Multi-dimensional authority management method and system for aerospace document management system

Abstract

The invention discloses a multi-dimensional authority management method and system of a spaceflight document management system. The multi-dimensional authority management method of the spaceflight document management system comprises the following steps: confirming a front-end user interface; confirming a database layer; confirming a back-end service layer; constructing a permission model in the back-end service layer; determining a multi-dimensional permission division strategy in the back-end service layer; establishing an authority dynamic adjustment mechanism in the back-end service layer; and establishing an authority auditing and monitoring mechanism in the back-end service layer. According to the invention, fine permission division can be carried out according to the dimensions of positions, positions, specialties, model positions and the like of the users. And the authority can be automatically or manually adjusted, so that the timeliness and the accuracy of the authority are ensured. And a perfect authority auditing and monitoring mechanism is established, the authority use condition of the user is recorded and inquired in real time, and the safety and compliance of the system are improved.

Description

Technical Field

[0001] The present application relates to the field of rockets, and in particular, to a multi-dimensional authority management method and system for an aerospace document management system. Background Art

[0002] At present, there are many types of documents in aerospace projects, involving multiple stages such as design, manufacturing, testing, and operation, with a huge amount of data. Document management needs to ensure the security, integrity, and traceability of data to meet document management and compliance requirements. Among them, personnel with different positions, titles, professions, and model positions need to access different types of documents, and the permission requirements are complex. It is necessary to achieve fine division, dynamic adjustment, and audit monitoring of permissions to improve the security and efficiency of the system. However, in the current method, the division of permissions is not detailed enough. The existing method often assigns users to fixed roles and cannot be finely divided according to the user's position, title, profession, and model position. The response to permission changes is slow. When the user's position, title, profession, or model position changes, the existing method often cannot respond and adjust permissions in time. In addition, the permission audit log is incomplete. The existing method has deficiencies in permission auditing. The audit log is often incomplete or difficult to query, and it is impossible to effectively monitor and trace the user's permission usage.

[0003] Therefore, how to provide a permission management method that can finely divide permissions, dynamically adjust permissions, and strengthen permission auditing and monitoring has become an urgent problem to be solved in this field. Summary of the invention

[0004] The present application proposes a multi-dimensional permission management method for an aerospace document management system, comprising the following steps: confirming the front-end user interface; confirming the database layer; confirming the back-end service layer; constructing a permission model in the back-end service layer; determining a multi-dimensional permission division strategy in the back-end service layer; establishing a permission dynamic adjustment mechanism in the back-end service layer; and establishing a permission audit and monitoring mechanism in the back-end service layer.

[0005] The multi-dimensional permission management method of the aerospace document management system as described above, wherein the front-end user interface includes document permission browsing, document editing, document downloading, permission application, and permission approval operation interfaces.

[0006] The multi-dimensional authority management method of the aerospace document management system as described above, wherein after the database layer is confirmed, the user information, document information and authority information data are stored.

[0007] In the multi-dimensional authority management method of the aerospace document management system as described above, the database layer includes a relational database or a non-relational database, and stores user information, document information and authority information data in the relational database or the non-relational database.

[0008] The multi-dimensional permission management method of the aerospace document management system as described above, wherein the construction of the permission model includes constructing a multi-dimensional permission model including position, job, profession, and model job according to the needs of the aerospace project.

[0009] A multi-dimensional permission management system for an aerospace document management system, specifically comprising: a front-end user interface confirmation unit, a database layer confirmation unit, a back-end service layer confirmation unit, a permission model construction unit, a multi-dimensional permission division strategy determination unit, a permission dynamic adjustment mechanism establishment unit and a permission audit and monitoring mechanism establishment unit; the front-end user interface confirmation unit is used to confirm the front-end user interface; the database layer confirmation unit is used to confirm the database layer; the back-end service layer confirmation unit is used to confirm the back-end service layer; the permission model construction unit is used to construct a permission model in the back-end service layer; the multi-dimensional permission division strategy determination unit is used to determine the multi-dimensional permission division strategy in the back-end service layer; the permission dynamic adjustment mechanism establishment unit is used to establish the permission dynamic adjustment mechanism in the back-end service layer; the permission audit and monitoring mechanism establishment unit is used to establish the permission audit and monitoring mechanism in the back-end service layer.

[0010] The multi-dimensional permission management system of the aerospace document management system as described above, wherein the front-end user interface confirmed in the front-end user interface confirmation unit includes document permission browsing, document editing, document downloading, permission application, and permission approval operation interfaces.

[0011] In the multi-dimensional authority management system of the aerospace document management system as described above, after the database layer confirmation unit confirms the database layer, the user information, document information and authority information data are stored.

[0012] The multi-dimensional authority management system of the aerospace document management system as described above, wherein the database layer confirmed in the database layer confirmation unit includes a relational database or a non-relational database, and stores user information, document information and authority information data in the relational database or the non-relational database.

[0013] The multi-dimensional permission management system of the aerospace document management system as described above, wherein the permission model construction unit constructs the permission model, including constructing a multi-dimensional permission model including position, job, profession, model and job according to the needs of the aerospace project.

[0014] This application has the following beneficial effects:

[0015] This application can perform fine-grained division of permissions based on user positions, titles, majors, and model titles. When a user's position, title, major, or model title changes, their permissions can be adjusted automatically or manually to ensure the timeliness and accuracy of permissions. A complete permission audit and monitoring mechanism is established to record and query the user's permission usage in real time to improve the security and compliance of the system. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in the present application. For ordinary technicians in this field, other drawings can also be obtained based on these drawings.

[0017] Figure 1 is a flowchart of a multi-dimensional authority management method for an aerospace document management system provided according to an embodiment of the present application;

[0018] Figure 2 It is a schematic diagram of the internal structure of the multi-dimensional authority management system of the aerospace document management system provided in accordance with the embodiment of the present application. DETAILED DESCRIPTION

[0019] The following is a clear and complete description of the technical solutions in the embodiments of the present application in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of the present application.

[0020] This application proposes a multi-dimensional permission management method and system in an aerospace document management system, which divides permissions according to the user's position, job title, major, and model position, ensuring that each user can only access and operate documents related to his or her responsibilities. When the user's position, job title, major, or model position changes, his or her permissions can be adjusted automatically or manually to ensure the timeliness and accuracy of permissions. A complete permission audit and monitoring mechanism is established to record and query the user's permission usage in real time to improve the security and compliance of the system.

[0021] Embodiment 1

[0022] like Figure 1 As shown in the figure, a multi-dimensional permission management method for aerospace document management system is provided, which specifically includes the following steps:

[0023] Step S110: Confirm the front-end user interface.

[0024] The front-end user interface provides operation interfaces such as document permission browsing, document editing, document downloading, permission application, and permission approval, supporting users to access and operate documents according to permissions.

[0025] Step S120: confirm the database layer.

[0026] The database layer stores user information, document information, permission information, etc. Design a reasonable database structure, including user tables, document tables, permission tables, etc., optimize database query performance, and support efficient data query and operation.

[0027] This embodiment may adopt a relational database or a non-relational database, and a suitable storage method may be selected according to actual needs.

[0028] This embodiment uses advanced encryption algorithms (such as symmetric encryption algorithms, asymmetric encryption algorithms, and hash algorithms) to encrypt, store, and transmit sensitive data, and regularly updates encryption algorithms and keys to prevent data leakage and attacks.

[0029] Supports data backup and recovery functions to ensure data security and availability.

[0030] Step S130: confirm the backend service layer.

[0031] The backend service layer processes user requests, including permission verification, document storage and retrieval, etc. It implements multi-dimensional permission management logic, including permission division, dynamic adjustment, and audit monitoring.

[0032] Steps S110-130 can be performed simultaneously, and the front-end user interface and the back-end user interface together constitute the system architecture.

[0033] Step S140: constructing a permission model in the backend service layer.

[0034] The construction of the permission model includes designing various positions, titles, professions and model positions according to the actual needs of the aerospace project (such as the approval of design documents), then building user groups, and finally defining functional permissions and data permissions for user groups, thereby completing the construction of a multi-dimensional permission model that includes positions, titles, professions, model positions, etc.

[0035] The permission model can define the attributes and relationships of each dimension of position, job, major, and model job, and supports flexible permission configuration and division.

[0036] Step S150: After completing the construction of the permission model, determine the multi-dimensional permission division strategy in the backend service layer.

[0037] Determining the multi-dimensional authority division strategy includes formulating a detailed authority division strategy based on dimensions such as the user's position, job title, major, and model job title.

[0038] The permission division strategy supports the inheritance and overriding of permissions, ensuring that each user can only access and operate documents related to his or her responsibilities.

[0039] Step S160: After the multi-dimensional authority division strategy is determined, a dynamic authority adjustment mechanism is established in the backend service layer.

[0040] The dynamic adjustment includes establishing two permission adjustment methods: automatic and manual.

[0041] Automatic adjustment: Trigger the permission adjustment process by monitoring changes in user information.

[0042] Manual adjustment: Provides the application, approval, and execution process for permission changes to ensure the legality and standardization of permission changes.

[0043] Step S170: After the establishment of the dynamic permission adjustment mechanism is completed, a permission audit and monitoring mechanism is established in the backend service layer.

[0044] Establishing a permissions audit and monitoring mechanism includes:

[0045] Real-time recording and query of user permission usage, including access time, access content, operation type and other information.

[0046] Provides audit log export and backup functions to facilitate administrators to conduct subsequent analysis and processing, ensuring data security and availability.

[0047] Monitor the user's permission usage in real time, and when abnormal behavior or potential security risks are found, promptly issue an alarm and take corresponding security measures.

[0048] Furthermore, in this embodiment, a clear API interface is set during the interaction between the front-end user interface and the back-end service layer.

[0049] Embodiment 2

[0050] like Figure 2 As shown, this embodiment provides a multi-dimensional permission management system for an aerospace document management system, which specifically includes: a front-end user interface confirmation unit 210, a database layer confirmation unit 220, a back-end service layer confirmation unit 230, a permission model construction unit 240, a multi-dimensional permission division strategy determination unit 250, a permission dynamic adjustment mechanism establishment unit 260 and a permission audit and monitoring mechanism establishment unit 270.

[0051] The front-end user interface confirmation unit 210 is used to confirm the front-end user interface.

[0052] The front-end user interface provides operation interfaces such as document permission browsing, document editing, document downloading, permission application, and permission approval, supporting users to access and operate documents according to permissions.

[0053] The database layer confirmation unit 220 is used to confirm the database layer.

[0054] The database layer stores user information, document information, permission information, etc. Design a reasonable database structure, including user tables, document tables, permission tables, etc., optimize database query performance, and support efficient data query and operation.

[0055] This embodiment may adopt a relational database or a non-relational database, and a suitable storage method may be selected according to actual needs.

[0056] This embodiment uses advanced encryption algorithms (such as symmetric encryption algorithms, asymmetric encryption algorithms, and hash algorithms) to encrypt, store, and transmit sensitive data, and regularly updates encryption algorithms and keys to prevent data leakage and attacks.

[0057] Supports data backup and recovery functions to ensure data security and availability.

[0058] The backend service layer confirmation unit 230 is used to confirm the backend service layer.

[0059] The backend service layer processes user requests, including permission verification, document storage and retrieval, etc. It implements multi-dimensional permission management logic, including permission division, dynamic adjustment, and audit monitoring.

[0060] The permission model building unit 240 is used to build the permission model in the backend service layer.

[0061] The construction of the permission model includes designing various positions, titles, professions and model positions according to the actual needs of the aerospace project (such as the approval of design documents), then building user groups, and finally defining functional permissions and data permissions for user groups, thereby completing the construction of a multi-dimensional permission model that includes positions, titles, professions, model positions, etc.

[0062] The permission model can define the attributes and relationships of each dimension of position, job, major, and model job, and supports flexible permission configuration and division.

[0063] The multi-dimensional authority division strategy determination unit 250 is used to determine the multi-dimensional authority division strategy in the backend service layer after completing the construction of the authority model.

[0064] Determining the multi-dimensional authority division strategy includes formulating a detailed authority division strategy based on dimensions such as the user's position, job title, major, and model job title.

[0065] The permission division strategy supports the inheritance and overriding of permissions, ensuring that each user can only access and operate documents related to his or her responsibilities.

[0066] The authority dynamic adjustment mechanism establishing unit 260 is used to establish the authority dynamic adjustment mechanism in the backend service layer after completing the determination of the multi-dimensional authority division strategy.

[0067] The dynamic adjustment includes establishing two permission adjustment methods: automatic and manual.

[0068] Automatic adjustment: Trigger the permission adjustment process by monitoring changes in user information.

[0069] Manual adjustment: Provides the application, approval, and execution process for permission changes to ensure the legality and standardization of permission changes.

[0070] The authority audit and monitoring mechanism establishing unit 270 is used to establish the authority audit and monitoring mechanism in the backend service layer after completing the establishment of the authority dynamic adjustment mechanism.

[0071] Establishing a permissions audit and monitoring mechanism includes:

[0072] Real-time recording and query of user permission usage, including access time, access content, operation type and other information.

[0073] Provides audit log export and backup functions to facilitate administrators to conduct subsequent analysis and processing, ensuring data security and availability.

[0074] Monitor the user's permission usage in real time, and when abnormal behavior or potential security risks are found, promptly issue an alarm and take corresponding security measures.

[0075] Furthermore, in this embodiment, a clear API interface is set during the interaction between the front-end user interface and the back-end service layer.

[0076] The present invention also provides a computer storage medium, wherein the computer storage medium stores computer instructions, and when the computer instructions are called, they are used to execute the multi-dimensional authority management method of the aerospace document management system.

[0077] The embodiment disclosed in the present invention provides a computer-readable storage medium, in which computer program instructions are stored. When the computer program instructions are executed on a computer, the computer executes the above-mentioned multi-dimensional permission management method for an aerospace document management system.

[0078] An embodiment of the present invention provides a processor for processing the above-mentioned multi-dimensional authority management method of an aerospace document management system.

[0079] In the embodiment of the present invention, the processor may be an integrated circuit chip having the ability to process signals. The processor may be a general-purpose processor, a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field programmable gate array (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, or discrete hardware components.

[0080] The methods, steps and logic block diagrams disclosed in the embodiments of the present invention can be implemented or executed. The general processor can be a microprocessor or the processor can also be any conventional processor, etc. The steps of the method disclosed in the embodiments of the present invention can be directly embodied as a hardware decoding processor for execution, or can be executed by a combination of hardware and software modules in the decoding processor. The software module can be located in a mature storage medium in the field such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory or an electrically erasable programmable memory, a register, etc. The processor reads the information in the storage medium and completes the steps of the above method in combination with its hardware.

[0081] The storage medium may be a memory, which may be, for example, a volatile memory or a nonvolatile memory, or may include both volatile and nonvolatile memory.

[0082] Among them, the non-volatile memory can be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory can be a random access memory (RAM), which is used as an external cache. By way of example but not limitation, many forms of RAM are available, such as static random access memory (SRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDRSDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link dynamic random access memory (SLDRAM) and direct RAM bus random access memory (DRRAM).

[0083] This application has the following beneficial effects:

[0084] This application can perform fine-grained division of permissions based on user positions, titles, majors, and model titles. When a user's position, title, major, or model title changes, their permissions can be adjusted automatically or manually to ensure the timeliness and accuracy of permissions. A complete permission audit and monitoring mechanism is established to record and query the user's permission usage in real time to improve the security and compliance of the system.

[0085] Although the present application is described with reference to examples, this is for illustrative purposes only and is not intended to limit the present application, and changes, additions and / or deletions to the embodiments may be made without departing from the scope of the present application.

[0086] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. A multi-dimensional authority management method for an aerospace document management system, characterized in that: The following steps are involved: Confirm the front-end user interface; Confirm the database layer; Confirm the backend service layer; Build the permission model in the backend service layer; Determine the multi-dimensional permission division strategy in the backend service layer; Establish a dynamic permission adjustment mechanism in the backend service layer; Establish a permission audit and monitoring mechanism in the back-end service layer.

2. The multi-dimensional rights management method for aerospace document management system according to claim 1, characterized in that: The front-end user interface includes document permission browsing, document editing, document downloading, permission application, and permission approval operation interfaces.

3. The multi-dimensional rights management method for aerospace document management system according to claim 1, characterized in that: After confirming the database layer, store user information, document information, and permission information data.

4. The multi-dimensional rights management method for aerospace document management system according to claim 3, characterized in that: The database layer includes a relational database or a non-relational database, and stores user information, document information, and permission information data in the relational database or the non-relational database.

5. The multi-dimensional rights management method for aerospace document management system according to claim 1, characterized in that: The construction of the authority model includes building a multi-dimensional authority model including position, job, profession, and model job according to the needs of the aerospace project.

6. A multi-dimensional authority management system for aerospace document management system, characterized in that: Specifically include: Front-end user interface confirmation unit, database layer confirmation unit, back-end service layer confirmation unit, permission model construction unit, multi-dimensional permission division strategy determination unit, permission dynamic adjustment mechanism establishment unit and permission audit and monitoring mechanism establishment unit; A front-end user interface confirmation unit, used to confirm the front-end user interface; A database layer confirmation unit, used for confirming the database layer; A backend service layer confirmation unit, used to confirm the backend service layer; The permission model building unit is used to build the permission model in the backend service layer; A multi-dimensional authority division strategy determination unit, used to determine a multi-dimensional authority division strategy in a backend service layer; A permission dynamic adjustment mechanism establishment unit, used to establish a permission dynamic adjustment mechanism in the backend service layer; The permission audit and monitoring mechanism establishment unit is used to establish the permission audit and monitoring mechanism in the back-end service layer.

7. The multi-dimensional rights management system of the aerospace document management system as claimed in claim 6, characterized in that: The front-end user interface confirmed in the front-end user interface confirmation unit includes document permission browsing, document editing, document downloading, permission application, and permission approval operation interface.

8. The multi-dimensional rights management system of the aerospace document management system as claimed in claim 6, characterized in that: After the database layer confirmation unit confirms the database layer, it stores the user information, document information and authority information data.

9. The multi-dimensional rights management system of the aerospace document management system as claimed in claim 8, characterized in that: The database layer confirmed in the database layer confirmation unit includes a relational database or a non-relational database, and the user information, document information and authority information data are stored in the relational database or the non-relational database.

10. The multi-dimensional rights management system of the aerospace document management system according to claim 6, characterized in that: The authority model construction unit constructs the authority model, including constructing a multi-dimensional authority model including position, job, profession, and model job according to the needs of the aerospace project.

Images