Data asset permission dynamic allocation and auditing system and method based on BIM (Building Information Modeling) technology

Abstract

The invention relates to the technical field of building informatization management, in particular to a data asset authority dynamic allocation and auditing system and method based on a BIM technology, and the system comprises the steps: S1, a BIM model management center framework, and S11, architecture design; s12, establishing a data model; s13, storing the strategy; s14, a version control mechanism; s15, a data access interface; s2, a user identity authentication module framework: S21, architecture design; s22, an authentication process; s23, performing a multi-factor authentication strategy; s24, performing user session management; s3, a permission dynamic allocation engine framework: S31, architecture design; s32, establishing an authority model; s33, a dynamic allocation algorithm; s34, a permission change mechanism; s4, a log recording module framework is audited, wherein S41, architecture design is carried out; s42, a log recording strategy; s43, a log storage and query mechanism; and S44, performing intelligent analysis and early warning. Through the integrated information platform, various data assets in the building life cycle are efficiently and safely managed, and compliance, flexibility and traceability of data access are ensured.

Description

Technical Field

[0001] The present invention relates to the technical field of building information management, and in particular to a data asset authority dynamic allocation and auditing system and method based on BIM technology. Background Art

[0002] With the digital transformation of the construction industry, BIM technology has become an important tool for improving project management efficiency, optimizing design solutions, and promoting collaborative work. However, a large amount of data from the design, construction, operation and maintenance stages is integrated into the BIM model. These data are not only the core assets of the enterprise, but also involve a lot of sensitive information. How to effectively manage the access rights to these data assets, prevent information leakage, and ensure that all parties involved in the project can access the required information on demand has become an urgent problem to be solved. Traditional permission allocation methods are often static and rigid, and it is difficult to meet the complex and changing project requirements. There is also a lack of an audit mechanism for the use of permissions, making it difficult to trace the abuse of permissions.

[0003] The information disclosed in this background technology section is only intended to deepen the understanding of the overall background technology of the present invention, and should not be regarded as acknowledging or suggesting in any form that the information constitutes the prior art already known to those skilled in the art. Summary of the invention

[0004] The purpose of the present invention is to provide a data asset authority dynamic allocation and audit system and method based on BIM technology to solve the technical problems existing in the prior art.

[0005] In order to achieve the above object, the present invention adopts the following technical solutions: In a first aspect, the present invention provides a method for dynamically allocating and auditing data asset permissions based on BIM technology, which includes: S1. BIM model management center framework, including: S11. Architecture design; S12. Data model; S13. Storage strategy; S14. Version control mechanism; S15. Data access interface; S2, user identity authentication module framework, including: S21, architecture design; S22, authentication process; S23, multi-factor authentication strategy; S24, user session management; S3, dynamic permission allocation engine framework, including: S31, architecture design; S32, permission model; S33, dynamic allocation algorithm; S34, authority change mechanism; S4. Audit log recording module framework, including: S41. Architecture design; S42. Log recording strategy; S43. Log storage and query mechanism; S44. Intelligent analysis and early warning.

[0006] Preferably, step S11 of architecture design includes: Hierarchical structure: The BIM model management center adopts a layered architecture design, including data access layer, business logic layer, and interface service layer. The data access layer is responsible for interacting with the storage system to realize data reading and writing operations; the business logic layer handles the core business of BIM model analysis and version control; the interface service layer provides an API interface for external system access; Component division: According to functional requirements, the system is divided into model storage module, version control module, data analysis module, and interface service module; Preferably, the data model in step S12 includes: BIM model structure: defines the data structure of the BIM model, including model elements, attributes, and relationships; uses international standards or custom formats to store BIM data; Metadata management: define metadata for BIM model elements, including creation time, modifier, and version information; Preferably, the storage strategy in step S13 includes: Data storage solution: Choose a solution suitable for large-scale BIM data storage; Performance optimization: Use indexing, caching, and data sharding technologies to optimize data access performance; Preferably, the storage strategy in step S14 includes: Version management strategy: Develop a version control strategy for the BIM model, including version naming rules, version submission process, version merging and conflict resolution mechanisms.

[0007] Historical version management: realize the storage and query of historical versions, and support users to roll back to any historical version; Preferably, the data access interface in step S15 includes: API design: define a set of RESTful API interfaces for other modules or external systems to call to implement BIM model upload, download, query, and update operations; Security: Strengthen the security of API interfaces.

[0008] Preferably, step S21 of architecture design includes: Authentication process: Design the overall process of user authentication, including user input, identity verification, and session creation; Component division: Divide the module into user input interface, authentication service, session management service, and authentication policy library; Preferably, the authentication process in step S22 includes: User input: The user enters the username and password through the login interface; Authentication: The system calls the authentication service and performs identity authentication based on the information entered by the user and the preset authentication policy; Session creation: After successful verification, a user session is created and a session token is generated for authentication of subsequent requests; Preferably, the multi-factor authentication strategy in step S23 includes: Policy definition: Support multiple authentication factors, including password, mobile phone verification code, fingerprint recognition, and hardware token; Flexible configuration: allows administrators to flexibly configure authentication policies based on security requirements; Preferably, step S24 user session management includes: Session storage: Use a secure storage method to store user session information to ensure the security and availability of session data; Session timeout: Set the session timeout, automatically clean up expired sessions, and prevent session hijacking attacks; Session Monitoring: Monitor session activity in real time and detect abnormal behavior.

[0009] Preferably, step S31 of architecture design includes: Component division: The engine is divided into permission model definition module, dynamic allocation algorithm module, and permission change processing module; Data flow: clarify the flow path of data between modules, including user information, permission rules, and input and output of dynamic factor data; Preferably, the permission model in step S32 includes: Permission definition: Define the permission types in the system and assign unique identifiers to them; Role management: define user roles, associate roles with permissions, and form a role-permission mapping table; Preferably, the dynamic allocation algorithm in step S33 includes: Algorithm design: Design an efficient dynamic allocation algorithm that can comprehensively consider multiple factors such as user role, project progress, and task allocation to calculate the specific permissions of the user in the current situation; Weight allocation: Assign weights to different dynamic factors to ensure that the algorithm can accurately reflect the actual situation; Preferably, the permission change mechanism in step S3 includes: Trigger conditions: define the conditions that trigger permission changes; Change process: When the trigger conditions are met, the permission change process is automatically triggered, user permissions are recalculated, and the permission database is updated.

[0010] Preferably, step S41 of architecture design includes: Component division: The module is divided into logging service, log storage system, log query interface, and intelligent analysis engine; Data flow: clarify the flow path of log data between modules, including log generation, storage, query and analysis; Preferably, the logging strategy in step S42 includes: Record content: define the log content that needs to be recorded, including operation type, operation time, user information, and operation results; Recording timing: clearly specify when logs are recorded to ensure the integrity and accuracy of the logs; Preferably, the log storage and query mechanism in step S43 includes: Storage solution: Choose a solution suitable for large-scale log data storage; Query interface: provides conditional query log records; Step S44: Intelligent analysis and early warning includes: Analysis algorithm: Design intelligent analysis algorithms to conduct in-depth mining of log data and identify abnormal access patterns; Early warning mechanism: When abnormal behavior is detected, an early warning notification is automatically sent to the administrator.

[0011] In the second aspect, the present invention also provides a data asset authority dynamic allocation and audit system based on BIM technology, which adopts the data asset authority dynamic allocation and audit method based on BIM technology. The system includes: a BIM model management center framework module, a user identity authentication module framework module, a authority dynamic allocation engine framework module, and an audit log recording module framework module.

[0012] By adopting the above technical solution, the present invention has the following beneficial effects: 1. Technical Effect The dynamic allocation and audit system of data asset rights based on BIM technology realizes efficient and accurate management of data asset rights by integrating BIM's three-dimensional visualization, information integration and dynamic update capabilities. Its technical effects are mainly reflected in the following aspects: (1) Dynamic adjustment and automated management of permissions Real-time response: The system can perceive changes in data assets (such as addition, modification, deletion, etc.) in real time and automatically adjust corresponding permissions based on preset rules. This dynamic adjustment mechanism ensures the timeliness and accuracy of permission allocation and avoids security risks caused by delayed permission allocation.

[0013] Automated approval: It integrates intelligent approval processes to automatically process permission change requests, reduce manual intervention, and improve approval efficiency. At the same time, by setting approval rules and processes, it ensures the compliance and traceability of permission changes.

[0014] (2) 3D visualization and data integration Intuitive display: Using the three-dimensional visualization capabilities of BIM, the system can display data assets and their authority allocation in the form of an intuitive three-dimensional model, helping users better understand and manage data assets.

[0015] Information integration: It integrates all kinds of information of the whole life cycle of the project, including data of design, construction, operation and maintenance, and realizes comprehensive information integration and unified management. This integration method helps to break the information island and improve the efficiency of data sharing and utilization.

[0016] (3) Refined permission control Multi-level permission system: The system supports a multi-level permission system, which can set different permission levels according to different roles and responsibilities to achieve refined permission control. This control method helps ensure the security and compliance of data assets while improving user work efficiency.

[0017] Fine-grained access control: It can implement fine-grained access control on specific objects in data assets, such as individual components, layers or attributes. This fine-grained control method helps to further improve the security of data assets.

[0018] (4) Intelligent audit and risk warning Smart Audit: The system has a built-in smart audit module that can automatically audit the allocation and use of permissions to identify potential violations and security risks. Regular or irregular audits help ensure the compliance and security of permission allocation.

[0019] Risk warning: Based on the audit results and preset risk warning rules, the system can automatically trigger the risk warning mechanism to remind relevant personnel to take timely measures to deal with potential risks. This warning mechanism helps reduce the probability of security risks and the extent of losses.

[0020] (5) Improve project management efficiency Collaborative work: The system supports collaborative work among multiple departments and professions, and realizes information sharing and real-time communication through BIM models. This collaborative work method helps improve work efficiency and reduce communication costs.

[0021] Decision support: By integrating data and information from the entire life cycle of a project, the system can provide strong support for project decision-making. For example, during the project design phase, collision detection and simulation analysis through BIM models can help to discover and solve potential problems in advance; during the construction phase, real-time information on project progress and quality can help to adjust construction plans and resource allocation in a timely manner.

[0022] 2. Economic Benefits The dynamic allocation and audit system of data asset rights based on BIM technology has brought significant economic benefits, mainly including the following aspects: (1) Reduce management costs Reduced manpower input: Automated and intelligent authority allocation and audit mechanisms reduce the need for manual intervention and reduce labor costs. At the same time, management costs are further reduced by improving approval efficiency and reducing communication costs.

[0023] Optimize resource allocation: The system can grasp the project progress and resource usage in real time, which helps to optimize resource allocation and reduce resource waste. For example, during the construction phase, the BIM model can be used to grasp the project progress and material consumption in real time, which helps to adjust the procurement plan and construction schedule in a timely manner.

[0024] (2) Improve economic efficiency Avoid losses: Through intelligent auditing and risk warning mechanisms, potential security risks and violations can be discovered and corrected in a timely manner, avoiding economic losses caused by abuse of authority or data leakage.

[0025] Improve project value: Realizing data integration and sharing throughout the project life cycle through BIM models will help improve the project's design quality, construction efficiency, and operation and maintenance level, thereby improving the project's overall value.

[0026] (3) Promoting digital transformation Promote information construction: The implementation of the system will help promote the information construction process of the enterprise and improve the digital level of the enterprise. By integrating advanced technologies such as BIM, efficient management and utilization of data assets can be achieved.

[0027] Enhance competitiveness: Digital transformation helps companies improve their market competitiveness. By optimizing management processes, improving work efficiency, and reducing management costs, companies can better adapt to changes in market demand and gain market share.

[0028] 3. Social Benefits The dynamic allocation and audit system of data asset rights based on BIM technology has also brought positive impacts and benefits to society, mainly including the following aspects: (1) Improving social security Ensure data security: The system ensures the security of data assets through refined permission control and intelligent audit mechanism, which helps to prevent security incidents such as data leakage and abuse. This security measure is of great significance to maintaining social security and stability.

[0029] Reduce social risks: By promptly discovering and correcting potential safety hazards and violations, the system helps reduce the probability of social risks and the extent of losses. This risk prevention and control mechanism is of great significance to ensuring social harmony and stability.

[0030] (2) Promoting industry progress Promote technological innovation: The development and implementation of the system has promoted the application and development of advanced technologies such as BIM in the construction industry. Through continuous technological innovation and practical application, it helps to improve the technical level and competitiveness of the entire industry.

[0031] Improve industry standards: The implementation of the system will help promote the formulation and improvement of industry standards. By formulating unified authority allocation and audit standards and establishing corresponding supervision mechanisms, it will help standardize industry behavior and improve the overall standardization level of the industry.

[0032] (3) Promoting sustainable development Energy saving and emission reduction: The BIM model can realize data integration and sharing throughout the project life cycle, which helps to optimize the design and construction plans and reduce energy consumption and emissions. This energy saving and emission reduction measure is of great significance to promoting sustainable development.

[0033] Improve social benefits: The implementation of the system helps to improve the social benefits of engineering projects. By improving design quality, construction efficiency, and operation and maintenance level, it helps to improve people’s living and working environment and enhance the overall welfare of society. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] In order to more clearly illustrate the specific implementation methods of the present invention or the technical solutions in the prior art, the drawings required for use in the specific implementation methods or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some implementation methods of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0035] Figure 1 A flowchart of a method for dynamically allocating and auditing data asset permissions based on BIM technology provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0036] The technical solution of the present invention will be described clearly and completely below in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0037] The specific implementation of the present invention is described in detail below in conjunction with the accompanying drawings. It should be understood that the specific implementation described here is only used to illustrate and explain the present invention, and is not used to limit the present invention.

[0038] Combination Figure 1 As shown, this embodiment 1 provides a data asset authority dynamic allocation and audit method based on BIM technology, including the following steps: S1. BIM model management center framework, including: S11, Architecture design; Hierarchical structure: The BIM model management center adopts a layered architecture design, including data access layer, business logic layer, and interface service layer. The data access layer is responsible for interacting with the storage system to realize data reading and writing operations; the business logic layer handles core businesses such as BIM model analysis and version control; the interface service layer provides an API interface for external system access.

[0039] Component division: According to functional requirements, the system is divided into model storage module, version control module, data analysis module, interface service module, etc.

[0040] S12, data model; BIM model structure: defines the data structure of the BIM model, including model elements, attributes, relationships, etc. Use international standards (such as IFC) or custom formats to store BIM data.

[0041] Metadata management: Define metadata for BIM model elements, including creation time, modifier, version information, etc., to facilitate management and tracking.

[0042] S13, storage strategy; Data storage solution: Choose a solution suitable for large-scale BIM data storage, such as a distributed file system, object storage, or a relational database combined with BLOB storage.

[0043] Performance optimization: Use indexing, caching, data sharding and other technologies to optimize data access performance.

[0044] S14, version control mechanism; Version management strategy: Develop a version control strategy for the BIM model, including version naming rules, version submission process, version merging and conflict resolution mechanisms.

[0045] Historical version management: implements storage and query of historical versions, and supports users to roll back to any historical version.

[0046] S15, data access interface; API design: Define a set of RESTful API interfaces for other modules or external systems to call to implement operations such as uploading, downloading, querying, and updating of BIM models.

[0047] Security: Strengthen the security of API interfaces, such as identity authentication, permission control, data encryption, etc.

[0048] S2, user identity authentication module framework; The user authentication module is the first line of defense to ensure system security. It is responsible for verifying user identities and preventing unauthorized access. This section will introduce the module's architecture design, authentication process, multi-factor authentication strategy, and user session management.

[0049] S21, Architecture design; Authentication process: Design the overall process of user authentication, including user input, identity verification, session creation, etc.

[0050] Component division: Divide the module into user input interface, authentication service, session management service, authentication policy library and other parts.

[0051] S22, certification process; User input: The user enters their username and password (or other authentication factors) through the login interface.

[0052] Authentication: The system calls the authentication service and performs identity authentication based on the information entered by the user and the preset authentication policy.

[0053] Session creation: After successful authentication, a user session is created and a session token (such as JWT) is generated for authentication of subsequent requests.

[0054] S23, multi-factor authentication strategy; Policy definition: Support multiple authentication factors, such as passwords, mobile phone verification codes, fingerprint recognition, hardware tokens, etc.

[0055] Flexible configuration: Allows administrators to flexibly configure authentication policies based on security requirements, such as setting which users require multi-factor authentication.

[0056] S24, user session management; Session storage: Use secure storage methods (such as Redis) to store user session information to ensure the security and availability of session data.

[0057] Session timeout: Set the session timeout to automatically clean up expired sessions and prevent session hijacking attacks.

[0058] Session monitoring: Monitor session activities in real time and detect abnormal behaviors, such as frequent login failures and remote logins.

[0059] S3, dynamic permission allocation engine framework; The permission dynamic allocation engine is the core of the system permission management. It is responsible for real-time calculation and allocation of user permissions based on preset permission rules and user roles, combined with dynamic factors such as project progress and task allocation. This section will introduce the engine's architecture design, permission model, dynamic allocation algorithm, and permission change mechanism.

[0060] S31, Architecture design; Component division: The engine is divided into permission model definition module, dynamic allocation algorithm module, permission change processing module, etc.

[0061] Data flow: Clarify the flow path of data between modules, including the input and output of user information, permission rules, dynamic factors and other data.

[0062] S32, permission model; Permission definition: Define the permission types in the system, such as read, edit, delete BIM models, etc., and assign unique identifiers to them.

[0063] Role management: define user roles, associate roles with permissions, and form a role-permission mapping table.

[0064] S33, dynamic allocation algorithm; Algorithm design: Design an efficient dynamic allocation algorithm that can comprehensively consider multiple factors such as user roles, project progress, task allocation, etc., and calculate the specific permissions of the user in the current situation.

[0065] Weight assignment: Assign weights to different dynamic factors to ensure that the algorithm can accurately reflect the actual situation.

[0066] S34, authority change mechanism; Trigger conditions: Define the conditions that trigger permission changes, such as user role changes, project progress to a new stage, task reassignment, etc.

[0067] Change process: When the trigger conditions are met, the permission change process is automatically triggered, user permissions are recalculated, and the permission database is updated.

[0068] S4, audit log recording module framework; The audit log recording module is responsible for recording all permission applications, allocations, changes, and access behaviors, providing detailed historical data for permission audits. This section will introduce the module's architecture design, logging strategy, log storage and query mechanism, and intelligent analysis and early warning functions.

[0069] S41, Architecture design; Component division: The module is divided into logging service, log storage system, log query interface, intelligent analysis engine and other parts.

[0070] Data flow: Clarify the flow path of log data between modules, including log generation, storage, query and analysis.

[0071] S42, logging strategy; Record content: Define the log content that needs to be recorded, including operation type (such as permission application, allocation, access, etc.), operation time, user information, operation results, etc.

[0072] Recording timing: Specify when to record logs to ensure the completeness and accuracy of the logs.

[0073] S43, log storage and query mechanism; Storage solution: Choose a solution suitable for large-scale log data storage, such as a distributed log system (such as ELKStack), a relational database combined with a log table, etc.

[0074] Query interface: Provides a flexible query interface that supports querying log records by user, time, operation type, etc.

[0075] S44, intelligent analysis and early warning; Analysis algorithm: Design intelligent analysis algorithms to conduct in-depth mining of log data and identify abnormal access patterns, such as frequent access to sensitive data and unauthorized access.

[0076] Early warning mechanism: When abnormal behavior is detected, an early warning notification is automatically sent to the administrator, including email, SMS, system message and other methods.

[0077] In summary, the present invention has the following beneficial effects: 1. Technical Effect The dynamic allocation and audit system of data asset rights based on BIM technology realizes efficient and accurate management of data asset rights by integrating BIM's three-dimensional visualization, information integration and dynamic update capabilities. Its technical effects are mainly reflected in the following aspects: (1) Dynamic adjustment and automated management of permissions Real-time response: The system can perceive changes in data assets (such as addition, modification, deletion, etc.) in real time and automatically adjust corresponding permissions based on preset rules. This dynamic adjustment mechanism ensures the timeliness and accuracy of permission allocation and avoids security risks caused by delayed permission allocation.

[0078] Automated approval: It integrates intelligent approval processes to automatically process permission change requests, reduce manual intervention, and improve approval efficiency. At the same time, by setting approval rules and processes, it ensures the compliance and traceability of permission changes.

[0079] (2) 3D visualization and data integration Intuitive display: Using the three-dimensional visualization capabilities of BIM, the system can display data assets and their authority allocation in the form of an intuitive three-dimensional model, helping users better understand and manage data assets.

[0080] Information integration: It integrates all kinds of information of the whole life cycle of the project, including data of design, construction, operation and maintenance, and realizes comprehensive information integration and unified management. This integration method helps to break the information island and improve the efficiency of data sharing and utilization.

[0081] (3) Refined permission control Multi-level permission system: The system supports a multi-level permission system, which can set different permission levels according to different roles and responsibilities to achieve refined permission control. This control method helps ensure the security and compliance of data assets while improving user work efficiency.

[0082] Fine-grained access control: It can implement fine-grained access control on specific objects in data assets, such as individual components, layers or attributes. This fine-grained control method helps to further improve the security of data assets.

[0083] (4) Intelligent audit and risk warning Smart Audit: The system has a built-in smart audit module that can automatically audit the allocation and use of permissions to identify potential violations and security risks. Regular or irregular audits help ensure the compliance and security of permission allocation.

[0084] Risk warning: Based on the audit results and preset risk warning rules, the system can automatically trigger the risk warning mechanism to remind relevant personnel to take timely measures to deal with potential risks. This warning mechanism helps reduce the probability of security risks and the extent of losses.

[0085] (5) Improve project management efficiency Collaborative work: The system supports collaborative work among multiple departments and professions, and realizes information sharing and real-time communication through BIM models. This collaborative work method helps improve work efficiency and reduce communication costs.

[0086] Decision support: By integrating data and information from the entire life cycle of a project, the system can provide strong support for project decision-making. For example, during the project design phase, collision detection and simulation analysis through BIM models can help to discover and solve potential problems in advance; during the construction phase, real-time information on project progress and quality can help to adjust construction plans and resource allocation in a timely manner.

[0087] 2. Economic Benefits The dynamic allocation and audit system of data asset rights based on BIM technology has brought significant economic benefits, mainly including the following aspects: (1) Reduce management costs Reduced manpower input: Automated and intelligent authority allocation and audit mechanisms reduce the need for manual intervention and reduce labor costs. At the same time, management costs are further reduced by improving approval efficiency and reducing communication costs.

[0088] Optimize resource allocation: The system can grasp the project progress and resource usage in real time, which helps to optimize resource allocation and reduce resource waste. For example, during the construction phase, the BIM model can be used to grasp the project progress and material consumption in real time, which helps to adjust the procurement plan and construction schedule in a timely manner.

[0089] (2) Improve economic efficiency Avoid losses: Through intelligent auditing and risk warning mechanisms, potential security risks and violations can be discovered and corrected in a timely manner, avoiding economic losses caused by abuse of authority or data leakage.

[0090] Improve project value: Realizing data integration and sharing throughout the project life cycle through BIM models will help improve the project's design quality, construction efficiency, and operation and maintenance level, thereby improving the project's overall value.

[0091] (3) Promoting digital transformation Promote information construction: The implementation of the system will help promote the information construction process of the enterprise and improve the digital level of the enterprise. By integrating advanced technologies such as BIM, efficient management and utilization of data assets can be achieved.

[0092] Enhance competitiveness: Digital transformation helps companies improve their market competitiveness. By optimizing management processes, improving work efficiency, and reducing management costs, companies can better adapt to changes in market demand and gain market share.

[0093] 3. Social Benefits The dynamic allocation and audit system of data asset rights based on BIM technology has also brought positive impacts and benefits to society, mainly including the following aspects: (1) Improving social security Ensure data security: The system ensures the security of data assets through refined permission control and intelligent audit mechanism, which helps to prevent security incidents such as data leakage and abuse. This security measure is of great significance to maintaining social security and stability.

[0094] Reduce social risks: By promptly discovering and correcting potential safety hazards and violations, the system helps reduce the probability of social risks and the extent of losses. This risk prevention and control mechanism is of great significance to ensuring social harmony and stability.

[0095] (2) Promoting industry progress Promote technological innovation: The development and implementation of the system has promoted the application and development of advanced technologies such as BIM in the construction industry. Through continuous technological innovation and practical application, it helps to improve the technical level and competitiveness of the entire industry.

[0096] Improve industry standards: The implementation of the system will help promote the formulation and improvement of industry standards. By formulating unified authority allocation and audit standards and establishing corresponding supervision mechanisms, it will help standardize industry behavior and improve the overall standardization level of the industry.

[0097] (3) Promoting sustainable development Energy saving and emission reduction: The BIM model can realize data integration and sharing throughout the project life cycle, which helps to optimize the design and construction plans and reduce energy consumption and emissions. This energy saving and emission reduction measure is of great significance to promoting sustainable development.

[0098] Improve social benefits: The implementation of the system helps to improve the social benefits of engineering projects. By improving design quality, construction efficiency, and operation and maintenance level, it helps to improve people’s living and working environment and enhance the overall welfare of society.

[0099] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or replace some or all of the technical features therein with equivalents. However, these modifications or replacements do not cause the essence of the corresponding technical solutions to deviate from the scope of the technical solutions of the embodiments of the present invention.

Claims

1. A data asset authority dynamic allocation and audit method based on BIM technology, characterized in that: include: S1. BIM model management center framework, including: S11. Architecture design; S12. Data model; S13. Storage strategy; S14. Version control mechanism; S15. Data access interface; S2, user identity authentication module framework, including: S21, architecture design; S22, authentication process; S23, multi-factor authentication strategy; S24, user session management; S3, dynamic permission allocation engine framework, including: S31, architecture design; S32, permission model; S33, dynamic allocation algorithm; S34, authority change mechanism; S4. Audit log recording module framework, including: S41. Architecture design; S42. Log recording strategy; S43. Log storage and query mechanism; S44. Intelligent analysis and early warning.

2. The method for dynamic allocation and auditing of data asset permissions based on BIM technology according to claim 1 is characterized in that: Step S11: Architecture design includes: Hierarchical structure: The BIM model management center adopts a layered architecture design, including data access layer, business logic layer, and interface service layer. The data access layer is responsible for interacting with the storage system to realize data reading and writing operations; the business logic layer handles the core business of BIM model analysis and version control; the interface service layer provides an API interface for external system access; Component division: According to functional requirements, the system is divided into model storage module, version control module, data analysis module, and interface service module; The data model of step S12 includes: BIM model structure: defines the data structure of the BIM model, including model elements, attributes, and relationships; uses international standards or custom formats to store BIM data; Metadata management: define metadata for BIM model elements, including creation time, modifier, and version information; Step S13 storage strategy includes: Data storage solution: Choose a solution suitable for large-scale BIM data storage; Performance optimization: Use indexing, caching, and data sharding technologies to optimize data access performance; Step S14 storage strategy includes: Version management strategy: Develop a version control strategy for the BIM model, including version naming rules, version submission process, version merging and conflict resolution mechanisms.

3. Historical version management: realize the storage and query of historical versions, and support users to roll back to any historical version; Step S15: the data access interface includes: API design: define a set of RESTful API interfaces for other modules or external systems to call to implement BIM model upload, download, query, and update operations; Security: Strengthen the security of API interfaces.

4. The method for dynamic allocation and auditing of data asset rights based on BIM technology according to claim 1 is characterized in that: Step S21: Architecture design includes: Authentication process: Design the overall process of user authentication, including user input, identity verification, and session creation; Component division: Divide the module into user input interface, authentication service, session management service, and authentication policy library; Step S22: The authentication process includes: User input: The user enters the username and password through the login interface; Authentication: The system calls the authentication service and performs identity authentication based on the information entered by the user and the preset authentication policy; Session creation: After successful verification, a user session is created and a session token is generated for authentication of subsequent requests; Step S23: The multi-factor authentication strategy includes: Policy definition: Support multiple authentication factors, including password, mobile phone verification code, fingerprint recognition, and hardware token; Flexible configuration: allows administrators to flexibly configure authentication policies based on security requirements; Step S24 user session management includes: Session storage: Use a secure storage method to store user session information to ensure the security and availability of session data; Session timeout: Set the session timeout, automatically clean up expired sessions, and prevent session hijacking attacks; Session Monitoring: Monitor session activity in real time and detect abnormal behavior.

5. The method for dynamic allocation and auditing of data asset rights based on BIM technology according to claim 1 is characterized in that: Step S31 architecture design includes: Component division: The engine is divided into permission model definition module, dynamic allocation algorithm module, and permission change processing module; Data flow: clarify the flow path of data between modules, including user information, permission rules, and input and output of dynamic factor data; Step S32: the permission model includes: Permission definition: Define the permission types in the system and assign unique identifiers to them; Role management: define user roles, associate roles with permissions, and form a role-permission mapping table; Step S33 dynamic allocation algorithm includes: Algorithm design: Design an efficient dynamic allocation algorithm that can comprehensively consider multiple factors such as user role, project progress, and task allocation to calculate the specific permissions of the user in the current situation; Weight allocation: Assign weights to different dynamic factors to ensure that the algorithm can accurately reflect the actual situation; Step S3: The permission change mechanism includes: Trigger conditions: define the conditions that trigger permission changes; Change process: When the trigger conditions are met, the permission change process is automatically triggered, user permissions are recalculated, and the permission database is updated.

6. The method for dynamic allocation and auditing of data asset rights based on BIM technology according to claim 1 is characterized in that: Step S41: Architecture design includes: Component division: The module is divided into logging service, log storage system, log query interface, and intelligent analysis engine; Data flow: clarify the flow path of log data between modules, including log generation, storage, query and analysis; The logging strategy in step S42 includes: Record content: define the log content that needs to be recorded, including operation type, operation time, user information, and operation results; Recording timing: clearly specify when logs are recorded to ensure the integrity and accuracy of the logs; Step S43 log storage and query mechanism includes: Storage solution: Choose a solution suitable for large-scale log data storage; Query interface: provides conditional query log records; Step S44: Intelligent analysis and early warning includes: Analysis algorithm: Design intelligent analysis algorithms to conduct in-depth mining of log data and identify abnormal access patterns; Early warning mechanism: When abnormal behavior is detected, an early warning notification is automatically sent to the administrator.

7. A data asset authority dynamic allocation and audit system based on BIM technology, characterized in that: A method for dynamically allocating and auditing data asset permissions based on BIM technology as described in any one of claims 1 to 5 is adopted.

Images