Financial data sharing method and device, electronic equipment and storage medium
By receiving data requests and obtaining target financial data and the first sharing personnel, determining the data type and corresponding second sharing personnel, comprehensively determining the shared personnel corresponding to the data request, and sharing data according to the sharing policy, the problem of lack of flexibility and targeting of the existing financial data management system is solved, and efficient and secure data sharing is achieved.
Patent Information
- Application Number
- CN202411923681.9
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-12-25
- Publication Date
- 2025-05-06
AI Technical Summary
The existing financial data management system lacks flexibility and targeting, and cannot dynamically adapt to complex business needs changes, resulting in insufficient data sharing.
By receiving data requests and obtaining target financial data and the first shared personnel, determining the data type and corresponding second shared personnel, comprehensively determining the shared personnel corresponding to the data request, and sharing the data according to the sharing policy.
Improve the security, efficiency and accuracy of data sharing, ensure that only the right personnel can access relevant data, and reasonably divide the sharing scope according to the nature and importance of the data.
Smart Images

Figure CN119941418A_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the field of data processing, and in particular to a financial data sharing method, device, electronic device and storage medium. Background Art
[0002] Financial data management and sharing are important components of modern enterprise operations. With the rapid development of information technology, the accuracy and timeliness of financial data are of great significance to the decision-making support of enterprises. At present, in various enterprises and institutions, the management and sharing of financial data have gradually become a key link in improving work efficiency and optimizing resource allocation. Through effective financial management, it is possible to effectively monitor the flow of funds within the enterprise, improve the efficiency of fund use, and reduce operating risks.
[0003] In existing financial data management systems, it is common to use database storage and query functions to handle the recording and retrieval of financial data. In order to ensure the security and accuracy of data, a permission control mechanism is usually set up to limit the access scope of users at different levels. However, traditional management methods mainly rely on fixed role allocation and simple permission settings, which lack flexibility and pertinence and cannot dynamically adapt to complex changes in business needs. Therefore, a financial data sharing method that can flexibly respond to a variety of situations is needed. Summary of the invention
[0004] In order to improve the flexibility and pertinence in the financial data sharing process, the present application provides a financial data sharing method, device, electronic device and storage medium.
[0005] In the first aspect, the present application provides a financial data sharing method, which adopts the following technical solution: A financial data sharing method, comprising: Receive a data request, obtain target financial data corresponding to the data request, and obtain a first sharing person corresponding to the data request; Determine a data type corresponding to the target financial data, and determine a second sharing person corresponding to the data type; Determine a sharing person corresponding to the data request based on the first sharing person, the data type, and the second sharing person; Determine a sharing strategy corresponding to the sharing personnel, and share the target financial data to the corresponding sharing personnel based on the sharing strategy.
[0006] By adopting the above technical solution, by receiving the data request and obtaining the corresponding target financial data and the first sharing personnel, the accuracy and pertinence of the data request are ensured, a clear goal is provided for the subsequent data sharing, and the data type corresponding to the target financial data and the corresponding second sharing personnel are determined, which helps to reasonably divide the sharing scope according to the nature and importance of the data, and improves the security and efficiency of data sharing. Then, the sharing personnel corresponding to the data request are determined based on the information of the first sharing personnel, the data type and the second sharing personnel, and the precise positioning of data sharing is achieved, ensuring that only the appropriate personnel can access the relevant data, and according to the corresponding sharing strategy of the sharing personnel, the target financial data is shared with the corresponding sharing personnel, ensuring the flexibility and pertinence of data sharing.
[0007] In a possible implementation, the data type includes a primary data type, a secondary data type, and a tertiary data type, and determining the data type corresponding to the target financial data includes: identifying each data field in the target financial data; Based on each data field, determine the data source and data purpose corresponding to the target financial data; Based on the data source and the data usage, the data type corresponding to the target financial data is determined.
[0008] By adopting the above technical solution, by identifying each data field in the target financial data and determining the data source and data usage corresponding to the target financial data based on each data field, it is helpful to trace the source of the data and understand the value and importance of the data, and provide a strong basis for the determination of the data type. Based on the comprehensive analysis of the data source and data usage, the data type corresponding to the target financial data can be accurately determined, whether it is a primary data type, a secondary data type or a tertiary data type. The fine division not only helps to provide more targeted guidance for data sharing, storage and processing, but also improves the efficiency and security of data management.
[0009] In a possible implementation manner, determining the second sharing person corresponding to the data type includes: Acquire role information corresponding to the data type, the role information including shared departments, shared roles, and role levels; Based on the role information, a second sharing person corresponding to the data type is determined.
[0010] By adopting the above technical solution, by obtaining the role information corresponding to the data type and determining the second sharing person based on the role information, it is ensured that the role positioning in the data sharing process is clear and the authority setting is reasonable and effective, thereby improving the security, compliance, efficiency and flexibility of data sharing.
[0011] In a possible implementation, determining the sharing person corresponding to the data request based on the first sharing person, the data type, and the second sharing person includes: Acquire personnel information corresponding to the first shared personnel, the personnel information including personnel level and personnel department; Determining whether the personnel information meets the role requirements corresponding to the data type; If the personnel information meets the role requirement corresponding to the data type, the first sharing personnel and the second sharing personnel are determined to be sharing personnel corresponding to the data request.
[0012] By adopting the above technical solution, by obtaining the personnel information of the first sharing person and judging whether he / she meets the role requirements corresponding to the data type, the sharing person corresponding to the data request is determined, thereby ensuring the clarity of identity and authority in the data sharing process and the accuracy and effectiveness of role matching, thereby improving the security, compliance and accuracy of data sharing.
[0013] In a possible implementation, when the personnel information does not meet the role requirement corresponding to the data type, determining the sharing personnel corresponding to the data request based on the first sharing personnel, the data type, and the second sharing personnel includes: Determine whether there is instruction information for the first sharing person; If there is no corresponding instruction information for the first sharing person, determining the second sharing person as the sharing person corresponding to the data request; If the first sharing person has corresponding instruction information, identifying the instruction information to obtain instruction data and the instruction person in the instruction information, and determining whether the first sharing person belongs to the sharing person corresponding to the data request based on the instruction data and the instruction person; If the first sharing person is a sharing person corresponding to the data request, the first sharing person and the second sharing person are determined to be sharing persons corresponding to the data request.
[0014] By adopting the above technical solutions, the flexibility, security and accuracy of the data sharing process are improved by checking the approval information, analyzing the approval data and the approval personnel, and comprehensively considering the requirements of regular roles and the needs in special circumstances.
[0015] In a possible implementation, determining the sharing strategy corresponding to the sharing personnel includes: Based on the data type, determining the access level corresponding to each of the sharing personnel; Based on the access degree corresponding to each of the sharing personnel, a sharing strategy corresponding to the sharing personnel is generated.
[0016] By adopting the above technical solution, by determining the access level of the sharing personnel based on the data type and generating the sharing strategy accordingly, it can ensure that the authority allocation in the data sharing process is reasonable and effective, and the operating rules are clear and specific, thereby improving the security and controllability of data sharing.
[0017] In a possible implementation, obtaining the first sharing person corresponding to the data request includes: Obtain the requester corresponding to the data request; The requesting person is taken as the first sharing person corresponding to the data request.
[0018] By adopting the above technical solution, by directly obtaining the requester corresponding to the data request and using it as the first sharing person, not only the decision-making process of data sharing is simplified and efficiency is improved, but also it is ensured that the data can accurately flow to the people who need it most, thereby enhancing the security and accuracy of data sharing.
[0019] In a second aspect, the present application provides a financial data sharing device, which adopts the following technical solution: A financial data sharing device, comprising: A receiving module, used to receive a data request, obtain target financial data corresponding to the data request, and obtain a first sharing person corresponding to the data request; A first determination module is used to determine a data type corresponding to the target financial data, and determine a second sharing person corresponding to the data type; A second determining module, configured to determine a sharing person corresponding to the data request based on the first sharing person, the data type and the second sharing person; The sharing module is used to determine the sharing strategy corresponding to the sharing personnel, and share the target financial data to the corresponding sharing personnel based on the sharing strategy.
[0020] In a third aspect, the present application provides an electronic device, which adopts the following technical solution: An electronic device, comprising: at least one processor; Memory; At least one application, wherein the at least one application is stored in a memory and configured to be executed by at least one processor, and the at least one application is configured to: execute the financial data sharing method described in the first aspect above.
[0021] In a fourth aspect, the present application provides a computer-readable storage medium, which adopts the following technical solution: A computer-readable storage medium, comprising: storing a computer program that can be loaded by a processor and execute the financial data sharing method described in the first aspect above.
[0022] In summary, this application includes the following beneficial technical effects: By receiving data requests and obtaining the corresponding target financial data and the first sharing personnel, the accuracy and pertinence of the data request are ensured, and the data type corresponding to the target financial data and the corresponding second sharing personnel are determined, which helps to reasonably divide the sharing scope according to the nature and importance of the data, and improves the security and efficiency of data sharing. Then, the sharing personnel corresponding to the data request are determined based on the information of the first sharing personnel, data type and the second sharing personnel, and the precise positioning of data sharing is achieved. According to the sharing strategy corresponding to the sharing personnel, the target financial data is shared with the corresponding sharing personnel, ensuring the flexibility and pertinence of data sharing. BRIEF DESCRIPTION OF THE DRAWINGS
[0023] Figure 1 It is a flowchart of a financial data sharing method provided in an embodiment of the present application; Figure 2 It is a block diagram of a financial data sharing device provided in an embodiment of the present application; Figure 3 It is a schematic diagram of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION
[0024] The following is combined with Figure 1 -Attached Figure 3 This application is described in further detail.
[0025] In order to make the purpose, technical solution and advantages of the embodiments of the present application clearer, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.
[0026] Financial data may include financial statement data, financial transaction data, financial budget data, and financial analysis data. Specifically, financial statement data may include balance sheet data, income statement data, and cash flow statement data; financial transaction data may include income transaction data, expenditure transaction data, and fund transfer data; financial budget data may include annual budget data and project budget data; and financial analysis data may include financial ratio data, cost analysis data, and trend analysis data.
[0027] Financial data management and sharing are crucial in modern enterprise operations. Its accuracy and timeliness are of great significance to enterprise decision-making support, and have become a key link for enterprises and institutions to improve efficiency and optimize resource allocation. It can help monitor capital flow, improve capital utilization efficiency and reduce operating risks. The current financial data management system mostly relies on database storage and query functions to handle record and retrieval work, and also has an authority control mechanism to ensure data security and accuracy. However, the traditional management method relies on fixed role allocation and simple authority settings, lacks flexibility and pertinence, and is difficult to dynamically adapt to changes in complex business needs. Therefore, a financial data sharing method that can flexibly respond to various situations is urgently needed.
[0028] In view of this, the present application embodiment provides a financial data sharing method, such as Figure 1 As shown, the method provided in the embodiment of the present application is executed by an electronic device, which can be a server or a terminal device, wherein the server can be an independent physical server, or a server cluster or distributed system composed of multiple physical servers, or a cloud server providing cloud computing services. The terminal device can be a smart phone, a tablet computer, a laptop computer, a desktop computer, etc., but is not limited thereto. The terminal device and the server can be directly or indirectly connected via wired or wireless communication, which is not limited in the embodiment of the present application. The method includes steps S101 to S104, wherein: Step S101: receiving a data request, obtaining target financial data corresponding to the data request, and obtaining a first sharing person corresponding to the data request.
[0029] The data request is a command message sent by an external system or user to an electronic device that performs financial data sharing to obtain specific financial data. Its format usually follows a predetermined protocol (such as the JSON data format under the HTTP protocol). The electronic device runs a dedicated network service program, listens to a specific port (such as port 8080), and receives the requested data when a data request arrives.
[0030] After receiving the data request, the data request field in the data request may be parsed to obtain the requested financial data corresponding to the data request, and the financial data corresponding to the requested financial data may be obtained from the financial database as the target financial data.
[0031] Furthermore, the personnel field corresponding to the data request is obtained from the financial database, and the unique identifier of the first shared personnel (such as work number, user name, etc.) is obtained by parsing specific fields in the data request (such as the "requestorId" field) to obtain the first shared personnel corresponding to the data request.
[0032] Step S102: determine the data type corresponding to the target financial data, and determine the second sharing personnel corresponding to the data type.
[0033] Among them, data type refers to the category to which financial data belongs, such as financial statement data, financial transaction detail data, financial budget data, etc.
[0034] Specifically, the data type corresponding to the target financial data is determined by analyzing each field in the target financial data. More specifically, for numeric data, the regular expression is used to match the numeric format (such as whether it only contains numbers, decimal points and positive and negative signs) and to attempt simple mathematical operations (such as addition) to confirm; for date data, a date parsing library (such as the datetime library in Python) is used to try to parse the data into a date format. If the parsing is successful, it is a date type; for text data, if it does not meet the judgment conditions of numeric and date types, it is determined to be a text type. For example, for a data field containing "2024-08-15", it is successfully parsed into a date format by the date parsing library, and the data type of the field is a date type; for a data field containing "120.50", it is a numeric type after numeric format matching and mathematical operation verification; for the "sales product A" field, it is determined to be a text type. Further, the pre-defined data type mapping rules are obtained from the financial database, and the data type of the entire target financial data is determined based on the type combination of the data fields and the data type mapping rules. For example, if your data consists primarily of numeric Sales Amount fields and Date Sales Date fields, you can identify it as a Sales Financial Transaction data type.
[0035] Furthermore, a correspondence table between data types and shared personnel is obtained from the financial database, and matching data records are queried in the table according to the data type determined in the previous step to obtain the second shared personnel corresponding to the data type. For example, if the determined data type is "sales financial transaction data", the record whose "dataType" field value is "sales financial transaction data" is searched in the shared personnel configuration database table. The value of the "sharedPersonId" field is extracted from the queried records, and the personnel corresponding to these values are the second shared personnel. For example, the auditors of the finance department (identified as "audit001", "audit002", etc.) and the supervisor of the sales department (identified as "salesManager001") may be found as the shared personnel corresponding to the sales financial transaction data.
[0036] Step S103: Determine the sharing person corresponding to the data request based on the first sharing person, the data type and the second sharing person.
[0037] Specifically, the role and department of the first shared personnel and the second shared personnel corresponding to the data type can be comprehensively considered to determine the final set of shared personnel. More specifically, the role and department information of the first shared personnel are obtained from the financial database, and the role and department information of the second shared personnel are obtained. For example, if the first shared personnel is a specialist in the marketing department, the role of the first shared personnel is "marketing specialist" and the department is "marketing department". Further, the pre-set shared personnel determination rules are obtained from the financial database, and combined with the second shared personnel information, analysis is performed according to the pre-set shared personnel determination rules. For example, the rules stipulate that if the first shared personnel is a non-management employee in the marketing department and the second shared personnel corresponding to the data type is a financial auditor, then the shared personnel should also include the manager of the marketing department. In this way, all shared personnel corresponding to the data request are comprehensively determined.
[0038] Step S104: determine the sharing strategy corresponding to the sharing personnel, and share the target financial data to the corresponding sharing personnel based on the sharing strategy.
[0039] The sharing policy may include one or more of read-only permission, download permission, and edit permission.
[0040] Specifically, the access rights and operation restriction rules for target financial data specified for different sharing personnel are obtained from the financial database. The financial database stores a correspondence table of different sharing personnel combinations, data types and sharing strategies. For example, the rules stipulate that for sales financial transaction data requested by marketing department specialists, financial auditors have read-only and data download permissions, and marketing department managers have data viewing and limited editing permissions (such as only being able to modify remarks). Furthermore, according to the determined sharing personnel and data types, matching rules are searched in the sharing strategy rule library to determine the sharing strategy corresponding to each sharing personnel.
[0041] Furthermore, for sharing personnel with read-only permissions, create a secure data access page or interface that only displays the target financial data and does not provide data modification functions. For example, use HTML and JavaScript to build a read-only data display page, and pass the target financial data in JSON format to the front-end page for display through the back-end service. For sharing personnel with download permissions, provide a download button on the data access page or interface. When the sharing personnel clicks the download button, the back-end service provides the target financial data for download in the form of an encrypted file (such as a CSV file encrypted using the AES encryption algorithm). For sharing personnel with editing permissions (such as marketing department managers), create a page or interface with data editing functions that allow sharing personnel to modify the target financial data within a specific range.
[0042] The embodiment of the present application provides a financial data sharing method, which ensures the accuracy and pertinence of the data request by receiving a data request and obtaining the corresponding target financial data and the first sharing personnel, and determines the data type corresponding to the target financial data and the corresponding second sharing personnel, which helps to reasonably divide the sharing scope according to the nature and importance of the data, and improves the security and efficiency of data sharing. Then, the sharing personnel corresponding to the data request are determined based on the information of the first sharing personnel, the data type and the second sharing personnel, and the precise positioning of data sharing is achieved. According to the sharing strategy corresponding to the sharing personnel, the target financial data is shared with the corresponding sharing personnel, which ensures the flexibility and pertinence of data sharing.
[0043] In a possible implementation of the embodiment of the present application, in the above step S101, obtaining the first sharing person corresponding to the data request includes: Get the person who requested the data; The requesting person is regarded as the first sharing person corresponding to the data request.
[0044] In the data request, there will be a field for identifying the initiator of the request (different system designs may have different field names, such as "requestor_id" and "user_name", etc.), so the requester can be identified by finding and extracting the value corresponding to this field. For example, if the data request is in JSON format, and contains content such as "{'requestor_id':'user001','data_query':'……'}", the electronic device uses the JSON parsing library to extract the value "user001", which represents the unique identifier of the person who initiated the data request (this identifier can be an employee number, user name, etc., which is used to distinguish different people within the company).
[0045] Furthermore, after the identification information of the requesting person is obtained through the above steps, the person corresponding to the identification will be directly identified as the first sharing person corresponding to this data request.
[0046] In a possible implementation of the embodiment of the present application, in the above step S103, the data type includes a primary data type, a secondary data type, and a tertiary data type, and determining the data type corresponding to the target financial data includes: Identify each data field in the target financial data; Based on each data field, determine the data source and data purpose corresponding to the target financial data; Determine the data type corresponding to the target financial data based on the data source and data usage.
[0047] Among them, the first-level data type is data with a high confidentiality level, the second-level data type is data with a medium confidentiality level, and the third-level data type is data with a low confidentiality level. Specifically, the first-level data type is the highest level and the broadest way to classify financial data. In terms of setting, it usually covers data categories with a high confidentiality level and a significant impact on the overall operation or core business of the enterprise. For example, the core financial strategic planning data of the enterprise and the key budget data of major investment projects belong to the first-level data type category. Such data are often only accessible and used by personnel at specific high-level and key positions within the enterprise to ensure data security and the core interests of the enterprise are not infringed. The second-level data type is a medium-level classification further subdivided on the basis of the first-level data type. The data involved has a slightly lower confidentiality level than the first-level data type. It mainly focuses on the more important financial data classification in a certain business field or a certain management section of the enterprise. For example, under the sales business section of the enterprise, relevant financial data such as sales channel cost analysis and credit assessment of major customers can be classified as second-level data types, and the corresponding sharing scope and access rights will also be limited according to their confidentiality level. The third-level data type is the most detailed level in the classification of financial data. Its confidentiality level is relatively low. It mainly classifies detailed data generated in specific business processes and daily financial operations. For example, the sales details of a specific product and the reimbursement records of daily office expenses are all third-level data types. This type of data is relatively more widely shared within the enterprise and can be used as a reference for more personnel, facilitating basic business analysis and daily management work.
[0048] Specifically, after obtaining the target financial data, first determine its storage format and obtain the parsing method corresponding to the storage format. For example, if the target financial data is stored in a structured database table (such as data stored in common relational databases such as MySQL and Oracle), each row of data records in the query result set can be traversed through the database query language (such as SQL) and the cursor mechanism, and each data field can be identified according to the pre-defined column structure of the database table. If the target financial data is stored in a file format (such as a CSV file, a JSON file, etc.), it can be parsed according to the characteristics of the file format.
[0049] Furthermore, the mapping relationship between each data field and the corresponding data source and the rule analysis engine are obtained from the financial database. After each data field is identified, the data field name is used as the query condition to query in the data dictionary table to obtain the corresponding data source field value, thereby determining its data source. Based on the rule-based analysis engine, for each identified data field, it is input into the analysis engine to determine the corresponding purpose based on rule matching.
[0050] Furthermore, data type mapping rules are obtained from the financial database, and the data type mapping rules define the primary data type, secondary data type, and tertiary data type corresponding to different data sources and data usage combinations. Specifically, the table structure of the rule base is similar to the following form: it contains fields such as "data_source" (data source), "data_usage" (data usage), "level_1_data_type" (primary data type), "level_2_data_type" (secondary data type), and "level_3_data_type" (tertiary data type). When it is determined that the data source of a certain target financial data is "core business system-major project module" and the data usage is "project key decision support", the electronic device performs query matching in the data type mapping rule base, and may find the corresponding primary data type as "project core financial data" (because it is used for key decisions of major projects, the confidentiality level is high, and it belongs to the primary data type), the secondary data type is "project cost-effectiveness data" (relatively refined one level, medium confidentiality level), and the tertiary data type is "project specific cost detail data" (more specific refinement, low confidentiality level). Through such a query matching process, according to the actual determined data source and data usage, the corresponding data types at all levels are found in the rule base, thereby determining the data type of the target financial data.
[0051] A possible implementation manner of the embodiment of the present application, in the above embodiment, determining the second sharing person corresponding to the data type includes: Get the role information corresponding to the data type, including shared departments, shared roles, and role levels; Based on the role information, determine the second sharing person corresponding to the data type.
[0052] Among them, role level is used to measure the position of different job roles within the enterprise in the hierarchical structure.
[0053] The role configuration information table is obtained from the financial database. After the data type of the target financial data is determined, the data type is used as the query condition to execute the SQL query statement in the above table, and the corresponding shared department, shared role and role level information are obtained from the query results. Among them, the role configuration information table is used to record the association between the data type and the role information.
[0054] Furthermore, based on the shared department information obtained in the previous step, connect to the company's employee information database (the database stores the basic information of all employees in the company, their departments, job roles, etc.). For each shared department, perform a query operation to filter out employee records belonging to the department and whose job roles match the shared roles. For example, if the shared department is the "Finance Department" and the shared role is the "Budget Analyst", the query statement in the employee information database is similar to "SELECTemployee_id,employee_nameFROMemployee_tableWHEREdepartment='Finance Department'ANDrole='Budget Analyst'", and obtain the qualified employee ID (such as employee number, user name, etc.) and name information. These employees are the potential second shared personnel initially screened out.
[0055] Furthermore, based on the preliminary screened personnel, the final second shared personnel can be further determined according to the role level. For each person corresponding to a shared role, if his role level meets the corresponding role level requirements previously obtained (for example, the role level is required to be "intermediate" and above), he will be determined as the final second shared personnel. The electronic device performs screening and judgment by comparing the role level field value in the employee record with the role level value in the configuration requirements, and finally determines all qualified personnel, who are the second shared personnel set corresponding to the data type. For example, after screening, "budget analysts" employees in the finance department with a role level of "intermediate" and above, and "project supervisors" employees in the project management department who meet the corresponding role level requirements, together constitute the second shared personnel corresponding to the data type of "important project financial budget data".
[0056] A possible implementation of the embodiment of the present application, in the above embodiment, based on the first sharing person, the data type and the second sharing person, determining the sharing person corresponding to the data request includes: Obtaining the personnel information corresponding to the first shared personnel, the personnel information including the personnel level and personnel department; Determine whether the personnel information meets the role requirements corresponding to the data type; If the personnel information meets the role requirements corresponding to the data type, the first sharing personnel and the second sharing personnel are determined as sharing personnel corresponding to the data request.
[0057] After the first sharing person (the person who initially initiated the data request) is determined, the database storing employee information within the enterprise can be connected. The database contains an employee information table with multiple fields, with common fields such as "employee_id" (unique employee identifier, such as employee number), "employee_name" (employee name), "department" (department), and "rank" (personnel level, which can be determined by pre-set level classification rules, such as numbers 1-5 representing different levels, and the larger the number, the higher the level).
[0058] Furthermore, using the unique identifier of the first shared personnel (previously parsed and obtained from the data request, such as a user name or work number, etc.) as a query condition, the query statement is executed in the employee information table, and the "department" field value is extracted from the query result as the personnel department information, and the "rank" field value is extracted as the personnel rank information, thereby obtaining the personnel information corresponding to the first shared personnel.
[0059] Furthermore, after the data type of the target financial data is determined and the personnel information (personnel department and personnel level) of the first shared personnel is obtained, the data type of the target financial data can be used as a query condition to query the corresponding role requirement record in the role requirement configuration database table. Among them, the role requirement configuration database table records the relevant information of the role requirements corresponding to different data types. If the personnel department of the first shared personnel is within the required department range and the personnel level is also within the required level range, it is determined that the personnel information meets the role requirements corresponding to the data type; otherwise, it is determined that it does not meet the requirements.
[0060] Furthermore, if it is determined that the personnel information of the first sharing person meets the role requirements corresponding to the data type, the first sharing person determined previously and the second sharing person determined according to the established rules are jointly identified as the sharing persons corresponding to this data request.
[0061] A possible implementation of the embodiment of the present application, in the above embodiment, when the personnel information does not meet the role requirements corresponding to the data type, determining the sharing personnel corresponding to the data request based on the first sharing personnel, the data type and the second sharing personnel includes: Determine whether there is instruction information for the first sharing person; If there is no corresponding instruction information for the first sharing person, determining the second sharing person as the sharing person corresponding to the data request; If the first sharing person has corresponding instruction information, the instruction information is identified to obtain instruction data and the instruction person in the instruction information, and based on the instruction data and the instruction person, it is determined whether the first sharing person belongs to the sharing person corresponding to the data request; If the first sharing person is a sharing person corresponding to the data request, the first sharing person and the second sharing person are determined to be sharing persons corresponding to the data request.
[0062] Among them, the approval information is a collection of opinions, instructions, and related explanations given by personnel with corresponding approval authority in response to applications in scenarios involving permission applications, data access applications, etc. within the enterprise.
[0063] Specifically, an approval form containing information related to the approval process is obtained from the financial database. Its structure usually includes key fields such as "requestor_id" (the ID of the person who initiates the request, that is, the ID of the first shared person, such as work number, user name, etc.), "approval_info" (approval information field, used to store approval-related text descriptions, approval status, approval attachments, etc.).
[0064] Furthermore, the first shared person's ID is used as the query condition to perform a query operation in the approval form to check whether the "approval_info" field in the query result has a value. If the field has specific content, it means that there is approval information; if the field value is empty, it is determined that there is no corresponding approval information for the first shared person.
[0065] Further, when it is determined that the first sharing person has no instruction information, the second sharing person is directly used as the sharing person corresponding to the data request.
[0066] When the query finds that the first shared person has corresponding instruction information, that is, when the first shared person has instruction information, the instruction information will be parsed and processed. If the instruction information is stored in text format, text processing technology (such as basic operations such as lexical analysis and syntactic analysis in natural language processing, or simple string segmentation, matching rules and other methods) can be used to extract key content; if the instruction information contains attachments (such as detailed description documents uploaded by the approver, etc.), the corresponding parsing tools (such as PDF parsing library, Office document parsing library, etc.) can be called according to the format of the attachment (such as PDF, Word document, etc.) to extract valuable content, and further improve the understanding of the instruction information and the extraction of key information.
[0067] Furthermore, the extracted instruction data is compared with the target financial data involved in the current data request to check whether the data range allowed to be accessed in the instruction includes the target financial data. At the same time, the legitimacy of the authority of the instruction personnel will be verified, that is, whether the instruction personnel are qualified to approve and authorize the corresponding data type (this can be determined by querying the internal authority approval level configuration table of the enterprise, which records the approval authority relationship between different personnel and different data types).
[0068] After the above analysis and judgment of the instruction information, if it is determined that the first sharing person belongs to the sharing person corresponding to the data request, the first sharing person and the second sharing person are determined as the sharing person corresponding to the data request; if it is determined that the first sharing person does not belong to the sharing person corresponding to the data request, the second sharing person is determined as the sharing person corresponding to the data request.
[0069] A possible implementation of the embodiment of the present application, in the above embodiment, in the above step S104, determining the sharing strategy corresponding to the sharing personnel includes: Determine the access level for each sharer based on the data type; Based on the access level corresponding to each sharing person, a sharing policy corresponding to the sharing person is generated.
[0070] Specifically, the sharing policy configuration information is obtained from the financial database. For each determined shared person and data type of the target financial data, the data type and the shared person's identifier can be used as joint query conditions to perform query operations in the above configuration table (for example, using the statement "SELECT access_level FROM access_config_table WHERE data_type = [target data type] AND shared_person_id = [shared person identifier]" in SQL).
[0071] The corresponding "access_level" field value is obtained through the query results, that is, the corresponding access level of each sharing personnel is determined. For example, if the data type of the target financial data is "important project budget data" (a first-level data type with a high confidentiality level), and the "access_level" field value in the query result of the sharing personnel with the employee number "001" is "read-only", it means that the sharing personnel only have the permission to view this type of data, and cannot modify, delete or download it.
[0072] Furthermore, a complete sharing strategy is constructed based on the access level corresponding to each determined sharing personnel and combined with the preset general rules. More specifically, if the access level of a sharing personnel is "read-only", the sharing strategy generation module will configure the corresponding policy content so that the target financial data can only be accessed through a specific read-only data viewing interface. The interface only provides data display functions and does not have operation buttons such as edit, delete, and download. In addition, the data records and viewing time of each viewing are recorded in the background for subsequent audit tracing.
[0073] When the access level of the shared personnel is "read and write", in addition to providing data viewing functions, data editing and saving functions will be opened on the corresponding operation interface. At the same time, a strict data verification mechanism will be set up (such as numerical format verification, logical relationship verification, etc.) to ensure that the modified data complies with financial regulations. Detailed operation logs are also recorded, including data content before and after modification, modification time, operator and other information.
[0074] For sharing personnel with "downloadable" access level, while allowing them to download target financial data through a secure file download channel (such as using encrypted transmission protocols, identity authentication, etc. to ensure download security), the downloaded data format (such as CSV format, Excel format, etc.) and data range restrictions (such as only being able to download data for the past year, etc.) will also be specified, and detailed download-related information (such as download time, downloaded data file name, etc.) will be recorded in the log.
[0075] The above embodiment introduces a financial data sharing method from the perspective of method flow, and the following embodiment introduces a financial data sharing device from the perspective of a virtual module or a virtual unit. Please refer to the following embodiment for details.
[0076] See also Figure 2 The financial data sharing device 20 may specifically include: a receiving module 201, a first determining module 202, a second determining module 203 and a sharing module 204. Specifically: A financial data sharing device 20, comprising: The receiving module 201 is used to receive a data request, obtain target financial data corresponding to the data request, and obtain a first sharing person corresponding to the data request; A first determination module 202 is used to determine a data type corresponding to the target financial data, and determine a second sharing person corresponding to the data type; A second determination module 203, configured to determine a sharing person corresponding to the data request based on the first sharing person, the data type and the second sharing person; The sharing module 204 is used to determine the sharing strategy corresponding to the sharing personnel, and share the target financial data to the corresponding sharing personnel based on the sharing strategy.
[0077] In a possible implementation of the embodiment of the present application, the data type includes a primary data type, a secondary data type, and a tertiary data type. When the first determination module 202 determines the data type corresponding to the target financial data, it can be specifically used to: Identify each data field in the target financial data; Based on each data field, determine the data source and data purpose corresponding to the target financial data; Determine the data type corresponding to the target financial data based on the data source and data usage.
[0078] In a possible implementation of the embodiment of the present application, when the first determination module 202 determines the second sharing person corresponding to the data type, it can be specifically used to: Get the role information corresponding to the data type, including shared departments, shared roles, and role levels; Based on the role information, determine the second sharing person corresponding to the data type.
[0079] In a possible implementation of the embodiment of the present application, when the second determination module 203 determines the sharing person corresponding to the data request based on the first sharing person, the data type, and the second sharing person, it can be specifically used to: Obtaining the personnel information corresponding to the first shared personnel, the personnel information including the personnel level and personnel department; Determine whether the personnel information meets the role requirements corresponding to the data type; If the personnel information meets the role requirements corresponding to the data type, the first sharing personnel and the second sharing personnel are determined as sharing personnel corresponding to the data request.
[0080] In a possible implementation of the embodiment of the present application, when the personnel information does not meet the role requirements corresponding to the data type, the second determination module 203 determines the sharing personnel corresponding to the data request based on the first sharing personnel, the data type and the second sharing personnel, and specifically can be used to: Determine whether there is instruction information for the first sharing person; If there is no corresponding instruction information for the first sharing person, determining the second sharing person as the sharing person corresponding to the data request; If the first sharing person has corresponding instruction information, the instruction information is identified to obtain instruction data and the instruction person in the instruction information, and based on the instruction data and the instruction person, it is determined whether the first sharing person belongs to the sharing person corresponding to the data request; If the first sharing person is a sharing person corresponding to the data request, the first sharing person and the second sharing person are determined to be sharing persons corresponding to the data request.
[0081] In a possible implementation of the embodiment of the present application, when the sharing module 204 determines the sharing strategy corresponding to the sharing personnel, it can be specifically used to: Determine the access level for each sharer based on the data type; Based on the access level corresponding to each sharing person, a sharing policy corresponding to the sharing person is generated.
[0082] In a possible implementation of the embodiment of the present application, when the receiving module 201 obtains the first sharing person corresponding to the data request, it can be specifically used to: Get the person who requested the data; The requesting person is regarded as the first sharing person corresponding to the data request.
[0083] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.
[0084] See also Figure 3 , the embodiment of the present application also introduces an electronic device from the perspective of a physical device, such as Figure 3 As shown, Figure 3 The electronic device 300 shown includes: a processor 301 and a memory 303. The processor 301 and the memory 303 are connected, such as through a bus 302. Optionally, the electronic device 300 may also include a transceiver 304. It should be noted that in actual applications, the transceiver 304 is not limited to one, and the structure of the electronic device 300 does not constitute a limitation on the embodiments of the present application.
[0085] The processor 301 may be a CPU (Central Processing Unit), a general-purpose processor, a DSP (Digital Signal Processor), an ASIC (Application Specific Integrated Circuit), an FPGA (Field Programmable Gate Array) or other programmable logic devices, transistor logic devices, hardware components or any combination thereof. It may implement or execute various exemplary logic blocks, modules and circuits described in conjunction with the disclosure of this application. The processor 301 may also be a combination that implements computing functions, such as a combination of one or more microprocessors, a combination of a DSP and a microprocessor, etc.
[0086] The bus 302 may include a path to transmit information between the above components. The bus 302 may be a PCI (Peripheral Component Interconnect) bus or an EISA (Extended Industry Standard Architecture) bus. The bus 302 may be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Figure 3Only one thick line is used in the diagram, but this does not mean that there is only one bus or only one type of bus.
[0087] The memory 303 may be a ROM (Read Only Memory) or other types of static storage devices that can store static information and instructions, a RAM (Random Access Memory) or other types of dynamic storage devices that can store information and instructions, or an EEPROM (Electrically Erasable Programmable Read Only Memory), a CD-ROM (Compact Disc Read Only Memory) or other optical disk storage, optical disk storage (including compressed optical disk, laser disk, optical disk, digital versatile disk, Blu-ray disk, etc.), a magnetic disk storage medium or other magnetic storage device, or any other medium that can be used to carry or store the desired program code in the form of instructions or data structures and can be accessed by a computer, but is not limited thereto.
[0088] The memory 303 is used to store the application code for executing the solution of the present application, and the execution is controlled by the processor 301. The processor 301 is used to execute the application code stored in the memory 303 to implement the contents shown in the above method embodiment.
[0089] The electronic devices include but are not limited to: mobile phones, laptop computers, digital broadcast receivers, PDAs (personal digital assistants), PADs (tablet computers), PMPs (portable multimedia players), vehicle-mounted terminals (such as vehicle-mounted navigation terminals), etc., and fixed terminals such as digital TVs, desktop computers, etc., and can also be servers, etc. Figure 3 The electronic device shown is merely an example and should not bring any limitation to the functions and scope of use of the embodiments of the present application.
[0090] An embodiment of the present application provides a computer-readable storage medium, on which a computer program is stored. When the computer-readable storage medium is run on a computer, the computer can execute the corresponding content in the aforementioned method embodiment.
[0091] It should be understood that, although the steps in the flowchart of the accompanying drawings are displayed in sequence as indicated by the arrows, these steps are not necessarily executed in sequence in the order indicated by the arrows. Unless otherwise specified herein, there is no strict order restriction on the execution of these steps, and they can be executed in other orders. Moreover, at least a part of the steps in the flowchart of the accompanying drawings may include multiple sub-steps or multiple stages, and these sub-steps or stages are not necessarily executed at the same time, but can be executed at different times, and their execution order is not necessarily sequential, but can be executed in turn or alternately with other steps or at least a part of the sub-steps or stages of other steps.
[0092] The above are only some implementation methods of the present application. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the present application. These improvements and modifications should also be regarded as the scope of protection of the present application.
Claims
1. A financial data sharing method, characterized in that: include: Receive a data request, obtain target financial data corresponding to the data request, and obtain a first sharing person corresponding to the data request; Determine a data type corresponding to the target financial data, and determine a second sharing person corresponding to the data type; Determine a sharing person corresponding to the data request based on the first sharing person, the data type, and the second sharing person; Determine a sharing strategy corresponding to the sharing personnel, and share the target financial data to the corresponding sharing personnel based on the sharing strategy.
2. The financial data sharing method according to claim 1, characterized in that: The data types include primary data types, secondary data types, and tertiary data types. Determining the data type corresponding to the target financial data includes: identifying each data field in the target financial data; Based on each data field, determine the data source and data purpose corresponding to the target financial data; Based on the data source and the data usage, the data type corresponding to the target financial data is determined.
3. The financial data sharing method according to claim 2, characterized in that: The determining the second sharing person corresponding to the data type includes: Acquire role information corresponding to the data type, the role information including shared departments, shared roles, and role levels; Based on the role information, a second sharing person corresponding to the data type is determined.
4. The financial data sharing method according to claim 3, characterized in that: The determining, based on the first sharing person, the data type, and the second sharing person, a sharing person corresponding to the data request includes: Acquire personnel information corresponding to the first shared personnel, the personnel information including personnel level and personnel department; Determining whether the personnel information meets the role requirements corresponding to the data type; If the personnel information meets the role requirement corresponding to the data type, the first sharing personnel and the second sharing personnel are determined to be sharing personnel corresponding to the data request.
5. The financial data sharing method according to claim 4, characterized in that: When the personnel information does not meet the role requirement corresponding to the data type, determining the sharing personnel corresponding to the data request based on the first sharing personnel, the data type, and the second sharing personnel includes: Determine whether there is instruction information for the first sharing person; If there is no corresponding instruction information for the first sharing person, determining the second sharing person as the sharing person corresponding to the data request; If the first sharing person has corresponding instruction information, identifying the instruction information to obtain instruction data and the instruction person in the instruction information, and determining whether the first sharing person belongs to the sharing person corresponding to the data request based on the instruction data and the instruction person; If the first sharing person is a sharing person corresponding to the data request, the first sharing person and the second sharing person are determined to be sharing persons corresponding to the data request.
6. The method for determining financial data sharing according to claim 1, characterized in that: The determining of the sharing strategy corresponding to the sharing personnel includes: Based on the data type, determining the access level corresponding to each of the sharing personnel; Based on the access degree corresponding to each of the sharing personnel, a sharing strategy corresponding to the sharing personnel is generated.
7. The financial data sharing method according to claim 1, characterized in that: The obtaining the first sharing person corresponding to the data request includes: Obtain the requester corresponding to the data request; The requesting person is taken as the first sharing person corresponding to the data request.
8. A financial data sharing device, characterized in that: include: A receiving module, used to receive a data request, obtain target financial data corresponding to the data request, and obtain a first sharing person corresponding to the data request; A first determination module is used to determine a data type corresponding to the target financial data, and determine a second sharing person corresponding to the data type; A second determining module, configured to determine a sharing person corresponding to the data request based on the first sharing person, the data type and the second sharing person; The sharing module is used to determine the sharing strategy corresponding to the sharing personnel, and share the target financial data to the corresponding sharing personnel based on the sharing strategy.
9. An electronic device, characterized in that: The electronic device includes: at least one processor; Memory; At least one application, wherein the at least one application is stored in a memory and configured to be executed by at least one processor, and the at least one application is configured to: execute the financial data sharing method according to any one of claims 1 to 7.
10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed in a computer, the computer is caused to execute the financial data sharing method according to any one of claims 1 to 7.
Citation Information
Patent Citations
Enforcing data sharing policy through shared data management
US20120324529A1