Method and system for assigning permissions of unmanned aerial vehicle cloud platform facing low-altitude economy
By using the identification string comparison, job category matching, and risk assessment feedback of the drone cloud platform permission management system, the problem of unreasonable permission allocation in traditional drone cloud platforms has been solved, thereby improving security and efficiency.
Patent Information
- Application Number
- CN202510160522.6
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2025-02-13
- Publication Date
- 2026-02-03
- Estimated Expiration
- 2045-02-13
AI Technical Summary
Traditional low-altitude economic drone cloud platforms cannot properly match user permissions, leading to personnel mobility affecting permission allocation, increasing the risk of violations and unauthorized access, and failing to effectively monitor the security of permission allocation.
A drone cloud platform access control system was designed, including an access control center, a login partitioning unit, a management layer allocation unit, an access control unit, and a potential risk assessment unit. Through string identification comparison, job category matching, access level adjustment, and risk assessment feedback, reasonable access allocation and security supervision are achieved.
It improves the security and efficiency of permission allocation of the drone cloud platform, reduces the impact of personnel flow on permission allocation, ensures reasonable permission allocation and timely risk response, and enhances the management reliability of the platform.
Smart Images

Figure CN120068116B_ABST
Abstract
Description
Technical Field
[0001] This invention relates to the field of cloud platform permission management and allocation technology, and in particular to a method and system for permission management and allocation of UAV cloud platforms for the low-altitude economy. Background Technology
[0002] Access control refers to the process of assigning different permissions to different people or roles within an organization or system based on their responsibilities and needs. This is a management mechanism that ensures the security and stability of an organization or system by clearly defining and limiting the scope of user access to resources, while also improving work efficiency and information confidentiality.
[0003] However, in the traditional low-altitude economic drone cloud platform permission management and allocation technology, it is impossible to reasonably match users who log in to the drone cloud platform, and thus impossible to reasonably allocate and manage permissions for different users. This leads to the increased impact of personnel turnover on permission allocation, and it is also difficult to reasonably match permissions between administrators and normal users, resulting in an increased risk of violations and unauthorized access. Furthermore, it is impossible to supervise the security of permission allocation and management, leading to an increased security risk in the drone cloud platform's permission allocation.
[0004] To address the aforementioned technical shortcomings, a solution is proposed. Summary of the Invention
[0005] The purpose of this invention is to provide a method and system for managing and allocating permissions on a drone cloud platform for the low-altitude economy, in order to solve the aforementioned technical defects.
[0006] The objective of this invention can be achieved through the following technical solution: a drone cloud platform permission management and allocation system for low-altitude economy, comprising a permission management center, a platform database, a login partitioning unit, a management layer allocation unit, a permission control unit, a potential risk assessment unit, and a permission management unit;
[0007] The permission management center is used to retrieve the login information of the UAV cloud platform from the platform database and send the login information to the login division unit;
[0008] Upon receiving login information, the login segmentation unit immediately performs permission rationality matching and segmentation analysis on the login information, compares and analyzes the obtained first identification string, and obtains management permission signal or user permission signal.
[0009] The management allocation unit is used to respond to management authority signals and collect the user ID number of the management personnel. At the same time, it performs management authority allocation supervision and analysis on the user ID number to obtain the authority category corresponding to the target job category of the management personnel.
[0010] The permission control unit responds to user permission signals and collects low-altitude flight information of normal users. At the same time, it performs user permission level adjustment analysis on the low-altitude flight information, compares and analyzes the obtained permission control ratio, obtains high or low down-adjustment signals, obtains the down-adjustment ratio corresponding to the high and low down-adjustment signals, and obtains the real-time permission level of normal users based on the current preset permission level and down-adjustment ratio of normal users.
[0011] The potential risk assessment unit is used to respond to management permission signals or user permission signals, and to collect permission security information of the UAV cloud platform. At the same time, it performs permission security information to assess and analyze the potential risks of permission allocation, and processes the obtained permission potential risk coefficients to obtain security signals or risk signals.
[0012] Preferably, the permission rationality matching and division analysis process is as follows:
[0013] Set a monitoring period and set it as a time threshold. Obtain the login information of the drone cloud platform within the time threshold. The login information includes the registered account number and password. Extract characters from the registered account number and password respectively. Set the strings formed by the extracted characters of the registered account number and password as the first identification string and the second identification string. Set the string formed by the first identification string and the second identification string as the third identification string. Compare and analyze the third identification string with the preset standard identification string one by one to obtain the login matching signal or login error signal.
[0014] When a login matching signal is generated, the first identification string is obtained and compared with the preset management string list and the preset user string list. If the first identification string belongs to the preset management string list, a management permission signal is generated; if the first identification string belongs to the preset user string list, a user permission signal is generated.
[0015] Preferably, the management authority allocation and monitoring analysis process is as follows:
[0016] Set the login user corresponding to the management permission signal as an administrator, and obtain the user ID number of the administrator within the time threshold;
[0017] The system obtains job information and department information from the drone cloud platform, and then obtains the corresponding job names and department names. The system extracts characters from the job names and department names, and sets the strings formed by the extracted characters as job category ID numbers. Based on the job category ID numbers, the system constructs a list of job category ID numbers for the drone cloud platform.
[0018] Preferably, the user ID number of the manager is compared and analyzed with the list of ID numbers for each job category to obtain the job category to which the user ID number of the manager belongs, and then set it as the target job category;
[0019] The job categories include maintenance and customer service. The system obtains the job categories involved in the drone cloud platform, and also obtains the corresponding permission categories for each job category in the preset job permission matching table. Permission categories can also be divided into addition and deletion, thereby obtaining the permission categories corresponding to the target job categories of the managers.
[0020] Preferably, the user permission level adjustment analysis process is as follows:
[0021] The user permission signal is set to the login personnel as normal users. The low-altitude flight information of normal users is obtained, including the number of flights and flight duration. At the same time, the preset weight factor corresponding to the low-altitude flight information of normal users is obtained. The sum of the values after multiplying the parameters in the low-altitude flight information with the corresponding preset weight factor is set as the flight experience coefficient. The flight experience coefficient is analyzed to obtain the first-level permission, second-level permission and third-level permission. The preset permission level corresponding to the first-level permission, second-level permission and third-level permission is obtained.
[0022] The system obtains the current preset permission level and historical violation count of a normal user, and performs discrimination processing on the historical violation count. If the historical violation count is greater than the preset historical violation count threshold, a permission adjustment signal is generated. After the permission adjustment signal is generated, the portion of the historical violation count that is greater than the preset historical violation count threshold is set as the permission adjustment ratio. The permission adjustment ratio is compared and analyzed to obtain a high reduction signal or a low reduction signal. The reduction ratio corresponding to the high reduction signal and the low reduction signal is obtained respectively. Based on the current preset permission level and reduction ratio of the normal user, the real-time permission level of the normal user is obtained.
[0023] Preferably, the process for assessing and analyzing potential risks associated with permission allocation is as follows:
[0024] The system acquires access security information for the drone cloud platform within a specified time threshold. This information includes management assessment values and leakage risk values. The system compares and analyzes these values against preset management assessment value thresholds and preset leakage risk value thresholds stored internally. The number of management assessment values and leakage risk values that are greater than or equal to the preset management assessment value thresholds and preset leakage risk value thresholds is set as the potential access risk coefficient. The system then performs discrimination processing on the potential access risk coefficient to obtain a security signal or a risk signal.
[0025] Preferably, the management evaluation value represents the portion of the permission change duration of the UAV cloud platform that exceeds the preset permission change duration threshold, and the permission change duration represents the average duration for the revocation of permissions assigned by the UAV cloud platform's administrators or normal users; the leakage risk value represents the number of times that the UAV cloud platform's administrators or normal users have accessed unauthorized functions or data.
[0026] The beneficial effects of this invention are as follows:
[0027] (1) In this invention, the user is initially analyzed from the perspective of UAV cloud platform login, that is, the UAV cloud platform login users are divided into administrators and normal users, so as to allocate different management permissions based on different users, prevent unauthorized operations, and help improve the security of UAV cloud platform;
[0028] (2) The information progression method is also used to perform permission matching analysis on managers. That is, the permissions of managers are reasonably allocated and managed according to their positions and departments. This can improve the efficiency of permission allocation and reduce the impact of personnel turnover on permission allocation.
[0029] (3) Further analysis of the permission levels of normal users through information feedback, that is, permission allocation based on the usage perspective of normal users, and permission allocation adjustment based on the violation of normal users. On the one hand, it helps to reasonably adjust the permissions of normal users, and on the other hand, it helps to allocate the low-altitude flight area of normal users based on the real-time permission level of normal users, so as to improve the rationality of permission allocation. Furthermore, the potential risk assessment and feedback analysis of permission security information is carried out. On the one hand, it helps to understand the security of permission allocation management of the UAV cloud platform, and on the other hand, it helps to adjust the permission allocation management decision of the UAV cloud platform in a timely manner, so as to improve the efficiency and reliability of permission allocation management of the UAV cloud platform. Attached Figure Description
[0030] The invention will now be further described with reference to the accompanying drawings;
[0031] Figure 1 This is a schematic diagram of the system flowchart of the present invention;
[0032] Figure 2 This is a schematic diagram for reference analysis of the method of the present invention. Detailed Implementation
[0033] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.
[0034] Example 1: Please refer to Figures 1 to 2 As shown, the present invention is a drone cloud platform permission management and allocation system for low-altitude economy, including a permission management center, a platform database, a login partitioning unit, a management layer allocation unit, a permission control unit, a potential risk assessment unit, and a permission management unit.
[0035] The platform database and the permission management center have a one-way communication connection. The permission management center and the login division unit have a one-way communication connection. The login division unit and the management allocation unit, permission control unit and permission management unit all have a one-way communication connection. The management allocation unit and the permission management unit have a one-way communication connection. The permission control unit and the potential risk assessment unit have a one-way communication connection. The potential risk assessment unit and the permission management unit have a one-way communication connection.
[0036] The permission management center is used to retrieve the login information of the drone cloud platform from the platform database and send the login information to the login division unit;
[0037] Upon receiving login information, the login segmentation unit immediately performs permission matching and segmentation analysis to assign different management permissions to different users, preventing unauthorized operations and improving the security of the drone cloud platform. The specific permission matching and segmentation analysis process is as follows:
[0038] A monitoring period is set and defined as a time threshold. Login information for the drone cloud platform within this time threshold is obtained, including the registered account number and password. Characters of the registered account number and password are extracted separately, and the strings formed by these extracted characters are designated as the first and second identification strings. The string formed by the first and second identification strings is designated as the third identification string. The third identification string is then compared and analyzed one-to-one with a preset standard identification string.
[0039] If the third identification string corresponds one-to-one with the preset standard identification string, a login matching signal is generated;
[0040] If the third identification string does not correspond one-to-one with the preset standard identification string, a login error signal will be generated. When a login error signal is generated, the user will be immediately redirected to the login page to authenticate and log in again.
[0041] When a login matching signal is generated, the first identification string is obtained and compared with the preset management string list and the preset user string list for analysis:
[0042] If the first identification string belongs to the preset management string list, a management permission signal is generated;
[0043] If the first identification string belongs to the preset user string list, a user permission signal is generated, and the management permission signal or user permission signal is sent to the permission management unit. After receiving the management permission signal or user permission signal, the permission management unit immediately performs the preset operation corresponding to the management permission signal or user permission signal, so as to assign different management permissions based on different users, prevent unauthorized operations, and help improve the security of the drone cloud platform.
[0044] When a management permission signal is generated, the management layer allocation unit responds to the signal, collects the user ID number of the management personnel, and performs management permission allocation monitoring and analysis on the user ID number. This allows for reasonable permission allocation management based on the management personnel's position and department, thereby improving permission allocation efficiency and reducing the impact of personnel turnover on permission allocation. The specific management permission allocation monitoring and analysis process is as follows:
[0045] Set the login user corresponding to the management permission signal as an administrator, and obtain the user ID number of the administrator within the time threshold;
[0046] In this embodiment of the invention, job information and department information of the UAV cloud platform are obtained, and then the job name and department name corresponding to the job information and department information are obtained. The characters of the job name and department name are extracted, and the string formed by the character extraction of the job name and department name is set as the job category ID number. A list of job category ID numbers of the UAV cloud platform is constructed based on the job category ID number.
[0047] The user ID number of the manager is compared and analyzed with the list of ID numbers of each job category to obtain the job category to which the user ID number of the manager belongs, and then set it as the target job category.
[0048] In this embodiment of the invention, job categories include maintenance, customer service, etc.
[0049] The system obtains the job categories involved in the drone cloud platform and the corresponding permission categories for each job category in the preset job permission matching table. Permission categories can also be divided into addition, deletion, etc. The system then obtains the permission categories corresponding to the manager's target job category and sends the permission categories corresponding to the manager's target job category to the permission management unit. After receiving the permission categories corresponding to the manager's target job category, the permission management unit immediately and reasonably matches the manager's permission categories, thereby improving the efficiency of permission allocation and reducing the impact of personnel turnover on permission allocation.
[0050] Example 2: When a user permission signal is generated, the permission control unit responds to the signal and collects low-altitude flight information from normal users. Simultaneously, it performs user permission level adjustment analysis on the low-altitude flight information to determine whether the flight permissions of current normal users need adjustment, ensuring the rationality of user permission allocation. The specific user permission level adjustment analysis process is as follows:
[0051] The user permission signal is set to correspond to a normal user upon login. Low-altitude flight information of the normal user is obtained, including the number of flights and flight duration. Simultaneously, a preset weighting factor corresponding to the normal user's low-altitude flight information is obtained. The sum of the values obtained by multiplying the parameters within the low-altitude flight information by the corresponding preset weighting factor is set as the flight experience coefficient. Discriminant analysis is then performed on the flight experience coefficient.
[0052] If the flight experience coefficient is less than the minimum value in the preset flight experience coefficient range, it is determined to be a Level 1 privilege.
[0053] If the flight experience coefficient falls within the preset flight experience coefficient range, it is determined to be a Level 2 privilege.
[0054] If the flight experience coefficient is greater than the minimum value in the preset flight experience coefficient range, it is determined to be a level three permission. The permission levels corresponding to level one, level two and level three permissions decrease in sequence. Then, based on the low-altitude flight information of normal users, permission is assigned and processed for normal users, and the preset permission levels corresponding to level one, level two and level three permissions are obtained.
[0055] Obtain the current preset permission level and historical violation count of a normal user, and then process the historical violation count:
[0056] If the number of historical violations is less than or equal to the preset threshold for the number of historical violations, no signal will be generated.
[0057] If the number of historical violations exceeds a preset historical violation threshold, a permission control signal is generated. After the permission control signal is generated, the portion of the historical violation count that exceeds the preset historical violation threshold is set as the permission control ratio, and the permission control ratio is compared and analyzed.
[0058] If the permission control ratio is greater than or equal to the preset permission control ratio threshold, a corresponding high reduction signal is obtained; if the permission control ratio is less than the preset permission control ratio threshold, a corresponding low reduction signal is obtained. The reduction ratios corresponding to the high and low reduction signals are obtained respectively. Based on the current preset permission level and reduction ratio of the normal user, the real-time permission level of the normal user is obtained and sent to the permission management unit through the potential risk assessment unit. After receiving the real-time permission level, the permission management unit immediately displays the preset warning text corresponding to the real-time permission level. This helps to reasonably adjust the permissions of normal users and to allocate the low-altitude flight area range of normal users according to their real-time permission level.
[0059] When a management permission signal or user permission signal is generated, the potential risk assessment unit responds to the signal and collects permission security information from the UAV cloud platform. Simultaneously, it performs feedback analysis on the potential risks of permission allocation, which helps to understand the security of permission allocation management on the UAV cloud platform and facilitates timely adjustments to permission allocation management decisions, thereby improving the efficiency and reliability of permission allocation management. The specific process of potential risk assessment and feedback analysis for permission allocation is as follows:
[0060] The system acquires access security information for the drone cloud platform within a specified time threshold. This information includes management assessment values and leakage risk values. The system compares and analyzes these values against preset management assessment value thresholds and preset leakage risk value thresholds stored internally. The number of management assessment values and leakage risk values that are greater than or equal to these preset thresholds is set as the potential access risk coefficient. This potential access risk coefficient is then processed for further analysis.
[0061] If the potential risk factor for permissions is zero, a security signal is generated.
[0062] If the potential risk coefficient of the permission is not equal to zero, a risk signal is generated and the security signal or risk signal is sent to the permission management unit. After receiving the security signal or risk signal, the permission management unit immediately performs the preset warning operation corresponding to the security signal or risk signal. On the one hand, this helps to understand the security of the permission allocation and management of the drone cloud platform, and on the other hand, it helps to adjust the permission allocation and management decision of the drone cloud platform in a timely manner, so as to improve the efficiency and reliability of the permission allocation and management of the drone cloud platform.
[0063] In this embodiment of the invention, the management evaluation value represents the portion of the permission change duration of the UAV cloud platform that exceeds the preset permission change duration threshold. The permission change duration represents the average duration for the administrators or normal users of the UAV cloud platform to revoke the allocated permissions. It should be noted that the management evaluation value indicates a greater potential risk in the permission allocation and management of the UAV cloud platform.
[0064] In this embodiment of the invention, the leakage risk value represents the number of times that the administrators or normal users of the drone cloud platform have accessed unauthorized functions or data. It should be noted that the larger the leakage risk value, the greater the risk of permission allocation on the drone cloud platform.
[0065] Example 3: This example also proposes a method for managing and allocating permissions on a drone cloud platform for the low-altitude economy, including the following steps:
[0066] Step 1: Retrieve login information from the perspective of login, and perform permission matching and analysis on the login information. Compare and analyze the obtained first identification string. If a management permission signal is obtained, proceed to Step 2; if a user permission signal is obtained, proceed to Step 4.
[0067] Step 2: Based on the management authority signal, conduct regulatory analysis of management authority allocation to obtain a list of job category ID numbers;
[0068] Step 3: Obtain the user ID number of the administrator, compare and analyze the user ID number with the list of ID numbers for each job category, obtain the target job category and the corresponding permission category, and output feedback;
[0069] Step 4: Analyze the user permission level adjustment of low-altitude flight information through information feedback to obtain the permission control ratio. Compare and analyze the permission control ratio to obtain the high down-adjustment signal or the low down-adjustment signal.
[0070] Step 5: Obtain the down-regulation ratios corresponding to the high and low down-regulation signals, thereby obtaining the real-time permission level of normal users and outputting feedback;
[0071] Step Six: Through information progression, conduct a risk assessment and feedback analysis on the potential risks of permission allocation for the security information, process the obtained potential risk coefficients, and output the obtained security signals or risk signals as feedback.
[0072] In summary, this invention initially analyzes users from the perspective of drone cloud platform login, dividing drone cloud platform login users into administrators and normal users, so as to assign different management permissions to different users, prevent unauthorized operations, and help improve the security of drone cloud platform. Furthermore, it performs permission matching analysis for administrators through information progression, that is, it allocates and manages permissions for administrators reasonably according to their positions and departments, thereby improving the efficiency of permission allocation and reducing the impact of personnel turnover on permission allocation.
[0073] Furthermore, the permission levels of normal users are analyzed through information feedback. This means that permissions are allocated based on the user's perspective, and the allocation is adjusted according to the user's violations. This helps to reasonably adjust the permissions of normal users and to allocate the low-altitude flight area of normal users based on their real-time permission levels, thereby improving the rationality of permission allocation.
[0074] Furthermore, conducting risk assessment and feedback analysis on the allocation of access control information helps to understand the security of access control management on the drone cloud platform, and also helps to adjust the access control management decisions of the drone cloud platform in a timely manner, thereby improving the efficiency and reliability of access control management on the drone cloud platform.
[0075] The threshold is set to facilitate comparison. The size of the threshold depends on the amount of sample data and the number of bases set by those skilled in the art for each set of sample data; as long as it does not affect the ratio between the parameter and the quantized value, it is acceptable.
[0076] The size of the coefficient is a specific value obtained by quantifying each parameter to facilitate subsequent comparison. The size of the coefficient depends on the amount of sample data and the corresponding operating coefficient initially set by those skilled in the art for each set of sample data; as long as it does not affect the proportional relationship between the parameter and the quantified value.
[0077] The above are merely preferred embodiments of the present invention, but the scope of protection of the present invention is not limited thereto. Any equivalent substitutions or modifications made by those skilled in the art within the scope of the technology disclosed in the present invention, based on the technical solution and inventive concept of the present invention, should be covered within the scope of protection of the present invention.
Claims
1. A drone cloud platform access control and allocation system for the low-altitude economy, characterized in that: It includes a permission management center, platform database, login division unit, management layer allocation unit, permission control unit, potential risk assessment unit, and permission management unit; The permission management center is used to retrieve the login information of the UAV cloud platform from the platform database and send the login information to the login division unit; Upon receiving login information, the login segmentation unit immediately performs permission rationality matching and segmentation analysis on the login information, compares and analyzes the obtained first identification string, and obtains management permission signal or user permission signal. The management allocation unit is used to respond to management authority signals and collect the user ID number of the management personnel. At the same time, it performs management authority allocation supervision and analysis on the user ID number to obtain the authority category corresponding to the target job category of the management personnel. The permission control unit responds to user permission signals and collects low-altitude flight information of normal users. At the same time, it performs user permission level adjustment analysis on the low-altitude flight information, compares and analyzes the obtained permission control ratio, obtains high or low down-adjustment signals, obtains the down-adjustment ratio corresponding to the high and low down-adjustment signals, and obtains the real-time permission level of normal users based on the current preset permission level and down-adjustment ratio of normal users. The potential risk assessment unit is used to respond to management permission signals or user permission signals, and to collect permission security information of the UAV cloud platform. At the same time, it performs permission security information to assess and analyze the potential risks of permission allocation, and processes the obtained permission potential risk coefficients to obtain security signals or risk signals. The user permission level adjustment analysis process is as follows: The user permission signal is set to the login personnel as normal users. The low-altitude flight information of normal users is obtained, including the number of flights and flight duration. At the same time, the preset weight factor corresponding to the low-altitude flight information of normal users is obtained. The sum of the values after multiplying the parameters in the low-altitude flight information with the corresponding preset weight factor is set as the flight experience coefficient. The flight experience coefficient is analyzed to obtain the first-level permission, second-level permission and third-level permission. The preset permission level corresponding to the first-level permission, second-level permission and third-level permission is obtained. The system obtains the current preset permission level and historical violation count of a normal user, and performs discrimination processing on the historical violation count. If the historical violation count is greater than the preset historical violation count threshold, a permission adjustment signal is generated. After the permission adjustment signal is generated, the portion of the historical violation count that is greater than the preset historical violation count threshold is set as the permission adjustment ratio. The permission adjustment ratio is compared and analyzed to obtain a high reduction signal or a low reduction signal. The reduction ratio corresponding to the high reduction signal and the low reduction signal is obtained respectively. Based on the current preset permission level and reduction ratio of the normal user, the real-time permission level of the normal user is obtained.
2. The UAV cloud platform permission management and allocation system for low-altitude economy according to claim 1, characterized in that, The process of analyzing and classifying the rationality of permissions is as follows: Set a monitoring period and set it as a time threshold. Obtain the login information of the drone cloud platform within the time threshold. The login information includes the registered account number and password. Extract characters from the registered account number and password respectively. Set the strings formed by the extracted characters of the registered account number and password as the first identification string and the second identification string. Set the string formed by the first identification string and the second identification string as the third identification string. Compare and analyze the third identification string with the preset standard identification string one by one to obtain the login matching signal or login error signal. When a login matching signal is generated, the first identification string is obtained and compared with the preset management string list and the preset user string list. If the first identification string belongs to the preset management string list, a management permission signal is generated; if the first identification string belongs to the preset user string list, a user permission signal is generated.
3. The UAV cloud platform permission management and allocation system for low-altitude economy according to claim 1, characterized in that, The management authority allocation and monitoring analysis process is as follows: Set the login user corresponding to the management permission signal as an administrator, and obtain the user ID number of the administrator within the time threshold; The system obtains job information and department information from the drone cloud platform, and then obtains the corresponding job names and department names. The system extracts characters from the job names and department names, and sets the strings formed by the extracted characters as job category ID numbers. Based on the job category ID numbers, the system constructs a list of job category ID numbers for the drone cloud platform.
4. The UAV cloud platform permission management and allocation system for low-altitude economy according to claim 3, characterized in that, The user ID number of the manager is compared and analyzed with the list of ID numbers of each job category to obtain the job category to which the user ID number of the manager belongs, and then set it as the target job category. The job categories include maintenance and customer service. The system obtains the job categories involved in the drone cloud platform, and also obtains the corresponding permission categories for each job category in the preset job permission matching table. Permission categories can also be divided into addition and deletion, thereby obtaining the permission categories corresponding to the target job categories of the managers.
5. The UAV cloud platform permission management and allocation system for low-altitude economy according to claim 1, characterized in that, The process for assessing and analyzing the potential risks associated with permission allocation is as follows: The system acquires access security information for the drone cloud platform within a specified time threshold. This information includes management assessment values and leakage risk values. The system compares and analyzes these values against preset management assessment value thresholds and preset leakage risk value thresholds stored internally. The number of management assessment values and leakage risk values that are greater than or equal to the preset management assessment value thresholds and preset leakage risk value thresholds is set as the potential access risk coefficient. The system then performs discrimination processing on the potential access risk coefficient to obtain a security signal or a risk signal.
6. The UAV cloud platform permission management and allocation system for low-altitude economy according to claim 5, characterized in that, The management evaluation value represents the portion of the time that the permission change duration of the drone cloud platform exceeds the preset permission change duration threshold. The permission change duration represents the average time that the administrators or normal users of the drone cloud platform take to revoke the permissions they have assigned. The leakage risk value indicates the number of times that administrators or normal users of the drone cloud platform have accessed unauthorized functions or data.
7. A method for managing and allocating permissions on a drone cloud platform for the low-altitude economy, wherein the method is applied to the drone cloud platform permission management and allocation system for the low-altitude economy as described in any one of claims 1-6, characterized in that, Includes the following steps: Step 1: Retrieve login information from the perspective of login, and perform permission matching and analysis on the login information. Compare and analyze the obtained first identification string. If a management permission signal is obtained, proceed to Step 2; if a user permission signal is obtained, proceed to Step 4. Step 2: Based on the management authority signal, conduct regulatory analysis of management authority allocation to obtain a list of job category ID numbers; Step 3: Obtain the user ID number of the administrator, compare and analyze the user ID number with the list of ID numbers for each job category, obtain the target job category and the corresponding permission category, and output feedback; Step 4: Analyze the user permission level adjustment of low-altitude flight information through information feedback to obtain the permission control ratio. Compare and analyze the permission control ratio to obtain the high down-adjustment signal or the low down-adjustment signal. Step 5: Obtain the down-regulation ratios corresponding to the high and low down-regulation signals, thereby obtaining the real-time permission level of normal users and outputting feedback; Step Six: Through a progressive information approach, conduct a risk assessment and feedback analysis of the potential risks associated with permission allocation, process the obtained potential risk coefficients, and output the resulting security or risk signals as feedback.
Citation Information
Patent Citations
Unmanned aerial vehicle air traffic control system
CN109215395A
Hundred million-level low-altitude Internet of Things centerless identity authentication architecture and method based on PUF
CN116032549A