Distribution authorization method and device for atomization service and application, equipment and medium

By implementing a role-based and organization-based authorized distribution strategy in the application distribution system, the problem of the inability to control users to distribute atomic services in the prior art is solved, the flexibility and security of service access are improved, and customized service experience is supported.

CN119766499AActive Publication Date: 2025-04-04深圳开鸿数字产业发展有限公司
View PDF 7 Cites 0 Cited by

Patent Information

Application Number
CN202411787211.4
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2024-12-06
Publication Date
2025-04-04
Estimated Expiration
2044-12-06

AI Technical Summary

Technical Problem

Existing application distribution systems cannot control roles and organizations. User distribution atomized services, KaihongOS applications and digital twin atomized services, resulting in low flexibility and security in service access.

Method used

By obtaining product and business system data, roles and organization data, determine the roles and organizations authorized to use atomized services or KaihongOS applications, and distribute them to the corresponding product or business system, implementing roles and organizations-based authorization distribution strategies.

Benefits of technology

Ensure that users see and access the appropriate services according to their roles and organizations, increase flexibility and security in service access, support the rapid deployment of digital twin atomized services, and allow enterprises or service providers to customize service experiences based on their user identities and needs.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN119766499A_ABST
    Figure CN119766499A_ABST
Patent Text Reader

Abstract

The invention discloses an atomization service and application distribution authorization method, device and equipment and a medium. The atomization service and application distribution authorization method comprises the steps of obtaining product and business system data and obtaining role and organization data; obtaining a selected product or service system needing to be distributed and a role and organization needing to be authorized; determining a role and an organization authorized to use the atomization service or the KaihongOS application; wherein the atomization service comprises a KaihongOS atomization service and a digital twin atomization service; and distributing and authorizing the atomization service or the KaihongOS application to a corresponding product or business system. When the digital twin atomization service, the KaihongOS atomization service and the application are distributed, the authorization distribution strategy based on the role and the organization can be implemented, so that the user can see and access the proper service according to the role and the organization to which the user belongs, and the flexibility and the safety of service access are improved.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present invention relates to the field of communication technology, and in particular to a method, device, equipment and medium for distributing authorization of atomic services and applications. Background Art

[0002] Hongmeng atomic services provide users with lighter services in various forms such as Hongmeng universal cards. Hongmeng atomic services only need to be developed once and support the operation of multiple terminal devices.

[0003] Digital twin atomic service is a modern service model based on Web technology. It provides users with a new interactive experience through dynamic uploading and automatic loading. The core of this service model lies in its flexibility and convenience. Users can quickly access services through the universal card portal of the workbench on the WEB side. These cards can display key information and allow users to interact directly. Developers can freely develop business functions without being restricted by the front-end technology stack. Whether using modern JavaScript frameworks such as Vue and React, or choosing building tools such as Vite, Webpack, Vue CLI, Umi, etc., they can meet development needs. Services are usually distributed in the form of ZIP packages, which contain the icon of the portal card and the main content of the business function.

[0004] To meet the growing diversity of consumer devices, the distribution platform can support the distribution of services across terminal devices. The process of enabling services to run on different devices as needed is called multi-terminal distribution, and it also has the characteristics of business continuity: to ensure that user services are interrupted due to device switching or changes in user behavior, it is necessary to provide the ability for the status of running services to flow on different devices to ensure continuous service. This process is called business continuity. AppGalleryConnect is a one-stop service platform that supports global distribution of applications across all terminals, scenarios, and platforms. This platform allows developers to upload applications in a variety of package formats, such as APK, RPK, App Bundle, etc., and distribute them to a variety of terminal devices, including mobile phones, tablets, large screens, watches, car machines, VR, etc.

[0005] However, the existing application distribution system cannot achieve the control of roles and organizations, user distribution atomic services, KaihongOS applications and digital twin atomic services, which reduces the flexibility and security of service access.

[0006] Therefore, the prior art still needs to be improved and developed. Summary of the invention

[0007] In view of the above-mentioned deficiencies in the prior art, the purpose of the present invention is to provide a method, device, equipment and medium for authorizing the distribution of atomic services and applications, so as to solve the problem that the existing application distribution system is unable to control roles and organizations, distribute atomic services to users, and distribute atomic services to HarmonyOS applications and digital twin atomic services, resulting in low service access flexibility and security.

[0008] The technical solution of the present invention is as follows:

[0009] In a first aspect, the present invention provides a method for distributing and authorizing atomic services and applications, comprising:

[0010] Obtain product and business system data and obtain role and organization data;

[0011] Get the selected products or business systems that need to be distributed and the roles and organizations that need to be authorized;

[0012] Determine the roles and organizations authorized to use atomic services or KaihongOS applications; wherein the atomic services include KaihongOS atomic services and digital twin atomic services;

[0013] Authorize the distribution of atomic services or KaihongOS applications to corresponding products or business systems.

[0014] The present invention further provides that the step of determining the role and organization authorized to use the atomic service or KaihongOS application includes:

[0015] Edit the authorization scope of roles and organizations;

[0016] Verify the role and organization. If there are common users in the role and organization, the verification succeeds.

[0017] The present invention is further configured that the step of distributing the authorization of the atomic service or KaihongOS application to the corresponding product or business system includes:

[0018] Call the add and edit distribution API interface;

[0019] Authorize the distribution of atomic services or KaihongOS applications to products or business systems;

[0020] Updates are made to the distribution list.

[0021] The present invention is further configured to include:

[0022] When the product or business system does not need to use the distributed atomic services and applications, remove the atomic services and KaihongOS applications from the product or business system;

[0023] The distribution records of the corresponding removed atomic services and applications are recorded in the database as removed status.

[0024] The present invention is further arranged that in the step of distributing the atomic service or KaihongOS application authorization to the corresponding product or business system, when the digital twin atomic service authorization is distributed to the business system, it specifically includes:

[0025] After receiving the user's access request, load the micro-frontend framework and request the digital twin atomic service interface distributed by the business system;

[0026] Get the role and organization to which it belongs, obtain the list of distributed digital twin atomic services according to the authorization scope, and add them to the workbench;

[0027] Add an atomic service card and render it. After triggering the atomic service card, pull the static resources of the digital twin atomic service and render the page.

[0028] The present invention is further configured that when KaihongOS atomic services or KaihongOS applications are distributed to products, it specifically includes:

[0029] After receiving the user's access request, request the KaihongOS atomic service and application interface distributed by the product;

[0030] Get the role and organization to which the user belongs, and obtain the list of distributed KaihongOS atomic services and applications according to the authorization scope;

[0031] After receiving the download request, it downloads the static resources of the atomic service and application, performs signature verification and installation, and adds them to the workbench.

[0032] The present invention is further arranged that, in the step of obtaining the selected products or business systems to be distributed, the products or business systems to be distributed are selected in batches.

[0033] In a second aspect, the present invention further provides a device for distributing authorization of atomic services and applications, comprising:

[0034] The acquisition unit is used to acquire product and business system data and to acquire role and organization data;

[0035] Select the distribution unit to obtain the selected products or business systems that need to be distributed and the roles and organizations that need to be authorized;

[0036] An authorization unit, used to determine the roles and organizations authorized to use the atomic service or KaihongOS application; wherein the atomic service includes the KaihongOS atomic service and the digital twin atomic service;

[0037] The distribution unit is used to distribute and authorize atomic services or KaihongOS applications to corresponding products or business systems.

[0038] In a third aspect, the present invention further provides a device, comprising a memory and a processor, wherein the memory stores a computer program, and the computer program is used to implement the distribution authorization method of atomic services and applications as described above when executed by the processor.

[0039] In a fourth aspect, the present invention further provides a medium on which a computer program is stored, and the computer program is used to implement the distribution authorization method of atomic services and applications as described above when executed by a processor.

[0040] The present invention provides a method, device, equipment and medium for distributing and authorizing atomic services and applications. The method for distributing and authorizing atomic services and applications includes: obtaining product and business system data and obtaining role and organization data; obtaining the selected product or business system to be distributed and the role and organization to be authorized; determining the role and organization authorized to use the atomic service or KaihongOS application; wherein the atomic service includes KaihongOS atomic service and digital twin atomic service; distributing the atomic service or KaihongOS application to the corresponding product or business system. When distributing digital twin atomic services, KaihongOS atomic services and applications, the present invention can implement a role- and organization-based authorization distribution strategy to ensure that users see and access appropriate services based on their roles and organizations, thereby increasing the flexibility and security of service access. BRIEF DESCRIPTION OF THE DRAWINGS

[0041] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary personnel in this field, other drawings can be obtained based on the structures shown in these drawings without paying any creative work.

[0042] Figure 1 It is a flow chart of the distribution authorization method of atomic services and applications in the present invention.

[0043] Figure 2 It is a flow chart of a method for distributing and authorizing atomic services and applications in one embodiment of the present invention.

[0044] Figure 3 This is an interface diagram for selecting a business system in one embodiment of the present invention.

[0045] Figure 4 This is an interface diagram of roles and organizations authorized to use atomic services / KaihongOS applications in one embodiment of the present invention.

[0046] Figure 5 This is an interface diagram for distributing the atomic service authorization to the business system in one embodiment of the present invention.

[0047] Figure 6 This is an interface diagram of removing atomic services distributed to a business system in one embodiment of the present invention.

[0048] Figure 7 This is an interface diagram for editing the authorization scope in one embodiment of the present invention.

[0049] Figure 8 It is an operation flow chart of the digital twin atomic service in one embodiment of the present invention.

[0050] Fig. 9 This is a diagram of the operation interface of the digital twin atomic service in one embodiment of the present invention.

[0051] Fig.10 It is an operation flow chart of KaihongOS atomic service or application in one embodiment of the present invention.

[0052] Fig.11 It is a principle block diagram of a distribution authorization device for atomic services and applications in one embodiment of the present invention. DETAILED DESCRIPTION

[0053] The present invention provides a method, device, equipment and medium for distributing and authorizing atomic services and applications. In order to make the purpose, technical solution and effect of the present invention clearer and more specific, the present invention is further described in detail with reference to the accompanying drawings and examples. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not used to limit the present invention.

[0054] In the embodiments and the scope of the patent application, unless the text specifically defines the article, "a", "an", "the" and "the" may also include plural forms. If there are descriptions involving "first", "second", etc. in the embodiments of the present invention, the descriptions of "first", "second", etc. are only used for descriptive purposes and cannot be understood as indicating or implying their relative importance or implicitly indicating the number of the indicated technical features. Therefore, the features defined as "first" or "second" may explicitly or implicitly include at least one of the features.

[0055] It should be further understood that the term "comprising" used in the specification of the present invention refers to the presence of the features, integers, steps, operations, elements and / or components, but does not exclude the presence or addition of one or more other features, integers, steps, operations, elements, components and / or groups thereof. It should be understood that when an element is said to be "connected" or "coupled" to another element, it can be directly connected or coupled to the other element, or there can also be intermediate elements. In addition, the "connection" or "coupling" used herein can include wireless connection or wireless coupling. The term "and / or" used herein includes all or any unit and all combinations of one or more associated listed items.

[0056] It will be understood by those skilled in the art that, unless otherwise defined, all terms (including technical and scientific terms) used herein have the same meaning as generally understood by those skilled in the art in the art to which the present invention belongs. It should also be understood that terms such as those defined in general dictionaries should be understood to have meanings consistent with the meanings in the context of the prior art, and will not be interpreted with idealized or overly formal meanings unless specifically defined as herein.

[0057] In addition, the technical solutions between the various embodiments can be combined with each other, but it must be based on the fact that ordinary technicians in the field can implement it. When the combination of technical solutions is contradictory or cannot be implemented, it should be deemed that such combination of technical solutions does not exist and is not within the scope of protection required by the present invention.

[0058] KaihongOS standard system software is an intelligently connected operating system for all industries and scenarios. It uses OpenHarmony as its technical foundation, and conducts capability enhancement and R&D innovation around the system kernel, system framework, performance optimization, etc. At the same time, it provides the ability to build industry customization based on industry characteristics. KaihongOS atomic service is a new service provision method based on the HarmonyOS API. It has the characteristics of ready-to-use, information display, and direct service. KaihongOS applications are programs developed based on the OpenHarmony API and run on the KaihongOS system. They can provide users with specific services and functions. However, the existing application distribution system cannot achieve control over roles and organizations, user distribution atomic services, KaihongOS applications, and digital twin atomic services, which reduces the flexibility and security of service access.

[0059] In view of the above technical problems, the present invention provides a method, device, equipment and medium for distributing and authorizing atomic services and applications. The method comprises: obtaining product and business system data and obtaining role and organization data; obtaining selected products or business systems to be distributed and roles and organizations to be authorized; determining roles and organizations authorized to use atomic services or KaihongOS applications; wherein the atomic services include KaihongOS S Atomic services and digital twin atomic services; authorize the distribution of atomic services or KaihongOS applications to corresponding products or business systems. When distributing digital twin atomic services, KaihongOS atomic services, and applications, the present invention can implement a role- and organization-based authorization distribution strategy to ensure that users see and access appropriate services based on their roles and organizations, increasing the flexibility and security of service access. Operators can use existing services and tools, combined with their own business needs, to achieve effective distribution and management of atomic services and KaihongOS applications.

[0060] In some embodiments, Figures 1 to 10 As shown, the present invention provides a method for distributing and authorizing atomic services and applications, which includes the following steps:

[0061] S100, obtain product and business systems as well as roles and organizations;

[0062] Specifically, see Figure 1 Combined with Figure 2 , business systems and products can be newly created on the super device management platform of KaihongOS. Among them, the super device management platform is a platform that provides basic software services for the digitalization and intelligence of the industry. The platform is built around the open source Hongmeng to build a leading state in the era of the Internet of Everything. By providing diversified access methods, fast access capabilities, performance stability, and security and reliability, it supports various devices and scenarios to achieve intelligent and intelligent management of devices. Products can be tablets, mobile phones, smart boxes, etc., and the distributed KaihongOS atomic services and applications can be obtained by logging in to the application market on the devices of related products. When a user logs in or visits a business system website, the relevant digital twin atomic services can be run. Taking the conference room business system as an example, after logging in to the account, there may be atomic services such as smart air conditioners, smart cameras, and smart lights on the left workbench. These atomic services are distributed by the application distribution center. Roles and organizations can actually manage accounts in different dimensions. For example, an account may contain administrator roles, maintenance roles, common roles, internal staff roles, external visitor roles, etc. They have different permissions. For example, when distributing atomic services and applications, if you only want to distribute them to the administrator role, then only the account with this role can use the atomic service / application.

[0063] KaihongOS atomic services and applications are distributed to products. When a user logs in on a device on the product, the distributed atomic services and applications are obtained based on the account role and organization, where each user has an account. Digital twin atomic services are distributed to business systems. When an account accesses the business system, the distributed digital twin atomic services are obtained based on the account role and organization.

[0064] When distributing atomic services or KaihongOS applications, staff must first query the data of the product or business system to be distributed from the super device management platform to decide which product or business system to distribute it to. In addition, when editing the authorization distribution, it is also necessary to query the role and organization data first to decide which roles and organizations to authorize accounts so that these accounts can obtain atomic services or applications. Taking the distribution of digital twin atomic services to business systems as an example, the digital twin atomic service "smart air conditioning" is distributed to the "digital twin system of the company's third floor training room" business system, and only administrator roles and company organization accounts can use it. Then only administrator roles and company organization accounts can use the "smart air conditioning" atomic service when accessing the "digital twin system of the third floor training room" business system.

[0065] S200, obtaining the selected product or business system to be distributed and the roles and organizations to be authorized;

[0066] Specifically, see Figure 1 Combined with Figure 2 When distributing atomic services and KaihongOS applications, you can select products or business systems to be distributed in batches. Take the fan application distributed to the conference room as an example. Since the fan application is a digital twin atomic service, you can select the business system as the conference room. By continuing to add, you can select multiple business systems for distribution, such as Figure 3 shown.

[0067] S300, determining the roles and organizations authorized to use the atomic service or KaihongOS application; wherein the atomic service includes the KaihongOS atomic service and the digital twin atomic service;

[0068] Specifically, see Figure 1 Combined with Figure 2, after selecting the products or business systems to be distributed, select the roles and organizations to be authorized. When you need to distribute KaihongOS atomic services and applications, select the products to be distributed. When you need to distribute digital twin atomic services, select the business systems to be distributed. Taking the fan business as an example, you can select the authorization scope as all users. When authorizing organizations, you can not limit the organization. When authorizing roles, you can limit it to internal company personnel. It is understandable that when performing role authorization, you can also increase the authorized roles by continuing to add, such as Figure 4 shown.

[0069] S400. Authorize the atomic service or KaihongOS application to be distributed to the corresponding product or business system.

[0070] Specifically, see Figure 1 Combined with Figure 2 After completing the authorization of roles and organizations, distribute the atomic services or KaihongOS applications to the authorized products or business systems. Users who log in to the client application market can obtain the KaihongOS atomic services and KaihongOS applications distributed by any product within the authorized scope. Users who log in to the Web client can obtain the digital twin atomic services distributed on any business system within the authorized scope. Taking the fan application as an example, the conference room 731 in the business system can be authorized to all users, such as Figure 5 shown.

[0071] Based on the above technical solution, when distributing digital twin atomic services, KaihongOS atomic services and applications, a role- and organization-based authorization distribution strategy can be implemented to ensure that users see and access appropriate services based on their roles and organizations, and support the rapid deployment of digital twin atomic services to users' own business systems. The present invention increases the flexibility and security of service access, allowing enterprises or service providers to customize the service experience based on the identity and needs of users. Through the authorization distribution mechanism, it can ensure that atomic services on industrial tablets, robots, drones and other devices are distributed according to the user's role and organizational membership, which helps to achieve more secure and efficient service distribution and deployment in industries such as finance, government affairs, and energy. In addition, operators can use existing services and tools, combined with their own business needs, to achieve effective distribution and management of atomic services and KaihongOS applications.

[0072] In some embodiments, the method for distributing and authorizing atomic services and applications further includes the steps of:

[0073] S500, when the product or business system does not need to use the distributed atomic services and applications, remove the atomic services and KaihongOS applications and applications from the product or business system;

[0074] S600: Record the distribution records of the removed atomic services and applications in the database as removed status.

[0075] In this embodiment, when the staff does not need to use the distributed KaihongOS atomic services and applications, they can remove (delete) the distribution. The specific operation is that the staff enters the KaihongOS atomic services and applications distribution details interface, clicks the Remove button, and after clicking OK, the system will remove the KaihongOS atomic services and applications distributed to the product and refresh the distribution list. Similarly, when the staff does not need to use the distributed digital twin atomic services on the business system, they can directly remove the distribution. The specific operation is the same as removing the KaihongOS atomic services and applications distributed to the product, such as Figure 6 As shown, the fan application can be removed in the Demo test.

[0076] Furthermore, after the atomic services and applications are removed, the removed distribution can be recorded in the database as a removed status, so that subsequent staff can know that the current authorized distribution has ended.

[0077] In some embodiments, see Figure 1 Combined with Figure 2 The step of determining the roles and organizations authorized to use the atomic service or KaihongOS application includes the following steps:

[0078] S310. Edit the authorization scope of roles and organizations;

[0079] Specifically, when selecting the role and organization to be authorized, you need to edit the authorization scope. Taking fans as an example, when fans are distributed to the company's conference room 731, when authorizing internal company personnel to use, there is no restriction on the organization, and the role is limited to internal company personnel. When authorizing the tactile intelligence role, there is no restriction on the organization, and the role is limited to the tactile intelligence role. Figure 7 shown.

[0080] S320: Verify the role and organization. If the role and organization have common users, the verification is successful.

[0081] Specifically, when authorizing roles and organizations that use atomic services or KaihongOS applications, verification can only be passed when the role and organization have common users. For example, roles and organizations control and manage accounts from different dimensions. For example, in the platform, account A is under role 1, role 2, organization 1, and organization 2, and account B is under role 1 and organization 1. Then, the common accounts under role 1 and organization 1 are account A and B; the common accounts under role 1 and organization 2 are account A; the common accounts under role 2 and organization 1 are account A; and the common accounts under role 2 and organization 2 are account A.

[0082] In some embodiments, see Figure 1 Combined with Figure 2 The steps of distributing and authorizing the atomic service or KaihongOS application to the corresponding product or business system include:

[0083] S410, calling the new adding and editing distribution API interface;

[0084] S420, authorize the distribution of atomic services or KaihongOS applications to products or business systems;

[0085] S430: Update the distribution list.

[0086] In this embodiment, after determining the roles and organizations authorized to use the atomic service or KaihongOS application, the new and edited distribution API interface is called to distribute the atomic service or KaihongOS application to the product or business system. The system will refresh the distribution list, so that users can obtain the distributed atomic service or KaihongOS application in the end-side application market or the Web end.

[0087] In some embodiments, see Figure 8 When the digital twin atomic service authorization is distributed to the business system, it specifically includes:

[0088] S440, after receiving the user's access request, load the micro-frontend framework and request the digital twin atomic service interface distributed by the business system;

[0089] S450, obtain the role and organization to which the user belongs, obtain the distributed digital twin atomic service list according to the authorization scope, and add it to the workbench;

[0090] S460, add an atomic service card and render it. After triggering the atomic service card, pull the static resources of the digital twin atomic service and render the page.

[0091] In this embodiment, the micro-frontend framework is an architecture similar to microservices, which applies the concept of microservices to the browser side, that is, the Web application is transformed from a single monolithic application to an application that aggregates multiple small front-end applications. Each front-end application can also run, develop, and deploy independently.

[0092] After the digital twin atomic service authorization is distributed to the business system, when the user logs in and accesses the business system, the micro front-end framework will be automatically loaded to request all digital twin atomic service interfaces distributed by the business system. The back-end can automatically obtain the role and organization described by the user, query the list of digital twin atomic services distributed by the business system and within the authorization scope, and the user can add more to the workbench, such as Fig. 9 As shown. The added atomic service card can be rendered on the workbench. Click the atomic service card to pull the static resources of the digital twin atomic service and render the atomic service on the interface, as shown. Fig. 9 shown.

[0093] In some embodiments, see Fig.10 When KaihongOS atomic services or KaihongOS applications are distributed to products, they include:

[0094] S470, after receiving the user's access request, request the KaihongOS atomic service and application interface distributed by the product;

[0095] S480, obtaining the role and organization to which the user belongs, and obtaining the list of distributed KaihongOS atomic services and applications according to the authorization scope;

[0096] S490. After receiving the download request, the static resources of the atomic service and application are downloaded, signature verification and installation are performed, and the resources are added to the workbench.

[0097] Specifically, after the KaihongOS atomic service or application is distributed to the product, the user can log in on the end side and access the application market to request all KaihongOS atomic services and application interfaces distributed by the product of the device. The backend can automatically obtain the role and organization to which the user belongs, and query the list of KaihongOS atomic services or KaihongOS applications within the scope of product distribution and authorization. After the user clicks on the KaihongOS atomic service or application on the end-side device, the static resources of the atomic service or application are downloaded and the signature is verified. If the signature verification fails, a prompt is returned. If the user succeeds in the signature verification on the end-side device, the atomic service or application can be installed and run. After downloading and installing, the installed atomic service or application can be added to the workbench.

[0098] In some embodiments, see Fig.11 The present invention also provides a device for distributing authorization of atomic services and applications, which includes:

[0099] An acquisition unit 100 is used to acquire product and business system data and role and organization data;

[0100] A selection distribution unit 200 is used to obtain the selected product or business system to be distributed and the role and organization to be authorized;

[0101] The authorization unit 300 is used to determine the roles and organizations authorized to use the atomic service or KaihongOS application; wherein the atomic service includes the KaihongOS atomic service and the digital twin atomic service;

[0102] The distribution unit 400 is used to distribute and authorize the atomic service or KaihongOS application to the corresponding product or business system.

[0103] In some embodiments, the present invention further provides a device, including a memory and a processor, wherein a computer program is stored on the memory, and the computer program is used to implement the steps of the distribution authorization method for atomic services and applications when executed by the processor:

[0104] Obtain product and business system data and obtain role and organization data;

[0105] Get the selected products or business systems that need to be distributed and the roles and organizations that need to be authorized;

[0106] Determine the roles and organizations authorized to use atomic services or KaihongOS applications; wherein the atomic services include KaihongOS atomic services and digital twin atomic services;

[0107] Authorize the distribution of atomic services or KaihongOS applications to corresponding products or business systems.

[0108] In some embodiments, the present invention further provides a medium on which a computer program is stored, and the computer program is used to implement the steps of the distribution authorization method for atomic services and applications when executed by a processor:

[0109] Obtain product and business system data and obtain role and organization data;

[0110] Get the selected products or business systems that need to be distributed and the roles and organizations that need to be authorized;

[0111] Determine the roles and organizations authorized to use atomic services or KaihongOS applications; wherein the atomic services include KaihongOS atomic services and digital twin atomic services;

[0112] Authorize the distribution of atomic services or KaihongOS applications to corresponding products or business systems.

[0113] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to memory, storage, database or other media used in the embodiments provided by the present invention can include non-volatile and / or volatile memory. Non-volatile memory can include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM) or flash memory. Volatile memory can include random access memory (RAM) or external cache memory. As an illustration and not limitation, RAM is available in many forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous link (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM).

[0114] In summary, the method, device, equipment and medium for distributing and authorizing atomic services and applications provided by the present invention have the following beneficial effects:

[0115] Role- and organization-based authorization distribution policies ensure that users see and access appropriate services based on their roles and organizations. This supports the rapid deployment of digital twin atomic services into users’ own business systems, increases the flexibility and security of service access, and allows enterprises or service providers to customize service experiences based on users’ identities and needs.

[0116] Operators can use existing services and tools, combined with their own business needs, to achieve effective distribution and management of atomic services and KaihongOS applications.

[0117] It should be understood that the application of the present invention is not limited to the above examples. For ordinary technicians in this field, improvements or changes can be made based on the above description. All these improvements and changes should fall within the scope of protection of the claims attached to the present invention.

Claims

1. A method for distributing and authorizing atomic services and applications, characterized in that: include: Obtain product and business system data and obtain role and organization data; Get the selected products or business systems that need to be distributed and the roles and organizations that need to be authorized; Determine the roles and organizations authorized to use atomic services or KaihongOS applications; wherein the atomic services include KaihongOS atomic services and digital twin atomic services; Authorize the distribution of atomic services or KaihongOS applications to corresponding products or business systems.

2. The method for distributing and authorizing atomic services and applications according to claim 1, characterized in that: The step of determining the roles and organizations authorized to use the atomic service or KaihongOS application includes: Edit the authorization scope of roles and organizations; Verify the role and organization. If there are common users in the role and organization, the verification succeeds.

3. The method for distributing and authorizing atomic services and applications according to claim 1, characterized in that: The step of distributing and authorizing the atomic service or KaihongOS application to the corresponding product or business system includes: Call the add and edit distribution API interface; Authorize the distribution of atomic services or KaihongOS applications to products or business systems; Updates are made to the distribution list.

4. The method for distributing and authorizing atomic services and applications according to claim 1, characterized in that: Also includes: When the product or business system does not need to use the distributed atomic services and applications, remove the atomic services and KaihongOS applications from the product or business system; The distribution records of the corresponding removed atomic services and applications are recorded in the database as removed status.

5. The method for distributing and authorizing atomic services and applications according to claim 1, characterized in that: In the step of distributing the atomic service or KaihongOS application authorization to the corresponding product or business system, when distributing the digital twin atomic service authorization to the business system, it specifically includes: After receiving the user's access request, load the micro-frontend framework and request the digital twin atomic service interface distributed by the business system; Get the role and organization to which it belongs, obtain the list of distributed digital twin atomic services according to the authorization scope, and add them to the workbench; Add an atomic service card and render it. After triggering the atomic service card, pull the static resources of the digital twin atomic service and render the page.

6. The method for distributing and authorizing atomic services and applications according to claim 1, characterized in that: In the step of distributing the atomic service or KaihongOS application to the corresponding product or business system, when the KaihongOS atomic service or KaihongOS application is distributed to the product, it specifically includes: After receiving the user's access request, request the KaihongOS atomic service and application interface distributed by the product; Get the role and organization to which the user belongs, and obtain the list of distributed KaihongOS atomic services and applications according to the authorization scope; After receiving the download request, it downloads the static resources of the atomic service and application, performs signature verification and installation, and adds them to the workbench.

7. The method for distributing and authorizing atomic services and applications according to claim 1, characterized in that: In the step of obtaining the selected products or business systems to be distributed, the products or business systems to be distributed are selected in batches.

8. A device for implementing the distribution authorization method of atomic services and applications as claimed in any one of claims 1 to 7, characterized in that: include: The acquisition unit is used to acquire product and business system data and to acquire role and organization data; Select the distribution unit to obtain the selected products or business systems that need to be distributed and the roles and organizations that need to be authorized; An authorization unit, used to determine the roles and organizations authorized to use the atomic service or KaihongOS application; wherein the atomic service includes the KaihongOS atomic service and the digital twin atomic service; The distribution unit is used to distribute and authorize atomic services or KaihongOS applications to corresponding products or business systems.

9. A device comprising a memory and a processor, characterized in that: The memory stores a computer program, and the computer program is used to implement the distribution authorization method for atomic services and applications as described in any one of claims 1 to 7 when executed by the processor.

10. A medium having a computer program stored thereon, characterized in that: The computer program is used to implement the distribution authorization method for atomic services and applications as described in any one of claims 1 to 7 when executed by a processor.

Citation Information

Patent Citations

  • Permission service platform, method and system

    CN113935063A

  • Micro-service-based atomized vehicle information safety service system and method

    CN115514525A

  • Permission verification method and device, equipment and storage medium

    CN117332435A

  • Authorization policy customization and authorization policy lockdown

    US20160315965A1

  • Method and system for managing sub-tenants in a cloud computing environment

    US20200382442A1