Internet hospital data query method and device

Abstract

The invention discloses an internet hospital data query method and device, and relates to the technical field of internet medical treatment. A specific embodiment of the method comprises the steps of generating an initial query statement in response to an external query operation of a user; sending a permission acquisition request to a permission management system, and acquiring query permission data of a user; generating an authority control query statement according to the query authority data and the initial query statement; sending the generated authority control query statement to a data system corresponding to the query menu to obtain query result data returned by the data system; after the data system receives the authority control query statement, the authority control query statement is converted into a local query statement according to the mapping relation which is locally stored in the data system and between the standard name of the query field and the local name, and the local query statement is executed to obtain query result data. According to the embodiment, the maintenance workload of the authority management system can be reduced.

Description

Technical Field

[0001] The present invention relates to the field of Internet medical technology, and in particular to an Internet hospital data query method and device. Background Art

[0002] In the Internet hospital management system, different operators (hereinafter referred to as users) need to perform queries on the data of various business systems (hereinafter referred to as data systems) such as orders, consultations, and conversations according to their respective query permissions. The query process needs to involve fields such as hospitals, departments, and field values ​​of each data system. At present, each data system often uses different field names (custom field names) for fields with the same meaning. For example, for the field of hospital identification, some data systems use hospitalID, some use hosID, and some use HID, which is easy to cause data confusion. In the prior art, the corresponding relationship between the custom field names of these data systems is maintained in the permission management system, resulting in a strong coupling between the permission management system and each data system. When the custom field name of a data system is adjusted, the permission management system must be synchronized in the above corresponding relationship, resulting in the permission management system becoming a heavyweight system with a large maintenance workload. In addition, in order to provide precise permission control for query systems involving massive data, the prior art generally configures specific permission content for each user in the permission management system, so that a large amount of permission data needs to be stored in the permission management system, further increasing the computing pressure and maintenance workload of the permission management system. Summary of the invention

[0003] In view of this, an embodiment of the present invention provides an Internet hospital data query method and device, which can reduce the maintenance workload of the authority management system.

[0004] To achieve the above objective, according to one aspect of the present invention, a method for querying Internet hospital data is provided.

[0005] The Internet hospital data query method of an embodiment of the present invention includes: in response to a user's external query operation on a query menu, a query field in the query menu, and a field value of a query field, generating an initial query statement corresponding to the external query operation; wherein the initial query statement contains the standard name of the query field; issuing a permission acquisition request to a pre-established permission management system to obtain the user's query permission data returned by the permission management system; generating a permission control query statement based on the query permission data and the initial query statement; sending the generated permission control query statement to the data system corresponding to the query menu to obtain the query result data returned by the data system; wherein, after receiving the permission control query statement, the data system converts the permission control query statement into a local query statement based on the mapping relationship between the standard name of the query field and the local name stored locally in the data system, and executes the local query statement to obtain the query result data.

[0006] Optionally, the standard name of the query field is pre-stored in the rights management system; and the method further comprises: interacting with the rights management system in advance to obtain the standard name of the query field.

[0007] Optionally, the permission management system pre-stores a variety of permission role data formed by a combination of at least one query menu, at least one query field in any query menu, and at least one field value of any query field, and any permission role data includes a role identifier; the permission management system also pre-stores a current role identifier configured for any user; and, after receiving a permission acquisition request, the permission management system determines the current role identifier of the corresponding user locally; uses the determined current role identifier to obtain the corresponding permission role data, and generates the query permission data of the corresponding user based on the obtained permission role data.

[0008] Optionally, generating a permission control query statement according to the query permission data and the initial query statement includes: generating a permission control code snippet according to the query permission data, and splicing the permission control code snippet to the initial query statement to form the permission control query statement.

[0009] Optionally, converting the permission control query statement into a local query statement includes: replacing the standard name of the query field in the permission control query statement with the local name according to the mapping relationship between the standard name of the query field and the local name stored locally in the data system, so that the permission control query statement forms a local query statement.

[0010] Optionally, the initial query statement further includes: a database table name corresponding to the query menu targeted by the external query operation, and a field value targeted by the external query operation.

[0011] To achieve the above objective, according to another aspect of the present invention, an Internet hospital data query device is provided.

[0012] The Internet hospital data query device provided by the embodiment of the present invention may include: a query statement generating unit, a permission control unit and a query result acquiring unit.

[0013] Among them, the query statement generation unit can be used to respond to the user's external query operation on the query menu, the query field in the query menu, and the field value of the query field, and generate an initial query statement corresponding to the external query operation; wherein the initial query statement contains the standard name of the query field; the permission control unit can be used to issue a permission acquisition request to a pre-established permission management system to obtain the user's query permission data returned by the permission management system; generate a permission control query statement based on the query permission data and the initial query statement; the query result acquisition unit can be used to send the generated permission control query statement to the data system corresponding to the query menu to obtain the query result data returned by the data system; wherein, after receiving the permission control query statement, the data system converts the permission control query statement into a local query statement based on the mapping relationship between the standard name of the query field and the local name stored locally in the data system, and executes the local query statement to obtain the query result data.

[0014] Optionally, the standard name of the query field is pre-stored in the authority management system; and the device may further include: a standard name maintenance unit, which is used to interact with the authority management system in advance to obtain the standard name of the query field.

[0015] Optionally, the permission management system pre-stores a variety of permission role data formed by a combination of at least one query menu, at least one query field in any query menu, and at least one field value of any query field, and any permission role data includes a role identifier; the permission management system also pre-stores a current role identifier configured for any user; and, after receiving a permission acquisition request, the permission management system determines the current role identifier of the corresponding user locally; uses the determined current role identifier to obtain the corresponding permission role data, and generates the query permission data of the corresponding user based on the obtained permission role data.

[0016] Optionally, the permission control unit may be further configured to: generate a permission control code fragment according to the query permission data, and concatenate the permission control code fragment into the initial query statement to form a permission control query statement.

[0017] Optionally, the data system may be further used to replace the standard name of the query field in the permission control query statement with the local name according to the mapping relationship between the standard name of the query field and the local name stored locally in the data system, so that the permission control query statement forms a local query statement.

[0018] Optionally, the initial query statement further includes: a database table name corresponding to the query menu targeted by the external query operation, and a field value targeted by the external query operation.

[0019] To achieve the above objective, according to another aspect of the present invention, an electronic device is provided.

[0020] An electronic device of the present invention includes: one or more processors; a storage device for storing one or more programs, when the one or more programs are executed by one or more processors, the one or more processors implement the Internet hospital data query method provided by the present invention.

[0021] To achieve the above objective, according to yet another aspect of the present invention, a computer-readable storage medium is provided.

[0022] A computer-readable storage medium of the present invention stores a computer program, which, when executed by a processor, implements the Internet hospital data query method provided by the present invention.

[0023] To achieve the above objective, according to yet another aspect of the present invention, a computer program product is provided.

[0024] A computer program product of the present invention includes a computer program, and when the computer program is executed by a processor, the Internet hospital data query method provided by the present invention is implemented.

[0025] According to the technical solution of the present invention, the embodiments of the above invention have the following advantages or beneficial effects: The query system first generates an initial query statement based on the external query operation, then obtains the user's query permission data from the permission management system, generates a permission control query statement based on the query permission data and the initial query statement, and sends it to the corresponding data system to obtain the query result data returned by the data system. Among them, after receiving the permission control query statement, the data system converts the permission control query statement into a local query statement based on the mapping relationship between the standard name and the local name of the query field stored locally in advance, and executes the local query statement to obtain the query result data. In this way, the field name consistency in the query process is achieved by storing the mapping relationship between the customized field local name and the standard name in each data system. When the field local name needs to be adjusted, it is directly modified within the data system without changing the permission management system, thereby reducing the maintenance workload of the permission management system, making it only responsible for permission data storage and permission control, thereby decoupling each data system from the permission control system and realizing lightweight permission control system. Better yet, the permission management system no longer stores the specific permission data of each user, but instead pre-configures multiple permission roles that may be used and matches the current role for each user, thereby simplifying the permission management process based on a configuration-based approach, improving the management efficiency and ease of use of massive user permission data, and helping to further improve the lightweight level of the permission management system in the Internet hospital management system.

[0026] The further effects of the above-mentioned non-conventional optional manner will be described below in conjunction with the specific implementation manner. BRIEF DESCRIPTION OF THE DRAWINGS

[0027] The accompanying drawings are used to better understand the present invention and do not constitute an improper limitation of the present invention. Figure 1 This is a schematic diagram of the main steps of the Internet hospital data query method in an embodiment of the present invention; Figure 2 It is a schematic diagram of specific execution steps of the Internet hospital data query method in an embodiment of the present invention; Figure 3 Schematic diagram of the system architecture of the Internet hospital data query method in an embodiment of the present invention; Figure 4 It is a schematic diagram of components of an Internet hospital data query device in an embodiment of the present invention; Figure 5 is an exemplary system architecture diagram in which embodiments of the present invention may be applied; Figure 6 It is a schematic diagram of the structure of an electronic device used to implement the Internet hospital data query method in an embodiment of the present invention. DETAILED DESCRIPTION

[0028] The following is a description of exemplary embodiments of the present invention in conjunction with the accompanying drawings, including various details of the embodiments of the present invention to facilitate understanding, which should be considered as merely exemplary. Therefore, it should be recognized by those of ordinary skill in the art that various changes and modifications may be made to the embodiments described herein without departing from the scope and spirit of the present invention. Similarly, for clarity and conciseness, the description of well-known functions and structures is omitted in the following description.

[0029] It should be pointed out that the embodiments of the present invention and the technical features therein may be combined with each other without conflict.

[0030] Figure 1 It is a schematic diagram of the main steps of the Internet hospital data query method in an embodiment of the present invention.

[0031] like Figure 1 As shown, the Internet hospital data query method of the embodiment of the present invention can be executed by a query system for querying across multiple data systems, and the specific execution steps are as follows: Step S101: In response to the user's external query operation on the query menu, the query field in the query menu, and the field value of the query field, the query system generates an initial query statement corresponding to the external query operation. In this step, the user performs operations such as clicking and entering query words, and the query system generates an initial query statement based on the operation, such as a SQL (Structured Query Language) statement. It is understood that the initial query statement may include the standard name of the query field.

[0032] Step S102: the query system sends a permission acquisition request to a pre-established permission management system to obtain the user's query permission data returned by the permission management system; the query system generates a permission control query statement that can characterize the user's query permission data based on the query permission data and the initial query statement.

[0033] Step S103: The query system sends the generated permission control query statement to the data system corresponding to the query menu to obtain the query result data returned by the data system. After receiving the permission control query statement, the data system converts the permission control query statement into a local query statement according to the mapping relationship between the standard name of the query field and the local name stored locally in the data system, and executes the local query statement to obtain the query result data.

[0034] In this way, by storing the mapping relationship between the customized local field names and the standard names in each data system, the field name consistency in the query process is achieved, thereby decoupling each data system from the authority control system, reducing the maintenance workload of the authority management system, and achieving lightweight authority control system. It should be noted that the technical solution of the present invention can be applied to data queries in Internet medical scenarios, and can also be applied to data queries in other applicable scenarios. The following is an explanation using the Internet medical scenario as an example.

[0035] Figure 2 is a schematic diagram of specific execution steps of the Internet hospital data query method in an embodiment of the present invention, Figure 3 is a schematic diagram of the system architecture of the Internet hospital data query method in an embodiment of the present invention, see Figure 2 , 3 .

[0036] Step S201: The query system detects that the user performs an external query operation. Before executing this step, the standard names of query fields such as hospitals and departments can be maintained in advance. The standard name refers to the field name that serves as a unique identifier. In practical applications, the standard name of the query field can be maintained in any applicable storage space. Preferably, the pre-configured standard names of the query fields can be stored by the authority management system to facilitate the interaction between the authority management system and the query system so that the query system obtains the standard name of the query field to perform subsequent query operations, and also facilitates the interaction between the authority management system and various data systems so that the data systems can establish a mapping relationship against the standard name.

[0037] The above mapping relationship refers to the mapping relationship between the customized local name and the standard name for the query field in any data system. For example, the standard name of the query field "hospital identification" is "hospitalID", and the local name of the query field in the order data system is "HID". The order data system can pre-store the following mapping relationship "hospitalID-HID" locally. In the prior art, the function of field name mapping is implemented by the permission management system. By deploying the mapping relationship changes to each data system, each data system can store the corresponding mapping relationship to achieve field name consistency during the query process. When the local name of the field needs to be adjusted, it can be modified directly within the data system without changing the permission management system, thereby reducing the maintenance workload of the permission management system and achieving lightweight permission control system.

[0038] In step S201, the external query operation is an operation by the user on any query menu, at least one query field in the query menu, and at least one field value of any query field. The above query menus, such as order menus, consultation menus, and conversation menus, can correspond to the data system one by one. The query fields are, for example, hospital identification fields and department identification fields, and the field values ​​of hospital identification fields are, for example, first hospital identification and second hospital identification. Exemplarily, the above operations may include clicking a menu, clicking a menu item, entering a query word, and the like.

[0039] Step S202: The query system generates an initial query statement. In this step, the query system automatically generates a corresponding initial query statement based on the user's external query operation on the query menu, query field, and field value. The initial query statement may be an SQL statement, which may include the database table name corresponding to the query menu targeted by the external query operation, the standard name of the query field, and the field value targeted by the external query operation.

[0040] Step S203: the query system sends a permission acquisition request to the permission management system. In this step, the query system sends a permission acquisition request to the pre-established permission management system to obtain the permission of the current user to execute the data query process under the user permission restriction.

[0041] Step S204: The permission management system determines the user's permission role data. Before executing this step, the permission management system pre-performs permission role configuration management and permission role allocation. For permission role configuration management, the permission management system pre-stores a variety of permission role data formed by at least one query menu, at least one query field in any query menu, and at least one field value combination of any query field. Any permission role data may include a role identifier and the specific permissions of the role for the query menu, query field, and field value. Continuing with the above example, the permission management system can generate a variety of permission role data, and the following table lists three of them:

[0042]

[0043] After that, the permission management system pre-stores the current role identifier configured for any user, thereby granting the user the permissions of the corresponding role (permission role allocation). Through this setting, the permission management system no longer stores the specific permission data of each user, but pre-configures multiple permission roles that may be used and matches the current role for each user, thereby simplifying the permission management process based on a configuration method, improving the management efficiency and ease of use of massive user permission data, and helping to improve the lightweight level of the permission management system.

[0044] Step S205: The authority management system generates the query authority data of the user and returns it. In this step, after receiving the authority acquisition request, the authority management system determines the current role identifier of the corresponding user locally, and uses the determined current role identifier to obtain the corresponding authority role data, and generates the query authority data of the corresponding user based on the obtained authority role data. The above query authority data has a data form suitable for the query system. Finally, the authority management system returns the user's query authority data to the query system.

[0045] Step S206: The query system generates a permission control query statement. In this step, the query system generates a permission control query statement based on the user's query permission data and the above initial query statement. Preferably, the query system can generate a permission control code fragment, such as an SQL fragment, based on the query permission data, and then splice the permission control code fragment into the initial query statement to form a permission control query statement that can reflect the user's query permission.

[0046] Step S207: the query system sends the authority control query statement to the data system. In this step, the query system sends the generated authority control query statement to the data system corresponding to the query menu to obtain the query result data returned by the data system.

[0047] Step S208: The data system performs field name mapping. In this step, after receiving the permission control query statement, the data system performs mapping from the field standard name to the field local name according to the mapping relationship between the standard name of the query field and the local name stored locally in the data system, that is, the data system replaces the standard name of the query field in the permission control query statement with the local name according to the mapping relationship stored locally.

[0048] Step S209: the data system generates a local query statement. In this step, after the data system replaces the standard name of the query field in the authority control query statement with the local name, the authority control query statement becomes a local query statement.

[0049] Step S210: The data system obtains the query result data and returns it. In this step, the data system executes the local query statement to obtain the query result data, and returns the query result data to the query system.

[0050] In the technical solution of the embodiment of the present invention, the consistency of field names in the query process is achieved by storing the mapping relationship between the customized local field names and the standard names in each data system. When the local field name needs to be adjusted, it is directly modified within the data system without changing the authority management system, thereby reducing the maintenance workload of the authority management system, making it only responsible for authority data storage and authority control, thereby decoupling each data system from the authority control system and achieving lightweight authority control system. More preferably, the authority management system no longer stores the specific authority data of each user, but pre-configures a variety of authority roles that may be used and matches the current role for each user, thereby simplifying the authority management process based on a configurable manner, improving the management efficiency and ease of use of massive user authority data, and helping to further improve the lightweight level of the authority management system.

[0051] It should be noted that the collection, collection, update, analysis, processing, use, transmission, storage and other aspects of user personal information that may be involved in the technical solution of the present invention are in compliance with the provisions of relevant laws and regulations, are used for legitimate purposes, and do not violate public order and good morals. Necessary measures are taken for user personal information to prevent illegal access to user personal information data and maintain the security of user personal information, network security and national security.

[0052] For the above-mentioned method embodiments, for the convenience of description, they are expressed as a series of action combinations, but those skilled in the art should know that the present invention is not limited by the order of the actions described, and some steps can actually be performed in other orders or simultaneously. In addition, those skilled in the art should also know that the embodiments described in the specification are all preferred embodiments, and the actions and modules involved are not necessarily necessary to implement the present invention.

[0053] In order to better implement the above-mentioned solution of the embodiment of the present invention, relevant devices for implementing the above-mentioned solution are also provided below.

[0054] See also Figure 4 As shown, the Internet hospital data query device 400 provided by the embodiment of the present invention may include: a query statement generating unit 401, a permission control unit 402 and a query result obtaining unit 403.

[0055] Among them, the query statement generation unit 401 can be used to respond to the user's external query operation on the query menu, the query field in the query menu, and the field value of the query field, and generate an initial query statement corresponding to the external query operation; wherein the initial query statement contains the standard name of the query field; the authority control unit 402 can be used to issue a permission acquisition request to a pre-established authority management system to obtain the user's query authority data returned by the authority management system; generate an authority control query statement based on the query authority data and the initial query statement; the query result acquisition unit 403 can be used to send the generated authority control query statement to the data system corresponding to the query menu to obtain the query result data returned by the data system; wherein, after receiving the authority control query statement, the data system converts the authority control query statement into a local query statement based on the mapping relationship between the standard name of the query field and the local name stored locally in the data system, and executes the local query statement to obtain the query result data.

[0056] In an embodiment of the present invention, the standard name of the query field is pre-stored in the authority management system; and the device 400 may further include: a standard name maintenance unit, which is used to interact with the authority management system in advance to obtain the standard name of the query field.

[0057] Preferably, the permission management system pre-stores a variety of permission role data formed by a combination of at least one query menu, at least one query field in any query menu, and at least one field value of any query field, and any permission role data includes a role identifier; the permission management system also pre-stores a current role identifier configured for any user; and, after receiving a permission acquisition request, the permission management system determines the current role identifier of the corresponding user locally; uses the determined current role identifier to acquire the corresponding permission role data, and generates the query permission data of the corresponding user based on the acquired permission role data.

[0058] As a preferred solution, the permission control unit 402 may be further configured to: generate a permission control code fragment according to the query permission data, and concatenate the permission control code fragment into the initial query statement to form a permission control query statement.

[0059] In an optional implementation, the data system may be further used to: replace the standard name of the query field in the permission control query statement with the local name according to the mapping relationship between the standard name of the query field and the local name stored locally in the data system, so that the permission control query statement forms a local query statement.

[0060] In addition, in the embodiment of the present invention, the initial query statement further includes: the database table name corresponding to the query menu targeted by the external query operation, and the field value targeted by the external query operation.

[0061] According to the technical solution of the embodiment of the present invention, the consistency of field names in the query process is achieved by storing the mapping relationship between the customized local field names and the standard names in each data system. When the local field name needs to be adjusted, it can be directly modified within the data system without changing the permission management system, thereby reducing the maintenance workload of the permission management system, making it only responsible for permission data storage and permission control, thereby decoupling each data system from the permission control system and achieving lightweight permission control system. More preferably, the permission management system no longer stores the specific permission data of each user, but pre-configures a variety of permission roles that may be used and matches the current role for each user, thereby simplifying the permission management process based on a configurable manner, improving the management efficiency and ease of use of massive user permission data, and helping to further improve the lightweight level of the permission management system.

[0062] Figure 5 An exemplary system architecture 500 is shown to which an Internet hospital data query method or an Internet hospital data query device according to an embodiment of the present invention can be applied.

[0063] like Figure 5 As shown, the system architecture 500 may include terminal devices 501, 502, 503, a network 504 and a server 505 (this architecture is only an example, and the components included in the specific architecture may be adjusted according to the specific application). The network 504 is used to provide a medium for a communication link between the terminal devices 501, 502, 503 and the server 505. The network 504 may include various connection types, such as wired, wireless communication links or optical fiber cables.

[0064] Users can use terminal devices 501, 502, 503 to interact with server 505 through network 504 to receive or send messages, etc. Various client applications, such as data query applications, etc. (only examples), can be installed on terminal devices 501, 502, 503.

[0065] The terminal devices 501 , 502 , and 503 may be various electronic devices having a display screen and supporting web browsing, including but not limited to smart phones, tablet computers, laptop computers, desktop computers, and the like.

[0066] The server 505 may be a server that provides various services, such as a backend server (only an example) that provides support for data query applications operated by users using the terminal devices 501, 502, and 503. The backend server may process the received query request and feed back the processing result (such as query result data - only an example) to the terminal devices 501, 502, and 503.

[0067] It should be noted that the Internet hospital data query method provided in the embodiment of the present invention is generally executed by the server 505 , and accordingly, the Internet hospital data query device is generally set in the server 505 .

[0068] It should be understood that Figure 5 The number of terminal devices, networks and servers in the embodiment is only for illustration. Any number of terminal devices, networks and servers may be provided according to implementation requirements.

[0069] The present invention also provides an electronic device. The electronic device of the embodiment of the present invention includes: one or more processors; a storage device for storing one or more programs, when the one or more programs are executed by the one or more processors, the one or more processors implement the Internet hospital data query method provided by the present invention.

[0070] Reference below Figure 6 , which shows a schematic diagram of the structure of a computer system 600 of an electronic device suitable for implementing an embodiment of the present invention. Figure 6 The electronic device shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present invention.

[0071] like Figure 6 As shown, the computer system 600 includes a central processing unit (CPU) 601, which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) 602 or a program loaded from a storage part 608 into a random access memory (RAM) 603. In the RAM 603, various programs and data required for the operation of the computer system 600 are also stored. The CPU 601, the ROM 602, and the RAM 603 are connected to each other via a bus 604. An input / output (I / O) interface 605 is also connected to the bus 604.

[0072] The following components are connected to the I / O interface 605: an input section 606 including a keyboard, a mouse, etc.; an output section 607 including a cathode ray tube (CRT), a liquid crystal display (LCD), etc., and a speaker, etc.; a storage section 608 including a hard disk, etc.; and a communication section 609 including a network interface card such as a LAN card, a modem, etc. The communication section 609 performs communication processing via a network such as the Internet. A drive 610 is also connected to the I / O interface 605 as needed. A removable medium 611, such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, etc., is installed on the drive 610 as needed so that a computer program read therefrom is installed into the storage section 608 as needed.

[0073] In particular, according to the embodiments disclosed in the present invention, the process described in the main step diagram above can be implemented as a computer software program. For example, an embodiment of the present invention includes a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program contains program code for executing the method shown in the main step diagram. In the above embodiment, the computer program can be downloaded and installed from the network through the communication part 609, and / or installed from the removable medium 611. When the computer program is executed by the central processing unit 601, the above functions defined in the system of the present invention are executed.

[0074] It should be noted that the computer-readable medium shown in the present invention may be a computer-readable signal medium or a computer-readable storage medium or any combination of the above two. The computer-readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In the present invention, a computer-readable storage medium may be any tangible medium containing or storing a program that can be used by or in combination with an instruction execution system, device or device. In the present invention, a computer-readable signal medium may include a data signal propagated in a baseband or as part of a carrier wave, which carries a computer-readable program code. This propagated data signal may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. Computer readable signal media may also be any computer readable medium other than computer readable storage media, which may send, propagate or transmit a program for use by or in conjunction with an instruction execution system, apparatus or device. The program code contained on the computer readable medium may be transmitted using any appropriate medium, including but not limited to: wireless, wire, optical cable, RF, etc., or any suitable combination of the above.

[0075] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present invention. In this regard, each box in the flow chart or block diagram can represent a module, a program segment or a part of a code, and the above-mentioned module, program segment or a part of a code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram or flow chart, and the combination of the boxes in the block diagram or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0076] The units involved in the embodiments of the present invention may be implemented by software or hardware. The units described may also be provided in a processor, for example, may be described as: a processor comprising: a query statement generation unit, a permission control unit, and a query result acquisition unit. The names of these units do not, in some cases, constitute limitations on the units themselves, for example, the query statement generation unit may also be described as a "unit that provides an initial query statement to the permission control unit".

[0077] As another aspect, the present invention also provides a computer-readable medium, which may be included in the device described in the above embodiment; or may exist independently and not assembled into the device. The above computer-readable medium carries one or more programs, and when the above one or more programs are executed by the device, the steps executed by the device include: generating an initial query statement corresponding to the external query operation in response to the user's external query operation on the query menu, the query field in the query menu, and the field value of the query field; wherein the initial query statement contains the standard name of the query field; issuing a permission acquisition request to a pre-established permission management system to obtain the user's query permission data returned by the permission management system; generating a permission control query statement based on the query permission data and the initial query statement; sending the generated permission control query statement to the data system corresponding to the query menu to obtain the query result data returned by the data system; wherein, after receiving the permission control query statement, the data system converts the permission control query statement into a local query statement according to the mapping relationship between the standard name of the query field and the local name stored locally in the data system, and executes the local query statement to obtain the query result data.

[0078] The present invention also provides a computer program product, including a computer program, which implements the Internet hospital data query method provided by the present invention when the computer program is executed by a processor.

[0079] In the technical solution of the embodiment of the present invention, the consistency of field names in the query process is achieved by storing the mapping relationship between the customized local field names and the standard names in each data system. When the local field name needs to be adjusted, it is directly modified within the data system without changing the authority management system, thereby reducing the maintenance workload of the authority management system, making it only responsible for authority data storage and authority control, thereby decoupling each data system from the authority control system and achieving lightweight authority control system. More preferably, the authority management system no longer stores the specific authority data of each user, but pre-configures a variety of authority roles that may be used and matches the current role for each user, thereby simplifying the authority management process based on a configurable manner, improving the management efficiency and ease of use of massive user authority data, and helping to further improve the lightweight level of the authority management system.

[0080] The above specific implementations do not constitute a limitation on the protection scope of the present invention. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions may occur depending on design requirements and other factors. Any modification, equivalent substitution and improvement made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A method for querying Internet hospital data, characterized in that: include: In response to a user's external query operation on a query menu, a query field in the query menu, and a field value of the query field, an initial query statement corresponding to the external query operation is generated; wherein the initial query statement includes a standard name of the query field; Sending a permission acquisition request to a pre-established permission management system to obtain the query permission data of the user returned by the permission management system; generating a permission control query statement according to the query permission data and the initial query statement; The generated permission control query statement is sent to the data system corresponding to the query menu to obtain the query result data returned by the data system; wherein, after receiving the permission control query statement, the data system converts the permission control query statement into a local query statement according to the mapping relationship between the standard name of the query field and the local name stored locally in the data system, and executes the local query statement to obtain the query result data.

2. The method according to claim 1, characterized in that The standard name of the query field is pre-stored in the rights management system; and the method further comprises: Interact with the rights management system in advance to obtain the standard name of the query field.

3. The method according to claim 1, characterized in that The authority management system pre-stores a plurality of authority role data formed by a combination of at least one query menu, at least one query field in any query menu, and at least one field value of any query field, wherein any authority role data includes a role identifier; the authority management system also pre-stores a current role identifier configured for any user; and, After receiving the permission acquisition request, the permission management system determines the current role identifier of the corresponding user locally; The determined current role identifier is used to obtain corresponding permission role data, and query permission data of the corresponding user is generated according to the obtained permission role data.

4. The method according to claim 1, characterized in that: The step of generating an authority control query statement according to the query authority data and the initial query statement includes: Generate a permission control code fragment according to the query permission data, and splice the permission control code fragment into the initial query statement to form the permission control query statement.

5. The method according to claim 1, characterized in that The converting the permission control query statement into a local query statement includes: According to the mapping relationship between the standard name of the query field and the local name stored locally in the data system, the standard name of the query field in the authority control query statement is replaced with the local name, so that the authority control query statement forms the local query statement.

6. The method according to claim 1, characterized in that The initial query statement further includes: a database table name corresponding to the query menu targeted by the external query operation, and a field value targeted by the external query operation.

7. An Internet hospital data query device, characterized in that: include: A query statement generating unit, configured to generate an initial query statement corresponding to a user's external query operation on a query menu, a query field in the query menu, and a field value of the query field; wherein the initial query statement includes a standard name of the query field; The authority control unit is used to send an authority acquisition request to a pre-established authority management system to obtain the query authority data of the user returned by the authority management system; generate an authority control query statement according to the query authority data and the initial query statement; A query result acquisition unit is used to send the generated permission control query statement to the data system corresponding to the query menu to obtain the query result data returned by the data system; wherein, after receiving the permission control query statement, the data system converts the permission control query statement into a local query statement based on the mapping relationship between the standard name of the query field and the local name stored locally in the data system, and executes the local query statement to obtain the query result data.

8. An electronic device, characterized in that: include: one or more processors; a storage device for storing one or more programs, When the one or more programs are executed by the one or more processors, the one or more processors implement the method according to any one of claims 1 to 6.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the method according to any one of claims 1 to 6 is implemented.

10. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the method according to any one of claims 1 to 6 is implemented.

Images