Distributed enterprise information management system and method based on information sharing

Abstract

The invention discloses a distributed enterprise information management system and method based on information sharing, and belongs to the technical field of enterprise information management, and the system comprises a connection establishment module which is used for establishing a data transmission link between a client and a server; the access control module is used for performing access control on the request access instruction transmitted by the client; and the information management module is used for managing the distributed enterprise information requested to be accessed by the client. The problem that the distributed enterprise information management effect is poor due to the fact that the distributed enterprise information cannot be effectively managed based on information sharing in the prior art is solved. According to the method, the called distributed enterprise information is encrypted by adopting the secret key, the encrypted distributed enterprise information is transmitted to the client, and the client decrypts and securely stores the encrypted distributed enterprise information, so that the distributed enterprise information can be effectively managed based on information sharing; the distributed enterprise information management effect can be improved.

Description

Technical Field

[0001] The present invention relates to the technical field of enterprise information management, and in particular to a distributed enterprise information management system and method based on information sharing. Background Art

[0002] Enterprise resource sharing refers to the disclosure of information and knowledge within the enterprise as much as possible so that every employee can access and use it, so that the resources within the enterprise can be fully and comprehensively utilized, thereby improving the efficiency of resource utilization and achieving resource synergy. Enterprises create a space for resource sharing, adopt information technology, and establish a resource sharing culture. The implementation of resource sharing is conducive to promoting enterprise employees to update knowledge and innovate knowledge, helping enterprises save training and technological transformation costs, reduce R&D expenses, and helping enterprises to accelerate new product development and product transformation, increase competitiveness, and also help enhance the cohesion of enterprises.

[0003] The Chinese patent with publication number CN118014515A discloses a distributed enterprise information management system, including a login management module for managing node login; a node management module for marking nodes as valid nodes and invalid nodes according to the node login status, and adjusting the node management process according to the node failure degree, and optimizing the adjustment process according to the number of re-login times of the invalid node; a recording node management module for selecting recording nodes from valid nodes; a recording management module for recording information uploaded by nodes through recording nodes, and managing the recording process of recording nodes according to the number of information differences, and optimizing the management process according to the information additional code; a storage backup module for storing recorded information through nodes, and backing up the recorded information through backup nodes; however, the patent has the following defects:

[0004] The existing distributed enterprise information cannot be effectively managed based on information sharing, resulting in poor distributed enterprise information management results. Summary of the invention

[0005] The purpose of the present invention is to provide a distributed enterprise information management system and method based on information sharing, which can effectively manage distributed enterprise information based on information sharing, improve the distributed enterprise information management effect, and solve the problems raised in the above background technology.

[0006] To achieve the above object, the present invention provides the following technical solutions:

[0007] Distributed enterprise information management system based on information sharing, including:

[0008] A connection establishment module is used to establish a data transmission link between the client and the server;

[0009] An access control module is used to perform access control on the access request instructions transmitted by the client;

[0010] The information management module is used to manage the distributed enterprise information that the client requests to access.

[0011] Preferably, the connection establishment module includes:

[0012] A request transmission unit, used for the client to transmit a request to the server to establish a data transmission link;

[0013] A feedback transmission unit, used for the server to transmit feedback on establishing a data transmission link to the client;

[0014] A link establishment unit, used to establish a data transmission link between the client and the server;

[0015] Wherein, the client transmits a request to the server to establish a data transmission link;

[0016] The server receives the request from the client to establish a data transmission link, checks the data transmission port of the client, determines whether the client is qualified to transmit data with the server, and performs identity authentication and access control on the client;

[0017] When the client is qualified to perform data transmission with the server, the server transmits feedback to the client to establish a data transmission link;

[0018] The client receives the feedback of establishing the data transmission link transmitted by the server, and establishes the data transmission link with the server according to the feedback of establishing the data transmission link transmitted by the server.

[0019] Preferably, real-time monitoring of whether the identity authentication operation of the client is abnormal includes:

[0020] Real-time monitoring of each client's identity authentication response time;

[0021] Comparing the client's identity authentication response time with a preset response time threshold;

[0022] When the identity authentication response time of the client exceeds the preset response time threshold, the client whose current identity authentication response time exceeds the preset response time threshold is taken as the target client;

[0023] Retrieving the authentication result corresponding to the target client;

[0024] When the identification result of the target client is that the target client is not qualified to perform data transmission with the server, the total number of requests for establishing a data transmission link sent by the current target client to the server is retrieved;

[0025] When the total number of times that the target client sends a request to the server to establish a data transmission link is once, marking the target client;

[0026] When the total number of times the target client sends a request to the server to establish a data transmission link is multiple times, calling the identity authentication response duration corresponding to each identity authentication performed by the target client;

[0027] The risk coefficient corresponding to the target client is obtained by using the identity authentication response time corresponding to each identity authentication performed by the target client; wherein the risk coefficient corresponding to the target client is obtained by the following formula:

[0028]

[0029] Where S represents the risk coefficient corresponding to the target client; n represents the total number of requests sent by the target client to the server to establish a data transmission link; T i T represents the duration of the identity authentication response when the target client sends the i-th request to the server to establish a data transmission link; i-1 T represents the duration of the identity authentication response when the target client sends the i-1th request to the server to establish a data transmission link; b represents the standard deviation of the duration of identity authentication response of n requests sent by the target client to the server to establish a data transmission link; T y Indicates the preset response time threshold; T fmax and T fmin Indicates the maximum and minimum floating values ​​of the identity authentication response duration corresponding to each two consecutive identity authentications of the target client;

[0030] The risk factors corresponding to all target clients corresponding to the server are used to determine the operational security risks of the server.

[0031] Preferably, the operation security risk of the server is determined by using the risk coefficients corresponding to all target clients corresponding to the server, including:

[0032] Retrieve all target clients corresponding to the server;

[0033] Determine whether there is a risk factor for each target client;

[0034] When the target client has a risk factor, marking the target client as a risky client;

[0035] Retrieve all risk clients and their risk coefficients corresponding to the server;

[0036] Obtaining the comprehensive risk parameter corresponding to the server using the risk coefficients of all risk clients corresponding to the server;

[0037] The comprehensive risk parameter is obtained by the following formula:

[0038]

[0039] Where Z represents the comprehensive risk parameter; m represents the number of risky clients; S i represents the risk coefficient corresponding to the i-th risk client; S z represents the median value of the risk coefficient corresponding to m risky clients; S b represents the standard deviation of the risk coefficient corresponding to m risk clients; S p represents the average risk coefficient of m risky clients; S f It represents the coefficient amplitude difference between the maximum value and the minimum value of the risk coefficient corresponding to m risk clients;

[0040] comparing the comprehensive risk parameter with a preset risk parameter threshold;

[0041] When the comprehensive risk parameter exceeds a preset risk parameter threshold, it is determined that the server has an operation safety risk and a risk warning is issued.

[0042] Preferably, when performing identity authentication and access control on the client, the following operations are performed:

[0043] Get the client's data transmission port;

[0044] Indexing multiple data transmission ports on the server side one by one, and comparing and analyzing the indexed data transmission ports on the server side with the data transmission ports on the client side;

[0045] Among them, if the data transmission port of the indexed server matches the data transmission port of the client, the client is qualified to perform data transmission with the server, that is, the client identity authentication is qualified and can access the distributed enterprise information;

[0046] If the indexed data transmission port of the server does not match the data transmission port of the client, the next data transmission port of the server is indexed in sequence, and the next data transmission port of the server indexed in sequence is compared and analyzed with the data transmission port of the client;

[0047] When all the multiple data transmission ports on the server are indexed, and there is a data transmission port among the multiple data transmission ports on the server that matches the data transmission port on the client, the client is qualified to perform data transmission with the server, that is, the client identity authentication is qualified and can access the distributed enterprise information;

[0048] When all the multiple data transmission ports on the server side are indexed, there is no data transmission port among the multiple data transmission ports on the server side that matches the data transmission port on the client side, and the client side is not qualified to transmit data with the server side, that is, the client identity authentication fails and cannot access the distributed enterprise information.

[0049] Preferably, the access control module includes:

[0050] An information request unit, used for the client to transmit an access request instruction to the server;

[0051] An information response unit, used for the server to transmit a response access instruction to the client;

[0052] After the client and the server establish a data transmission link, the client transmits an access request instruction to the server, wherein the access request instruction includes the distributed enterprise information that the client requests to access;

[0053] After receiving the access request instruction transmitted by the client, the server performs access control on the access request instruction transmitted by the client, and the server responds to the client in a timely manner, and transmits the response access instruction to the client.

[0054] Preferably, the access control module further includes:

[0055] An information indexing unit, used to index distributed enterprise information stored in a distributed database;

[0056] According to the distributed enterprise information requested to be accessed by the client in the request access instruction transmitted by the client, the server performs traversal indexing on the distributed database, and searches for the distributed enterprise information requested to be accessed by the client in the distributed database;

[0057] An information calling unit, used for calling distributed enterprise information stored in a distributed database;

[0058] According to the distributed enterprise information requested to be accessed by the client found in the distributed database, the server side calls the found distributed enterprise information requested to be accessed by the client.

[0059] Preferably, the information management module includes:

[0060] A security management unit, used for security management of distributed enterprise information requested to be accessed by a client;

[0061] Obtain the distributed enterprise information that the called client requests to access;

[0062] The server uses a secret key to encrypt the distributed enterprise information requested by the client;

[0063] After the distributed enterprise information is encrypted, the server transmits the encrypted distributed enterprise information to the client, so that the distributed enterprise information is shared and transmitted securely;

[0064] The client receives the encrypted distributed enterprise information transmitted by the server, and uses the secret key to decrypt the encrypted distributed enterprise information, and the client stores the decrypted distributed enterprise information for backup.

[0065] Preferably, the information management module further includes:

[0066] A storage management unit, used for storing and managing the distributed enterprise information decrypted by the client;

[0067] Obtain decrypted distributed enterprise information;

[0068] Analyze the decrypted distributed enterprise information to determine the criticality of the distributed enterprise information;

[0069] Based on the criticality of the distributed enterprise information, the storage unit of the client is indexed and located to find the storage block of the client that matches the criticality of the distributed enterprise information;

[0070] The decrypted distributed enterprise information is securely stored in the storage block of the found client, so that the client can access the distributed enterprise information at any time.

[0071] According to another aspect of the present invention, a distributed enterprise information management method based on information sharing is provided, which is implemented based on the above-mentioned distributed enterprise information management system based on information sharing and includes the following steps:

[0072] S1: The client transmits a request to the server to establish a data transmission link, and the server transmits a feedback to the client regarding the establishment of the data transmission link. Based on the feedback transmitted by the server regarding the establishment of the data transmission link, a data transmission link is established between the client and the server.

[0073] S2: The client transmits a request access instruction to the server, and the server transmits a response access instruction to the client, performs access control on the distributed enterprise information, indexes and searches the distributed enterprise information stored in the distributed database, and calls out the distributed enterprise information;

[0074] S3: The server uses a secret key to encrypt the called distributed enterprise information and transmits the encrypted distributed enterprise information to the client. The client decrypts and securely stores the encrypted distributed enterprise information.

[0075] Compared with the prior art, the present invention has the following beneficial effects:

[0076] The present invention has a client transmitting a request to establish a data transmission link to a server, and the server transmitting feedback on the establishment of the data transmission link to the client. Based on the feedback on the establishment of the data transmission link transmitted by the server, a data transmission link is established between the client and the server. The client transmits a request access instruction to the server, and the server transmits a response access instruction to the client. Access control is performed on distributed enterprise information, and index search is performed on the distributed enterprise information stored in a distributed database, and the distributed enterprise information is called out. The server uses a secret key to encrypt the called out distributed enterprise information, and transmits the encrypted distributed enterprise information to the client. The client decrypts and securely stores the encrypted distributed enterprise information. The distributed enterprise information can be effectively managed based on information sharing, and the distributed enterprise information management effect can be improved. BRIEF DESCRIPTION OF THE DRAWINGS

[0077] Figure 1 It is a structural block diagram of a distributed enterprise information management system based on information sharing of the present invention;

[0078] Figure 2 It is an operation flow chart of the distributed enterprise information management method based on information sharing of the present invention. DETAILED DESCRIPTION

[0079] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0080] In order to solve the existing problem of inability to effectively manage distributed enterprise information based on information sharing, resulting in poor distributed enterprise information management results, please refer to Figure 1-Figure 2 , this embodiment provides the following technical solutions:

[0081] Distributed enterprise information management system based on information sharing, including:

[0082] A connection establishment module is used to establish a data transmission link between the client and the server;

[0083] In this embodiment, the connection establishment module includes:

[0084] A request transmission unit, used for the client to transmit a request to the server to establish a data transmission link;

[0085] A feedback transmission unit, used for the server to transmit feedback on establishing a data transmission link to the client;

[0086] A link establishment unit, used to establish a data transmission link between the client and the server;

[0087] Wherein, the client transmits a request to the server to establish a data transmission link;

[0088] The server receives the request from the client to establish a data transmission link, checks the data transmission port of the client, determines whether the client is qualified to transmit data with the server, and performs identity authentication and access control on the client;

[0089] When the client is qualified to perform data transmission with the server, the server transmits feedback to the client to establish a data transmission link;

[0090] The client receives the feedback of establishing the data transmission link transmitted by the server, and establishes the data transmission link with the server according to the feedback of establishing the data transmission link transmitted by the server.

[0091] Specifically, real-time monitoring of whether the client's identity authentication operation is abnormal, including:

[0092] Real-time monitoring of each client's identity authentication response time;

[0093] Comparing the client's identity authentication response time with a preset response time threshold;

[0094] When the identity authentication response time of the client exceeds the preset response time threshold, the client whose current identity authentication response time exceeds the preset response time threshold is taken as the target client;

[0095] Retrieving the authentication result corresponding to the target client;

[0096] When the identification result of the target client is that the target client is not qualified to perform data transmission with the server, the total number of requests for establishing a data transmission link sent by the current target client to the server is retrieved;

[0097] When the total number of times that the target client sends a request to the server to establish a data transmission link is once, marking the target client;

[0098] When the total number of times the target client sends a request to the server to establish a data transmission link is multiple times, calling the identity authentication response duration corresponding to each identity authentication performed by the target client;

[0099] The risk coefficient corresponding to the target client is obtained by using the identity authentication response time corresponding to each identity authentication performed by the target client; wherein the risk coefficient corresponding to the target client is obtained by the following formula:

[0100]

[0101] Where S represents the risk coefficient corresponding to the target client; n represents the total number of requests sent by the target client to the server to establish a data transmission link; T i T represents the duration of the identity authentication response when the target client sends the i-th request to the server to establish a data transmission link; i-1 T represents the duration of the identity authentication response when the target client sends the i-1th request to the server to establish a data transmission link; b represents the standard deviation of the duration of identity authentication response of n requests sent by the target client to the server to establish a data transmission link; T y Indicates the preset response time threshold; T fmax and T fmin Indicates the maximum and minimum floating values ​​of the identity authentication response duration corresponding to each two consecutive identity authentications of the target client;

[0102] The risk factors corresponding to all target clients corresponding to the server are used to determine the operational security risks of the server.

[0103] The technical effect of the above technical solution is: by real-time monitoring of the identity authentication response time of each client, the technical solution can timely discover abnormal behavior in the identity authentication process. This real-time monitoring mechanism helps to respond quickly to potential security threats and prevent unauthorized access or data transmission. By comparing the identity authentication response time of the client with the preset response time threshold, those clients with abnormal response time (i.e., target clients) can be accurately identified. This comparison mechanism helps to focus attention on where problems are most likely to occur, thereby improving the efficiency of problem solving. For entities identified as target clients, the technical solution not only retrieves the authentication results, but also further analyzes the total number of requests sent by the client to the server to establish a data transmission link and the response time of each identity authentication. This in-depth analysis helps to more comprehensively understand the behavior pattern of the target client, thereby more accurately assessing its potential risks. By introducing a risk coefficient formula, the technical solution can quantify the risk level of the target client. The formula comprehensively considers the change in the identity authentication response time, the standard deviation, the preset threshold, and the floating range of the two adjacent identity authentication response times, thereby providing a comprehensive and objective risk assessment indicator. Using this indicator, the operational security risk of the server can be determined, providing a basis for taking corresponding security measures. Overall, this technical solution effectively improves the security of the server through real-time monitoring, accurate identification, in-depth analysis and risk assessment. At the same time, it also improves the efficiency of security management by processing large amounts of data and information in an automated and intelligent manner. This technical solution has certain adaptability and scalability. For example, parameters such as the preset response time threshold and risk factor calculation formula can be adjusted and optimized according to actual conditions. In addition, with the development of technology and the emergence of new security threats, this technical solution can also continuously expand and improve its functions.

[0104] In summary, this technical solution provides a strong guarantee for the safe operation of the server by real-time monitoring of the client's identity authentication operation status, accurate identification of abnormal behavior, in-depth analysis and quantitative risk assessment.

[0105] Specifically, the risk coefficients corresponding to all target clients corresponding to the server are used to determine the operational security risk of the server, including:

[0106] Retrieve all target clients corresponding to the server;

[0107] Determine whether there is a risk factor for each target client;

[0108] When the target client has a risk factor, marking the target client as a risky client;

[0109] Retrieve all risk clients and their risk coefficients corresponding to the server;

[0110] Obtaining the comprehensive risk parameter corresponding to the server using the risk coefficients of all risk clients corresponding to the server;

[0111] The comprehensive risk parameter is obtained by the following formula:

[0112]

[0113] Where Z represents the comprehensive risk parameter; m represents the number of risky clients; S i represents the risk coefficient corresponding to the i-th risk client; S z represents the median value of the risk coefficient corresponding to m risky clients; S b represents the standard deviation of the risk coefficient corresponding to m risk clients; S p represents the average risk coefficient of m risky clients; S f It represents the coefficient amplitude difference between the maximum value and the minimum value of the risk coefficient corresponding to m risk clients;

[0114] comparing the comprehensive risk parameter with a preset risk parameter threshold;

[0115] When the comprehensive risk parameter exceeds a preset risk parameter threshold, it is determined that the server has an operation safety risk and a risk warning is issued.

[0116] The technical effect of the above technical solution is: the technical solution can fully cover the security risks that the server may face by retrieving all target clients corresponding to the server and judging whether each target client has a risk factor. This comprehensive risk assessment helps to discover potential security risks and ensure the stable operation of the server. For target clients with risk factors, the technical solution marks them as risky clients and retrieves these risky clients and their risk factors. This precise risk identification mechanism helps to focus attention on the clients that are most likely to have problems, thereby improving the efficiency of problem solving.

[0117] Introduction of comprehensive risk parameters:

[0118] By introducing a comprehensive risk parameter formula, the technical solution can quantify the overall risk level of the server. The formula comprehensively considers multiple factors such as the number of risk clients, the risk coefficient of each risk client, the median value of the risk coefficient, the standard deviation, the average value, and the coefficient amplitude difference, thereby providing a comprehensive and objective risk assessment indicator. The technical solution compares the comprehensive risk parameter with the preset risk parameter threshold. When the comprehensive risk parameter exceeds the threshold, it is determined that the server has an operational security risk and a risk warning is issued. This risk warning mechanism helps to timely discover and respond to security risks and prevent the risk from further spreading and worsening. By processing a large amount of data and information in an automated and intelligent manner, the technical solution can quickly generate a risk assessment report and provide corresponding risk warning information. This helps to improve the efficiency of security management and reduce the cost and time of manual intervention. The risk assessment results and risk warning information provided by the technical solution can provide strong support for the security management and optimization of the server. For example, based on the risk assessment results, targeted security measures can be formulated to optimize the configuration and strategy of the server and improve the security and stability of the server.

[0119] In summary, this technical solution provides a strong guarantee for the safe operation of the server through comprehensive risk assessment, accurate risk identification, introduction of comprehensive risk parameters, risk warning and response, etc. At the same time, this technical solution also improves the efficiency of security management and supports the security decision-making and optimization of the server.

[0120] It should be noted that the client identity authentication and access control include:

[0121] Get the client's data transmission port;

[0122] Indexing multiple data transmission ports on the server side one by one, and comparing and analyzing the indexed data transmission ports on the server side with the data transmission ports on the client side;

[0123] Among them, if the data transmission port of the indexed server matches the data transmission port of the client, the client is qualified to perform data transmission with the server, that is, the client identity authentication is qualified and can access the distributed enterprise information;

[0124] If the indexed data transmission port of the server does not match the data transmission port of the client, the next data transmission port of the server is indexed in sequence, and the next data transmission port of the server indexed in sequence is compared and analyzed with the data transmission port of the client;

[0125] When all the multiple data transmission ports on the server are indexed, and there is a data transmission port among the multiple data transmission ports on the server that matches the data transmission port on the client, the client is qualified to perform data transmission with the server, that is, the client identity authentication is qualified and can access the distributed enterprise information;

[0126] When all the multiple data transmission ports on the server side are indexed, there is no data transmission port among the multiple data transmission ports on the server side that matches the data transmission port on the client side, and the client side is not qualified to transmit data with the server side, that is, the client identity authentication fails and cannot access the distributed enterprise information.

[0127] Therefore, only when the client is qualified to transmit data with the server, that is, the client identity authentication is qualified, the client can access the distributed enterprise information, and then the distributed enterprise information can be shared with the client.

[0128] An access control module is used to perform access control on the access request instructions transmitted by the client;

[0129] In this embodiment, the access control module includes:

[0130] An information request unit, used for the client to transmit an access request instruction to the server;

[0131] An information response unit, used for the server to transmit a response access instruction to the client;

[0132] After the client and the server establish a data transmission link, the client transmits an access request instruction to the server, wherein the access request instruction includes the distributed enterprise information that the client requests to access;

[0133] After receiving the access request instruction transmitted by the client, the server performs access control on the access request instruction transmitted by the client, and the server responds to the client in a timely manner, and transmits the response access instruction to the client;

[0134] An information indexing unit, used to index distributed enterprise information stored in a distributed database;

[0135] According to the distributed enterprise information requested to be accessed by the client in the request access instruction transmitted by the client, the server performs traversal indexing on the distributed database, and searches for the distributed enterprise information requested to be accessed by the client in the distributed database;

[0136] An information calling unit, used for calling distributed enterprise information stored in a distributed database;

[0137] According to the distributed enterprise information requested to be accessed by the client found in the distributed database, the server side calls the found distributed enterprise information requested to be accessed by the client.

[0138] It should be noted that after the client and the server establish a data transmission link, the server responds to the client based on the client's request access instructions and establishes an information sharing mechanism. At this time, the server traverses the index of the distributed database, finds the distributed enterprise information requested by the client in the distributed database, and calls out the found distributed enterprise information for subsequent transmission to the client.

[0139] The information management module is used to manage the distributed enterprise information that the client requests to access.

[0140] In this embodiment, the information management module includes:

[0141] A security management unit, used for security management of distributed enterprise information requested to be accessed by a client;

[0142] Obtain the distributed enterprise information that the called client requests to access;

[0143] The server uses a secret key to encrypt the distributed enterprise information requested by the client;

[0144] After the distributed enterprise information is encrypted, the server transmits the encrypted distributed enterprise information to the client, so that the distributed enterprise information is shared and transmitted securely;

[0145] The client receives the encrypted distributed enterprise information transmitted by the server, and uses the secret key to decrypt the encrypted distributed enterprise information, and the client stores the decrypted distributed enterprise information for backup.

[0146] In this embodiment, the information management module further includes:

[0147] A storage management unit, used for storing and managing the distributed enterprise information decrypted by the client;

[0148] Obtain decrypted distributed enterprise information;

[0149] Analyze the decrypted distributed enterprise information to determine the criticality of the distributed enterprise information;

[0150] Based on the criticality of the distributed enterprise information, the storage unit of the client is indexed and located to find the storage block of the client that matches the criticality of the distributed enterprise information;

[0151] The decrypted distributed enterprise information is securely stored in the storage block of the found client, so that the client can access the distributed enterprise information at any time.

[0152] In order to better demonstrate the distributed enterprise information management process based on information sharing, a distributed enterprise information management method based on information sharing is provided, which is implemented based on the above-mentioned distributed enterprise information management system based on information sharing and includes the following steps:

[0153] S1: The client transmits a request to the server to establish a data transmission link, and the server transmits a feedback to the client regarding the establishment of the data transmission link. Based on the feedback transmitted by the server regarding the establishment of the data transmission link, a data transmission link is established between the client and the server.

[0154] S2: The client transmits a request access instruction to the server, and the server transmits a response access instruction to the client, performs access control on the distributed enterprise information, indexes and searches the distributed enterprise information stored in the distributed database, and calls out the distributed enterprise information;

[0155] S3: The server uses a secret key to encrypt the called distributed enterprise information and transmits the encrypted distributed enterprise information to the client. The client decrypts and securely stores the encrypted distributed enterprise information.

[0156] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device.

[0157] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. A distributed enterprise information management system based on information sharing, characterized in that: include: A connection establishment module is used to establish a data transmission link between the client and the server; An access control module is used to perform access control on the access request instructions transmitted by the client; The information management module is used to manage the distributed enterprise information that the client requests to access.

2. The distributed enterprise information management system based on information sharing according to claim 1 is characterized in that: The connection establishment module comprises: A request transmission unit, used for the client to transmit a request to the server to establish a data transmission link; A feedback transmission unit, used for the server to transmit feedback on establishing a data transmission link to the client; A link establishment unit, used to establish a data transmission link between the client and the server; Wherein, the client transmits a request to the server to establish a data transmission link; The server receives the request from the client to establish a data transmission link, checks the data transmission port of the client, determines whether the client is qualified to transmit data with the server, and performs identity authentication and access control on the client; When the client is qualified to perform data transmission with the server, the server transmits feedback to the client to establish a data transmission link; The client receives the feedback of establishing the data transmission link transmitted by the server, and establishes the data transmission link with the server according to the feedback of establishing the data transmission link transmitted by the server.

3. The distributed enterprise information management system based on information sharing according to claim 2 is characterized in that: Real-time monitoring of the client's identity authentication operation to see if it is abnormal, including: Real-time monitoring of each client's identity authentication response time; Comparing the client's identity authentication response time with a preset response time threshold; When the identity authentication response time of the client exceeds the preset response time threshold, the client whose current identity authentication response time exceeds the preset response time threshold is taken as the target client; Retrieving the authentication result corresponding to the target client; When the identification result of the target client is that the target client is not qualified to perform data transmission with the server, the total number of requests for establishing a data transmission link sent by the current target client to the server is retrieved; When the total number of times that the target client sends a request to the server to establish a data transmission link is once, marking the target client; When the total number of times the target client sends a request to the server to establish a data transmission link is multiple times, calling the identity authentication response duration corresponding to each identity authentication performed by the target client; The risk coefficient corresponding to the target client is obtained by using the identity authentication response time corresponding to each identity authentication performed by the target client; wherein the risk coefficient corresponding to the target client is obtained by the following formula: Where S represents the risk coefficient corresponding to the target client; n represents the total number of requests sent by the target client to the server to establish a data transmission link; T i T represents the duration of the identity authentication response when the target client sends the i-th request to the server to establish a data transmission link; i-1 T represents the duration of the identity authentication response when the target client sends the i-1th request to the server to establish a data transmission link; b represents the standard deviation of the duration of identity authentication response of n requests sent by the target client to the server to establish a data transmission link; T y Indicates the preset response time threshold; T fmax and T fmin Indicates the maximum and minimum floating values ​​of the identity authentication response duration corresponding to each two consecutive identity authentications of the target client; The risk factors corresponding to all target clients corresponding to the server are used to determine the operational security risks of the server.

4. The distributed enterprise information management system based on information sharing according to claim 3 is characterized in that: The risk factors corresponding to all target clients corresponding to the server are used to determine the operational security risks of the server, including: Retrieve all target clients corresponding to the server; Determine whether there is a risk factor for each target client; When the target client has a risk factor, marking the target client as a risky client; Retrieve all risk clients and their risk coefficients corresponding to the server; Obtaining the comprehensive risk parameter corresponding to the server using the risk coefficients of all risk clients corresponding to the server; The comprehensive risk parameter is obtained by the following formula: Where Z represents the comprehensive risk parameter; m represents the number of risky clients; S i represents the risk coefficient corresponding to the i-th risk client; S z represents the median value of the risk coefficient corresponding to m risky clients; S b represents the standard deviation of the risk coefficient corresponding to m risk clients; S p represents the average risk coefficient of m risky clients; S f It represents the coefficient amplitude difference between the maximum value and the minimum value of the risk coefficient corresponding to m risk clients; comparing the comprehensive risk parameter with a preset risk parameter threshold; When the comprehensive risk parameter exceeds a preset risk parameter threshold, it is determined that the server has an operation safety risk and a risk warning is issued.

5. The distributed enterprise information management system based on information sharing according to claim 2 is characterized in that: When performing identity authentication and access control on the client, perform the following operations: Get the client's data transmission port; Indexing multiple data transmission ports on the server side one by one, and comparing and analyzing the indexed data transmission ports on the server side with the data transmission ports on the client side; Among them, if the data transmission port of the indexed server matches the data transmission port of the client, the client is qualified to perform data transmission with the server, that is, the client identity authentication is qualified and can access the distributed enterprise information; If the indexed data transmission port of the server does not match the data transmission port of the client, the next data transmission port of the server is indexed in sequence, and the next data transmission port of the server indexed in sequence is compared and analyzed with the data transmission port of the client; When all the multiple data transmission ports on the server are indexed, and there is a data transmission port among the multiple data transmission ports on the server that matches the data transmission port on the client, the client is qualified to perform data transmission with the server, that is, the client identity authentication is qualified and can access the distributed enterprise information; When all the multiple data transmission ports on the server side are indexed, there is no data transmission port among the multiple data transmission ports on the server side that matches the data transmission port on the client side, and the client side is not qualified to transmit data with the server side, that is, the client identity authentication fails and cannot access the distributed enterprise information.

6. The distributed enterprise information management system based on information sharing according to claim 5 is characterized in that: The access control module comprises: An information request unit, used for the client to transmit an access request instruction to the server; An information response unit, used for the server to transmit a response access instruction to the client; After the client and the server establish a data transmission link, the client transmits an access request instruction to the server, wherein the access request instruction includes the distributed enterprise information that the client requests to access; After receiving the access request instruction transmitted by the client, the server performs access control on the access request instruction transmitted by the client, and the server responds to the client in a timely manner, and transmits the response access instruction to the client.

7. The distributed enterprise information management system based on information sharing according to claim 6 is characterized in that: The access control module further includes: An information indexing unit, used to index distributed enterprise information stored in a distributed database; According to the distributed enterprise information requested to be accessed by the client in the request access instruction transmitted by the client, the server performs traversal indexing on the distributed database, and searches for the distributed enterprise information requested to be accessed by the client in the distributed database; An information calling unit, used for calling distributed enterprise information stored in a distributed database; According to the distributed enterprise information requested to be accessed by the client found in the distributed database, the server side calls the found distributed enterprise information requested to be accessed by the client.

8. The distributed enterprise information management system based on information sharing according to claim 7 is characterized in that: The information management module comprises: A security management unit, used for security management of distributed enterprise information requested to be accessed by a client; Obtain the distributed enterprise information that the called client requests to access; The server uses a secret key to encrypt the distributed enterprise information requested by the client; After the distributed enterprise information is encrypted, the server transmits the encrypted distributed enterprise information to the client, so that the distributed enterprise information is shared and transmitted securely; The client receives the encrypted distributed enterprise information transmitted by the server, and uses the secret key to decrypt the encrypted distributed enterprise information, and the client stores the decrypted distributed enterprise information for backup.

9. The distributed enterprise information management system based on information sharing according to claim 8 is characterized in that: The information management module further includes: A storage management unit, used for storing and managing the distributed enterprise information decrypted by the client; Obtain decrypted distributed enterprise information; Analyze the decrypted distributed enterprise information to determine the criticality of the distributed enterprise information; Based on the criticality of the distributed enterprise information, the storage unit of the client is indexed and located to find the storage block of the client that matches the criticality of the distributed enterprise information; The decrypted distributed enterprise information is securely stored in the storage block of the found client, so that the client can access the distributed enterprise information at any time.

10. A distributed enterprise information management method based on information sharing, implemented based on the distributed enterprise information management system based on information sharing as claimed in claim 9, characterized in that: The steps include: S1: The client transmits a request to the server to establish a data transmission link, and the server transmits a feedback to the client regarding the establishment of the data transmission link. Based on the feedback transmitted by the server regarding the establishment of the data transmission link, a data transmission link is established between the client and the server. S2: The client transmits a request access instruction to the server, and the server transmits a response access instruction to the client, performs access control on the distributed enterprise information, performs index search on the distributed enterprise information stored in the distributed database, and calls out the distributed enterprise information; S3: The server uses a secret key to encrypt the called distributed enterprise information and transmits the encrypted distributed enterprise information to the client. The client decrypts and securely stores the encrypted distributed enterprise information.

Images