Security access control method and device for commodity sales

Abstract

The invention discloses a security access control method and device for commodity sales, and relates to the technical field of security access control, and the method and device guide an account passing account identity verification through a keyword to obtain an access demand keyword, thereby simplifying the operation process of an access person, enabling the access process to be simpler and more convenient, and improving the user experience. In addition, target data intentions of visitors can be obtained in a standardized manner, a basis is provided for subsequent determination of security levels of the target data, access requirements are divided into different security levels, corresponding data security management and control measures are executed for access of different levels, leakage of sensitive and confidential information is effectively prevented, and the security level of the target data is improved. The safety of commodity sales data is ensured; as for internal-level, sensitive-level and confidential-level access requirements, measures such as mask display management and control and simultaneous on-site display management and control of personnel with specified permissions are taken, so that data leakage caused by improper behaviors of internal personnel is effectively prevented; and access behaviors of different security levels are recorded, so that potential security risks can be found.

Description

Technical Field

[0001] The present invention relates to the technical field of security access control, and in particular to a security access control method and device for commodity sales. Background Art

[0002] Secure access control for merchandise sales is important for protecting corporate resources, maintaining customer data privacy, and complying with laws and regulations.

[0003] Sensitive information such as customer data, transaction records, and business secrets involved in the sales process needs to be protected to prevent unauthorized access and data leakage.

[0004] Many industries have strict legal and regulatory requirements, such as GDPR (General Data Protection Regulation), which require companies to protect customer data. Employees within a company may abuse their power for personal gain or other reasons. Access control can limit employees' access to sensitive information and reduce the risk of internal leakage. Ensure that only authorized personnel can access key business systems to prevent malicious operations from causing system paralysis or data loss. By implementing effective access control measures, companies can enhance customer trust in their ability to protect personal information.

[0005] Role-based access control is the most commonly used access control method, which controls user access to resources by defining roles and permissions. Attribute-based access control is becoming increasingly popular, which dynamically determines access rights based on attributes (such as user attributes, resource attributes, and environment attributes). To improve security, many companies have begun to adopt multi-factor authentication, requiring users to provide multiple authentication factors when accessing the system.

[0006] The division of roles and permissions in the above access control may not be granular enough, resulting in excessive permissions (users can access unnecessary resources) or insufficient permissions (users cannot access necessary resources).

[0007] Even with access control, authorized insiders may still abuse their authority, especially in the absence of strict supervision. Data may be leaked in batches if insiders are authorized, causing huge losses to the company. At the same time, the security of commercial data cannot be guaranteed after a leak. Summary of the invention

[0008] In order to solve the above technical problems, the present invention provides a method and device for secure access control of commodity sales. The following technical solutions are adopted: A method for secure access control for commodity sales, comprising the following steps: Step 1: The visitor enters the account information on the data query touch screen to verify the identity of the visitor account; Step 2: Use keywords to guide the account that has passed the account identity verification to obtain the access demand keywords; Step 3: Based on the access requirement keywords, the security level mapping method is used to analyze the access behavior security level to which the access requirement belongs. The access behavior security levels include public level, internal level, sensitive level, confidential level and top secret level. Step 4: Execute data security control measures based on the access behavior security level. The data security control measures include mask display control, display control with designated authorized personnel at the same time, and display rejection control. When it is determined that the security level of the access demand belongs to the public level, the corresponding product sales data in the product sales data server is directly called and displayed without executing data security control measures; When it is determined that the security level of the access demand and access behavior belongs to the internal level and the sensitive level, the corresponding product sales data in the product sales data server is called and displayed after performing mask display control; When it is determined that the security level of the access demand belongs to the confidential level, the corresponding product sales data in the product sales data server is called and the mask display control and the designated authorized personnel are simultaneously executed for display control and then displayed; When the security level of the access request is determined to be top secret, the display rejection control is executed.

[0009] By adopting the above technical solution, the data query touch screen is used for internal company personnel to query commodity sales related data under the authorized state. The visitor needs to enter his or her account password first. Of course, biometric authentication, such as face, fingerprint, etc., can also be added. The account that has been verified by the account identity is guided by keywords to obtain the access demand keywords, which simplifies the operation process of the visitor and makes the access process easier. It can also standardize the acquisition of the target data intention of the visitor, and provide a basis for the subsequent determination of the security level of the target data. By dividing the access requirements into different security levels and executing corresponding data security control measures for different levels of access, it effectively prevents the leakage of sensitive and confidential information and ensures the security of commodity sales data. Execute data security control measures based on the security level of access behavior, including mask display control, display control with designated authorized personnel at the same time, and display refusal control; For internal, sensitive and confidential access requirements, measures such as masked display control and display control with designated authorized personnel on site are adopted to effectively prevent data leakage caused by improper behavior of internal personnel. Masked display control can avoid related data leakage caused by displaying target data, and display control with designated authorized personnel on site can effectively avoid the risk of leakage of high-security data by taking photos or other means without the authorization of designated authorized personnel. Denial of display control can effectively prevent the leakage of top-secret data.

[0010] By clearly dividing the security levels of access behaviors, access personnel can have a clearer understanding of their access behaviors, which helps to regulate access behaviors. For example, all access behaviors of access personnel can be scored for behavioral risks, and a scoring result threshold can be set. If the behavioral risk score of a certain access personnel exceeds the scoring result threshold, a warning is required, and the management personnel need to pay attention to whether the intentions of the access personnel are good.

[0011] Access behaviors at different security levels are recorded to facilitate post-audit and monitoring, helping to discover potential security risks.

[0012] Optionally, mask display control is to display only the target data corresponding to the access requirement keyword in the displayed data page, and mask other data on the data page.

[0013] By adopting the above technical solution, mask display control can adopt visual means such as blur processing to achieve masking of other information. For example, in a commodity sales contract, if the target data of the accessing personnel is the sales amount, then other sensitive information of the displayed sales contract, such as the contact information of the contracting parties, the payment account and other sensitive information, needs to be masked.

[0014] Optionally, when the designated authorized personnel are on-site at the same time, the display control is to first prompt the designated authorized personnel's information, then set the designated authorized personnel's arrival time limit, within the designated authorized personnel's arrival time limit, the designated authorized personnel enters the account number and password, and performs biometric information authentication, if the authentication is completed, the target data corresponding to the access requirement keyword is retrieved, and the biometric information of the designated authorized personnel and the person accessing the account is continuously verified while the target data is displayed, and if the biometric information is lost, the target data is stopped from being displayed.

[0015] Optionally, the biometric information authentication is facial authentication, and the method for continuously verifying the biometric information of the designated authorized personnel and the personnel accessing the account is: calling the camera to continuously capture the facial images of the designated authorized personnel and the personnel accessing the account, and analyzing whether the facial images continue to correspond to the designated authorized personnel and the personnel accessing the account; if the facial images corresponding to the designated authorized personnel and the personnel accessing the account continue to exist, the target data is continuously displayed.

[0016] By adopting the above technical solution, the designated authorized personnel need to continue to stay in front of the data query touch screen after account authentication. In this way, sales data with a higher security level can be displayed under the continuous attention of the designated authorized personnel, avoiding the access personnel from recording relevant data by means such as taking photos, thereby reducing the risk of leakage of sales data with a higher security level.

[0017] Optionally, the information of designated authorized personnel is generated by a random number generation method, all designated authorized personnel are numbered, and numbers of designated authorized personnel are randomly generated by the random number generation method. The designated authorized personnel information corresponding to the number is called for authentication prompts, and permission cooperation prompts are sent to the designated authorized personnel's handheld smart terminal based on the network.

[0018] By adopting the above technical solution, a random number generation method is used to generate designated authority personnel. For example, the designated authority personnel are 10 middle-level managers of the company. Each time the designated authority personnel is required to cooperate, a random number generation method is used to generate a number for a middle-level manager, and a permission cooperation prompt is sent to the handheld smart terminal of the designated authority personnel with the corresponding number. In this way, the risk of access personnel using illegal means in advance to collude with the designated authority personnel to obtain high-security sales data can be reduced.

[0019] Optionally, deny display control means not displaying the target data, recording the current access information, and sending a security access warning message to the administrator.

[0020] By adopting the above technical solution, the refusal to display control is usually aimed at top-secret sales data. For example, the target data of the visitor is the contact information of all customers. This type of data involves the foundation of the company and cannot be displayed on the data query touch screen. It must be retrieved at the company's highest decision-making meeting. For this type of access, the current access information needs to be recorded and a security access warning message is sent to the administrator to remind staff to pay attention to the behavior of the visitor.

[0021] Optionally, in step 1, account access identity verification includes account number and password verification and biometric information verification.

[0022] Optionally, step 2 includes the following specific steps: Step 21, displaying data category keyword guidance, and the interviewer selects the target commodity sales data category keyword according to the commodity sales data category keyword guidance; Step 22, displaying the data range keyword guide, the interviewer selects the target data range according to the data range keyword guide, and the target data range includes all data, part of data and specific data; Partial data refers to target data selected based on the data time span, and specific data refers to a specific single piece of specified data.

[0023] By adopting the above technical solution, the target commodity sales data category keywords usually refer to sales contracts, sales records, commodity inventory data, sales price data, etc. For example, in the display data category keyword guide, the following are displayed at the same time: sales contracts, sales records, commodity inventory, sales price, etc. The display data range keyword guide can be displayed on the screen to the visitor: Please select the data range you need to query: All data: Click here to view product sales data for all categories.

[0024] Partial data: Select the time span; This Week's Data: Click here to view this week's merchandise sales data.

[0025] This Month's Data: Click here to view this month's merchandise sales data.

[0026] Custom time range: Please enter a start date and an end date.

[0027] Specific data: Enter the query criteria; Product Number: Please enter the product number and click to query.

[0028] Sales order number: Please enter the sales order number and click Query.

[0029] A visitor selects a sales contract, then selects specific data in the displayed data range keyword guide, and enters a specific sales order number to query the corresponding sales order.

[0030] Optionally, step 3 includes the following specific steps: Step 31, creating a keyword library containing all commodity sales data categories, each keyword in the keyword library corresponds to a basic access behavior security level; Step 32, adjusting the basic access behavior security level based on the target data range to obtain the access behavior security level; If the basic access behavior security level is public, no fine-tuning is performed; If the basic access behavior security level is internal and sensitive, if the target data range is specific data, no fine-tuning will be performed; if the target data range is partial data, the disclosure level will be increased by one level; if the target data range is all data, the disclosure level will be increased by two levels.

[0031] By adopting the above technical solution, each keyword in the keyword library corresponds to a basic access behavior security level. For example, the basic access behavior security level of the sales contract corresponds to the sensitivity level. If the target data range selects a custom time range, and the input date range includes all sales contracts, the public level will be increased by two levels to become the top secret level. Because all sales contracts retrieved at the same time are considered top secret of the company, control measures such as refusal to display should be adopted.

[0032] A security access control device for commodity sales is used to implement a security access control method for commodity sales. The security access control device includes a data query touch screen, a camera, a memory, an analysis chip module, a handheld smart terminal and a commodity sales data server. The data query touch screen is connected to the commodity sales data server through the Internet. The camera is installed on the shell of the data query touch screen and is used to shoot facial feature images of people in front. The memory communicates and interacts with the camera and the data query touch screen to enter keyword data and facial feature data respectively. The analysis chip module includes a visual analysis chip and a data analysis chip. The visual analysis chip and the data analysis chip are connected to the memory respectively. The visual analysis chip implements biometric information authentication based on facial feature data. The data analysis chip analyzes the access behavior security level of the access demand based on the access demand keyword, and executes data security management and control measures based on the access behavior security level. The memory is wirelessly connected to the handheld smart terminal, and the data analysis chip controls the memory to wirelessly interact with the handheld smart terminal for security access warning information.

[0033] In summary, the present invention includes at least one of the following beneficial technical effects: The present invention can provide a method and device for secure access control of commodity sales, which guides an account that has passed account identity verification to obtain access demand keywords through keywords, simplifies the operation process of the access personnel, makes the access process more convenient, and can also obtain the target data intention of the access personnel in a standardized manner, providing a basis for the subsequent determination of the security level of the target data. By dividing the access requirements into different security levels and executing corresponding data security control measures for different levels of access, the leakage of sensitive and confidential information is effectively prevented, and the security of commodity sales data is guaranteed; For internal, sensitive and confidential access requirements, measures such as masked display control and display control with designated authorized personnel on site are adopted to effectively prevent data leakage caused by improper behavior of internal personnel. Masked display control can avoid related data leakage caused by displaying target data, and display control with designated authorized personnel on site can effectively avoid the risk of leakage of high-security data by taking photos or other means without the authorization of designated authorized personnel. By clearly dividing the security levels of access behaviors, access personnel can have a clearer understanding of their access behaviors, which helps to regulate access behaviors. For example, all access behaviors of access personnel can be scored for behavioral risks, and a scoring result threshold can be set. If the behavioral risk score of a certain access personnel exceeds the scoring result threshold, a warning is required, and the management personnel need to pay attention to whether the intentions of the access personnel are good.

[0034] Access behaviors at different security levels are recorded to facilitate post-audit and monitoring, helping to discover potential security risks. BRIEF DESCRIPTION OF THE DRAWINGS

[0035] Figure 1 It is a flow chart of a method for secure access control of commodity sales according to the present invention; Figure 2 It is a schematic diagram of the component connection principle of a security access control device for commodity sales according to the present invention.

[0036] Explanation of the accompanying drawings: 1. Data query touch screen; 2. Camera; 3. Memory; 4. Analysis chip module; 41. Visual analysis chip; 42. Data analysis chip; 5. Handheld smart terminal; 6. Commodity sales data server. DETAILED DESCRIPTION

[0037] The present invention is further described in detail below in conjunction with the accompanying drawings.

[0038] The embodiment of the invention discloses a method and device for secure access control for commodity sales.

[0039] Reference Figure 1 and Figure 2 , Embodiment 1, a security access control method for commodity sales, comprising the following steps: Step 1: The visitor enters the account information on the data query touch screen 1 to verify the identity of the visitor account; Step 2: Use keywords to guide the account that has passed the account identity verification to obtain the access demand keywords; Step 3: Based on the access requirement keywords, the security level mapping method is used to analyze the access behavior security level to which the access requirement belongs. The access behavior security levels include public level, internal level, sensitive level, confidential level and top secret level. Step 4: Execute data security control measures based on the access behavior security level. The data security control measures include mask display control, display control with designated authorized personnel at the same time, and display rejection control. When it is determined that the security level of the access demand behavior belongs to the public level, the corresponding commodity sales data in the commodity sales data server 6 is directly called and displayed without executing data security control measures; When it is determined that the security level of the access demand behavior belongs to the internal level and the sensitive level, the corresponding commodity sales data in the commodity sales data server 6 is called and displayed after performing mask display control; When it is determined that the security level of the access demand behavior belongs to the confidential level, the corresponding commodity sales data in the commodity sales data server 6 is called and the mask display control and the designated authorized personnel are simultaneously executed for display control and then displayed; When the security level of the access request is determined to be top secret, the display rejection control is executed.

[0040] The data query touch screen 1 is used for the company's internal personnel to query the commodity sales related data under the authorized state. The visitor needs to enter his account password first. Of course, biometric authentication, such as face, fingerprint, etc., can also be added. The keywords are used to guide the account that has been verified through the account identity to obtain the access demand keywords, which simplifies the operation process of the visitor and makes the access process easier. It can also standardize the acquisition of the visitor's target data intention, and provide a basis for the subsequent determination of the security level of the target data. By dividing the access requirements into different security levels and implementing corresponding data security control measures for different levels of access, it effectively prevents the leakage of sensitive and confidential information and ensures the security of commodity sales data; Execute data security control measures based on the security level of access behavior, including mask display control, display control with designated authorized personnel at the same time, and display refusal control; For internal, sensitive and confidential access requirements, measures such as masked display control and display control with designated authorized personnel on site are adopted to effectively prevent data leakage caused by improper behavior of internal personnel. Masked display control can avoid related data leakage caused by displaying target data, and display control with designated authorized personnel on site can effectively avoid the risk of leakage of high-security data by taking photos or other means without the authorization of designated authorized personnel. Denial of display control can effectively prevent the leakage of top-secret data.

[0041] By clearly dividing the security levels of access behaviors, access personnel can have a clearer understanding of their access behaviors, which helps to regulate access behaviors. For example, all access behaviors of access personnel can be scored for behavioral risks, and a scoring result threshold can be set. If the behavioral risk score of a certain access personnel exceeds the scoring result threshold, a warning is required, and the management personnel need to pay attention to whether the intentions of the access personnel are good.

[0042] Access behaviors at different security levels are recorded to facilitate post-audit and monitoring, helping to discover potential security risks.

[0043] Access behavior risk scoring can be achieved through a comprehensive formula that takes into account multiple factors, including access frequency, access time, access security level, access results (whether successful), and historical behavior records of access personnel.

[0044] Risk score = w1×F(a)+w2×F(b)+w3×F(c)+w4×F(d)+w5×F(e); w1, w2, w3, w4, and w5 are weight coefficients, assigned according to the importance of each factor; F(a) is the frequency factor, which is a risk factor calculated based on the access frequency. For example, frequent access may increase the risk score. F(b) is the time factor, which is a risk factor calculated based on the access time. Access during non-working hours may increase the risk score. F(c) is the security level factor which is a risk factor calculated based on the security level of the access requirement. Accessing confidential or top secret information will have a higher risk score.

[0045] F(d) is the historical behavior factor, which is a risk factor calculated based on the visitor's historical behavior records. Visitors with a history of violations will have a higher risk score.

[0046] F(e) is the abnormal behavior factor, which is a risk factor calculated based on whether the visitor's current behavior is abnormal, such as accessing irrelevant data categories or frequent failed attempts.

[0047] In the second embodiment, the mask display control is to display only the target data corresponding to the access demand keyword in the displayed data page, and mask the other data in the data page.

[0048] Masked display control can use visual means such as blur processing to mask other information. For example, in a commodity sales contract, if the target data of the access personnel is the sales amount, then other sensitive information of the displayed sales contract, such as the contact information of the contracting parties, the payment account, and other sensitive information, needs to be masked.

[0049] Embodiment 3, the display control when designated authorized personnel are present at the same time is to first prompt the designated authorized personnel's information, then set the designated authorized personnel's arrival time limit, within the designated authorized personnel's arrival time limit, the designated authorized personnel enters the account number and password, and performs biometric information authentication, if the authentication is completed, retrieve the target data corresponding to the access requirement keyword, and continue to verify the biometric information of the designated authorized personnel and the person accessing the account while the target data is displayed, if the biometric information is lost, stop displaying the target data.

[0050] In embodiment 4, the biometric information authentication is facial authentication, and the method for continuously verifying the biometric information of the designated authorized person and the person accessing the account is: calling camera 2 to continuously shoot the facial images of the designated authorized person and the person accessing the account, and analyzing whether the facial images continue to correspond to the designated authorized person and the person accessing the account, and if the facial images corresponding to the designated authorized person and the person accessing the account continue to exist, the target data is continuously displayed.

[0051] After account authentication, the designated authorized personnel need to continue to stay in front of the data query touch screen 1, so that the sales data with a higher security level can be displayed under the continuous attention of the designated authorized personnel, avoiding the access personnel from recording relevant data by means such as taking photos, thereby reducing the risk of leakage of sales data with a higher security level.

[0052] In Example 5, the information of designated authorized personnel is generated by a random number generation method. All designated authorized personnel are numbered, and the numbers of designated authorized personnel are randomly generated by the random number generation method. The designated authorized personnel information corresponding to the number is called for authentication prompts, and at the same time, permission coordination prompts are sent to the handheld smart terminal 5 of the designated authorized personnel based on the network.

[0053] A random number generation method is used to generate designated authority personnel. For example, the designated authority personnel are 10 middle-level managers of the company. Each time the designated authority personnel are required to cooperate, a random number generation method is used to generate a number for a middle-level manager, and a permission cooperation prompt is sent to the handheld smart terminal 5 of the designated authority personnel with the corresponding number. This can reduce the risk of access personnel using illegal means in advance to collude with the designated authority personnel to obtain high-security sales data.

[0054] Example 6, the display rejection control is to not display the target data, record the current access information, and send a security access warning message to the administrator.

[0055] Refusal to display control usually targets top-secret sales data. For example, the target data of the visitor is the contact information of all customers. This type of data involves the foundation of the company and cannot be displayed on the data query touch screen 1. It must be retrieved at the company's highest decision-making meeting. For this type of access, the current access information needs to be recorded and a security access warning message is sent to the administrator to remind staff to pay attention to the behavior of the visitor.

[0056] In Example 7, in step 1, the account access identity verification includes account number and password verification and biometric information verification.

[0057] In embodiment 8, step 2 comprises the following specific steps: Step 21, displaying data category keyword guidance, and the interviewer selects the target commodity sales data category keyword according to the commodity sales data category keyword guidance; Step 22, displaying the data range keyword guide, the interviewer selects the target data range according to the data range keyword guide, and the target data range includes all data, part of data and specific data; Partial data refers to target data selected based on the data time span, and specific data refers to a specific single piece of specified data.

[0058] The target product sales data category keywords usually refer to sales contracts, sales records, product inventory data, sales price data, etc. For example, in the display data category keyword guide, the following are displayed at the same time: sales contracts, sales records, product inventory, sales price, etc. The display data range keyword guide can be displayed on the screen to the visitor: Please select the data range you need to query: All data: Click here to view product sales data for all categories.

[0059] Partial data: Select the time span; This Week's Data: Click here to view this week's merchandise sales data.

[0060] This Month's Data: Click here to view this month's merchandise sales data.

[0061] Custom time range: Please enter a start date and an end date.

[0062] Specific data: Enter the query criteria; Product Number: Please enter the product number and click to query.

[0063] Sales order number: Please enter the sales order number and click Query.

[0064] A visitor selects a sales contract, then selects specific data in the displayed data range keyword guide, and enters a specific sales order number to query the corresponding sales order.

[0065] In embodiment 9, step 3 comprises the following specific steps: Step 31, creating a keyword library containing all commodity sales data categories, each keyword in the keyword library corresponds to a basic access behavior security level; Step 32, adjusting the basic access behavior security level based on the target data range to obtain the access behavior security level; If the basic access behavior security level is public, no fine-tuning is performed; If the basic access behavior security level is internal and sensitive, if the target data range is specific data, no fine-tuning will be performed; if the target data range is partial data, the disclosure level will be increased by one level; if the target data range is all data, the disclosure level will be increased by two levels.

[0066] Each keyword in the keyword library corresponds to a basic access behavior security level. For example, the basic access behavior security level of sales contracts corresponds to the sensitive level. If the target data range selects a custom time range, and the entered date range includes all sales contracts, the public level will increase by two levels to become top secret. Because all sales contracts retrieved at the same time are company top secret, control measures such as refusing to display should be adopted.

[0067] Embodiment 10, a security access control device for commodity sales, used to implement a security access control method for commodity sales, the security access control device includes a data query touch screen 1, a camera 2, a memory 3, an analysis chip module 4, a handheld intelligent terminal 5 and a commodity sales data server 6, the data query touch screen 1 is connected to the commodity sales data server 6 via the Internet, the camera 2 is installed on the shell of the data query touch screen 1, and is used to shoot the facial feature image of the person in front, the memory 3 communicates and interacts with the camera 2 and the data query touch screen 1 respectively to enter keyword data and facial feature data, the analysis chip module 4 includes a visual analysis chip 41 and a data analysis chip 42, the visual analysis chip 41 and the data analysis chip 42 are connected to the memory 3 respectively, the visual analysis chip 41 implements biometric information authentication based on facial feature data, the data analysis chip 42 analyzes the access behavior security level of the access demand based on the access demand keyword, and executes data security management and control measures based on the access behavior security level, the memory 3 is connected to the handheld intelligent terminal 5 wirelessly, and the data analysis chip 42 controls the memory 3 to wirelessly interact with the handheld intelligent terminal 5 for security access warning information.

[0068] The above are all preferred embodiments of the present invention, and are not intended to limit the protection scope of the present invention. Therefore, any equivalent changes made based on the structure, shape, and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. A security access control method for commodity sales, characterized in that: The following steps are involved: Step 1: The accessing personnel enters the account information on the data query touch screen (1) to verify the identity of the accessing account; Step 2: Use keywords to guide the account that has passed the account identity verification to obtain the access demand keywords; Step 3: Based on the access requirement keywords, the security level mapping method is used to analyze the access behavior security level to which the access requirement belongs. The access behavior security levels include public level, internal level, sensitive level, confidential level and top secret level. Step 4: Execute data security control measures based on the access behavior security level. The data security control measures include mask display control, display control with designated authorized personnel at the same time, and display rejection control. When it is determined that the security level of the access demand behavior is public, the corresponding product sales data in the product sales data server (6) is directly called and displayed without executing data security control measures; When it is determined that the security level of the access demand belongs to the internal level and the sensitive level, the corresponding commodity sales data in the commodity sales data server (6) is called and displayed after performing mask display control; When it is determined that the security level of the access request belongs to the confidential level, the corresponding commodity sales data in the commodity sales data server (6) is called and the mask display control and the designated authorized personnel are simultaneously executed for display control and then displayed; When the security level of the access request is determined to be top secret, the display rejection control is executed.

2. A method for secure access control for commodity sales according to claim 1, characterized in that: Mask display control is to display only the target data corresponding to the access requirement keyword in the displayed data page, and mask other data on the data page.

3. A method for secure access control for commodity sales according to claim 2, characterized in that: The display control when designated authorized personnel are present at the same time is to first prompt the designated authorized personnel information, then set the designated authorized personnel's arrival time limit, within the designated authorized personnel's arrival time limit, the designated authorized personnel enter the account number and password, and perform biometric information authentication. If the authentication is completed, the target data corresponding to the access requirement keyword is retrieved, and the biometric information of the designated authorized personnel and the person accessing the account is continuously verified while the target data is displayed. If the biometric information is lost, the target data is stopped from being displayed.

4. A method for secure access control for commodity sales according to claim 3, characterized in that: Biometric information authentication is facial authentication. The method for continuously verifying the biometric information of the designated authorized person and the person accessing the account is: calling the camera (2) to continuously capture the facial images of the designated authorized person and the person accessing the account, and analyzing whether the facial images continue to correspond to the designated authorized person and the person accessing the account; if the facial images corresponding to the designated authorized person and the person accessing the account continue to exist, the target data is continuously displayed.

5. A method for secure access control for commodity sales according to claim 4, characterized in that: The designated authority personnel information is generated by using a random number generation method, all designated authority personnel are numbered, and the designated authority personnel numbers are randomly generated by using the random number generation method. The designated authority personnel information corresponding to the number is called for authentication prompts, and at the same time, a permission matching prompt is sent to the handheld smart terminal (5) of the designated authority personnel based on the network.

6. A method for secure access control for commodity sales according to claim 5, characterized in that: Deny display control means not displaying the target data, recording the current access information, and sending security access warning information to the administrator.

7. A method for secure access control for commodity sales according to claim 1, characterized in that: In step 1, account access identity verification includes account password verification and biometric information verification.

8. A method for secure access control for commodity sales according to claim 1, characterized in that: Step 2 includes the following specific steps: Step 21, displaying data category keyword guidance, and the interviewer selects the target commodity sales data category keyword according to the commodity sales data category keyword guidance; Step 22, displaying the data range keyword guide, the interviewer selects the target data range according to the data range keyword guide, and the target data range includes all data, part of data and specific data; Partial data refers to target data selected based on the data time span, and specific data refers to a specific single piece of specified data.

9. A method for secure access control for commodity sales according to claim 8, characterized in that: Step 3 includes the following specific steps: Step 31, creating a keyword library containing all commodity sales data categories, each keyword in the keyword library corresponds to a basic access behavior security level; Step 32, adjusting the basic access behavior security level based on the target data range to obtain the access behavior security level; If the basic access behavior security level is public, no fine-tuning is performed; If the basic access behavior security level is internal and sensitive, if the target data range is specific data, no fine-tuning will be performed; if the target data range is partial data, the disclosure level will be increased by one level; if the target data range is all data, the disclosure level will be increased by two levels.

10. A security access control device for commodity sales, characterized in that: A method for implementing a security access control method for commodity sales as described in any one of claims 1 to 9, the security access control device comprising a data query touch screen (1), a camera (2), a memory (3), an analysis chip module (4), a handheld intelligent terminal (5) and a commodity sales data server (6), wherein the data query touch screen (1) is connected to the commodity sales data server (6) via the Internet, the camera (2) is mounted on the housing of the data query touch screen (1) and is used to capture facial feature images of a person in front, and the memory (3) communicates and interacts with the camera (2) and the data query touch screen (1) to input keyword data and facial features. The analysis chip module (4) comprises a visual analysis chip (41) and a data analysis chip (42), the visual analysis chip (41) and the data analysis chip (42) are respectively connected to the memory (3) for communication, the visual analysis chip (41) implements biometric information authentication based on facial feature data, the data analysis chip (42) analyzes the access behavior security level to which the access demand belongs based on the access demand keyword, and executes data security management and control measures based on the access behavior security level, the memory (3) is connected to the handheld smart terminal (5) for wireless communication, and the data analysis chip (42) controls the memory (3) to wirelessly exchange security access warning information with the handheld smart terminal (5).

Images