Engineering project file processing method and system

Abstract

The invention is suitable for the technical field of archive processing, and particularly relates to an engineering project archive processing method and system.The method comprises the steps that archives of an engineering project are obtained, attribute data of each archive are configured, and the attribute data at least comprise archive numbers and generation time, arrangement sequence setting and attribute data integration; generating an original string, editing a segmentation rule, and segmenting the original string into a plurality of arrays; and performing paragraph division on the archive to obtain a plurality of segments, finding out characters corresponding to an array in each segment, performing integration to obtain a unique identifier of each segment, determining use objects of the archive, and clustering the use objects into a plurality of categories. By determining the root value, it is effectively guaranteed that the access range of each use object cannot be leaked, the file can be prevented from being tampered while fine-grained access control is achieved, and the safety in the file processing process is greatly improved.

Description

Technical Field

[0001] The present invention relates to the technical field of file processing, and particularly to a method and system for processing project files. Background Art

[0002] Project files refer to the sum total of important materials formed during the implementation of a project, which record and reflect activities such as project establishment, survey and design, construction, completion acceptance, and operation management in various carriers such as words, drawings, tables, and photos; these files include both technical documents such as design drawings, construction plans, quality inspection reports, and as-built drawings, and management documents such as contract agreements, meeting minutes, progress reports, financial materials, and various approval documents.

[0003] However, some files may contain both confidential information and public data; for example, a certain contract contains confidentiality clauses and general clauses. Paragraphs such as "project cost" and "liability for breach of contract" in the confidentiality clauses need to be hidden from subcontractors or the public, but "scope of work" and "construction period requirements" need to be open to the outside. In the prior art, for such files, generally, the confidential information is masked or split into two documents for disclosure. However, when such files need to be circulated among multiple departments, different departments have different permissions, and the above methods have great limitations. It is difficult to refine the permission control, and there are burdens of repeated desensitization and reorganization during the circulation process.

[0004] Therefore, "how to refine the permission management to the paragraph level" is the technical problem to be solved by the present invention. Summary of the Invention

[0005] The purpose of the present invention is to provide a method and system for processing project files to solve the problem of "how to refine the permission management to the paragraph level" proposed in the above background art.

[0006] To achieve the above purpose, the present invention provides the following technical solutions: A method for processing project files, the method comprising: Obtaining the files of a project, configuring the attribute data of each file, where the attribute data at least includes: file number and generation time, setting the sorting order, integrating the attribute data, generating an original string, editing a splitting rule, and splitting the original string into several arrays; Perform paragraph division on the said file to obtain a number of segments, and in each segment, search for the characters corresponding to the array, integrate to obtain the unique identifier of each segment, determine the usage object of the said file, and cluster the usage objects into a number of categories. Through the preset permission management rules, traverse the unique identifiers corresponding to the segments that each category can call, which are defined as available identifiers, where each segment corresponds to an available identifier, and determine the segment one identifier, segment two identifier, ……, segment N identifier; Select a reversible hash function, hash the segment one identifier to obtain the first hash value, integrate the first hash value and the segment two identifier, and continue to hash to obtain the second hash value, and so on, to obtain the Nth hash value, denoted as the root value. Establish the mapping between the original string, the category, and the root value, use the said mapping to construct a query table, and insert the label generated by the said category.

[0007] Further, the splitting rule is: in the said original string, divide out the shortest number in the order from left to right, and gradually divide to the right, where the newly divided number is greater than the previous number.

[0008] Further, the steps of setting the arrangement order and integrating the said attribute data to generate the original string include: Count the number of the array, adjust the said arrangement order, update the said number, and define the arrangement order with the largest number as the target order; Set the risk level of the said file, and dynamically adjust the said arrangement order and the original string.

[0009] Further, the steps of performing paragraph division on the said file to obtain a number of segments and searching for the characters corresponding to the array in each segment include: Select the privacy data from the said file and define it as a new segment; Perform centralized management on the said file and construct an identity authentication mechanism.

[0010] Further, the steps of determining the usage object of the said file and clustering the usage objects into a number of categories through the preset permission management rules include: Based on the said category and the permission management rules, cluster the segments into callable segments and segments without permission, and mask the segments without permission; Integrate all the callable segments to generate an authorized data pool, and issue call permissions to the corresponding usage objects.

[0011] Further, the steps of traversing the unique identifiers corresponding to the segments that each category can call, which are defined as available identifiers, include: Determine whether there is the same unique identifier in the query table. If so, insert an additional item into the attribute data and update the original string. Determine the call records of each file and generate an access log.

[0012] Further, the steps of establishing a mapping between the original string, the category, and the root value, constructing a query table using the mapping, and inserting tags generated by the category include: Construct a distributed storage architecture composed of a cloud and local nodes, upload the files to the cloud, and migrate the query table to the local nodes. Create a replacement mechanism for the reversible hash function and update the query table.

[0013] Further, the system includes: A splitting module, configured to obtain the files of the engineering project, configure the attribute data of each file, where the attribute data at least includes: file number and generation time, set the sorting order, integrate the attribute data, generate an original string, edit the splitting rules, and split the original string into several arrays. A determination module, configured to divide the file into several segments, find the characters corresponding to the arrays in each segment, integrate to obtain the unique identifier of each segment, determine the user of the file, cluster the users into several categories, and traverse, via a preset permission management rule, the unique identifiers corresponding to the segments that each category can call, defined as available identifiers, where each segment corresponds to an available identifier, and determine the segment one identifier, segment two identifier,..., segment N identifier. An insertion module, configured to select a reversible hash function, hash the segment one identifier to obtain a first hash value, integrate the first hash value and the segment two identifier, and continue to hash to obtain a second hash value, and so on, to obtain the Nth hash value, denoted as the root value, establish a mapping between the original string, the category, and the root value, construct a query table using the mapping, and insert tags generated by the category.

[0014] Further, the splitting module includes: A statistics unit, configured to count the number of arrays, adjust the sorting order, update the number, and define the sorting order with the largest number as the target order. A setting unit, configured to set the risk level of the file and dynamically adjust the sorting order and the original string.

[0015] Further, the determination module includes: A definition unit, configured to select privacy data from the file and define it as a new segment. The management unit is used to centrally manage the said files and construct an authentication mechanism; The masking unit is used to cluster the said segments into callable segments and unauthorized segments according to the said category and permission management rules, and mask the unauthorized segments; The distribution unit is used to integrate all callable segments, generate an authorized data pool, and distribute call permissions to corresponding usage objects; The update unit is used to determine whether there is the same unique identifier in the said query table. If so, insert an additional item into the said attribute data and update the original string; The generation unit is used to determine the call records of each file and generate an access log.

[0016] Compared with the prior art, the beneficial effects of the present invention are: By determining the unique identifier of each segment, it is convenient to index the segments, improve the search efficiency, and at the same time, the permission management can be refined to specific paragraphs to prevent unnecessary data exposure and enhance the security of file usage. By determining the available identifiers, it is possible to determine the parts that different usage objects can call in the same file, which is convenient for multiple usage objects to cooperate without interfering with each other's responsibilities, and improves the cooperation and sharing efficiency of file usage. By determining the root value, it effectively ensures that the access scope of each usage object will not be leaked, can achieve fine-grained access control while preventing the file from being tampered with, and greatly improves the security during the file usage process. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] Figure 1 It is a flowchart of the processing method for engineering project files provided by an embodiment of the present invention; Figure 2 It is the first sub-flowchart of the processing method for engineering project files provided by an embodiment of the present invention; Figure 3 It is the second sub-flowchart of the processing method for engineering project files provided by an embodiment of the present invention; Figure 4 It is the third sub-flowchart of the processing method for engineering project files provided by an embodiment of the present invention; Figure 5 It is a block diagram of the composition of the processing system for engineering project files provided by an embodiment of the present invention; Figure 6 It is a block diagram of the composition of the segmentation module in the processing system for engineering project files provided by an embodiment of the present invention; Figure 7 It is a block diagram of the composition of the determination module in the processing system for engineering project files provided by an embodiment of the present invention; Figure 8It is a block diagram of the composition of the insertion module in the processing system for engineering project archives provided by the embodiments of the present invention. Detailed implementation manners

[0018] In order to make the objectives, technical solutions and advantages of the present invention clearer, the present invention will be further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not used to limit the present invention.

[0019] In Embodiment 1, Figure 1 The implementation process of the method for processing engineering project archives provided by the embodiments of the present invention is shown, and the details are as follows: S100: Obtain the archives of the engineering project, configure the attribute data of each archive, where the attribute data at least includes: archive number and generation time, set the sorting order, integrate the attribute data, generate an original string, edit the segmentation rule, and segment the original string into several arrays.

[0020] Determine the archives that need to perform paragraph permission management, and at the same time determine the attribute data of each archive. The attribute data includes but is not limited to the archive number and generation time. Among them, the "archive number" is used as the unique identifier of the archive for quick retrieval and indexing, and the "generation time" is used to record the specific time point when the archive is generated. The attribute data may also include: last use time and number of pages of the archive, etc. Among them, the attribute data needs to contain numbers; according to the sorting order, integrate the attribute data to generate an original string, where the sorting order needs to be determined after multiple tests. The specific test process is as described below. The original string is the original character string, and the original string is composed of several numbers; for example, the archive number of a certain archive is: ENG-PJ2024-001-A01, and the generation time is: 2024-09-15, 14:11:00. Extract the numbers from it to get 2024, 001, 01, 2024, 09, 15, 14, 11, and 00. If the sorting order is that the archive number is in the front and the generation time is in the back, then combine these numbers to get the original string, that is, 20240010120240915141100.

[0021] According to the segmentation rule, that is, in the order from left to right, divide out the shortest number and gradually divide to the right, where the newly divided number is greater than the previous number; segment the original string into several arrays. For example, segment the above original string to get 2, 24, 101, 202, 409, 1514, and 1100; if the last array is smaller than the previous array, then delete the last array, and finally get 6 arrays: 2, 24, 101, 202, 409, and 1514.

[0022] According to the above arrangement order, that is, the file number is in the front and the generation time is in the back, six arrays are obtained by splitting. If the order of the two is swapped, that is, the generation time is in the front and the file number is in the back, eight arrays can be obtained by splitting, then the final arrangement order is determined to be the latter, that is, the generation time is in the front and the file number is in the back; in other words, the arrangement order with the most arrays is determined as the final arrangement order.

[0023] S200: Divide the file into paragraphs to obtain several segments, and in each segment, find the characters corresponding to the array, integrate to obtain the unique identifier of each segment, determine the usage object of the file, and cluster the usage objects into several categories. Through the preset permission management rules, traverse the unique identifiers corresponding to the segments that each category can call, and define them as available identifiers. Each segment corresponds to an available identifier, and determine the segment one identifier, segment two identifier, ……, segment N identifier.

[0024] According to the order of natural paragraphs, divide the file into paragraphs to obtain several segments. Specifically, pictures and tables can be used as one segment; in each segment, find the characters corresponding to each array, splice them in the original order of the array, and integrate to obtain a continuous string, which is defined as the unique identifier.

[0025] For example, continue to elaborate on the example in S100 above. In each segment, find the 2nd, 24th, 101st, 202nd, 409th, and 1514th characters, and combine the found characters to obtain the unique identifier; in this process, if the number of characters in a segment is less than 1514, perform circular counting until the corresponding characters are determined.

[0026] Determine the usage object of each segment, determine which personnel, positions, or departments are authorized to use the corresponding segment, and divide the usage objects into several categories. For example, "management level", "execution level", and "finance level"; through the preset permission management rules, determine the permissions of each category for different segments; for example, the permission management rule is: the management level can call all segments, the execution level can only call the segments related to its work content, and the finance level can only call the segments related to finance; further, how to determine the data type contained in each segment can be determined by means of a natural language processing model.

[0027] In each file, determine the segments that each category can call, and define the unique identifier corresponding to the segment as the available identifier; in other words, in a file, each category corresponds to multiple available identifiers; according to the order of natural paragraphs, name these available identifiers as segment one identifier, segment two identifier, etc. respectively.

[0028] For example, in File A, the finance staff can only call paragraphs 1, 22, 45, and 46. Then the unique identifier corresponding to paragraph 1 is the first segment identifier, the unique identifier corresponding to paragraph 22 is the second segment identifier, the unique identifier corresponding to paragraph 45 is the third segment identifier, and so on.

[0029] S300: Select a reversible hash function, hash the first segment identifier to obtain a first hash value, integrate the first hash value and the second segment identifier, and continue to hash to obtain a second hash value, and so on, to obtain the Nth hash value, denoted as the root value. Establish a mapping between the original string, the category, and the root value. Use the mapping to construct a query table and insert the label generated by the category.

[0030] Select a reversible hash function, hash the first segment identifier to obtain a first hash value, append the second segment identifier to the end of the first hash value, and continue to hash to obtain a second hash value. Using such an ordered hashing method, perform hashing in sequence, integrate the Nth segment identifier with the (N - 1)th hash value, and continue to hash to obtain the Nth hash value, and define the Nth hash value as the root value; construct a query table, where the query table should include: category item, root value item, and original string item.

[0031] It should be noted that the reversible hash function is a special hash function, similar to a mapping function, which can establish a correspondence between strings; for example, a certain string X consists of 30 digits. Input it into the reversible hash function, and calculate to obtain Y, thus establishing a correspondence between X and Y; specifically in this application, using the Nth hash value and combining with the reversible hash function, the (N - 1)th hash value and the Nth segment identifier can be deduced. Continuing to use the (N - 1)th hash value and the reversible hash function, the (N - 2)th hash value can be deduced, and so on, all available identifiers can be restored; the advantage of doing this is that the user only needs to use the Nth hash value they have mastered to determine which segments they can call.

[0032] For example, based on the example in S200, if the finance staff wants to call the content of paragraph 31 in File A, first, determine the category where the finance staff is located, and traverse the query table to find the corresponding root value. Using the root value and the reversible hash function, according to the above backtracking method, restore all the available identifiers of the finance staff. Using the original string and the available identifiers, locate all the segments that the finance staff can call, and issue the call permission for the corresponding segments to complete the fine-grained permission management of the file.

[0033] In Embodiment 2, different from Embodiment 1, in the embodiment of the present invention, the segmentation rule is: in the original string, divide a shortest number in the order from left to right, and gradually divide to the right, where the newly divided number is greater than the previous number.

[0034] According to the segmentation rules, segment the original string to obtain several arrays. If the remaining numbers after segmentation are less than the last array, delete the remaining numbers.

[0035] In Embodiment 3, Figure 2 The implementation process of the method for processing engineering project archives provided by the embodiment of the present invention is shown. The following details the steps of setting the arrangement order, integrating the attribute data, and generating the original string, as follows: S101: Count the number of arrays, adjust the arrangement order, update the number, and define the arrangement order with the largest number as the target order.

[0036] Calculate the number of arrays corresponding to each arrangement order, determine the arrangement order with the largest number as the target order, and use the target order to segment the original string.

[0037] S102: Set the risk level of the file, and dynamically adjust the arrangement order and the original string.

[0038] Determine the risk level of each file. The risk level can be high, medium, or low. If the risk level is high, regularly adjust the arrangement order to obtain a new original string and arrays, prevent the leakage of arrays, further reduce the risk of file leakage, and improve file security.

[0039] In Embodiment 4, Figure 3 The implementation process of the method for processing engineering project archives provided by the embodiment of the present invention is shown. The following details the steps of dividing the file into paragraphs to obtain several segments, and finding the characters corresponding to the arrays in each segment, as follows: S201: Select privacy data from the file and define it as a new segment.

[0040] In the file, find the privacy data and use the privacy data as a new segment. For example, if there is privacy data in the 33rd paragraph of a certain file B, and the privacy data can be personnel configuration, name, ID number, etc., then use the privacy data as a new segment. In other words, define the privacy data in the 33rd paragraph as the 34th paragraph.

[0041] S202: Conduct centralized management of the file and build an identity authentication mechanism.

[0042] Upload the file to the cloud or a certain node for centralized management of the file; use methods such as passwords, biometrics, and encryption tokens to build an identity authentication mechanism; only after passing the verification can the user initiate a call request for a certain file. The advantage of this is that it can further reduce the risk of data leakage of the file.

[0043] In Embodiment 5, Figure 3 The implementation process of the method for processing engineering project archives provided by the embodiments of the present invention is shown. The following details the step of determining the usage objects of the archives and clustering the usage objects into several categories via a preset permission management rule, as follows: S203: Based on the categories and the permission management rule, segment the segments into callable segments and segments without permission, and mask the segments without permission.

[0044] After determining the segments that can be called by the usage object, issue the call permission to the usage object. During the call process, mask the segments without permission.

[0045] S204: Integrate all the callable segments to generate an authorized data pool, and issue the call permission to the corresponding usage object.

[0046] Define the set composed of the callable segments of the usage object as the authorized data pool, and issue the call permission of the authorized data pool to the usage object.

[0047] In Embodiment 6, Figure 3 The implementation process of the method for processing engineering project archives provided by the embodiments of the present invention is shown. The following details the step of traversing the unique identifiers corresponding to the segments that can be called by each category and defining them as available identifiers, as follows: S205: Determine whether there are the same unique identifiers in the query table. If so, insert an additional item into the attribute data and update the original string.

[0048] If there are the same unique identifiers in the query table, insert an additional item into the attribute data. The additional item can be the last usage time, the number of pages of the file, etc., so that there are no the same unique identifiers in the query table; after determining the additional item, update the original string.

[0049] S206: Determine the call records of each file to generate an access log.

[0050] When the usage object calls a segment, record the corresponding unique identifier to obtain the call record, determine the generation time of each call record, and generate an access log.

[0051] In Embodiment 7, Figure 4 The implementation process of the method for processing engineering project archives provided by the embodiments of the present invention is shown. The following details the step of establishing the mapping between the original string, the category, and the root value, using the mapping to construct a query table, and inserting the label generated by the category, as follows: S301: Construct a distributed storage architecture composed of a cloud and local nodes, upload the said archives to the cloud, and migrate the said query table to the local nodes.

[0052] The archives can be stored in the cloud, and the query table, permission management rules, etc. can be stored in the local nodes; in addition, a backup policy can be configured in the cloud, and an edge computing module can be added to the local nodes, and secure access and local processing of the archives can be achieved through means such as identity authentication, permission control, and access log recording; the distributed storage architecture refers to a storage architecture in which the archives and related data are stored dispersedly in different locations.

[0053] S302: Create a replacement mechanism for the reversible hash function and update the said query table.

[0054] The replacement mechanism is as follows: Replace the reversible hash function at a preset frequency; when a reversible hash function has been used for a period of time, use a new reversible hash function for replacement and update the query table; the advantage of doing so is to prevent the query table from being leaked; in the case where the query table has not been leaked, when the archives are transferred among different users, a certain user can find out the segments that can be called by using the root of the category to which it belongs, but no user knows the segments that other users can call, thereby reducing the internal leakage risk of the archives and preventing the expansion of call permissions.

[0055] Figure 5 The block diagram of the composition of the processing system for engineering project archives provided by the embodiment of the present invention is shown. The processing system 1 for engineering project archives includes: A splitting module 11, configured to obtain the archives of the engineering project, configure the attribute data of each archive, where the attribute data at least includes: archive number and generation time, set the sorting order, integrate the attribute data to generate an original string, edit the splitting rules, and split the original string into several arrays; A determination module 12, configured to divide the said archives into paragraphs to obtain several segments, and in each segment, find the characters corresponding to the arrays, integrate to obtain the unique identifier of each segment, determine the user of the said archives, and cluster the users into several categories, and through the preset permission management rules, traverse the unique identifiers corresponding to the segments that each category can call, which are defined as available identifiers, where each segment corresponds to an available identifier, and determine the segment one identifier, segment two identifier,..., segment N identifier; An insertion module 13 is used to select a reversible hash function, hash the segment one identifier to obtain a first hash value, integrate the first hash value and the segment two identifier, and continue hashing to obtain a second hash value, and so on, to obtain an Nth hash value, denoted as the root value, establish a mapping between the original string, the category, and the root value, and use the mapping to construct a query table and insert the label generated by the category.

[0056] Figure 6 The block diagram of the composition structure of the processing system for engineering project archives provided by the embodiment of the present invention is shown. The segmentation module 11 includes: A statistics unit 111 is used to count the number of arrays, adjust the arrangement order, update the number, and define the arrangement order with the largest number as the target order. A setting unit 112 is used to set the risk level of the file and dynamically adjust the arrangement order and the original string.

[0057] Figure 7 The block diagram of the composition structure of the processing system for engineering project archives provided by the embodiment of the present invention is shown. The determination module 12 includes: A definition unit 121 is used to select privacy data from the file and define it as a new segment. A management unit 122 is used to centrally manage the file and construct an authentication mechanism. A masking unit 123 is used to cluster the segments into callable segments and unauthorized segments according to the category and the permission management rule, and mask the unauthorized segments. A distribution unit 124 is used to integrate all callable segments, generate an authorized data pool, and distribute call permissions to the corresponding usage objects. An update unit 125 is used to determine whether there is the same unique identifier in the query table. If so, insert an additional item into the attribute data and update the original string. A generation unit 126 is used to determine the call record of each file and generate an access log.

[0058] Figure 8 The block diagram of the composition structure of the processing system for engineering project archives provided by the embodiment of the present invention is shown. The insertion module 13 includes: A migration unit 131 is used to construct a distributed storage architecture composed of a cloud and local nodes, upload the file to the cloud, and migrate the query table to the local node. A replacement unit 132 is used to create a replacement mechanism for the reversible hash function and update the query table.

[0059] Among them, the splitting module 11 is mainly used to complete step S100, the determination module 12 is mainly used to complete step S200, and the insertion module 13 is mainly used to complete step S300; The statistics unit 111 is mainly used to complete step S101, and the setting unit 112 is mainly used to complete step S102; The definition unit 121 is mainly used to complete step S201, the management unit 122 is mainly used to complete step S202, the mask unit 123 is mainly used to complete step S203, the distribution unit 124 is mainly used to complete step S204, the update unit 125 is mainly used to complete step S205, and the generation unit 126 is mainly used to complete step S206; The migration unit 131 is mainly used to complete step S301, and the replacement unit 132 is mainly used to complete step S302.

[0060] The technical features of the above-described embodiments can be combined arbitrarily. For the sake of brevity of description, not all possible combinations of the technical features in the above-described embodiments are described. However, as long as there is no contradiction in the combination of these technical features, it should be considered as the scope described in this specification.

[0061] The above-described embodiments only represent several implementation manners of the present invention. The description is relatively specific and detailed, but it should not be construed as a limitation on the scope of the patent of the present invention. It should be noted that for those of ordinary skill in the art, without departing from the concept of the present invention, several modifications and improvements can still be made, and these all belong to the protection scope of the present invention. Therefore, the protection scope of the patent of the present invention should be subject to the appended claims.

[0062] The above is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent replacements, and improvements made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A method for processing project files, characterized in that, The method includes: Obtain the archives of the engineering project, configure the attribute data of each archive, where the attribute data at least includes: archive number and generation time, set the sorting order, integrate the attribute data, generate the original string, edit the splitting rule, and split the original string into several arrays; Divide the archives into paragraphs to obtain several segments, and in each segment, find the characters corresponding to the arrays, integrate to obtain the unique identifier of each segment, determine the usage objects of the archives, and cluster the usage objects into several categories. Through the preset permission management rules, traverse the unique identifiers corresponding to the segments that each category can call, and define them as available identifiers. Each segment corresponds to an available identifier, and determine the segment one identifier, segment two identifier,..., segment N identifier; Select a reversible hash function, hash the segment one identifier to obtain the first hash value, integrate the first hash value and the segment two identifier, and continue to hash to obtain the second hash value, and so on, to obtain the Nth hash value, denoted as the root value, establish the mapping between the original string, the category and the root value, use the mapping to construct a query table, and insert the label generated by the category.

2. The processing method of the engineering project archives according to claim 1, wherein The splitting rule is: in the original string, divide a shortest number in the order from left to right, and gradually divide to the right, where the newly divided number is greater than the previous number.

3. The method for processing project files according to claim 1, characterized in that, The steps of setting the sorting order, integrating the attribute data, and generating the original string include: Count the number of arrays, adjust the sorting order, update the number, and define the sorting order with the largest number as the target order; Set the risk level of the archives, and dynamically adjust the sorting order and the original string.

4. The processing method of the engineering project archives according to claim 3, characterized in that The steps of dividing the archives into paragraphs to obtain several segments, and in each segment, finding the characters corresponding to the arrays include: Select the privacy data from the archives and define it as a new segment; Centralize the management of the archives and build an authentication mechanism.

5. The processing method of the engineering project archives according to claim 1, characterized in that, The steps of determining the usage objects of the archives, and clustering the usage objects into several categories through the preset permission management rules include: Based on the category and the permission management rules, cluster the segments into callable segments and segments without permission, and mask the segments without permission; Integrate all the callable segments to generate an authorized data pool, and issue call permissions to the corresponding usage objects.

6. The processing method of the engineering project archives according to claim 1, characterized in that The steps of traversing the unique identifiers corresponding to the segments that each category can call and defining them as available identifiers include: Judge whether there are the same unique identifiers in the query table. If so, insert an additional item into the attribute data and update the original string; Determine the call records of each archive and generate an access log.

7. The processing method of the engineering project archives according to claim 1, characterized in that The steps of establishing the mapping between the original string, the category and the root value, using the mapping to construct a query table, and inserting the label generated by the category include: Build a distributed storage architecture composed of a cloud and local nodes, upload the archives to the cloud, and migrate the query table to the local nodes; Create a replacement mechanism for the reversible hash function and update the query table.

8. A processing system for project archives, characterized in that, The system includes: A segmentation module, which is used to obtain the archives of the engineering project, configure the attribute data of each archive, where the attribute data at least includes: archive number and generation time, set the sorting order, integrate the attribute data, generate an original string, edit the segmentation rules, and segment the original string into several arrays; A determination module, which is used to divide the archive into paragraphs to obtain several segments, and in each segment, find the characters corresponding to the arrays, integrate to obtain the unique identifier of each segment, determine the usage object of the archive, and cluster the usage objects into several categories. Through the preset permission management rules, traverse the unique identifiers corresponding to the segments that can be called by each category, which are defined as available identifiers. Each segment corresponds to an available identifier, and determine the segment one identifier, segment two identifier,..., segment N identifier; An insertion module, which is used to select a reversible hash function, hash the segment one identifier to obtain a first hash value, integrate the first hash value and the segment two identifier, and continue to hash to obtain a second hash value, and so on, to obtain the Nth hash value, denoted as the root value, establish a mapping between the original string, the category and the root value, use the mapping to construct a query table, and insert the tags generated by the category.

9. The processing system for project archives according to claim 8, characterized in that, The segmentation module includes: A statistics unit, which is used to count the number of arrays, adjust the sorting order, update the number, and define the sorting order with the largest number as the target order; A setting unit, which is used to set the risk level of the archive and dynamically adjust the sorting order and the original string.

10. The processing system for engineering project archives according to claim 9, characterized in that, The determination module includes: A definition unit, which is used to select privacy data from the archive and define it as a new segment; A management unit, which is used to centrally manage the archive and construct an authentication mechanism; A masking unit, which is used to cluster the segments into callable segments and unauthorized segments according to the category and the permission management rules, and mask the unauthorized segments; A distribution unit, which is used to integrate all the callable segments, generate an authorized data pool, and distribute the call permission to the corresponding usage objects; An update unit, which is used to judge whether there are the same unique identifiers in the query table. If so, insert an additional item into the attribute data and update the original string; A generation unit, which is used to determine the call record of each archive and generate an access log.

Images