A digital economy risk management assessment method and system

Abstract

The present invention is applicable to the field of risk management and assessment technology, and in particular relates to a digital economy risk management and assessment method and system, the method comprising: constructing a repository for storing digital economic data, setting up a data management platform, receiving call requests uploaded by users, identifying access devices, and reading out the software and hardware features of the access devices, wherein the software and hardware features at least include: processor identifier, hard disk serial number, browser information, administrator name, and device IP; configuring a splicing sequence, and splicing the software and hardware features to obtain a device feature code. By determining the permission type, the present invention can refine the permissions of the digital economy, thereby achieving more detailed permission management. By determining the target permissions and exception logs, it can perform a risk assessment on the calling process of digital economic data, ensure the security of data calling, and greatly improve the credibility and security of the digital economy.

Description

Technical Field

[0001] The present invention relates to the field of risk management and assessment technology, and in particular to a digital economy risk management and assessment method and system. Background Art

[0002] Digital economy refers to an economic form that takes data as the key production factor, digital technology as the core driving force, and modern information networks as important carriers. The digital economy relies on technologies such as the Internet, cloud computing, big data, artificial intelligence, and blockchain. It improves resource allocation efficiency through information technology, promotes the transformation and upgrading of traditional industries, and at the same time gives birth to new industries and new business models, such as e-commerce, online education, digital finance, and intelligent manufacturing.

[0003] Permission management is a core link in the digital economy. It involves multiple aspects such as data access, use, storage and sharing. Through permission management, it can ensure that different entities (users and enterprises, etc.) can obtain and use data within a reasonable range. The existing permission management methods are generally relatively broad; for example, sales personnel have the permission to review, modify and report sales data, but it is impossible to assign permissions specifically to each person and each data, which can easily lead to data leakage risks and permission abuse.

[0004] Therefore, “how to refine authority allocation and identify abnormal risks in a timely manner” is the technical problem that the present invention needs to solve. Summary of the Invention

[0005] The purpose of the present invention is to provide a digital economy risk management assessment method and system to solve the problem raised in the above background technology: "how to refine authority allocation and identify abnormal risks in a timely manner."

[0006] To achieve the above object, the present invention provides the following technical solutions:

[0007] A digital economy risk management assessment method, the method comprising:

[0008] Build a repository for storing digital economic data, establish a data management platform, receive call requests uploaded by users, identify access devices, and read the software and hardware characteristics of access devices, where the software and hardware characteristics include at least: processor identifier, hard disk serial number, browser information, administrator name, and device IP address;

[0009] Configure a splicing order and splice the software and hardware features to obtain a device feature code, obtain a management number consisting of several arrays, traverse the characters corresponding to each array in the device feature code, and integrate them to obtain an identification code, determine whether the same identification code exists, and if so, insert an additional group into the management number;

[0010] Establishing a correspondence between the management number, the device feature code, and the identification code, and setting permission types for the storage library, wherein the permission types include at least: access, edit, approve, delete, and share, and each permission type corresponds to a management number;

[0011] Reading the call log of digital economic data through the data management platform, tracing back to the source device corresponding to the call log, and generating a comparison code to determine whether there is an identification code that is the same as the comparison code;

[0012] If yes, define the permission type corresponding to the comparison code as the target permission, determine whether the call log meets the target permission, and if not, define the call log as an abnormal log and send it to the preset terminal;

[0013] If not, the call log is directly marked as an abnormal log.

[0014] Furthermore, the steps of constructing a repository for storing digital economic data and building a data management platform include:

[0015] Dividing the storage repository into a plurality of partitions, wherein the partitions include at least: a hot zone and a cold zone;

[0016] The usage frequency of the digital economic data is calculated, and when the usage frequency is greater than a threshold, the corresponding digital economic data is migrated to a hot zone.

[0017] Furthermore, the steps of receiving the call request uploaded by the user, identifying the access device, and reading the software and hardware characteristics of the access device include:

[0018] Configuring the usage scenario of the access device and obtaining historical login data of the access device;

[0019] Determine whether the usage scenario has abnormal characteristics. If so, define the usage scenario as an abnormal scenario and trigger a pre-built secondary verification mechanism.

[0020] Furthermore, the step of inserting an additional group into the management number includes:

[0021] Traversing the administrator account of the data management platform and sending a query pop-up window to the administrator account;

[0022] Obtain feedback information of the administrator account, determine the additional group, and update the identifier.

[0023] Furthermore, the step of establishing a correspondence between the management number, the device feature code, and the identification code, and setting the permission type of the storage library includes:

[0024] Creating a root node, synchronizing the device feature code to the root node, calculating the number of the permission types, and defining it as the total number of permissions;

[0025] Create the same number of parent nodes as the total number of permissions, and upload the corresponding permission types to the parent nodes;

[0026] Mount the parent node to the root node, mount child nodes to each parent node, integrate the identification codes corresponding to all access devices to obtain an index set, and upload the index set to the corresponding child nodes;

[0027] The root node, parent node and child node are integrated to generate a rights management tree.

[0028] Furthermore, the step of reading the call log of the digital economic data via the data management platform, tracing back the source device corresponding to the call log, and generating a comparison code includes:

[0029] Read the accessed data and the corresponding permission type from the call log, and define the corresponding child node as the target node;

[0030] The rights management tree is traversed to determine whether the comparison code is stored in the target node.

[0031] Furthermore, the method further comprises:

[0032] Configure the risk level corresponding to each permission type and create emergency response rules that correspond to the risk level;

[0033] Integrate the risk levels, exception logs and emergency handling rules to generate a management assessment report and send it to a preset terminal.

[0034] Furthermore, the system includes:

[0035] A construction module is used to build a repository for storing digital economic data, establish a data management platform, receive call requests uploaded by users, identify access devices, and read the software and hardware characteristics of access devices, where the software and hardware characteristics include at least: processor identifier, hard disk serial number, browser information, administrator name, and device IP address;

[0036] An insertion module is used to configure a splicing order and splice the software and hardware features to obtain a device feature code, obtain a management number composed of several arrays, traverse the characters corresponding to each array in the device feature code, and integrate them to obtain an identification code, determine whether the same identification code exists, and if so, insert an additional group into the management number;

[0037] An establishment module is used to establish a correspondence between the management number, the device feature code and the identification code, and set the permission type of the storage library, wherein the permission type includes at least: access, edit, approve, delete and share, and each permission type corresponds to a management number;

[0038] A definition module is used to read the call log of digital economic data through the data management platform, trace back the source device corresponding to the call log, and generate a comparison code to determine whether there is an identification code that is the same as the comparison code. If so, the permission type corresponding to the comparison code is defined as the target permission, and whether the call log complies with the target permission is determined. If not, the call log is defined as an exception log and sent to a preset terminal. If not, the call log is directly marked as an exception log.

[0039] Furthermore, the building blocks include:

[0040] A partitioning unit, configured to partition the storage repository into a plurality of partitions, wherein the partitions include at least a hot zone and a cold zone;

[0041] a migration unit, configured to calculate the usage frequency of digital economic data, and when the usage frequency is greater than a threshold, migrate the corresponding digital economic data to a hot zone;

[0042] An access unit, configured to configure a usage scenario of the access device and obtain historical login data of the access device;

[0043] The judging unit is configured to judge whether the usage scenario has abnormal features. If so, the usage scenario is defined as an abnormal scenario and a pre-built secondary verification mechanism is triggered.

[0044] Furthermore, the insertion module includes:

[0045] An inquiry unit, configured to traverse the administrator account of the data management platform and send an inquiry pop-up window to the administrator account;

[0046] An updating unit is configured to obtain feedback information of the administrator account, determine an additional group, and update the identifier.

[0047] Compared with the prior art, the present invention has the following beneficial effects:

[0048] By building a data management platform, permissions can be bound to specific devices to ensure that only specific devices can access certain resources, thereby precisely controlling access rights and greatly improving data security. By determining identifiers, access devices can be quantitatively managed while achieving comprehensive monitoring of all access devices, further improving data security. By determining permission types, digital economic permissions can be refined to achieve more detailed permission management. By determining target permissions and exception logs, risk assessments can be conducted on the calling process of digital economic data to ensure the security of data calls, greatly improving the credibility and security of the digital economy. BRIEF DESCRIPTION OF THE DRAWINGS

[0049] Figure 1 A flowchart of a digital economy risk management assessment method provided by an embodiment of the present invention;

[0050] Figure 2 A block diagram of the first sub-process of the digital economy risk management assessment method provided by an embodiment of the present invention;

[0051] Figure 3 A block diagram of the second sub-process of the digital economy risk management assessment method provided by an embodiment of the present invention;

[0052] Figure 4 A block diagram of the third sub-process of the digital economy risk management assessment method provided by an embodiment of the present invention;

[0053] Figure 5 This is a block diagram of the fourth sub-process of the digital economy risk management assessment method provided by an embodiment of the present invention;

[0054] Figure 6 A block diagram of the digital economy risk management and assessment system provided by an embodiment of the present invention;

[0055] Figure 7 A block diagram of the components of the building blocks in the digital economy risk management and assessment system provided by an embodiment of the present invention;

[0056] Figure 8 A block diagram of the components of the insertion module in the digital economy risk management and assessment system provided by an embodiment of the present invention;

[0057] Figure 9 A block diagram of the components of the establishment module in the digital economy risk management and assessment system provided by an embodiment of the present invention;

[0058] Figure 10 This is a block diagram of the composition of the definition modules in the digital economic risk management and assessment system provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0059] In order to make the purpose, technical solutions and advantages of the present invention more clearly understood, the present invention will be further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not intended to limit the present invention.

[0060] In Example 1, Figure 1 The implementation process of the digital economy risk management assessment method provided by an embodiment of the present invention is shown and described in detail below:

[0061] S100: Build a repository for storing digital economic data, set up a data management platform, receive call requests uploaded by users, identify access devices, and read out the software and hardware features of the access devices, where the software and hardware features include at least: processor identifier, hard disk serial number, browser information, administrator name and device IP.

[0062] Create a database system for storing, managing and retrieving digital economic data, namely a repository, build a data management platform, and implement the classification, indexing, access control and processing of digital economic data. After receiving the call request uploaded by the user, parse the device identification information in the request, such as MAC address, IMEI and IP address; determine the user's access device and read the software and hardware features of the access device; the digital economic data can be enterprise operation data, user behavior data and financial transaction data; in the data management platform, open the registration mechanism, and after the user verification is completed, determine the role and corresponding permissions of each user, where the permissions should be specific to the basic data, that is, a picture, a file or a chart.

[0063] S200: Configure the splicing order and splice the software and hardware features to obtain a device feature code, obtain a management number consisting of several arrays, traverse the characters corresponding to each array in the device feature code, and integrate them to obtain an identification code, determine whether the same identification code exists, and if so, insert an additional group into the management number.

[0064] After determining the characteristics of software and hardware, the acquired characteristic information is standardized, all data is converted into a unified coding format, and the software and hardware characteristics are spliced ​​according to a preset splicing order, such as splicing in the order of "processor identifier-hard disk serial number-browser information-administrator name-device IP"; the specific splicing order is determined by the data management platform administrator, and the specific values ​​of the software and hardware characteristics obtained after splicing are defined as the device characteristic code; the management number is determined, where the management number is also determined by the data management platform administrator. The management number consists of several arrays. In the device characteristic code, the characters corresponding to each array are found, and the corresponding characters are integrated to obtain the identifier.

[0065] For example, the software and hardware features of access device X are sorted in the order of "processor identifier-hard disk serial number-browser information-administrator name-device IP". Assume that the obtained device feature code is: Intel_i7-10700K-SN-XYZ987654321-Chrome_120.0.6099.199_Win10-xiaoming-192.168.1.100; there are four arrays 02, 05, 16 and 11 (management number is 02051621), then the 2nd, 5th, 16th and 11th characters are found from the device feature code to obtain the identifier nlN-7 (excluding the separator); in other words, when managing digital economic data, nlN-7 is used to characterize the access device.

[0066] If there are two identical access devices, more arrays are inserted into the management number, where the inserted arrays are additional groups. It should be noted that the division of the arrays is determined by the management personnel. In the management number, the arrays do not have to be arranged in ascending order, and the additional group can be inserted at any position in the management number.

[0067] S300: Establishing a correspondence between a management number, a device feature code, and an identification code, and setting permission types for the repository, wherein the permission types include at least: access, edit, approve, delete, and share, and each permission type corresponds to a management number.

[0068] Establish a correspondence between the management number, device feature code and identification code, and store this correspondence in the data management platform; it should be noted that each access device corresponds to at least one permission type.

[0069] In this application, using the existing technology as an example, assume that a repository stores A: a monthly sales report for an online store, B: a user's behavioral data spreadsheet in the store, C: a quality inspection report for defective products at a factory, and D: a user's financial payment data. Furthermore, in the data management platform, user A's commonly used device (assuming identifier nlN-7) can access and modify data A, B, and D, while user B's commonly used device (assuming identifier 3-l-6-1) can access, approve, delete, and share data C. If the permission type corresponding to the management number is set to access, then for management number 02051621, the resulting identifier set is shown in Table 1 below.

[0070] Table 1:

[0071]

[0072] Set a management number again (such as 0214152342), and the corresponding permission type is modification, and obtain the identification compliance set shown in Table 2 below.

[0073] Table 2:

[0074]

[0075] Among them, Table 1 is the identification set corresponding to A, B, C and D when the management number is: 02051621 and the permission type is view; Table 2 is the identification set corresponding to A, B, C and D when the management number is: 0214152342 and the permission type is modify.

[0076] It can be seen from this that by setting multiple groups of management numbers and integrating the identifiers of all access devices, an identification compliance set is obtained (each permission type corresponds to an identification compliance set). When accessing data, the management number is queried to calculate the identifier of the current device, and it is determined whether this identifier is in the identification compliance set of the corresponding permission. If so, it means that the user has the permission to use the corresponding permission type to process the required access data.

[0077] Assume that by querying the management number, the identifier of the current device is TL-8-I, which is neither in Table 1 nor in Table 2. This means that the current device has no permission to view and modify A, B, C, and D.

[0078] S400: Read the call log of digital economic data through the data management platform, trace back the source device corresponding to the call log, and generate a comparison code to determine whether there is an identification code that is the same as the comparison code; if so, define the permission type corresponding to the comparison code as the target permission, and determine whether the call log complies with the target permission. If not, define the call log as an abnormal log and send it to the preset terminal. If not, directly mark the call log as an abnormal log.

[0079] Extract key information from the call log of digital economic data, such as the call time, the IP address of the calling device, the call data and the specific operation, determine the source device based on the IP address, and calculate the comparison code of the source device in accordance with the method in S200; according to the permission type (target permission) in the specific operation, judge whether the corresponding identification is centralized and whether there is an identifier identical to the comparison code. If so, it means that this data call and device behavior meet the permission management requirements. If not, the call log is defined as an exception log and the exception log is sent to the preset terminal, where the preset terminal is the data management platform administrator terminal.

[0080] In this application, by constructing an identification code set and storing it in the form of a single text, it is possible to manage different permission types for different devices. At this time, if the user has multiple devices, a different permission type should be configured for each device.

[0081] In Example 2, Figure 2 The implementation process of the digital economy risk management assessment method provided by an embodiment of the present invention is shown. The steps of constructing a repository for storing digital economy data and setting up a data management platform are described in detail below:

[0082] S101: Divide the storage repository into several partitions, wherein the partitions include at least a hot zone and a cold zone.

[0083] In the data management platform, the repository is divided into several partitions, including at least hot and cold zones. The hot zone is mainly used to store frequently accessed and updated digital economic data, and is usually deployed on high-performance storage media, such as solid-state drives; the cold zone is mainly used to store infrequently accessed digital economic data, which has a low access frequency, and is usually deployed on traditional hard drives with larger capacity.

[0084] S102: Calculate the usage frequency of digital economic data, and when the usage frequency is greater than a threshold, migrate the corresponding digital economic data to a hot zone.

[0085] The usage frequency of each digital economic data is calculated. If the usage frequency is greater than the threshold, the corresponding digital economic data will be synchronized to the hot zone. Otherwise, it will be placed in the cold zone.

[0086] In Example 3, Figure 2 The implementation process of the digital economy risk management assessment method provided by an embodiment of the present invention is shown. The following details the steps of receiving a call request uploaded by a user, identifying an access device, and reading the software and hardware characteristics of the access device.

[0087] S103: Configure the usage scenario of the access device and obtain historical login data of the access device.

[0088] Based on the correspondence between the identifier and the access device, the user's usage scenario is determined, where the usage scenarios are divided into: common scenarios and uncommon scenarios; historical login data of the access device is obtained. The historical login data includes: login time, IP address at the time of login, operating system version of the login device, browser information, etc. These historical login data can help users identify abnormal or frequent login behaviors of the access device.

[0089] S104: Determine whether the usage scenario has abnormal features. If so, define the usage scenario as an abnormal scenario and trigger a pre-built secondary verification mechanism.

[0090] Determine whether there are any abnormal features in the user's usage scenario and login data. If so, activate the secondary verification mechanism to verify the user's identity again; the specific verification method is not limited.

[0091] In Example 4, Figure 3 The implementation process of the digital economy risk management assessment method provided by an embodiment of the present invention is shown. The steps of inserting the additional group into the management number are described in detail as follows:

[0092] S201: Traverse the administrator account of the data management platform and send a query pop-up window to the administrator account.

[0093] Based on the role of each user, the administrator is identified, a query pop-up window is pushed to the administrator account, and the additional groups entered by the administrator in the query pop-up window are received.

[0094] S202: Obtain feedback information of the administrator account, determine an additional group, and update the identifier.

[0095] The additional group is extracted from the feedback information and the identifier is updated, wherein the additional group can be inserted at any position in the identifier.

[0096] In Example 5, Figure 4 The implementation process of the digital economy risk management assessment method provided by an embodiment of the present invention is shown. The steps of establishing the correspondence between the management number, the device feature code, and the identification code, and setting the permission type of the repository are described in detail below:

[0097] S301: Create a root node, synchronize the device feature code to the root node, calculate the number of the permission types, and define it as the total number of permissions.

[0098] Create a root node and synchronize the device signature to it. Calculate the number of permission types to obtain the total number of permissions. The root node is the basic structure for storing data and is mainly used to represent access devices. If the permission types are: access, edit, approve, and delete, the total number of permissions is 4.

[0099] S302: Create the same number of parent nodes as the total number of permissions, and upload the corresponding permission types to the parent nodes.

[0100] Create a parent node corresponding to each permission type, where the parent node has the same data structure as the root node, and is mainly used to display the permission type possessed by each access device.

[0101] S303: Mount the parent node to the root node, mount child nodes to each parent node, integrate identification codes corresponding to all access devices to obtain an index set, and upload the index set to the corresponding child nodes.

[0102] Mount the parent node to the root node and create a child node. The child node also has the same data structure as the root node. Mount the child node to the parent node. It should be noted that there are multiple parent nodes mounted under each root node, and each parent node has only one child node mounted under it.

[0103] S304: Integrate the root node, parent node and child node to generate a rights management tree.

[0104] A permission management tree is generated using the root node, parent node, and child node. The permission management tree is similar to a binary tree and can quickly perform permission verification.

[0105] In Example 6, Figure 5 The implementation process of the digital economy risk management assessment method provided by an embodiment of the present invention is shown. The following details the steps of reading the call log of digital economic data via the data management platform, tracing back the source device corresponding to the call log, and generating a comparison code, as follows:

[0106] S401: Read the accessed data and the corresponding permission type from the call log, and define the corresponding child node as the target node.

[0107] When verifying the call log, find out the accessed data and the corresponding permission type corresponding to the call log, and locate the corresponding root node based on the source device.

[0108] S402: Traverse the rights management tree to determine whether the comparison code is stored in the target node.

[0109] Define the child node under the found root node as the target node, and determine whether the comparison code is stored in the target node. If so, continue to determine whether the permission type corresponding to the child node is the same as the permission type corresponding to the accessed data. If they are the same, it means that this data call and device behavior meet the permission management requirements.

[0110] In Example 7, different from Example 1, in this embodiment of the present invention, the method further includes:

[0111] Configure the risk level corresponding to each permission type and create emergency response rules that correspond to the risk level;

[0112] Integrate the risk levels, exception logs and emergency handling rules to generate a management assessment report and send it to a preset terminal.

[0113] Each permission type corresponds to a risk level, and each risk level corresponds to an emergency response rule. The emergency response rules are formulated by the data management platform administrator. The risk level, exception log and emergency response rules are written into the preset template, and a management assessment report is generated and sent to the preset terminal, where the preset terminal is the data management platform administrator terminal.

[0114] For example, continuing to elaborate on the example in S300, it is assumed that the risk level corresponding to C is high, and the emergency response rule is: when a data leak occurs, the data leak incident is reported to the relevant department in a timely manner.

[0115] Figure 6 The following is a structural block diagram of a digital economy risk management and assessment system according to an embodiment of the present invention. The digital economy risk management and assessment system 1 includes:

[0116] Construction module 11 is used to build a repository for storing digital economic data, establish a data management platform, receive call requests uploaded by users, identify access devices, and read the software and hardware characteristics of the access devices, where the software and hardware characteristics include at least: processor identifier, hard disk serial number, browser information, administrator name, and device IP address;

[0117] Insertion module 12, configured to configure a splicing order and splice the software and hardware features to obtain a device feature code, obtain a management number consisting of a plurality of arrays, traverse the characters corresponding to each array in the device feature code, integrate them to obtain an identification code, determine whether the same identification code exists, and if so, insert an additional group into the management number;

[0118] Establishing module 13, for establishing a correspondence between the management number, the device feature code and the identification code, and setting the permission type of the storage library, wherein the permission type includes at least: access, edit, approve, delete and share, and each permission type corresponds to a management number;

[0119] The definition module 14 is used to read the call log of digital economic data through the data management platform, trace back the source device corresponding to the call log, and generate a comparison code to determine whether there is an identification code that is the same as the comparison code. If so, the permission type corresponding to the comparison code is defined as the target permission, and whether the call log meets the target permission is determined. If not, the call log is defined as an exception log and sent to the preset terminal. If not, the call log is directly marked as an exception log.

[0120] Figure 7 The following is a structural block diagram of the digital economy risk management and assessment system provided by an embodiment of the present invention. The building block 11 includes:

[0121] A partitioning unit 111 is configured to partition the storage repository into a plurality of partitions, wherein the partitions include at least a hot zone and a cold zone;

[0122] A migration unit 112 is configured to calculate the usage frequency of digital economic data and, when the usage frequency is greater than a threshold, migrate the corresponding digital economic data to a hot zone;

[0123] An access unit 113 is configured to configure a usage scenario of the access device and obtain historical login data of the access device;

[0124] The judging unit 114 is configured to judge whether the usage scenario has abnormal features. If so, the usage scenario is defined as an abnormal scenario and a pre-built secondary verification mechanism is triggered.

[0125] Figure 8 The following is a structural block diagram of the digital economy risk management and assessment system provided by an embodiment of the present invention. The insertion module 12 includes:

[0126] An inquiry unit 121 is configured to traverse the administrator account of the data management platform and send an inquiry pop-up window to the administrator account;

[0127] The updating unit 122 is configured to obtain feedback information of the administrator account, determine an additional group, sort the array and the additional group in ascending order, and update the identifier according to the sorting result.

[0128] Figure 9 The following is a structural block diagram of the digital economy risk management and assessment system provided by an embodiment of the present invention. The establishment module 13 includes:

[0129] The calculation unit 131 is used to create a root node, synchronize the device feature code to the root node, calculate the number of the permission types, and define it as the total number of permissions;

[0130] An uploading unit 132 is configured to create the same number of parent nodes as the total number of permissions, and upload the corresponding permission types to the parent nodes;

[0131] The obtaining unit 133 is configured to mount the parent node to the root node, mount child nodes to each parent node, integrate identification codes corresponding to all access devices, obtain an index set, and upload the index set to the corresponding child nodes;

[0132] The integration unit 134 is configured to integrate the root node, parent node, and child node to generate a rights management tree.

[0133] Figure 10The following is a structural block diagram of the digital economy risk management and assessment system provided by an embodiment of the present invention. The definition module 14 includes:

[0134] The reading unit 141 is used to read the accessed data and the corresponding permission type from the call log, and define the corresponding child node as the target node;

[0135] The traversal unit 142 is configured to traverse the rights management tree and determine whether the comparison code is stored in a target node.

[0136] The construction module 11 is mainly used to complete step S100, the insertion module 12 is mainly used to complete step S200, the establishment module 13 is mainly used to complete step S300, and the definition module 14 is mainly used to complete step S400;

[0137] The segmentation unit 111 is mainly used to complete step S101, the migration unit 112 is mainly used to complete step S102, the access unit 113 is mainly used to complete step S103, and the judgment unit 114 is mainly used to complete step S104;

[0138] The query unit 121 is mainly used to complete step S201, and the update unit 122 is mainly used to complete step S202;

[0139] The calculation unit 131 is mainly used to complete step S301, the uploading unit 132 is mainly used to complete step S302, the obtaining unit 133 is mainly used to complete step S303, and the integration unit 134 is mainly used to complete step S304;

[0140] The reading unit 141 is mainly used to complete step S401, and the traversal unit 142 is mainly used to complete step S402.

[0141] The technical features of the above-mentioned embodiments can be combined arbitrarily. In order to make the description concise, not all possible combinations of the technical features in the above-mentioned embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0142] The above-described embodiments merely illustrate several implementations of the present invention, and while their descriptions are relatively specific and detailed, they should not be construed as limiting the scope of the present invention. It should be noted that a person skilled in the art would be able to make numerous variations and improvements without departing from the spirit of the present invention, all of which fall within the scope of protection of the present invention. Therefore, the scope of protection of the present invention shall be determined by the appended claims.

[0143] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions and improvements made within the spirit and principles of the present invention should be included in the scope of protection of the present invention.

Claims

1. A digital economy risk management assessment method, characterized in that: The method comprises: Build a repository for storing digital economic data, establish a data management platform, receive call requests uploaded by users, identify access devices, and read the software and hardware characteristics of access devices, where the software and hardware characteristics include at least: processor identifier, hard disk serial number, browser information, administrator name, and device IP address; Configure a splicing order and splice the software and hardware features to obtain a device feature code, obtain a management number consisting of several arrays, traverse the characters corresponding to each array in the device feature code, and integrate them to obtain an identification code, determine whether the same identification code exists, and if so, insert an additional group into the management number; Establishing a correspondence between the management number, the device feature code, and the identification code, and setting permission types for the storage library, wherein the permission types include at least: access, edit, approve, delete, and share, and each permission type corresponds to a management number; Reading the call log of digital economic data through the data management platform, tracing back to the source device corresponding to the call log, and generating a comparison code to determine whether there is an identification code that is the same as the comparison code; If yes, define the permission type corresponding to the comparison code as the target permission, determine whether the call log meets the target permission, and if not, define the call log as an abnormal log and send it to the preset terminal; If not, directly mark the call log as an exception log; The steps of establishing a correspondence between the management number, the device feature code, and the identification code, and setting the permission type of the storage library include: Creating a root node, synchronizing the device feature code to the root node, calculating the number of the permission types, and defining it as the total number of permissions; Create the same number of parent nodes as the total number of permissions, and upload the corresponding permission types to the parent nodes; Mount the parent node to the root node, mount child nodes to each parent node, integrate the identification codes corresponding to all access devices to obtain an index set, and upload the index set to the corresponding child nodes; Integrate the root node, parent node and child node to generate a rights management tree; The steps of reading the call log of digital economic data via the data management platform, tracing back the source device corresponding to the call log, and generating a comparison code include: Read the accessed data and the corresponding permission type from the call log, and define the corresponding child node as the target node; The rights management tree is traversed to determine whether the comparison code is stored in the target node.

2. The digital economy risk management assessment method according to claim 1, characterized in that: The steps of constructing a repository for storing digital economic data and building a data management platform include: Dividing the storage repository into a plurality of partitions, wherein the partitions include at least: a hot zone and a cold zone; The usage frequency of the digital economic data is calculated, and when the usage frequency is greater than a threshold, the corresponding digital economic data is migrated to a hot zone.

3. The digital economy risk management assessment method according to claim 1, characterized in that: The steps of receiving a call request uploaded by a user, identifying an access device, and reading the software and hardware features of the access device include: Configuring the usage scenario of the access device and obtaining historical login data of the access device; Determine whether the usage scenario has abnormal features. If so, define the usage scenario as an abnormal scenario and trigger a pre-built secondary verification mechanism.

4. The digital economy risk management assessment method according to claim 1, characterized in that: The step of inserting an additional group into the management number comprises: Traversing the administrator account of the data management platform and sending a query pop-up window to the administrator account; Obtain feedback information of the administrator account, determine the additional group, and update the identifier.

5. The digital economy risk management assessment method according to claim 1, characterized in that: The method further comprises: Configure the risk level corresponding to each permission type and create emergency response rules that correspond to the risk level; Integrate the risk levels, exception logs and emergency handling rules to generate a management assessment report and send it to a preset terminal.

Images