Education informatization integration system

Abstract

The invention discloses an educational informatization integration system, which relates to the field of educational information integration and comprises an information acquisition module, an external login coefficient acquisition module, a judgment coefficient acquisition module, an authorization module and an authority setting module. Through analysis of historical login information and historical external login information corresponding to each personnel account, an external login coefficient and a judgment coefficient corresponding to each personnel account are obtained, and meanwhile, through analysis of the external login coefficient corresponding to each personnel account, a personnel comparison coefficient is obtained. And according to the judgment coefficient and the personnel comparison coefficient respectively corresponding to each personnel account, performing authorization judgment on the external login permission on the personnel account to obtain the personnel account with the external login permission, thereby realizing limitation on the external login permission of the personnel.

Description

Technical Field

[0001] The present invention relates to the technical field of educational information integration, and in particular to an educational information integration system. Background Art

[0002] Education information integration is one of the important trends in the development of educational informatization. It involves data integration, business integration, system integration and other aspects. Through education information integration, we can realize the sharing and intercommunication of education data, break the information island, and improve the efficiency and level of education management. At the same time, it can also promote the innovation and development of teaching models and provide students with a more personalized and diversified learning experience.

[0003] A good educational information integration system also involves internal communication and exchange, which sometimes also involves external communication;

[0004] However, when it comes to using internal accounts to communicate with internal personnel, when the personnel account logs in externally, since the user of the internal account can access unnecessary data, including sensitive information in the group chat information, and there is no restriction on the access rights of the account, since it uses the account login through the external network, it is very easy for external viruses to use the permissions of the internal account to steal and tamper with the files in the internal group chat information, thereby leaking the internal file information and affecting the security of the internal file information;

[0005] Based on this, a system is proposed to ensure the information security of internal education integration. Summary of the invention

[0006] The purpose of the present invention is to provide an educational information integration system, which solves the technical problem that when a personnel account is logged in externally, the user of the internal account can access unnecessary data, including sensitive information in the group chat information, and there is no restriction on the access rights of the account. Since the account used to log in is performed through the external network, it is very easy for an external virus to use the permissions of the internal account to steal and tamper with the files in the internal group chat information.

[0007] The purpose of the present invention can be achieved through the following technical solutions:

[0008] An educational information integration system includes:

[0009] The information acquisition module is used to obtain the total number of logins, total login duration, external login number and external login duration corresponding to each personnel account, as well as the number of external IP addresses, number of external login devices and external login locations corresponding to each personnel account;

[0010] The external login coefficient acquisition module obtains the external login coefficient corresponding to each personnel account by analyzing the total number of logins, total login duration, external login number and external login duration corresponding to each personnel account;

[0011] The determination coefficient acquisition module analyzes the number of external IP addresses, the number of external login devices and the external login location corresponding to each personnel account, and then obtains the determination coefficient corresponding to each personnel account;

[0012] The authorization module analyzes the external login coefficients corresponding to each personnel account to obtain the personnel comparison coefficient, and makes authorization judgments on the external login permissions of the personnel accounts based on the determination coefficients and the personnel comparison coefficients corresponding to each personnel account.

[0013] As a further solution of the present invention: the specific method of obtaining the external login coefficients corresponding to each personnel account is:

[0014] The ratio of the number of external logins corresponding to each personnel account to the total number of logins is marked as the external login frequency, the ratio of the external login duration corresponding to each personnel account to the total login duration is marked as the external login time-frequency ratio, and the sum of the products of the external login frequency and the external login time-frequency ratio corresponding to each personnel account and the preset value coefficients θ1 and θ2 is marked as the external login coefficient DLj corresponding to each personnel account, where j refers to the number corresponding to the personnel account, j≥1, θ1 and θ2 are both preset proportional coefficients, satisfying θ1+θ2=1, where θ1=0.58, θ2=0.42.

[0015] As a further solution of the present invention: the specific method of obtaining the determination coefficient corresponding to each personnel account is: marking the absolute value of the difference between the external login coefficient and the risk coefficient corresponding to each personnel account as the determination coefficient YDj corresponding to each personnel account.

[0016] As a further solution of the present invention: the specific method of obtaining the risk coefficient corresponding to each personnel account is:

[0017] Obtain the straight-line distance between the external login location and the school location corresponding to each login of each personnel account in the external login, then perform average processing on the straight-line distances corresponding to each personnel account, and then obtain the activity distance AL corresponding to each personnel account. The risk coefficient Wj corresponding to each personnel account can be obtained through the formula (WBj+WAj) / 2FCj+AL=Wj;

[0018] WBj and WAj are the number of external login devices and external IP addresses corresponding to each personnel account.

[0019] As a further solution of the present invention: the specific method for determining the authorization of external login permissions for a personnel account is:

[0020] The external login coefficient corresponding to each personnel account is analyzed to obtain the personnel comparison coefficient, and the determination coefficient corresponding to each personnel account is compared with the personnel comparison coefficient. When the determination coefficient YDj corresponding to the personnel account satisfies YDj greater than 1.25 times BJ, the external login permission is authorized to the corresponding account. When YDj is less than or equal to 1.25 times BJ, no processing is performed.

[0021] As a further solution of the present invention: the specific method of obtaining the personnel comparison coefficient is:

[0022] Obtain the discrete value of the external login coefficient DLj corresponding to each personnel account. When the discrete value is less than or equal to the preset value Y1, the product of the mean of DLj and the preset fixed coefficient θ3 is used as the personnel comparison coefficient BJ. When the discrete value is greater than the preset value Y1, the product of the median of DLj and the preset fixed coefficient θ4 is used as the personnel comparison coefficient BJ.

[0023] As a further solution of the present invention: the specific method of obtaining the median of DLj is:

[0024] That is, when the discrete value is greater than the preset value Y1, first arrange DLj in ascending order. When j is an odd number, BJ=DL[(j+1) / 2]×θ3 is used as the personnel comparison coefficient BJ; when j is an even number, [DL(j / 2)+DL(j / 2+1)] / 2×θ4=BJ is used as the personnel comparison coefficient BJ.

[0025] As a further solution of the present invention: it also includes a permission setting module;

[0026] The permission setting module restricts the access rights of personnel accounts with external login permissions when they log in externally. The specific methods are as follows:

[0027] When a person account with external login permission logs in externally, the group chat information viewing function will be turned off so that the person account can only view private chat information.

[0028] Beneficial effects of the present invention:

[0029] The present invention allows external login personnel to view private chat information related to them when logging in externally to support the needs of remote work, prohibits them from viewing group chat information, and ensures that personnel cannot view group chat information when logging in externally. In this way, sensitive information can be transmitted within the intranet, reducing the risk of access and leakage of the external network to prevent the leakage of sensitive information. The school can effectively manage the external login behavior of personnel, while ensuring information security and compliance, and improving the security of instant messaging within and outside the school network. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] The present invention will be further described below in conjunction with the accompanying drawings.

[0031] Figure 1 It is a schematic diagram of the system framework structure of the present invention.

[0032] Figure 2 It is a schematic diagram of the framework structure of the method of the present invention. DETAILED DESCRIPTION

[0033] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0034] See also Figure 1-Figure 2 As shown, the present invention is an educational information integration system;

[0035] This system is aimed at integrated educational information systems with internal and external communication functions, and is more targeted at internal communication. It mainly solves the security issues of internal documents;

[0036] As the first embodiment of the present application, it specifically includes:

[0037] Information acquisition module, external login coefficient acquisition module, determination coefficient acquisition module, authorization module and authority setting module;

[0038] The information acquisition module is used to acquire the historical login information corresponding to each personnel account, including the total number of logins, the total login duration, the number of external logins, and the external login duration;

[0039] Obtain the historical external login information corresponding to each personnel account, the historical external login information includes the login device, login IP address and login location, and at the same time obtain the number of external IP addresses, the number of external login devices and the external login location corresponding to each personnel account from the historical external login information; the number of external login devices refers to the number of different login devices corresponding to the personnel account in the number of external logins, and the same login device is recorded as one external login device, the number of external IP addresses refers to the number of different IP addresses corresponding to the personnel account in the number of external logins, and the same IP address is recorded as one IP address, and the external login location refers to the location corresponding to each login of the personnel account in the number of external logins. The above information uses an identity and access management (IAM) system or other security tools to collect and manage personnel's historical login information and external login information and record them, which belongs to the prior art and is therefore not described in detail here;

[0040] The external login coefficient acquisition module is used to analyze the historical login information corresponding to each personnel account, and obtain the external login coefficient corresponding to each personnel account according to the analysis results. The specific method of obtaining the external login coefficient corresponding to each personnel account is:

[0041] The total number of logins, total login duration, number of external logins, and external login duration corresponding to each personnel account are marked as FAj, FBj, FCj, and FDj respectively;

[0042] Get the ratio between the number of external logins and the total number of logins corresponding to each personnel account, and mark it as the external login frequency WDj; get the ratio between the external login duration and the total login duration corresponding to each personnel account, and mark it as the external login time-frequency ratio WPj, that is, FCj / FAj=WDj, FDj / FBj=WPj;

[0043] The sum of the products of the external login frequency and external login time-frequency ratio corresponding to each personnel account and the preset value coefficients θ1 and θ2 is marked as the external login coefficient DLj corresponding to each personnel account, that is, FDj×θ1+WPj×θ2=DLj, where j refers to the number corresponding to the personnel account, j≥1, θ1 and θ2 are both preset proportional coefficients, and the specific values ​​are formulated by relevant personnel according to actual needs and actual application scenarios.

[0044] Satisfies θ1+θ2=1, where θ1=0.58, θ2=0.42;

[0045] The larger the external login coefficient value corresponding to the personnel account, the higher the frequency and duration of the corresponding personnel's outings, and the more corresponding external login needs, and vice versa;

[0046] The determination coefficient acquisition module is used to analyze the historical external login information corresponding to each personnel account, and then obtain the determination coefficient corresponding to each personnel account. The specific method is as follows:

[0047] The number of external login devices and the number of external IP addresses corresponding to each personnel account are marked as WBj and WAj respectively;

[0048] Obtain the straight-line distance between the external login location and the school location corresponding to each login of each personnel account in the external login, then perform average processing on the straight-line distances corresponding to each personnel account, and then obtain the activity distance AL corresponding to each personnel account, and then obtain the risk coefficient Wj corresponding to each personnel account through the formula (WBj+WAj) / 2FCj+AL=Wj;

[0049] Obtain the absolute value of the difference between the external login coefficient and the risk coefficient corresponding to each personnel account, and then obtain the determination coefficient corresponding to each personnel account, that is, through the formula |DLj-Wj|=YDj, calculate and obtain the determination coefficient YDj corresponding to each personnel account;

[0050] The school location is used to obtain from the school system, and the school location is fixed. When obtaining the straight-line distance between the external login location and the school location, it is calculated through the GPS positioning module built into the school system, or the map module. This is an existing and mature technology, so it will not be elaborated here;

[0051] The authorization module is used to determine the authorization of external login permissions for personnel accounts based on the determination coefficients and personnel comparison coefficients corresponding to each personnel account. The specific authorization methods are as follows:

[0052] Through the comparison coefficient generation unit in the authorization module, the external login coefficients corresponding to each personnel account are analyzed, and then the personnel comparison coefficient is obtained;

[0053] Through the authorization determination unit in the authorization module, the determination coefficients corresponding to each personnel account are compared and analyzed with the personnel comparison coefficients, and the authorization determination of the external login permission of the personnel account is performed according to the comparison results;

[0054] The specific method of obtaining the personnel comparison coefficient is:

[0055] pass Calculate the discrete value W of the external login coefficient DLj corresponding to each personnel account, where j≥a≥1, and DLp is the mean value of the external login coefficient DLj corresponding to each personnel account. When W≤Y1, the product of DLp and the preset fixed coefficient θ3 is used as the personnel comparison coefficient BJ. When W>Y1, the product of the median of DLj and the preset fixed coefficient θ4 is used as the personnel comparison coefficient BJ.

[0056] That is, when W>Y1, first arrange DLj in ascending order. When j is an odd number, BJ=DL[(j+1) / 2]×θ3 is used as the personnel comparison coefficient BJ; when j is an even number, [DL(j / 2)+DL(j / 2+1)] / 2×θ4=BJ is used as the personnel comparison coefficient BJ:

[0057] Here, Y1 is a preset value, θ3 and θ4 are preset fixed coefficients, and the specific values ​​are determined by relevant personnel based on experience, here θ3 = 1.25, θ4 = 1.317;

[0058] The specific method for determining the authorization of external login permissions for personnel accounts is as follows:

[0059] When the determination coefficient YDj corresponding to the personnel account satisfies YDj>1.25BJ, the corresponding account is authorized to have external login permission. When YDj≤1.25BJ, no processing is performed.

[0060] The corresponding account with external login permission can log in to the account through other external networks outside the school intranet, while the corresponding account without external login permission cannot log in to the account through other external networks outside the school intranet;

[0061] When a corresponding account that does not have external login permissions needs to log in externally, it is necessary to manually authorize the external login permissions for its personnel account in the school system;

[0062] By analyzing the historical login information and historical external login information corresponding to each personnel account, the external login coefficient and determination coefficient corresponding to each personnel account are obtained. At the same time, the personnel comparison coefficient is obtained by analyzing the external login coefficient corresponding to each personnel account. Then, based on the determination coefficient and personnel comparison coefficient corresponding to each personnel account, the external login permission of the personnel account is authorized and judged, and the personnel account with external login permission is obtained to implement the restriction of personnel external login permission.

[0063] Embodiment 2

[0064] As the second embodiment of the present invention, when the present application is implemented, compared with the first embodiment, the technical solution of the present embodiment is different from the first embodiment only in that the present embodiment further includes a permission setting module;

[0065] The permission setting module is used to restrict the access rights of personnel accounts with external login permissions when they log in externally. The specific methods are as follows:

[0066] When an account with external login permission is detected to be logging in externally, the group chat information viewing function will be disabled so that the account can only view private chat information. The specific permission settings can be set by setting corresponding permission control rules in the system.

[0067] Specifically, when restricting the access rights of external login personnel, the private chat information related to them is transmitted through the HTTP protocol transmission in the intranet terminal, and the control and status data based on the TCP protocol transmission are ferried to realize the data information exchange between the intranet terminal and the external network instant messaging system. This can ensure that when logging in from the outside, the communication between the intranet terminal and the external network is controlled and supervised, which enhances the security of data. At the same time, group chat information is screened and intercepted through instant messaging data, and the external login personnel account is prohibited from accessing the group chat information, ensuring that sensitive information will not be published to the external network, and limiting the communication between the intranet terminal and the external network, so as to further enhance the security of instant messaging in the school's internal and external networks;

[0068] It should be noted that HTTP protocol transmission and TCP protocol in the intranet terminal are existing and mature technologies and therefore will not be described in detail here;

[0069] Allow external login personnel to view private chat information related to them when logging in externally to support the needs of remote work, and prohibit them from viewing group chat information to ensure that personnel cannot view group chat information when logging in externally. This can ensure that sensitive information is transmitted within the intranet, reduce the risk of access and leakage of the external network, and prevent the leakage of sensitive information. The school can effectively manage the external login behavior of personnel, while ensuring information security and compliance, and improving the security of instant messaging within and outside the school network.

[0070] As the third embodiment of the present invention, when the present application is specifically implemented, compared with the second embodiment, the technical solution of this embodiment is different from the first and second embodiments only in that this embodiment further includes a sensitive information identification module;

[0071] The sensitive information identification module is used to establish a sensitive information keyword library and filter and identify keywords in users' private information such as emails, chat records and documents;

[0072] First, the sensitive information keyword library is established based on historical communication information records. Keywords are extracted and marked as sensitive information based on historical communication information records. Then, the sensitive information keyword library is established. Then, natural language processing technology is used to analyze the communication text to identify sensitive words.

[0073] Finally, by analyzing the private information sent and received by users, we can identify whether there is abnormal behavior and identify suspicious people who frequently send sensitive information;

[0074] Image and video recognition: Use image recognition and video analysis technologies to detect sensitive information in images and videos, and mark and review the identified sensitive images and videos;

[0075] Data leakage prevention: deploy a data leakage prevention DLP system to monitor and protect private information in real time, and regularly update and maintain the DLP system to ensure that it can accurately identify and protect sensitive information;

[0076] Through the implementation of the above measures, sensitive information mixed in access and private information can be effectively detected to ensure the information security and compliance of the school;

[0077] Embodiment 4

[0078] As the fourth embodiment of the present invention, when the present application is specifically implemented, compared with the first, second and third embodiments, the technical solution of this embodiment is to combine and implement the solutions of the first, second and third embodiments.

[0079] The above formulas are all dimensionless and numerical calculations. The formula is a formula for the most recent real situation obtained by collecting a large amount of data and performing software simulation. The preset parameters and thresholds in the formula are set by technicians in this field according to actual conditions.

[0080] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. An educational information integration system, characterized in that: include: The information acquisition module is used to obtain the total number of logins, total login duration, external login number and external login duration corresponding to each personnel account, as well as the number of external IP addresses, number of external login devices and external login locations corresponding to each personnel account; The external login coefficient acquisition module obtains the external login coefficient corresponding to each personnel account by analyzing the total number of logins, total login duration, external login number and external login duration corresponding to each personnel account; The determination coefficient acquisition module analyzes the number of external IP addresses, the number of external login devices and the external login location corresponding to each personnel account, and then obtains the determination coefficient corresponding to each personnel account; The authorization module analyzes the external login coefficients corresponding to each personnel account to obtain the personnel comparison coefficient, and makes authorization judgments on the external login permissions of the personnel accounts based on the determination coefficients and the personnel comparison coefficients corresponding to each personnel account.

2. An educational information integration system according to claim 1, characterized in that: The specific method of obtaining the external login coefficient corresponding to each personnel account is: The ratio of the number of external logins corresponding to each personnel account to the total number of logins is marked as the external login frequency, the ratio of the external login duration corresponding to each personnel account to the total login duration is marked as the external login time-frequency ratio, and the sum of the products of the external login frequency and the external login time-frequency ratio corresponding to each personnel account and the preset value coefficients θ1 and θ2 is marked as the external login coefficient DLj corresponding to each personnel account, where j refers to the number corresponding to the personnel account, j≥1, θ1 and θ2 are both preset proportional coefficients, satisfying θ1+θ2=1, where θ1=0.58, θ2=0.

42.

3. An educational information integration system according to claim 2, characterized in that: The specific method of obtaining the determination coefficient corresponding to each personnel account is: marking the absolute value of the difference between the external login coefficient and the risk coefficient corresponding to each personnel account as the determination coefficient YDj corresponding to each personnel account.

4. An educational information integration system according to claim 3, characterized in that: The specific method of obtaining the risk coefficient corresponding to each personnel account is as follows: Obtain the straight-line distance between the external login location and the school location corresponding to each login of each personnel account in the external login, then perform average processing on the straight-line distances corresponding to each personnel account, and then obtain the activity distance AL corresponding to each personnel account. The risk coefficient Wj corresponding to each personnel account can be obtained through the formula (WBj+WAj) / 2FCj+AL=Wj; WBj and WAj are the number of external login devices and external IP addresses corresponding to each personnel account.

5. An educational information integration system according to claim 4, characterized in that: The specific method for authorizing external login permissions for personnel accounts is as follows: The external login coefficient corresponding to each personnel account is analyzed to obtain the personnel comparison coefficient, and the determination coefficient corresponding to each personnel account is compared with the personnel comparison coefficient. When the determination coefficient YDj corresponding to the personnel account satisfies YDj greater than 1.25 times BJ, the external login permission is authorized to the corresponding account. When YDj is less than or equal to 1.25 times BJ, no processing is performed.

6. An educational information integration system according to claim 5, characterized in that: The specific method of obtaining the personnel comparison coefficient is: Obtain the discrete value of the external login coefficient DLj corresponding to each personnel account. When the discrete value is less than or equal to the preset value Y1, the product of the mean of DLj and the preset fixed coefficient θ3 is used as the personnel comparison coefficient BJ. When the discrete value is greater than the preset value Y1, the product of the median of DLj and the preset fixed coefficient θ4 is used as the personnel comparison coefficient BJ.

7. An educational information integration system according to claim 6, characterized in that: The specific method to obtain the median of DLj is: That is, when the discrete value is greater than the preset value Y1, first arrange DLj in ascending order. When j is an odd number, BJ=DL[(j+1) / 2]×θ3 is used as the personnel comparison coefficient BJ; when j is an even number, [DL(j / 2)+DL(j / 2+1)] / 2×θ4=BJ is used as the personnel comparison coefficient BJ.

8. An educational information integration system according to claim 7, characterized in that: It also includes a permission setting module; The permission setting module restricts the access rights of personnel accounts with external login permissions when they log in externally. The specific methods are as follows: When a person account with external login permission logs in externally, the group chat information viewing function will be turned off so that the person account can only view private chat information.

9. An educational information integration system according to claim 7, characterized in that: When a corresponding account that does not have external login permissions needs to log in externally, it is necessary to manually authorize the external login permissions for its personnel account within the school.

Images