Management method, device, system, equipment and storage medium

Abstract

The invention provides a management method, device and system, equipment and a storage medium, and relates to the technical field of computers. The method comprises the steps of obtaining a user alarm log, a user access log and user information, determining user security state information based on the user alarm log, the user access log and the user information, and sending the user security state information to an authority control node, therefore, the authority control node performs authority management on the user based on the user security state information, the plurality of authority control nodes are managed in a unified manner, and the security management efficiency is improved.

Description

Background Art

[0002] With the rapid development of network technology and the continuous changes in business needs, the existing network environment is facing more and more security threats and challenges. Traditional network security protection methods can no longer meet current security needs. There are many security products on the market, but existing security products have problems such as decentralized authority control, resulting in low efficiency in current security authority management. Summary of the invention

[0003] The present disclosure provides a management method, apparatus, system, device and storage medium, which improve the efficiency of security authority management at least to a certain extent.

[0004] Other features and advantages of the present disclosure will become apparent from the following detailed description, or may be learned in part by the practice of the present disclosure.

[0005] According to one aspect of the present disclosure, there is provided a management method, which is applied to a security management device, comprising:

[0006] Obtain user alarm logs, user access logs, and user information;

[0007] Determine user security status information based on user alarm logs, user access logs and user information;

[0008] The user security status information is sent to the authority control node so that the authority control node performs authority management on the user based on the user security status information.

[0009] In one embodiment of the present disclosure, the method further includes:

[0010] Obtain updated user alarm logs, user access logs, and user information;

[0011] Update user security status information based on updated user alarm logs, user access logs, and user information;

[0012] The updated user security status information is sent to the authority control node so that the authority control node performs authority management on the user based on the updated user security status information.

[0013] In one embodiment of the present disclosure, obtaining a user alarm log, a user access log, and user information includes:

[0014] User alarm logs, user access logs, and user information are obtained based on at least one of an authority control node, a security device, and a security system.

[0015] According to another aspect of the present disclosure, a management method is provided, which is applied to an authority control node, including:

[0016] Sending at least one of a user alarm log, a user access log, and user information to a security management device;

[0017] Receiving security status information sent by the security management device, where the security status information is generated by the security management device based on user alarm logs, user access logs, and user information;

[0018] Perform user rights management based on security status information.

[0019] According to yet another aspect of the present disclosure, there is provided a management system, comprising a security management device and an authority control node;

[0020] A security management device, used to obtain user alarm logs, user access logs and user information; determine user security status information based on the user alarm logs, user access logs and user information; and send the user security status information to the authority control node;

[0021] The authority control node is used to send at least one of a user alarm log, a user access log and user information to a security management device; receive security status information sent by the security management device; and perform authority management on users according to the security status information.

[0022] In one embodiment of the present disclosure, the system further includes:

[0023] The security adaptation layer is used to connect security management devices and authority control nodes.

[0024] According to another aspect of the present disclosure, there is provided a management device, which is applied to a security management device, including:

[0025] The first acquisition module is used to obtain user alarm logs, user access logs and user information;

[0026] A determination module, used to determine user security status information based on user alarm logs, user access logs and user information;

[0027] The first sending module is used to send the user security status information to the authority control node so that the authority control node performs authority management on the user based on the user security status information.

[0028] In one embodiment of the present disclosure, the device further includes:

[0029] The second acquisition module is used to obtain updated user alarm logs, user access logs and user information;

[0030] An update module, used to update user security status information based on updated user alarm logs, user access logs and user information;

[0031] The third sending module is used to send the updated user security status information to the authority control node so that the authority control node can perform authority management on the user based on the updated user security status information.

[0032] In one embodiment of the present disclosure, the first acquisition module includes:

[0033] The acquisition unit is used to acquire user alarm logs, user access logs and user information based on at least one of an authority control node, a security device and a security system.

[0034] According to another aspect of the present disclosure, there is provided a management device, comprising:

[0035] A second sending module, used to send at least one of a user alarm log, a user access log and user information to the security management device;

[0036] A receiving module, used for receiving security status information sent by a security management device, where the security status information is generated by the security management device based on user alarm logs, user access logs and user information;

[0037] The management module is used to manage the rights of users according to the security status information.

[0038] According to another aspect of the present disclosure, an electronic device is provided, comprising: a processor; and a memory for storing executable instructions of the processor; wherein the processor is configured to perform the above-mentioned management method by executing the executable instructions.

[0039] According to another aspect of the present disclosure, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the above-mentioned task processing method is implemented.

[0040] The management method, apparatus, system, device and storage medium provided by the embodiments of the present disclosure obtain user alarm logs, user access logs and user information, determine user security status information based on the user alarm logs, user access logs and user information, and send the user security status information to the authority control node based on the user security status information, so that the authority control node performs authority management on the user based on the user security status information, and uniformly manages multiple authority control nodes, thereby improving the efficiency of security management.

[0041] It is to be understood that the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the present disclosure. BRIEF DESCRIPTION OF THE DRAWINGS

[0042] The accompanying drawings herein are incorporated into the specification and constitute a part of the specification, illustrate embodiments consistent with the present disclosure, and together with the specification are used to explain the principles of the present disclosure. Obviously, the accompanying drawings described below are only some embodiments of the present disclosure, and for ordinary technicians in this field, other accompanying drawings can be obtained based on these accompanying drawings without creative work.

[0043] Figure 1 A structural diagram of a management system in an embodiment of the present disclosure is shown;

[0044] Figure 2 A flow chart of a management method in an embodiment of the present disclosure is shown;

[0045] Figure 3 Another flow chart of a management method in an embodiment of the present disclosure is shown;

[0046] Figure 4 A flow chart of another management method in an embodiment of the present disclosure is shown;

[0047] Figure 5 A flow chart of another management method in an embodiment of the present disclosure is shown;

[0048] Figure 6 A structural diagram of a management system in an embodiment of the present disclosure is shown;

[0049] Figure 7 A structural diagram of a management device in an embodiment of the present disclosure is shown;

[0050] Figure 8 Another structural diagram of a management device in an embodiment of the present disclosure is shown;

[0051] Fig. 9 A structural block diagram of an electronic device in an embodiment of the present disclosure is shown. DETAILED DESCRIPTION

[0052] Example embodiments will now be described more fully with reference to the accompanying drawings. However, example embodiments can be implemented in a variety of forms and should not be construed as limited to the examples set forth herein; rather, these embodiments are provided so that the disclosure will be more comprehensive and complete and to fully convey the concepts of the example embodiments to those skilled in the art. The described features, structures, or characteristics may be combined in any suitable manner in one or more embodiments.

[0053] In addition, the accompanying drawings are only schematic illustrations of the present disclosure and are not necessarily drawn to scale. The same reference numerals in the figures represent the same or similar parts, and their repeated description will be omitted. Some of the block diagrams shown in the accompanying drawings are functional entities and do not necessarily correspond to physically or logically independent entities. These functional entities can be implemented in software form, or implemented in one or more hardware modules or integrated circuits, or implemented in different networks and / or processor devices and / or microcontroller devices.

[0054] It should be understood that the various steps described in the method embodiments of the present disclosure may be performed in different orders and / or in parallel. In addition, the method embodiments may include additional steps and / or omit the steps shown. The scope of the present disclosure is not limited in this respect.

[0055] It should be noted that the concepts such as "first" and "second" mentioned in the present disclosure are only used to distinguish different devices, modules or units, and are not used to limit the order or interdependence of the functions performed by these devices, modules or units.

[0056] It should be noted that the modifications of "one" and "plurality" mentioned in the present disclosure are illustrative rather than restrictive, and those skilled in the art should understand that unless otherwise clearly indicated in the context, it should be understood as "one or more".

[0057] In order to solve the above problems, the embodiments of the present disclosure provide a management method, apparatus, system, device and storage medium.

[0058] In order to explain the present disclosure in detail, the present disclosure first explains the management system in detail. Figure 1 A schematic diagram of the structure of a management system in an embodiment of the present disclosure is shown, and the system can be applied to the management method and management device in various embodiments of the present disclosure.

[0059] like Figure 1 As shown, the management system 10 may include a security management device 101 and an authority control node 102;

[0060] The security management device 101 is used to obtain user alarm logs, user access logs and user information; determine user security status information based on the user alarm logs, user access logs and user information; and send the user security status information to the authority control node 102;

[0061] The authority control node 102 is used to send at least one of a user alarm log, a user access log and user information to the security management device 101; receive security status information sent by the security management device 101; and perform authority management on the user according to the security status information.

[0062] In some embodiments, the security management device 101 and the authority control node 102 may be located on different devices, and the security management device 101 and the authority control node 102 may be modules on electronic devices with data acquisition capabilities. The security management device 101 and the authority control node 102 may also be modules on electronic devices with data processing capabilities such as computer devices and servers.

[0063] The security management device 101 and the authority control node 102 are connected to each other via a network, which may be a wired network or a wireless network.

[0064] Optionally, the wireless network or wired network described above uses standard communication technology and / or protocol. The network is usually the Internet, but it can also be any network, including but not limited to a local area network (LAN), a metropolitan area network (MAN), a wide area network (WAN), a mobile, wired or wireless network, a dedicated network or any combination of a virtual private network). In some embodiments, technologies and / or formats including Hyper Text Mark-up Language (HTML), Extensible Markup Language (XML), etc. are used to represent data exchanged through the network. In addition, conventional encryption technologies such as Secure Socket Layer (SSL), Transport Layer Security (TLS), Virtual Private Network (VPN), Internet Protocol Security (IPsec) can also be used to encrypt all or some links. In other embodiments, customized and / or dedicated data communication technologies can also be used to replace or supplement the above data communication technologies.

[0065] The authority control node 102 may be a terminal device, and the terminal device may be various electronic devices, including but not limited to smart phones, tablet computers, laptop computers, desktop computers, wearable devices, augmented reality devices, virtual reality devices, etc.

[0066] Optionally, the client of the application installed in different terminal devices is the same, or the client of the same type of application based on different operating systems. Based on the different terminal platforms, the specific form of the client of the application can also be different, for example, the application client can be a mobile client, a PC client, etc.

[0067] The security management device 101 may be a server, and the server may be a server that provides various services, such as a background management server that provides support for devices operated by users using terminal devices. The background management server may analyze and process the received request and other data, and feed back the processing results to the terminal device.

[0068] Optionally, the server can be an independent physical server, a server cluster or distributed system composed of multiple physical servers, or a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, CDN (Content Delivery Network), as well as big data and artificial intelligence platforms.

[0069] In some embodiments, the management system may further include a security adaptation layer, wherein the security adaptation layer may allow a user to connect the security management device and the authority control node.

[0070] In some embodiments, the security adaptation layer is primarily responsible for adapting the security management device to the permission control section.

[0071] Those skilled in the art will know that Figure 1 The number of security management devices 101 and authority control nodes 102 in the embodiment is only for illustration, and any number of security management devices 101 and authority control nodes 102 may be provided according to actual needs. The embodiments of the present disclosure are not limited to this.

[0072] The management system provided by the embodiments of the present disclosure obtains user alarm logs, user access logs and user information, determines user security status information based on the user alarm logs, user access logs and user information, and sends the user security status information to the authority control node so that the authority control node can perform authority management on the user based on the user security status information, and multiple authority control nodes are managed in a unified manner, thereby improving the efficiency of security management.

[0073] Based on the same inventive concept, a management method is also provided in the embodiment of the present disclosure, and the management method in the embodiment of the present disclosure is applied to a security management device, such as the following embodiment. Since the principle of solving the problem in the embodiment of the method is similar to that in the above embodiment of the method, the implementation of the embodiment of the method can refer to the implementation of the above embodiment of the method, and the repeated parts will not be repeated.

[0074] Figure 2 A schematic diagram of a management method flow in an embodiment of the present disclosure is shown.

[0075] like Figure 2As shown, the management method in the embodiment of the present disclosure may include:

[0076] S201, obtaining user alarm logs, user access logs and user information.

[0077] In some embodiments, the security management device can obtain user alarm logs, user access logs and user information from various security devices and systems in the current prior art.

[0078] In some embodiments, the alarm log may include a user identifier and user alarm information. The user access log may include a user identifier and a user access log. User information may include multiple categories of information, such as identity information, credit information, geographic location information, etc.

[0079] S202, determining user security status information based on the user alarm log, the user access log and the user information.

[0080] In some embodiments, the user security status information may be determined by setting a threshold. For example, when the number of abnormal user accesses exceeds a preset threshold, it may be determined that the user security status is in an unsafe state.

[0081] In some embodiments, user security status information can be determined based on user information, such as if the IP address from which the user initiates access is abnormal or the user's geographical location is abnormal. In the event of abnormalities in the above information, it can be determined that the user's security status is in an unsafe state.

[0082] In some embodiments, user alarm logs, user access logs, and user information may be input into a trained classification model to obtain user security status information.

[0083] Before inputting the user alarm information, the user access log, and the user information into the trained classification model, the method may further include:

[0084] The classification model is trained based on historical user alarm logs, historical user access logs, historical user information and historical classification results as training samples, and the training is completed after the training reaches the training stop condition.

[0085] The training stop conditions may include the number of training times reaching a preset number of times and the loss function reaching a preset value.

[0086] S203: Send the user security status information to the authority control node so that the authority control node performs authority management on the user based on the user security status information.

[0087] In some embodiments, there are multiple authority control nodes.

[0088] In some embodiments, the security status information of multiple authority control nodes may be issued by the same security management device. The security status information may include the authority of the user.

[0089] The management method provided by the embodiments of the present disclosure obtains user alarm logs, user access logs and user information, determines user security status information based on the user alarm logs, user access logs and user information, and sends the user security status information to the authority control node based on the user security status information, so that the authority control node performs authority management on the user based on the user security status information, and manages multiple authority control nodes in a unified manner, thereby improving the efficiency of security management.

[0090] Figure 3 A flowchart of another management method in an embodiment of the present disclosure is shown.

[0091] like Figure 3 As shown, the management method in the embodiment of the present disclosure may include:

[0092] S310, obtaining updated user alarm logs, user access logs, and user information;

[0093] S320, updating the user security status information based on the updated user alarm log, user access log and user information;

[0094] S330: Send the updated user security status information to the authority control node so that the authority control node performs authority management on the user based on the updated user security status information.

[0095] In some embodiments, the present disclosure may update the user's alarm log, user access log, and user information based on a preset period.

[0096] In some embodiments, the method for updating user security status information is the same as the method in the above embodiments and will not be repeated here.

[0097] The management method provided by the embodiments of the present disclosure obtains user alarm logs, user access logs and user information, determines user security status information based on the user alarm logs, user access logs and user information, and sends the user security status information to the authority control node based on the user security status information, so that the authority control node performs authority management on the user based on the user security status information, and manages multiple authority control nodes in a unified manner, thereby improving the efficiency of security management.

[0098] Figure 4 A flowchart of another management method in an embodiment of the present disclosure is shown.

[0099] like Figure 4 As shown, the management method in the embodiment of the present disclosure may include:

[0100] S410, obtaining a user alarm log, a user access log, and user information based on at least one of an authority control node, a security device, and a security system.

[0101] In some embodiments, after the authority control node completes the authority management of the user, the user alarm log, user access log, and user information obtained during the authority management process may be saved.

[0102] In some embodiments, the security management device may also use crawlers and other methods to obtain user alarm logs, user access logs, and user information from other security devices and security systems.

[0103] S420, determining user security status information based on the user alarm log, the user access log and the user information.

[0104] S430: Send the user security status information to the authority control node so that the authority control node performs authority management on the user based on the user security status information.

[0105] The management method provided by the embodiments of the present disclosure obtains user alarm logs, user access logs and user information, determines user security status information based on the user alarm logs, user access logs and user information, and sends the user security status information to the authority control node based on the user security status information, so that the authority control node performs authority management on the user based on the user security status information, and manages multiple authority control nodes in a unified manner, thereby improving the efficiency of security management.

[0106] Based on the same inventive concept, a management method is also provided in the embodiment of the present disclosure, and the management method in the embodiment of the present disclosure is applied to the authority control node, such as the following embodiment. Since the principle of solving the problem in the embodiment of the method is similar to that in the above embodiment of the method, the implementation of the embodiment of the method can refer to the implementation of the above embodiment of the method, and the repeated parts will not be repeated.

[0107] Figure 5 A flowchart of another management method in an embodiment of the present disclosure is shown.

[0108] like Figure 5 As shown, the management method in the embodiment of the present disclosure may include:

[0109] S510, sending at least one of a user alarm log, a user access log, and user information to a security management device.

[0110] S520, receiving security status information sent by the security management device, where the security status information is generated by the security management device based on user alarm logs, user access logs, and user information.

[0111] S530: Perform authority management on the user according to the security status information.

[0112] The management method provided by the embodiments of the present disclosure obtains user alarm logs, user access logs and user information, determines user security status information based on the user alarm logs, user access logs and user information, and sends the user security status information to the authority control node based on the user security status information, so that the authority control node performs authority management on the user based on the user security status information, and manages multiple authority control nodes in a unified manner, thereby improving the efficiency of security management.

[0113] In order to explain the present disclosure in detail, the present disclosure provides a management system structure diagram.

[0114] like Figure 6 As shown, the management system 600 may include:

[0115] A security management device 610 and an authority control node 620 .

[0116] The security management device includes: a dynamic assessment engine 611, a permission policy module 612, a security adaptation layer 613, a general API 614 and a log processing module 615.

[0117] Dynamic assessment engine 611: responsible for dynamically assessing the current security status based on the user's security alert logs, behavior logs, identities, etc. across the entire network.

[0118] Permission policy module 612: responsible for setting a dynamic access control permission policy based on user identity according to the user dynamic evaluation result.

[0119] Security Adaptation Layer 613: Mainly responsible for functional adaptation with various permission control nodes to ensure that identity-based controllers can smoothly issue permission policies and other node function calls through the adaptation layer

[0120] Common API 614: Provides unified authentication and forwarding of controller control instructions. The authentication capability is separated from the controller to the API gateway. The controller itself no longer needs to perform repeated authentication, but only accepts request instructions from the API gateway through a whitelist.

[0121] Authority control node 620: All kinds of authority control devices or systems in the existing network can serve as an authority execution node, responsible for the execution of the final controller instructions, that is, the release or interception of user requests;

[0122] Log processing module 615: responsible for the unified and standardized processing of various security alarm logs in the entire network

[0123] The management system provided by the present disclosure manages and issues permissions for users in the entire network in a unified manner, solving the problem of decentralized permission management. Once a user is determined to be a dangerous or malicious user, he or she can be banned in the entire network, greatly improving security operation efficiency.

[0124] Based on the same inventive concept, a management device is also provided in the embodiment of the present disclosure, and the management device in the embodiment of the present disclosure is applied to a security management device, such as the following embodiment. Since the principle of solving the problem in the device embodiment is similar to that in the above-mentioned device embodiment, the implementation of the method embodiment can refer to the implementation of the above-mentioned method embodiment, and the repeated parts will not be repeated.

[0125] Figure 7 A structural diagram of another management device in an embodiment of the present disclosure is shown.

[0126] like Figure 7 As shown, the management device 700 in the embodiment of the present disclosure may include:

[0127] A first acquisition module 710 is used to acquire user alarm logs, user access logs and user information;

[0128] A determination module 720, configured to determine user security status information based on user alarm logs, user access logs, and user information;

[0129] The first sending module 730 is used to send the user security status information to the authority control node so that the authority control node performs authority management on the user based on the user security status information.

[0130] The management device, user access log and user information provided by the embodiments of the present disclosure determine the user security status information based on the user alarm log, user access log and user information, and send it to the authority control node based on the user security status information, so that the authority control node can manage the user's authority based on the user security status information, and unify the management of multiple authority control nodes, thereby improving the efficiency of security management.

[0131] In one embodiment of the present disclosure, the device further includes:

[0132] The second acquisition module is used to obtain updated user alarm logs, user access logs and user information;

[0133] An update module, used to update user security status information based on updated user alarm logs, user access logs and user information;

[0134] The third sending module is used to send the updated user security status information to the authority control node so that the authority control node can perform authority management on the user based on the updated user security status information.

[0135] The management device, user access log and user information provided by the embodiments of the present disclosure determine the user security status information based on the user alarm log, user access log and user information, and send it to the authority control node based on the user security status information, so that the authority control node can manage the user's authority based on the user security status information, and unify the management of multiple authority control nodes, thereby improving the efficiency of security management.

[0136] In one embodiment of the present disclosure, the first acquisition module includes:

[0137] The acquisition unit is used to acquire user alarm logs, user access logs and user information based on at least one of an authority control node, a security device and a security system.

[0138] The management device, user access log and user information provided by the embodiments of the present disclosure determine the user security status information based on the user alarm log, user access log and user information, and send it to the authority control node based on the user security status information, so that the authority control node can manage the user's authority based on the user security status information, and unify the management of multiple authority control nodes, thereby improving the efficiency of security management.

[0139] Based on the same inventive concept, a management device is also provided in the embodiment of the present disclosure, and the management device in the embodiment of the present disclosure is applied to a security management device, such as the following embodiment. Since the principle of solving the problem in the embodiment of the device is similar to that in the above method embodiment, the implementation of the embodiment of the device can refer to the implementation of the above method embodiment, and the repeated parts will not be repeated.

[0140] Figure 8 A structural diagram of another management device in an embodiment of the present disclosure is shown.

[0141] like Figure 8 As shown, the management device 800 in the embodiment of the present disclosure may include:

[0142] The second sending module 810 is used to send at least one of a user alarm log, a user access log and user information to the security management device;

[0143] A receiving module 820 is used to receive security status information sent by a security management device, where the security status information is generated by the security management device based on user alarm logs, user access logs, and user information;

[0144] The management module 830 is used to manage the rights of users according to the security status information.

[0145] The management device, user access log and user information provided by the embodiments of the present disclosure determine the user security status information based on the user alarm log, user access log and user information, and send it to the authority control node based on the user security status information, so that the authority control node can manage the user's authority based on the user security status information, and unify the management of multiple authority control nodes, thereby improving the efficiency of security management.

[0146] The task processing device provided in the embodiment of the present disclosure can be used to execute the positioning methods provided in the above-mentioned method embodiments. The implementation principles and technical effects are similar and will not be described herein for the sake of simplicity.

[0147] Those skilled in the art will appreciate that various aspects of the present disclosure may be implemented as systems, methods or program products. Therefore, various aspects of the present disclosure may be specifically implemented in the following forms, namely: complete hardware implementation, complete software implementation (including firmware, microcode, etc.), or a combination of hardware and software, which may be collectively referred to herein as "circuits", "modules" or "systems".

[0148] Refer to the following Fig. 9 The electronic device 900 according to this embodiment of the present disclosure is described. Fig. 9 The electronic device 900 shown is merely an example and should not bring any limitation to the functions and scope of use of the embodiments of the present disclosure.

[0149] like Fig. 9 As shown, the electronic device 900 is in the form of a general computing device. The components of the electronic device 900 may include but are not limited to: at least one processing unit 910, at least one storage unit 920, and a bus 930 connecting different system components (including the storage unit 920 and the processing unit 910).

[0150] The storage unit stores program codes, which can be executed by the processing unit 910, so that the processing unit 910 performs the steps of various exemplary embodiments of the present disclosure described in the above “Exemplary Method” section of this specification. For example, the processing unit 910 can perform the following steps of the above method embodiment:

[0151] Obtain user alarm logs, user access logs, and user information;

[0152] Determine user security status information based on user alarm logs, user access logs and user information;

[0153] The user security status information is sent to the authority control node so that the authority control node performs authority management on the user based on the user security status information.

[0154] or, sending at least one of a user alarm log, a user access log, and user information to a security management device;

[0155] Receiving security status information sent by the security management device, where the security status information is generated by the security management device based on user alarm logs, user access logs, and user information;

[0156] Perform user rights management based on security status information.

[0157] The storage unit 920 may include a readable medium in the form of a volatile storage unit, such as a random access storage unit (RAM) 9201 and / or a cache storage unit 9202 , and may further include a read-only storage unit (ROM) 9203 .

[0158] The storage unit 920 may also include a program / utility 9204 having a set (at least one) of program modules 9205, such program modules 9205 including but not limited to: an operating system, one or more application programs, other program modules, and program tasks, each of which or some combination may include the implementation of a network environment.

[0159] Bus 930 may represent one or more of several types of bus structures, including a memory unit bus or memory unit controller, a peripheral bus, an accelerated graphics port, a processing unit, or a local bus using any of a variety of bus architectures.

[0160] The electronic device 900 may also communicate with one or more external devices 940 (e.g., keyboards, pointing devices, Bluetooth devices, etc.), may also communicate with one or more devices that enable a user to interact with the electronic device 900, and / or communicate with any device that enables the electronic device 900 to communicate with one or more other computing devices (e.g., routers, modems, etc.). Such communication may be performed via an input / output (I / O) interface 950. Furthermore, the electronic device 900 may also communicate with one or more networks (e.g., local area networks (LANs), wide area networks (WANs), and / or public networks, such as the Internet) via a network adapter 960. As shown, the network adapter 960 communicates with other modules of the electronic device 900 via a bus 930. It should be understood that, although not shown in the figure, other hardware and / or software modules may be used in conjunction with the electronic device 900, including but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives, and task backup storage systems, etc.

[0161] Through the description of the above implementation, it is easy for those skilled in the art to understand that the example implementation described here can be implemented by software, or by software combined with necessary hardware. Therefore, the technical solution according to the implementation of the present disclosure can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (which can be a CD-ROM, a USB flash drive, a mobile hard disk, etc.) or on a network, and includes several instructions to enable a computing device (which can be a personal computer, a server, a terminal device, or a network device, etc.) to execute the method according to the implementation of the present disclosure.

[0162] In an exemplary embodiment of the present disclosure, a computer-readable storage medium is also provided, which may be a readable signal medium or a readable storage medium. A program product capable of implementing the above method of the present disclosure is stored thereon. In some possible implementations, various aspects of the present disclosure may also be implemented in the form of a program product, which includes a program code, and when the program product is run on a terminal device, the program code is used to enable the terminal device to execute the steps according to various exemplary implementations of the present disclosure described in the above “Exemplary Method” section of this specification.

[0163] More specific examples of computer-readable storage media in the present disclosure may include, but are not limited to, an electrical connection having one or more conductors, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0164] In the present disclosure, a computer readable storage medium may include a task signal propagated in baseband or as part of a carrier wave, wherein a readable program code is carried. Such propagated task signals may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. A readable signal medium may also be any readable medium other than a readable storage medium, which may send, propagate, or transmit a program for use by or in conjunction with an instruction execution system, apparatus, or device.

[0165] Alternatively, the program code contained on the computer-readable storage medium may be transmitted using any appropriate medium, including but not limited to wireless, wired, optical cable, RF, etc., or any suitable combination of the foregoing.

[0166] In a specific implementation, the program code for performing the operations of the present disclosure may be written in any combination of one or more programming languages, including object-oriented programming languages ​​such as Java, C++, etc., and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user computing device, partially on the user device, as a separate software package, partially on the user computing device and partially on a remote computing device, or entirely on a remote computing device or server. In the case of a remote computing device, the remote computing device may be connected to the user computing device through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computing device (e.g., using an Internet service provider to connect through the Internet).

[0167] It should be noted that, although several modules or units of the device for action execution are mentioned in the above detailed description, this division is not mandatory. In fact, according to the embodiments of the present disclosure, the features and functions of two or more modules or units described above can be embodied in one module or unit. On the contrary, the features and functions of one module or unit described above can be further divided into multiple modules or units to be embodied.

[0168] In addition, although the steps of the method in the present disclosure are described in a specific order in the drawings, this does not require or imply that the steps must be performed in this specific order, or that all the steps shown must be performed to achieve the desired results. Additionally or alternatively, some steps may be omitted, multiple steps may be combined into one step, and / or one step may be decomposed into multiple steps, etc.

[0169] Through the description of the above implementation modes, it is easy for those skilled in the art to understand that the example implementation modes described here can be implemented by software or by combining software with necessary hardware. Therefore, the technical solution according to the implementation mode of the present disclosure can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (which can be a CD-ROM, a USB flash drive, a mobile hard disk, etc.) or on a network, and includes several instructions to enable a computing device (which can be a personal computer, a server, a mobile terminal, or a network device, etc.) to execute the method according to the implementation mode of the present disclosure.

[0170] Those skilled in the art will readily appreciate other embodiments of the present disclosure after considering the specification and practicing the invention disclosed herein. The present disclosure is intended to cover any variations, uses or adaptations of the present disclosure, which follow the general principles of the present disclosure and include common knowledge or customary techniques in the art that are not disclosed in the present disclosure. The description and examples are intended to be exemplary only, and the true scope and spirit of the present disclosure are indicated by the appended claims.

Claims

1. A management method, characterized in that: Applied to security management devices, including: Obtain user alarm logs, user access logs, and user information; Determine user security status information based on the user alarm log, user access log and user information; The user security status information is sent to an authority control node so that the authority control node performs authority management on the user based on the user security status information.

2. The method according to claim 1, characterized in that: The method further comprises: Obtain updated user alarm logs, user access logs, and user information; Update user security status information based on the updated user alarm log, user access log and user information; The updated user security status information is sent to the authority control node so that the authority control node performs authority management on the user based on the updated user security status information.

3. The method according to claim 1, characterized in that: The obtaining of user alarm logs, user access logs and user information includes: The user alarm log, user access log and user information are obtained based on at least one of the authority control node, the security device and the security system.

4. A management method, characterized in that: Applicable to permission control nodes, including: Sending at least one of a user alarm log, a user access log, and user information to a security management device; Receiving security status information sent by the security management device, where the security status information is generated by the security management device based on user alarm logs, user access logs, and user information; The user's authority management is performed according to the security status information.

5. A management system, characterized in that: Including security management devices and authority control nodes; The security management device is used to obtain user alarm logs, user access logs and user information; determine user security status information based on the user alarm logs, user access logs and user information; Sending the user security status information to the authority control node; The authority control node is used to send at least one of a user alarm log, a user access log and user information to the security management device; Receiving security status information sent by the security management device; The user's authority management is performed according to the security status information.

6. The system according to claim 5, characterized in that: The system further comprises: The security adaptation layer is used to connect security management devices and authority control nodes.

7. A management device, characterized in that: Applied to security management devices, including: The first acquisition module is used to obtain user alarm logs, user access logs and user information; A determination module, used to determine user security status information based on the user alarm log, user access log and user information; The first sending module is used to send the user security status information to the authority control node so that the authority control node performs authority management on the user based on the user security status information.

8. A management device, characterized in that: Applicable to permission control nodes, including: A second sending module, used to send at least one of a user alarm log, a user access log and user information to the security management device; A receiving module, configured to receive security status information sent by the security management device, wherein the security status information is generated by the security management device based on user alarm logs, user access logs and user information; A management module is used to manage the rights of users according to the security status information.

9. An electronic device, characterized in that: include: processor; as well as A memory, configured to store executable instructions of the processor; The processor is configured to execute the security management method according to any one of claims 1 to 4 by executing the executable instructions.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the security management method according to any one of claims 1 to 4 is implemented.

Images