically used to determine the authority change employee table according to the employee evaluation table, the off-duty employee table and the vacation employee table.

[0113] Optionally, the employee appraisal form determination unit includes:

[0114] An acquisition subunit is used to acquire a risk event scoring table, wherein the risk event scoring table includes risk events and risk scores corresponding to the risk events;

[0115] A risk event determination subunit, configured to determine risk events in the operation and maintenance log according to the risk event scoring table;

[0116] The employee evaluation form generation subunit is used to determine the employee scoring result according to the risk event and the risk event scoring form, and generate the employee evaluation form according to the employee scoring result.

[0117] Optionally, the changing module 330 includes:

[0118] A first target employee determination unit, configured to determine a first target employee whose authority is to be changed according to the employee evaluation form and the off-duty employee form;

[0119] A second target employee determining unit, configured to determine a second target employee whose authority is to be changed according to the leave employee table;

[0120] A time determination unit, configured to determine a permission blocking time and a permission releasing time of the first target employee in the vacation employee table according to the vacation time corresponding to the first target employee in the vacation employee table;

[0121] A generating unit is used to determine the authority change employee table according to the employee identifications of the first target employee and the second target employee, the preset unlocking time, and the authority blocking time and authority unlocking time of the first target employee.

[0122] Optionally, the sending module 340 includes:

[0123] An updating unit, configured to update the permission release time of the target employee corresponding to the temporary unblocking operation in the permission change employee table according to the temporary unblocking period corresponding to the temporary unblocking operation, and send the updated permission change employee table to the target terminal;

[0124] The recovery unit is used to determine the remaining blocking time based on the target employee's permission release time before update and the temporary unblocking period corresponding to the temporary unblocking operation if the temporary unblocking period expires, update the permission release time of the target employee corresponding to the temporary unblocking operation in the permission change employee table according to the remaining blocking time, and send the updated permission change employee table to the target terminal.

[0125] The rights management device provided in the embodiment of the present invention can execute the rights management method provided in any embodiment of the present invention, and has the corresponding functional modules and beneficial effects of the execution method.

[0126] Embodiment 4

[0127] Figure 6A schematic diagram of the structure of an electronic device 10 that can be used to implement an embodiment of the present invention is shown. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital processing, cellular phones, smart phones, wearable devices (such as helmets, glasses, watches, etc.) and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely examples and are not intended to limit the implementation of the present invention described and / or required herein.

[0128] like Figure 6 As shown, the electronic device 10 includes at least one processor 11, and a memory connected to the at least one processor 11, such as a read-only memory (ROM) 12, a random access memory (RAM) 13, etc., wherein the memory stores a computer program that can be executed by at least one processor, and the processor 11 can perform various appropriate actions and processes according to the computer program stored in the read-only memory (ROM) 12 or the computer program loaded from the storage unit 18 to the random access memory (RAM) 13. In the RAM 13, various programs and data required for the operation of the electronic device 10 can also be stored. The processor 11, the ROM 12, and the RAM 13 are connected to each other through a bus 14. An input / output (I / O) interface 15 is also connected to the bus 14.

[0129] A number of components in the electronic device 10 are connected to the I / O interface 15, including: an input unit 16, such as a keyboard, a mouse, etc.; an output unit 17, such as various types of displays, speakers, etc.; a storage unit 18, such as a disk, an optical disk, etc.; and a communication unit 19, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 19 allows the electronic device 10 to exchange information / data with other devices through a computer network such as the Internet and / or various telecommunication networks.

[0130] The processor 11 may be a variety of general and / or special processing components with processing and computing capabilities. Some examples of the processor 11 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any appropriate processor, controller, microcontroller, etc. The processor 11 executes the various methods and processes described above, such as the rights management method.

[0131] In some embodiments, the rights management method may be implemented as a computer program, which is tangibly contained in a computer-readable storage medium, such as a storage unit 18. In some embodiments, part or all of the computer program may be loaded and / or installed on the electronic device 10 via the ROM 12 and / or the communication unit 19. When the computer program is loaded into the RAM 13 and executed by the processor 11, one or more steps of the rights management method described above may be performed. Alternatively, in other embodiments, the processor 11 may be configured to execute the rights management method in any other appropriate manner (e.g., by means of firmware).

[0132] Various implementations of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), complex programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various implementations can include: being implemented in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which can be a special purpose or general purpose programmable processor that can receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit data and instructions to the storage system, the at least one input device, and the at least one output device.

[0133] Computer programs for implementing the methods of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, so that when the computer program is executed by the processor, the functions / operations specified in the flow chart and / or block diagram are implemented. The computer program may be executed entirely on the machine, partially on the machine, partially on the machine and partially on a remote machine as a stand-alone software package, or entirely on a remote machine or server.

[0134] In the context of the present invention, a computer-readable storage medium may be a tangible medium that may contain or store a computer program for use by or in combination with an instruction execution system, device or equipment. A computer-readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, devices or equipment, or any suitable combination of the foregoing. Alternatively, a computer-readable storage medium may be a machine-readable signal medium. A more specific example of a machine-readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0135] To provide interaction with an employee, the systems and techniques described herein may be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the employee; and a keyboard and pointing device (e.g., a mouse or trackball) through which the employee can provide input to the electronic device. Other types of devices may also be used to provide interaction with an employee; for example, the feedback provided to the employee may be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and the input from the employee may be received in any form (including acoustic input, voice input, or tactile input).

[0136] The systems and techniques described herein may be implemented in a computing system that includes backend components (e.g., as a data server), or a computing system that includes middleware components (e.g., an application server), or a computing system that includes frontend components (e.g., an employee computer with a graphical employee interface or a web browser through which an employee can interact with implementations of the systems and techniques described herein), or a computing system that includes any combination of such backend components, middleware components, or frontend components. The components of the system may be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: a local area network (LAN), a wide area network (WAN), a blockchain network, and the Internet.

[0137] A computing system may include a client and a server. The client and the server are generally remote from each other and usually interact through a communication network. The client and server relationship is generated by computer programs running on the corresponding computers and having a client-server relationship with each other. The server may be a cloud server, also known as a cloud computing server or cloud host, which is a host product in the cloud computing service system to solve the defects of difficult management and weak business scalability in traditional physical hosts and VPS services.

[0138] It should be understood that the various forms of processes shown above can be used to reorder, add or delete steps. For example, the steps described in the present invention can be executed in parallel, sequentially or in different orders, as long as the desired results of the technical solution of the present invention can be achieved, and this document does not limit this.

[0139] The above specific implementations do not constitute a limitation on the protection scope of the present invention. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions can be made according to design requirements and other factors. Any modification, equivalent substitution and improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. A rights management method, characterized in that: include: Get employee attendance sheets; Determine the off-duty employee table and the vacation employee table based on the leave field and access control data in the employee attendance table; Determine the employee table with changed authority based on the off-duty employee table and the vacation employee table; The authority-changed employee table is sent to a target terminal, so that the target terminal performs authority management according to the authority-changed employee table.

2. The method according to claim 1, characterized in that The step of determining the off-duty employee table and the vacation employee table according to the leave field and access control data in the employee attendance table includes: Determine a candidate employee list based on the access control data of the employee attendance list; Determine a leave employee table based on the candidate employee table and the leave field of the employee attendance table; The off-duty employee list is determined based on the candidate employee list and the vacation employee list.

3. The method according to claim 1, characterized in that Before obtaining the employee attendance sheet, it also includes: Obtain operation and maintenance logs; Determine the employee evaluation form based on the operation and maintenance log; The step of determining the authority-changed employee table according to the off-duty employee table and the vacation employee table includes: The authority change employee table is determined based on the employee evaluation table, the off-duty employee table and the vacation employee table.

4. The method according to claim 3, characterized in that Determining the employee assessment form according to the operation and maintenance log includes: Obtaining a risk event scoring table, wherein the risk event scoring table includes risk events and risk scores corresponding to the risk events; Determining risk events in the operation and maintenance log according to the risk event scoring table; Based on the risk events and the risk event scoring table, the employee scoring results are determined, and the employee evaluation table is generated based on the employee scoring results.

5. The method according to claim 3, characterized in that: The employee table for authority change is determined according to the employee evaluation table, the off-duty employee table and the vacation employee table, including: Determine the first target employee whose authority is to be changed based on the employee evaluation form and the off-duty employee form; Determine a second target employee whose authority is to be changed according to the leave employee table; Determine the permission blocking time and permission releasing time of the first target employee in the leave employee table according to the leave time corresponding to the first target employee in the leave employee table; According to the employee identifications of the first target employee and the second target employee, the preset unlocking time and the permission blocking time and permission unlocking time of the first target employee, a permission change employee table is determined.

6. The method according to claim 5, characterized in that The sending the authority change employee table to the target terminal includes: According to the temporary unblocking period corresponding to the temporary unblocking operation, updating the permission unblocking time of the target employee corresponding to the temporary unblocking operation in the permission change employee table, and sending the updated permission change employee table to the target terminal; If the temporary unblocking period expires, the remaining blocking time is determined based on the target employee's permission unblocking time before update and the temporary unblocking period corresponding to the temporary unblocking operation, and the permission unblocking time of the target employee corresponding to the temporary unblocking operation in the permission change employee table is updated according to the remaining blocking time, and the updated permission change employee table is sent to the target terminal.

7. The method according to claim 1, characterized in that The target terminal includes at least one of a time clock, a door access control device, a bastion host and a computer.

8. A rights management device, characterized in that: include: The acquisition module is used to obtain employee attendance sheets; A parsing module, used to determine a table of off-duty employees and a table of vacation employees based on the leave field and access control data in the employee attendance table; A change module, used for determining the authority to change the employee table according to the off-duty employee table and the vacation employee table; The sending module is used to send the authority change employee table to the target terminal, so that the target terminal performs authority management according to the authority change employee table.

9. An electronic device, characterized in that: The electronic device comprises: at least one processor; and, a memory communicatively connected to the at least one processor; wherein, The memory stores a computer program executable by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the rights management method according to any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the rights management method according to any one of claims 1 to 7 when executed.

Images