Login method and device of overseas oil and gas operation system and electronic equipment

Abstract

The invention relates to the technical field of IT and system login. The embodiment of the invention provides a login method and device of an overseas oil and gas operation system and electronic equipment. The method is executed in any target data service in an overseas oil and gas operation system, and comprises the steps that a first character sequence input when enterprise users request to log in the target data service is acquired, the target data service does not store the first character sequence, and the first character sequences of all the enterprise users are different from one another; performing mapping processing on the first character sequence through a preset mapping algorithm to obtain first verification information; verifying whether the enterprise user is legal based on the first verification information and first contrast information reserved in the target data service; and if the enterprise user is legal, allowing the enterprise user to log in the target data service, and if the enterprise user is illegal, refusing the enterprise user to log in the target data service. According to the invention, the safety of user information in an overseas oil and gas operation system can be improved.

Description

Technical Field

[0001] The present application relates to the field of IT and system login technology, and more specifically, to a method, device, and electronic equipment for logging into an overseas oil and gas operation system. Background Art

[0002] With the advancement of globalization, more and more companies are developing and operating oil and gas resources overseas. Against this backdrop, companies urgently need a secure and reliable operations system to manage their overseas oil and gas operations. Overseas oil and gas operations systems provide services across various business types (such as material procurement, inventory management, production management, personnel management, and financial management), helping enterprise users effectively manage and monitor their operations. However, due to the complexity of overseas oil and gas operations systems and the large number and widespread distribution of enterprise users, ensuring the security of user login information has become a significant technical challenge.

[0003] In the current technological landscape, traditional system login authentication methods primarily rely on simple password verification mechanisms. However, these methods present security risks, such as susceptibility to brute force cracking, computer viruses, and hacker attacks. Therefore, improving the security of user information within overseas oil and gas operations systems is a pressing technical challenge. Summary of the Invention

[0004] The embodiments of the present application provide a method, device, computer program product or computer program, computer-readable storage medium and electronic device for logging into an overseas oil and gas operation system, thereby improving the security of user information in the overseas oil and gas operation system at least to a certain extent.

[0005] Other features and advantages of the present application will become apparent from the following detailed description, or may be learned in part by practice of the present application.

[0006] According to one aspect of an embodiment of the present application, a login method for an overseas oil and gas operation system is provided, wherein the overseas oil and gas operation system includes multiple data services, and the method is executed on a target data service, wherein the target data service is any data service in the overseas oil and gas operation system, and the method includes: obtaining a first character sequence entered by an enterprise user when requesting to log in to the target data service, wherein the target data service does not save the first character sequence, and the first character sequences of various enterprise users are different; mapping the first character sequence through a preset mapping algorithm to obtain first verification information; verifying whether the enterprise user is legal based on the first verification information and first comparison information reserved in the target data service; if the enterprise user is legal, allowing the enterprise user to log in to the target data service, and if the enterprise user is not legal, refusing the enterprise user to log in to the target data service.

[0007] In some embodiments of the present application, based on the aforementioned scheme, obtaining the first character sequence entered by the enterprise user when requesting to log in to the target data service includes: obtaining encrypted data sent by the terminal where the enterprise user is located, the encrypted data being the first character sequence after being encrypted with the public key of the target data service; decrypting the encrypted data based on the private key of the target data service to obtain the first character sequence.

[0008] In some embodiments of the present application, based on the aforementioned scheme, the mapping algorithm includes at least two independent mapping sub-algorithms, each mapping sub-algorithm is independently isolated in a container in the target data service, and the mapping processing of the first character sequence by a preset mapping algorithm to obtain first verification information includes: mapping processing of character sequences at preset positions in the first character sequence by the at least two mapping sub-algorithms respectively to obtain at least two verification sub-information; and determining the first verification information based on the at least two verification sub-information.

[0009] In some embodiments of the present application, based on the aforementioned scheme, the verification of whether the enterprise user is legal is based on the first verification information and the first comparison information reserved in the target data service, including: if the first verification information and the first comparison information reserved in the target data service are consistent, then the enterprise user is determined to be legal; if the first verification information and the first comparison information reserved in the target data service are inconsistent, then the enterprise user is determined to be illegal.

[0010] In some embodiments of the present application, based on the aforementioned scheme, the first control information includes control sub-information corresponding to each mapping sub-algorithm, and the verification of whether the enterprise user is legal based on the first verification information and the first control information reserved in the target data service includes: if the number of consistent verification sub-information in the first verification information and the control sub-information in the first control information is greater than or equal to a preset number, then the enterprise user is determined to be legal; if the number of consistent verification sub-information in the first verification information and the control sub-information in the first control information is less than a preset number, then the enterprise user is determined to be illegal.

[0011] In some embodiments of the present application, based on the aforementioned scheme, before obtaining the first character sequence entered by the enterprise user when requesting to log in to the target data service, the method also includes: obtaining the communication time when the enterprise user establishes communication with the target data service, and the communication environment data of the enterprise user; if there is a broadcast event of the communication environment data by other data services in the overseas oil and gas operation system within a set time period before the communication time, the enterprise user is directly allowed to log in to the target data service, and the broadcast event is triggered by the other data service when the enterprise user logs out.

[0012] In some embodiments of the present application, based on the aforementioned scheme, the overseas oil and gas operation system also includes a relay service, which is used to connect the target data service and non-enterprise users, wherein the relay service communicates with the target data service through an intranet, and the relay service communicates with the non-enterprise user through an extranet. The method also includes: when the non-enterprise user logs in to the relay service, obtaining a second character sequence entered by the non-enterprise user and forwarded by the relay service, the target data service does not save the second character sequence, and the second character sequences of each non-enterprise user are different; mapping the second character sequence through a preset mapping algorithm to obtain second verification information; based on the second verification information and the second comparison information reserved in the target data service, verifying whether the non-enterprise user is legal; and sending the verification result to the relay service, so that the relay service determines whether to allow the non-enterprise user to log in to the relay service based on the verification result.

[0013] In some embodiments of the present application, based on the aforementioned solution, the mapping algorithm is asymmetric.

[0014] According to one aspect of an embodiment of the present application, a login device for an overseas oil and gas operation system is provided, wherein the overseas oil and gas operation system includes multiple data services, and the device is arranged in a target data service, wherein the target data service is any data service in the overseas oil and gas operation system, and the device includes: an acquisition unit, used to acquire a first character sequence entered by an enterprise user when requesting to log in to the target data service, wherein the target data service does not save the first character sequence, and the first character sequences of various enterprise users are different; a mapping unit, used to map the first character sequence through a preset mapping algorithm to obtain first verification information; a verification unit, used to verify whether the enterprise user is legal based on the first verification information and first comparison information reserved in the target data service; if the enterprise user is legal, the enterprise user is allowed to log in to the target data service, and if the enterprise user is not legal, the enterprise user is denied login to the target data service.

[0015] According to one aspect of an embodiment of the present application, a computer program product or computer program is provided, the computer program product or computer program including computer instructions stored in a computer-readable storage medium. A processor of a computer device reads the computer instructions from the computer-readable storage medium and executes the computer instructions, causing the computer device to perform the method described in the above embodiment.

[0016] According to one aspect of an embodiment of the present application, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the method described in the above embodiment is implemented.

[0017] According to one aspect of an embodiment of the present application, an electronic device is provided, comprising: one or more processors; a storage device for storing one or more programs, which, when executed by the one or more processors, enables the one or more processors to implement the methods described in the above embodiments.

[0018] Based on the technical solution proposed in this application, the first character sequence entered by the enterprise user is obtained and mapped based on the mapping algorithm to generate the first verification information. Then, the first verification information is compared with the first control information reserved in the target data service to verify the legitimacy of the enterprise user. The whole process ensures the security of user information and the reliability of the system. Specifically, the enterprise user enters the first character sequence when requesting to log in, and the target data service processes it through the mapping algorithm to generate the first verification information and compare it with the reserved first control information. If the verification passes, the login is allowed, otherwise the login is denied. In this way, the security risks of traditional password verification methods that are susceptible to brute force cracking and hacker attacks can be effectively solved, and the mapping algorithm can improve the security of user information in overseas oil and gas operation systems through a complex processing mechanism, thereby improving the security of user login verification. In addition, the target data service does not save the first character sequence of the enterprise user, which can further ensure the security of user information in overseas oil and gas operation systems.

[0019] It should be understood that the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the present application. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] The accompanying drawings are incorporated into and constitute a part of the specification, illustrating embodiments consistent with the present application and, together with the specification, explaining the principles of the present application. Obviously, the drawings described below are only some embodiments of the present application, and those skilled in the art can derive other drawings based on these drawings without inventive effort. In the drawings: Figure 1 The following is a system architecture diagram of an overseas oil and gas operation system based on blockchain according to one embodiment of the present application; Figure 2 A flowchart of a method for logging into an overseas oil and gas operation system according to one embodiment of the present application is shown; Figure 3 The following is a system architecture diagram of an overseas oil and gas operation system based on blockchain according to one embodiment of the present application; Figure 4 A block diagram of a login device for an overseas oil and gas operation system according to an embodiment of the present application is shown; Figure 5 A schematic diagram of the structure of a computer system suitable for implementing an electronic device according to an embodiment of the present application is shown. DETAILED DESCRIPTION

[0021] Example embodiments will now be described more fully with reference to the accompanying drawings. However, example embodiments can be implemented in many forms and should not be construed as limited to the examples set forth herein; rather, these embodiments are provided so that this application will be thorough and complete and will fully convey the concepts of the example embodiments to those skilled in the art.

[0022] In addition, described feature, structure or characteristic can be combined in one or more embodiments in any suitable manner.In the following description, many specific details are provided so as to provide a full understanding of the embodiments of the present application. However, it will be appreciated by those skilled in the art that the technical scheme of the present application can be put into practice without one or more of the specific details, or other methods, components, devices, steps etc. can be adopted. In other cases, known methods, devices, implementations or operations are not shown or described in detail to avoid blurring the various aspects of the application.

[0023] The block diagrams shown in the accompanying drawings are merely functional entities and do not necessarily correspond to physically separate entities. That is, these functional entities may be implemented in software, in one or more hardware modules or integrated circuits, or in different networks and / or processor devices and / or microcontroller devices.

[0024] The flowcharts shown in the accompanying drawings are for illustrative purposes only and do not necessarily include all contents and operations / steps, nor must they be executed in the order described. For example, some operations / steps may be decomposed, while others may be combined or partially combined. Therefore, the actual execution order may vary depending on the actual situation.

[0025] It should be noted that the term "plurality" used in this document refers to two or more. "And / or" describes a relationship between associated objects, indicating that three possible relationships exist. For example, "A and / or B" can represent: A alone, A and B together, or B alone. The character " / " generally indicates an "or" relationship between the associated objects.

[0026] It should be noted that the terms "first," "second," and the like in the specification and claims of this application and the accompanying drawings are used to distinguish similar objects and are not necessarily used to describe a specific order or precedence. It should be understood that the terms used in this manner are interchangeable where appropriate, such that the embodiments of the present application described herein can be implemented in an order other than that illustrated or described.

[0027] As more and more companies develop and operate oil and gas resources overseas, they urgently need a secure and reliable operations system to manage their overseas operations. The Overseas Oil and Gas Operations System provides system services for various business types (such as material procurement, inventory management, production management, personnel management, and financial management), helping enterprise users effectively manage and monitor their operations.

[0028] In order to enable those skilled in the art to better understand the overseas oil and gas operation system, this application combines Figure 1 Take a specific example to illustrate the overseas oil and gas operation system. Figure 1 , showing a system architecture diagram of a blockchain-based overseas oil and gas operation system according to an embodiment of the present application.

[0029] In this embodiment, the overseas oil and gas operation system based on blockchain can include multiple professional business management platforms, each of which is equipped with corresponding data services and is responsible for managing business data in a specific field. Figure 1 As shown, the blockchain-based overseas oil and gas operation system may include: a material procurement platform 110, an inventory management platform 120, a production management platform 130, a personnel management platform 140, and a financial management platform 150.

[0030] Among them, the material procurement platform 110 includes a procurement data service 111, which is configured to manage material procurement data in overseas oil and gas operation projects; the inventory management platform 120 includes an inventory data service 121, which is configured to manage material inventory data in overseas oil and gas operation projects; the production management platform 130 includes a production data service 131, which is configured to manage production data in overseas oil and gas operation projects; the personnel management platform 140 includes a personnel data service 141, which is configured to manage personnel data in overseas oil and gas operation projects; the financial management platform 150 includes a financial data service 151, which is configured to manage financial data in overseas oil and gas operation projects; the procurement data service 111, the inventory data service 121, the production data service 131, the personnel data service 141, and the financial data service 151 communicate based on the blockchain network to synchronize the business data generated by each of them in the oil and gas operation projects.

[0031] In actual application scenarios, the overseas oil and gas operation system proposed in this embodiment can be implemented in a Central African oilfield operation project of a multinational oil and gas company, in which the various business management platforms involved in the project are interconnected through a blockchain network to form a unified data ecosystem.

[0032] Specifically, the material procurement platform 110 includes not only procurement data services, but also procurement demand nodes, procurement management nodes, procurement decision nodes, relay services, supplier nodes (e.g. Figure 1 The processing nodes in the material procurement platform 110 shown in the figure may be carried by terminal devices, and enterprise users may process material procurement data through these processing nodes).

[0033] The inventory management platform can use a mobile application with barcode scanning function. When materials are shipped in or out of the warehouse, enterprise users can use terminal devices (such as Figure 1 The processing nodes in the inventory management platform 120 shown in the figure can be implemented as terminal devices. Enterprise users can use these processing nodes to process inventory data, allowing them to update inventory data in real time within the inventory data service. The platform supports multi-warehouse management, inventory alerts, and material transfers. Whenever inventory changes occur, the relevant inventory data is immediately synchronized to the blockchain network.

[0034] The production management platform can use management software with integrated real-time data acquisition modules, and the production data service can directly communicate with on-site production equipment nodes, production scheduling nodes (such as Figure 1 The processing nodes in the production management platform 130 shown in the figure can be terminal devices, and enterprise users can connect to these processing nodes to process production data. The platform includes functions such as production planning, equipment monitoring, and output statistics. The production data service can record key data generated during the production process and synchronize it with the blockchain network.

[0035] The personnel management platform can use human resource management software that supports multiple languages to meet the needs of multinational projects. The personnel management platform can include employee information management nodes, attendance management nodes, performance evaluation nodes, etc. (for example, Figure 1 The processing nodes in the human resources management platform 140 shown in the figure may be carried by terminal devices, and enterprise users may process human resources data through these processing nodes. Important employee-related information changes may be synchronized to other related management platforms through the blockchain network.

[0036] The financial management platform can use financial software that complies with international accounting standards and supports multi-currency accounting. The platform includes functions such as budget management, cost accounting, and financial report generation. Enterprise users can use the terminal device (such as Figure 1 The processing nodes in the financial management platform 150 shown in the figure can be terminal devices. The financial data entered or updated by enterprise users (financial data can be processed through these processing nodes) can be synchronized in real time through the blockchain network to ensure that the financial data used by other business management platforms meets the consistency.

[0037] In this embodiment, the blockchain network can be built on a consortium chain based on Ethereum or Hyperledger, and the various communication nodes in the blockchain network can be deployed on the data services of various business management platforms in the overseas oil and gas operation system. These data services communicate with each other through the blockchain network, which can achieve efficient synchronization of different types of business data. For example, when the material procurement platform generates a new purchase order, the order information will be synchronized in real time to other business management platforms, such as the inventory management platform and the financial management platform, through the blockchain network. In this way, through this implementation method, it is possible to effectively solve the data synchronization problem in overseas oil and gas operation projects, ensure the consistency and real-time nature of cross-platform data, improve the operational efficiency of overseas oil and gas operation projects, reduce management costs, and provide reliable data support for project decision-making.

[0038] The overseas oil and gas operations system proposed in this embodiment utilizes blockchain technology to address data security and credibility issues inherent in traditional solutions. Blockchain's immutability ensures data integrity, while its decentralized structure reduces the risk of single points of failure. Furthermore, blockchain's transparency allows for traceability of the flow of different business data within the overseas oil and gas operations system, contributing to improved auditability.

[0039] Currently, due to the complexity of overseas oil and gas operating systems and the large number and widespread distribution of enterprise users, ensuring the security of enterprise user login information has become a major technical challenge. In the current technological environment, traditional system login verification methods mainly rely on simple account and password verification mechanisms. However, these methods have certain security risks, such as being vulnerable to threats such as brute force cracking, computer viruses, and hacker attacks. Based on this, this application proposes a login method for overseas oil and gas operating systems to improve the security of user information in overseas oil and gas operating systems.

[0040] The following is a detailed description of the implementation details of the technical solution of the embodiment of the present application: Reference Figure 2 , which illustrates a flow chart of a method for logging into an overseas oil and gas operations system according to one embodiment of the present application. The overseas oil and gas operations system may include multiple data services, and the method is executed on a target data service (i.e., a device with computing and processing capabilities). The target data service is any data service in the overseas oil and gas operations system.

[0041] like Figure 2 As shown, the method for logging into the overseas oil and gas operation system includes at least steps 210 to 240, which are described in detail as follows: In step 210, a first character sequence entered by the enterprise user when requesting to log in to the target data service is obtained. The target data service does not save the first character sequence, and the first character sequence of each enterprise user is different.

[0042] In the present application, when a user requests to log in to the target data service, he or she only needs to enter a first character sequence in the terminal device. The first character sequence is not only a key identifier of the user's identity, but also the user's private information, which can be used to verify the legitimacy of the user's identity. Unlike traditional login methods, users only need to enter a first character sequence instead of a complex account number or password, thereby simplifying the user's login operation and improving the user experience. The first character sequence can be a group of characters selected by the user, which may be a phrase, a combination of the first letters of a word, or other forms of short information, such as "userA123". Due to the privacy of the character sequence, only the enterprise user himself or herself knows it, thereby reducing the risk of being guessed or stolen by others.

[0043] Furthermore, after obtaining the first character sequence entered by the user, the target data service does not save it. This way, even if the target data service experiences a data breach, the attacker cannot obtain the user's first character sequence, thereby protecting the user's privacy and improving the security of user information in overseas oil and gas operation systems.

[0044] Furthermore, to ensure security, each enterprise user's first character sequence is unique. Specifically, this can be achieved during user registration. When an enterprise user determines their first character sequence during the registration process, the user can check whether the first character sequence has already been used by another enterprise user, thereby ensuring that each enterprise user's first character sequence is unique. This uniqueness not only helps prevent user identity conflicts but also reduces potential security risks.

[0045] Overall, the privacy and uniqueness of the first character sequence make it an effective authentication mechanism. This ensures that only genuine enterprise users can access the target data service, while also reducing the burden on enterprise users of remembering complex passwords. This solution improves security while also enhancing the user experience, making the login process simpler and more efficient for enterprise users.

[0046] Continue to refer to Figure 2 In step 220, the first character sequence is mapped using a preset mapping algorithm to obtain first verification information.

[0047] In this application, the first character sequence entered by the user can be deleted after being processed by the mapping algorithm. At the same time, the first verification information obtained after the mapping algorithm is processed is significantly different in form from the original first character sequence entered. In this way, the information used to verify the legitimacy of the user's identity is the first verification information, rather than the first character sequence. This prevents the first character sequence entered by the user from being exposed for a long time in the target data service, thereby improving the security of user information in the overseas oil and gas operation system.

[0048] In the present application, the mapping algorithm can be symmetrical. Specifically, through the mapping algorithm, the first character sequence can be derived into the first verification information, and the first verification information can also be deduced back to the first character sequence. This two-way mapping mechanism can not only improve the flexibility of enterprise user identity authentication, but also ensure the security and reliability of enterprise users in the process of logging into the target data service. Even if the first verification information is leaked, the attacker cannot easily obtain the first character sequence entered by the user unless the detailed information of the mapping algorithm is leaked.

[0049] In the present application, the mapping algorithm can also be asymmetric. Specifically, through the mapping algorithm, the first character sequence can be mapped to the first verification information, but the first verification information cannot be reversely deduced to obtain the first character sequence. In other words, when mapping the first character sequence, the mapping process and the reverse mapping process are asymmetric. This effectively prevents attackers from inferring the first character sequence originally entered by the enterprise user through reverse engineering.

[0050] In this application, the asymmetric mapping algorithm can be a one-way hash function, such as the SHA-256 algorithm. By introducing an asymmetric mapping algorithm, the security of user login information in overseas oil and gas operation systems can be significantly improved. Even in the face of threats such as brute force cracking, computer viruses, and hacker attacks, the asymmetric mapping algorithm can provide higher security because even if an attacker obtains the first verification information and detailed information of the mapping algorithm, they cannot obtain the first character sequence originally entered by the enterprise user, thereby effectively protecting the security of the enterprise user's login information.

[0051] Continue to refer to Figure 2 In step 230, based on the first verification information and the first comparison information reserved in the target data service, it is verified whether the enterprise user is legitimate.

[0052] In this application, after obtaining the first character sequence representing the identity information entered by the enterprise user and generating first verification information, the target data service compares the first verification information with the first comparison information to verify the legitimacy of the enterprise user. It should be noted that the first comparison information may be pre-stored in the target data service, specifically generated and stored in the target data service when the enterprise user registers with the target data service.

[0053] In this application, the mapping algorithm can be updated regularly or irregularly. Figure 1 For example, an administrator managing personnel data can modify the mapping algorithm in personnel data service 141 and synchronize the modified mapping algorithm to other business data services in the overseas oil and gas operations system via blockchain network 100. It is understood that when the mapping algorithm is updated, the first comparison information in each business data service will also be updated synchronously. This can reduce the negative impact of attacks on the mapping algorithm, thereby improving the security of user login verification.

[0054] Continue to refer to Figure 2 In step 240, if the enterprise user is legitimate, the enterprise user is allowed to log in to the target data service; if the enterprise user is not legitimate, the enterprise user is denied to log in to the target data service.

[0055] In the present application, by comparing the first verification information entered by the enterprise user with the first control information stored in the target data service, if the two match, the legitimacy of the enterprise user can be confirmed, and the enterprise user can be allowed to log in to the target data service and access the business data in the target data service; on the contrary, if the two do not match, it indicates that the legitimacy of the enterprise user has not been confirmed, and the target data service will reject the login request of the enterprise user.

[0056] In order to make the art better understand this application, the following will be combined with Figure 3 , described with a specific embodiment.

[0057] See also Figure 3 , showing a system architecture diagram of a blockchain-based overseas oil and gas operation system according to an embodiment of the present application.

[0058] For example, Figure 3As shown, in an overseas oil and gas operations system, corporate user A, who manages material procurement data, enters their first character sequence at procurement demand node 1111, procurement management node 1112, or procurement decision node 1113 on the material procurement platform to request login to procurement data service 111. The first character sequence is "userA123." After obtaining "userA123," procurement data service 111 generates the following hash value (hypothetical) using the SHA-256 algorithm (i.e., a one-way hash function) and uses this hash value as the first verification information.

[0059] "a3c6c3d7d0b2e1b9c2a5c4b6c5e9d5a5e7b4c8f2f5d8e1e8a6a9c3c6b2d4e9e1".

[0060] Furthermore, if the first verification information matches the first comparison information reserved in the procurement data service 111 , it is determined that the enterprise user A is legitimate, and the enterprise user A is allowed to log in to the procurement data service 111 .

[0061] For example, Figure 3 As shown, in an overseas oil and gas operations system, corporate user B, who manages material inventory data, enters his first character sequence into inventory management node 1211 of the material inventory platform to request login to inventory data service 121. The first character sequence is "userB123." After obtaining "userB123," inventory data service 121 uses the SHA-256 algorithm (i.e., a one-way hash function) to generate the following hash value (hypothetical) and uses this hash value as the first verification information.

[0062] "9f5b8a8b4c3a6c6f8b5e5d6e8e6b1c8c6f9f8c8a6f8b5e5d6e8e6b1c8c6f9f8c8".

[0063] Furthermore, if the first verification information does not match the first comparison information reserved in the inventory data service 121 , it is determined that the enterprise user B is not legitimate, and the enterprise user B will not be allowed to log in to the inventory data service 121 .

[0064] Based on the technical solution proposed in this application, the first character sequence entered by the enterprise user is obtained and mapped based on the mapping algorithm to generate the first verification information. Then, the first verification information is compared with the first control information reserved in the target data service to verify the legitimacy of the enterprise user. The whole process can ensure the security of user information and the reliability of the system. Specifically, the enterprise user enters the first character sequence when requesting to log in, and the target data service processes it through the mapping algorithm to generate the first verification information and compare it with the reserved first control information. If the verification passes, the login is allowed, otherwise the login is denied. In this way, the security risks of traditional password verification methods that are susceptible to brute force cracking and hacker attacks can be effectively solved, and the mapping algorithm can improve the security of user information in overseas oil and gas operation systems through a complex processing mechanism, thereby improving the security of user login verification. In addition, the target data service does not save the first character sequence of the enterprise user, which can further ensure the security of user information in overseas oil and gas operation systems.

[0065] Next, this application will address the above Figure 2 Further explanation of each step in.

[0066] In the present application, the step of obtaining the first character sequence entered by the enterprise user when requesting to log in to the target data service may be performed according to the following steps 211 to 212: Step 211: Acquire encrypted data sent by the terminal where the enterprise user is located, where the encrypted data is the first character sequence encrypted by the public key of the target data service.

[0067] Step 212: Decrypt the encrypted data based on the private key of the target data service to obtain the first character sequence. In this application, when an enterprise user enters login information for a target data service on a terminal device, the target data service may encrypt this information (i.e., the first character sequence). Specifically, the encryption key used in the encryption process may be the public key of the target data service. This ensures that even if the first character sequence is intercepted during transmission, an attacker cannot easily obtain the first character sequence.

[0068] For example, the first character sequence entered by the enterprise user is "userA123". Before sending it to the target data service, the terminal device can encrypt it using the public key of the target data service to generate a seemingly random encrypted data. This encrypted data will be sent to the target data service to ensure the security of the first character sequence during transmission. Next, after receiving the encrypted data, the target data service will use its private key to decrypt the encrypted data. The private key is a key paired with the public key, and only the target data service can use this private key. By decrypting the encrypted data, the target data service can restore the first character sequence entered by the enterprise user. In this example, the target data service can decrypt the previously encrypted "userA123" with the private key to obtain the first character sequence originally entered by the enterprise user.

[0069] In this application, through the mechanism of public key encryption and private key decryption, the first character sequence can be effectively prevented from being illegally intercepted or tampered with, so that the target data service can safely obtain the first character sequence entered by the enterprise user when logging in, ensuring that only authorized enterprise users can access the resources of the target data service, thereby improving the security of user information in overseas oil and gas operation systems.

[0070] In this application, the number of the mapping algorithms may include only one, for example, only the SHA-256 algorithm (i.e., one-way hash function) in the above embodiment.

[0071] In this application, the number of the mapping algorithms may also include multiple. Specifically, it may include at least two independent mapping sub-algorithms. In this case, Figure 1 In step 220, the first character sequence is mapped using a preset mapping algorithm to obtain first verification information, which can be performed according to the following steps 221 to 222: Step 221 : Mapping the character sequences at the preset positions in the first character sequence using the at least two mapping sub-algorithms to obtain at least two pieces of verification sub-information.

[0072] Step 222: Determine the first verification information based on the at least two verification sub-information.

[0073] It should be noted that in this application, the at least two mapping sub-algorithms may be identical, such as all symmetric mapping sub-algorithms or all asymmetric mapping sub-algorithms; they may also be different, such as all asymmetric and different mapping sub-algorithms; or they may be partially identical and partially different. Specifically, this application does not impose any additional restrictions on this.

[0074] It should also be noted that, in this application, the preset positions corresponding to the respective mapping sub-algorithms may be the same, different, or partially the same and partially different. Specifically, this application does not impose too many restrictions on this.

[0075] In this application, in order to enable those skilled in the art to better understand the above step 221, a specific embodiment is provided below for description.

[0076] In a specific embodiment, the mapping algorithm includes three different mapping sub-algorithms, namely F 1( x ), F 2( x ), F 3( x ), where the mapping sub-algorithm F 1( x ) corresponds to the preset position: the first character to the third character in the first character sequence; the mapping sub-algorithm F 2 ( x ) corresponds to the preset position: the 4th to 6th characters in the first character sequence; mapping sub-algorithm F 3 ( x ) corresponds to the preset position: from the 7th character to the last character in the first character sequence.

[0077] Assuming that the first character sequence is "userA123", the character sequences at the preset positions in the first character sequence are mapped by the at least two mapping sub-algorithms, that is, respectively by F 1( x ), F 2( x ), F 3( x ) Map the character sequence "use", "rA1", and "23" to obtain three verification sub-information, namely: F 1(use), F 2(rA1), F 3(23).

[0078] In another specific embodiment, the mapping algorithm includes three identical mapping sub-algorithms, namely F 1( x ), F 1( x ), F 1( x ), where the mapping sub-algorithm F 1( x ) corresponds to the preset position: the first character to the third character in the first character sequence; the mapping sub-algorithmF 1( x ) corresponds to the preset position: the 4th to 6th characters in the first character sequence; mapping sub-algorithm F 1( x ) corresponds to the preset position: from the 7th character to the last character in the first character sequence.

[0079] Assuming that the first character sequence is "userA123", the character sequences at the preset positions in the first character sequence are mapped by the at least two mapping sub-algorithms, that is, respectively by F 1( x ), F 1( x ), F 1( x ) Map the character sequence "use", "rA1", and "23" to obtain three verification sub-information, namely: F 1(use), F 1(rA1), F 1(23).

[0080] In another specific embodiment, the mapping algorithm includes four different mapping sub-algorithms, namely F 1( x ), F 2( x ), F 3( x ), F 3( x ), where the mapping sub-algorithm F 1( x ) corresponds to the preset position: all characters in the first character sequence; mapping sub-algorithm F 2 ( x ) corresponds to the preset position: all characters in the first character sequence; mapping sub-algorithm F 3( x ) corresponds to the preset position: all characters in the first character sequence; mapping sub-algorithm F 4( x ) corresponds to the preset position: all characters in the first character sequence.

[0081] Assuming that the first character sequence is "userA123", the character sequences at the preset positions in the first character sequence are mapped by the at least two mapping sub-algorithms, that is, respectively by F 1( x ), F 2( x ), F 3( x), F 4( x ) Map the character sequence "userA123", "userA123", "userA123", and "userA123" to obtain four verification sub-information, namely: F 1(userA123), F 2(userA123), F 3(userA123) , F 4(userA123).

[0082] In the present application, based on the technical solution of step 221 above, when the characters at the preset positions corresponding to each mapping sub-algorithm are part of the characters in the first character sequence, and each mapping sub-algorithm is a symmetric algorithm, if a mapping sub-algorithm is leaked or attacked by an attacker, the attacker can only crack part of the characters in the first character sequence based on the mapping sub-algorithm and its corresponding verification sub-information, but cannot crack the entire character sequence and its arrangement order. This multiple protection measure can effectively limit the attacker's ability to obtain the complete first character sequence, especially in overseas oil and gas operation systems, and can significantly reduce the risk of leakage of sensitive information of corporate users. Therefore, not only the flexibility and accuracy of information processing are enhanced, but also the security of user information in overseas oil and gas operation systems can be improved.

[0083] Furthermore, in this application, each mapping sub-algorithm can be independently isolated in a container in the target data service. Specifically, By placing each mapping sub-algorithm in a separate container, the following security enhancements can be achieved: Isolation: Each mapping sub-algorithm runs in an independent environment. Even if an attacker successfully compromises one container, they cannot directly access the mapping sub-algorithms in other containers. This isolation effectively limits the scope of the attack and reduces the risk of compromising the entire mapping algorithm.

[0084] Dynamic deployment: Containerization technology allows for dynamic deployment and updating of mapping sub-algorithms, enabling rapid patching of vulnerabilities or replacement of affected algorithms without affecting the operation of the entire target data service. This flexibility enables the target data service to better respond to potential security threats.

[0085] Resource limits: Containers can be configured with resource limits, such as CPU and memory usage, to further restrict what attackers can do. This restriction makes it more challenging for attackers to crack the mapping algorithm.

[0086] Monitoring and Auditing: Independent container environments make it easier to monitor and audit, enabling timely detection of abnormal behavior or signs of attack. This monitoring capability facilitates rapid response to security incidents, further improving the security of target data services.

[0087] In general, by isolating each mapping sub-algorithm independently in a container, it can effectively increase the difficulty for attackers to attack the mapping sub-algorithm, and overall enhance the security of the target data service for logged-in user authentication, thereby protecting the privacy and integrity of user information.

[0088] In step 222, determining the first verification information based on the at least two verification sub-information may involve concatenating the at least two verification sub-information and using the resulting concatenated character sequence as the first verification information, or directly using the at least two verification sub-information as the first verification information. This application does not impose any further limitations on this.

[0089] In the present application, the verification of whether the enterprise user is legitimate based on the first verification information and the first comparison information reserved in the target data service may be performed according to the following steps 231 to 232: Step 231: If the first verification information is consistent with the first comparison information reserved in the target data service, it is determined that the enterprise user is legitimate.

[0090] Step 232: If the first verification information is inconsistent with the first comparison information reserved in the target data service, it is determined that the enterprise user is illegal.

[0091] In the present application, by verifying the legitimacy of the enterprise user based on the first verification information and the first comparison information reserved in the target data service, the accuracy and security of user identity authentication can be effectively improved. For example, the target data service can compare the first verification information with the stored first comparison information. If the two are consistent, the target data service can determine that the enterprise user is a legitimate user and allow it to successfully log in and access the data resources in the target data service. However, if the first verification information submitted by the enterprise user is inconsistent with the stored first comparison information, the target data service will determine that the user is an illegitimate user and deny its access request.

[0092] In this application, the above solution not only effectively prevents unauthorized access and reduces potential security risks, but also promptly identifies and responds to potential identity theft or fraud. While ensuring the identity of enterprise users, the target data service also provides strong protection for the legitimacy of enterprise users, laying a solid foundation for the security of the entire target data service.

[0093] In the present application, in the case where the first verification information is verification sub-information mapped by each mapping sub-algorithm, the first comparison information includes comparison sub-information corresponding to each mapping sub-algorithm.

[0094] Furthermore, the verification of whether the enterprise user is legitimate based on the first verification information and the first comparison information reserved in the target data service may be performed according to the following steps 233 to 234: Step 233: If the number of identical verification sub-information in the first verification information and the matching sub-information in the first matching information is greater than or equal to a preset number, it is determined that the enterprise user is legitimate.

[0095] Step 234: If the number of identical verification sub-information in the first verification information and the matching sub-information in the first matching information is less than a preset number, it is determined that the enterprise user is illegal.

[0096] In this application, the first verification information is composed of verification sub-information generated by each mapping sub-algorithm, and the first comparison information includes comparison sub-information corresponding to these mapping sub-algorithms. For example, assuming there are three mapping sub-algorithms F 1( x ), F 2( x ) and F 3( x ), respectively generate the corresponding verification sub-information F 1(a), F 2(b) and F 3(c). At the same time, the target data service reserves the corresponding reference sub-information A, B, and C. When performing verification, the target data service will compare the consistency of the verification sub-information with the reference sub-information.

[0097] If during the verification process, F 1(a) is consistent with A, F 2(b) is consistent with B, and F 3(c) is inconsistent with C, then the number of consistent is 2. Assuming the preset number is 2, then since the number of consistent is greater than or equal to the preset number, the target data service will determine that the enterprise user is a legitimate user. On the contrary, if F 1(a) is consistent with A, F 2(b) is inconsistent with B, and F If 3(c) is inconsistent with C, the number of consistent values is 1, which is lower than the preset number. The target data service will determine that the enterprise user is an illegal user.

[0098] The benefit of this solution is that it improves the robustness of the target data service. Because each mapping sub-algorithm is independent, if one is attacked or fails, the user's legitimacy can still be verified using the verification sub-information generated by other mapping sub-algorithms. This way, even if some mapping sub-algorithms are attacked, the target data service can still verify the user's identity normally, preventing the failure of individual mapping sub-algorithms from paralyzing the entire user login function. This multi-verification mechanism not only enhances the security of the target data service, but also improves the user experience, ensuring that users can successfully access the resources they need, and enhancing the reliability and stability of the target data service.

[0099] Furthermore, in the present application, if some verification sub-information in the first verification information is inconsistent with the corresponding control sub-information, it is possible to check whether the mapping algorithm has been tampered with in order to change the mapping algorithm in each business data service in the overseas oil and gas operation system.

[0100] In the present application, before obtaining the first character sequence entered by the enterprise user when requesting to log in to the target data service, the following steps 201 to 202 may also be performed: Step 201: Acquire the communication time when the enterprise user establishes communication with the target data service, and the communication environment data of the enterprise user.

[0101] Step 202: If there is a broadcast event of the communication environment data by other data services in the overseas oil and gas operation system within the set time period before the communication time, the enterprise user is directly allowed to log in to the target data service, and the broadcast event is triggered by the other data service when the enterprise user logs out.

[0102] In this application, the communication environment data may include the IP address of the enterprise user terminal device, the device code of the enterprise user terminal device, or both the IP address and the device code of the enterprise user terminal device. Specifically, this application does not impose too many restrictions on this.

[0103] In this application, before an enterprise user requests to log in to a target data service, the target data service will first obtain the time when the enterprise user established communication with the target data service and the communication environment data. The key to this process is that if the target data service receives a broadcast event that the enterprise user has logged in to another target data service within the set time, the enterprise user can be directly allowed to log in to the target data service without additional identity verification. This significantly improves the efficiency and experience of enterprise users' login.

[0104] In order to make those skilled in the art better understand this application, Figure 1Let's illustrate this with a specific example.

[0105] Take enterprise user A as an example. Figure 1 As shown, when he attempts to log in to the procurement target data service 111 at 10:10:10, the target data service detects that at 10:10:01, the inventory data service 121 has broadcast the same device terminal information as that of enterprise user A (IP address: 192.168.1.100, device ID: DEV-0012345678). This indicates that enterprise user A was logged in to the inventory data service 121 before 10:10:01 and has successfully logged out since then (assuming the set timeout is 20 seconds). Therefore, procurement data service 111 can reasonably infer that enterprise user A is a legitimate user and directly allow him to log in without requiring him to re-enter the first character sequence.

[0106] This approach not only reduces the login complexity for enterprise users when switching between different target data services, but also improves the response speed of target data services, reduces user login time, and optimizes the enterprise user experience. Enterprise users no longer need to repeatedly enter their identity information and can more smoothly access the required business data services, thereby improving work efficiency. This approach is particularly effective in scenarios where frequent switching between different target data services is required, significantly reducing the operational burden on enterprise users and making the overall business process smoother. It also reduces the resource consumption of repeated verification of data services in overseas oil and gas operation systems.

[0107] In this application, it should be noted that the set duration can be dynamically adjusted based on security requirements and user usage habits. For example, during periods of high user activity, the set duration can be shortened to increase the response speed of the target data service; during periods of low user activity, the set duration can be extended.

[0108] In this application, it should also be noted that when an enterprise user logs out, other data services in the overseas oil and gas operation system, in addition to broadcasting the communication environment data of the enterprise user's device terminal, can also broadcast the first comparison information corresponding to the enterprise user, so that the enterprise user can quickly determine the identity of the enterprise user based on the broadcast first comparison information when logging in to the next data service.

[0109] In the present application, the overseas oil and gas operation system may further include a relay service, which is used to connect the target data service and non-enterprise users, wherein the relay service communicates with the target data service through an intranet, and the relay service communicates with the non-enterprise users through an extranet.

[0110] Furthermore, the following steps 251 to 254 may be performed: Step 251 : When a non-enterprise user logs into the relay service, a second character sequence entered by the non-enterprise user and forwarded by the relay service is obtained. The target data service does not store the second character sequence, and the second character sequences of each non-enterprise user are different.

[0111] Step 252: Map the second character sequence using a preset mapping algorithm to obtain second verification information.

[0112] Step 253: Verify whether the non-enterprise user is legitimate based on the second verification information and the second comparison information reserved in the target data service.

[0113] Step 254: Send the verification result to the relay service, so that the relay service determines whether to allow the non-enterprise user to log in to the relay service based on the verification result.

[0114] In the present application, by introducing a relay service, the system can effectively connect data services with non-enterprise users, and ensure the security of data transmission through intranet and extranet communication methods. When a non-enterprise user logs in to the relay service, the relay service will obtain and forward the second character sequence entered by the non-enterprise user. The target data service will not save these character sequences, thereby ensuring that the character sequence of each non-enterprise user is unique. The second character sequence is mapped through a preset mapping algorithm to obtain second verification information. Then, based on the second verification information and the second control information reserved in the target data service, the legitimacy of the non-enterprise user is verified. Finally, the verification result is sent to the relay service so that the relay service can determine whether to allow the non-enterprise user to log in based on the verification result.

[0115] In this application, in order to make those skilled in the art better understand the above content, Figure 3 , described with a specific embodiment.

[0116] like Figure 3 As shown, when supplier node 1115 (i.e., a non-enterprise user) attempts to log in to relay service 1114 of procurement data service 111, procurement data service 111 can obtain the second character sequence (e.g., "IuserA123") entered by supplier node 1115 and forwarded by relay service 1114. It should be emphasized that this second character sequence is not stored by procurement data service 1111 and is unique for each supplier node to ensure information security.

[0117] Procurement Data Service 111 then processes the second character sequence using a pre-set mapping algorithm to generate second verification information. Procurement Data Service 111 then compares this verification information with second reference information reserved within Procurement Data Service 111 to verify the legitimacy of Supplier Node 1115. If the verification result confirms legitimacy, Procurement Data Service 111 sends this verification result to Relay Service 1114. Based on the verification result, Relay Service 1114 determines whether to allow Supplier Node 1115 to log in to Relay Service 1114, allowing Supplier Node 1115 to access the corresponding business data from Relay Service 1114.

[0118] In practical applications, the communication security between the relay service and the target data service can be ensured in a variety of ways, such as using encrypted communication protocols, setting up firewalls, etc. In addition, the design of the mapping algorithm can also be diversified to improve the security and reliability of non-enterprise user identity verification.

[0119] In the present application, the above scheme can significantly enhance the security and flexibility of the target data service, as well as the security of non-enterprise user information in the target data service. Since the second character sequence is not stored in the target data service, the risk of potential non-enterprise user identity information leakage can be effectively reduced. In addition, the second character sequences of each non-enterprise user are different, which further enhances the uniqueness and accuracy of non-enterprise user identity authentication. By connecting the relay service to the target data service through the intranet and to the non-enterprise user through the extranet, the target data service can effectively isolate internal and external communications, avoid external network attacks on overseas oil and gas operation systems, and enhance the network security of overseas oil and gas operation systems as a whole. Ultimately, this scheme not only improves the login security of non-enterprise users to the target data service, but also provides a reliable identity authentication mechanism for the effective management of the target data service, ensuring the stability and sustainability of the overseas oil and gas operation system.

[0120] The present application provides a method for logging into an overseas oil and gas operation system, which obtains a first character sequence entered by an enterprise user, processes it using a preset mapping algorithm to obtain first verification information, and compares it with the reserved first control information to verify the legitimacy of the user, thereby realizing user login verification. This method does not directly save the user's login information, but verifies it through a mapping algorithm and control information, which greatly improves the security of user information and enhances the anti-attack capability of the overseas oil and gas operation system. At the same time, by introducing relay services and broadcast event mechanisms, it realizes the distinction between enterprise users and non-enterprise users, and improves the system efficiency in frequent login scenarios, which has the advantages of improving user information security, enhancing the system's anti-attack capability, and improving login efficiency.

[0121] The following describes an embodiment of the device of the present application, which can be used to execute the method for logging into an offshore oil and gas operation system described in the above-mentioned embodiment of the present application. For details not disclosed in the embodiment of the device of the present application, please refer to the embodiment of the method for logging into an offshore oil and gas operation system described in the above-mentioned embodiment of the present application.

[0122] Figure 4 A block diagram of a login device for an overseas oil and gas operation system according to an embodiment of the present application is shown.

[0123] Reference Figure 4 As shown, the overseas oil and gas operation system includes multiple data services, and the device is set at the target data service. The target data service is any data service in the overseas oil and gas operation system. According to an embodiment of the present application, the login device 400 of the overseas oil and gas operation system includes an acquisition unit 401, a mapping unit 402 and a verification unit 403.

[0124] Among them, the acquisition unit 401 is used to obtain the first character sequence entered by the enterprise user when requesting to log in to the target data service. The target data service does not save the first character sequence, and the first character sequences of each enterprise user are different; the mapping unit 402 is used to map the first character sequence through a preset mapping algorithm to obtain first verification information; the verification unit 403 is used to verify whether the enterprise user is legal based on the first verification information and the first comparison information reserved in the target data service; if the enterprise user is legal, the enterprise user is allowed to log in to the target data service; if the enterprise user is not legal, the enterprise user is denied to log in to the target data service.

[0125] In some embodiments of the present application, based on the aforementioned scheme, the acquisition unit 401 is configured to: obtain encrypted data sent by the terminal where the enterprise user is located, the encrypted data being the first character sequence after being encrypted using the public key of the target data service; decrypt the encrypted data based on the private key of the target data service to obtain the first character sequence.

[0126] In some embodiments of the present application, based on the aforementioned scheme, the mapping algorithm includes at least two independent mapping sub-algorithms, each mapping sub-algorithm is independently isolated in a container in the target data service, and the mapping unit 402 is configured to: use the at least two mapping sub-algorithms to respectively map the character sequences at preset positions in the first character sequence to obtain at least two verification sub-information; and determine the first verification information based on the at least two verification sub-information.

[0127] In some embodiments of the present application, based on the aforementioned scheme, the verification unit 403 is configured as follows: if the first verification information is consistent with the first control information reserved in the target data service, the enterprise user is determined to be legal; if the first verification information is inconsistent with the first control information reserved in the target data service, the enterprise user is determined to be illegal.

[0128] In some embodiments of the present application, based on the aforementioned scheme, the first control information includes control sub-information corresponding to each mapping sub-algorithm, and the verification unit 403 is configured as follows: if the number of verification sub-information in the first verification information and the control sub-information in the first control information that are consistent is greater than or equal to a preset number, then the enterprise user is determined to be legal; if the number of verification sub-information in the first verification information and the control sub-information in the first control information that are consistent is less than a preset number, then the enterprise user is determined to be illegal.

[0129] In some embodiments of the present application, based on the aforementioned scheme, the verification unit 403 is further configured to: before obtaining the first character sequence entered by the enterprise user when requesting to log in to the target data service, obtain the communication time when the enterprise user establishes communication with the target data service, and the communication environment data of the enterprise user; if there is a broadcast event of the communication environment data by other data services in the overseas oil and gas operation system within a set time period before the communication time, the enterprise user is directly allowed to log in to the target data service, and the broadcast event is triggered by the other data service when the enterprise user logs out.

[0130] In some embodiments of the present application, based on the aforementioned solution, the overseas oil and gas operation system further includes a relay service, which is used to connect the target data service and non-enterprise users, wherein the relay service communicates with the target data service via an intranet, and the relay service communicates with the non-enterprise users via an extranet, and the acquisition unit 401 is configured to: when the non-enterprise user logs in to the relay service, obtain a second character sequence entered by the non-enterprise user and forwarded by the relay service, the target data service does not save the second character sequence, and the second character sequences of each non-enterprise user are different; the mapping unit 402 is configured to: map the second character sequence using a preset mapping algorithm to obtain second verification information; the verification unit 403 is configured to: verify whether the non-enterprise user is legitimate based on the second verification information and second comparison information reserved in the target data service; and send the verification result to the relay service, so that the relay service determines whether to allow the non-enterprise user to log in to the relay service based on the verification result.

[0131] In some embodiments of the present application, based on the aforementioned solution, the mapping algorithm is asymmetric.

[0132] As another embodiment of the present application, a computer program product or computer program is further provided, the computer program product or computer program including computer instructions stored in a computer-readable storage medium. A processor of a computer device reads the computer instructions from the computer-readable storage medium and executes the computer instructions, causing the computer device to perform the method described in the above embodiment.

[0133] As another embodiment of the present application, a computer-readable storage medium is provided. The computer-readable storage medium may be included in the electronic device described in the above embodiments, or may exist independently without being incorporated into the electronic device. The computer-readable storage medium carries one or more programs. When the one or more programs are executed by the electronic device, the electronic device implements the method described in the above embodiments.

[0134] Based on the same inventive concept, the embodiment of the present application also provides an electronic device. Figure 5 , shows a schematic structural diagram of an electronic device in an embodiment of the present application, wherein the electronic device includes one or more memories 504, one or more processors 502, and at least one computer program (program code) stored in the memory 504 and executable on the processor 502, and when the processor 502 executes the computer program, the method described above is implemented.

[0135] Among them, Figure 5 In the present invention, a bus architecture (represented by bus 500) is shown. Bus 500 may include any number of interconnected buses and bridges. Bus 500 links various circuits, including one or more processors represented by processor 502 and memory represented by memory 504. Bus 500 may also link various other circuits, such as peripherals, voltage regulators, and power management circuits. These are well known in the art and, therefore, will not be described further herein. Bus interface 505 provides an interface between bus 500 and receiver 501 and transmitter 503. Receiver 501 and transmitter 503 may be the same component, namely a transceiver, which provides a means for communicating with various other devices over a transmission medium. Processor 502 is responsible for managing bus 500 and general processing, while memory 504 may be used to store data used by processor 502 when performing operations.

[0136] The functions described herein may be implemented in hardware, software executed by a processor, firmware, or any combination thereof. If implemented in software executed by a processor, the functions may be stored as one or more instructions or codes on or transmitted via a computer-readable medium. Other examples and implementations are within the scope and spirit of this application and the appended claims. For example, due to the nature of software, the functions described above may be implemented using software executed by a processor, hardware, firmware, hardwiring, or a combination of any of these. Furthermore, the functional units may be integrated into a single processing unit, each unit may exist physically separately, or two or more units may be integrated into a single unit.

[0137] In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. Among them, the device embodiments described above are only exemplary. For example, the division of the units can be a logical function division. In actual implementation, there may be other division methods, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of units or modules, which can be electrical or other forms.

[0138] The units described as separate components may or may not be physically separate, and the components of the control device may or may not be physical units, that is, they may be located in one place or distributed across multiple units. Some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.

[0139] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application is essentially or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including instructions for enabling a computer device (which can be a personal computer, server or network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: various media that can store program codes, such as a USB flash drive, a read-only memory (ROM), a random access memory (RAM), a mobile hard disk, a magnetic disk or an optical disk.

[0140] The foregoing is merely an embodiment of the present application and is not intended to limit the present application. Various modifications and variations are possible for those skilled in the art. Any modifications, equivalent substitutions, or improvements made within the spirit and principles of the present application shall be included within the scope of the claims of the present application.

Claims

1. A method for logging into an overseas oil and gas operation system, characterized in that: The overseas oil and gas operation system includes multiple data services. The method is executed on a target data service, which is any data service in the overseas oil and gas operation system. The method includes: Obtaining a first character sequence entered by an enterprise user when requesting to log in to the target data service, wherein the target data service does not store the first character sequence, and the first character sequence of each enterprise user is different; Mapping the first character sequence using a preset mapping algorithm to obtain first verification information; Verifying whether the enterprise user is legitimate based on the first verification information and first comparison information reserved in the target data service; If the enterprise user is legal, the enterprise user is allowed to log in to the target data service; if the enterprise user is not legal, the enterprise user is denied to log in to the target data service.

2. The method according to claim 1, characterized in that The obtaining of the first character sequence entered by the enterprise user when requesting to log in to the target data service includes: Acquire encrypted data sent by the terminal where the enterprise user is located, where the encrypted data is data of the first character sequence encrypted using the public key of the target data service; The encrypted data is decrypted based on the private key of the target data service to obtain the first character sequence.

3. The method according to claim 1, characterized in that The mapping algorithm includes at least two independent mapping sub-algorithms, each of which is independently isolated in a container in the target data service. The mapping process is performed on the first character sequence using a preset mapping algorithm to obtain first verification information, including: Mapping the character sequences at preset positions in the first character sequence using the at least two mapping sub-algorithms to obtain at least two pieces of verification sub-information; The first verification information is determined based on the at least two verification sub-information.

4. The method according to claim 3, characterized in that The first comparison information includes comparison sub-information corresponding to each mapping sub-algorithm. The verifying whether the enterprise user is legitimate based on the first verification information and the first comparison information reserved in the target data service includes: If the number of identical verification sub-information in the first verification information and the comparison sub-information in the first comparison information is greater than or equal to a preset number, then the enterprise user is determined to be legitimate; If the number of identical verification sub-information in the first verification information and the matching sub-information in the first matching information is less than a preset number, it is determined that the enterprise user is illegal.

5. The method according to claim 1, wherein The verifying whether the enterprise user is legitimate based on the first verification information and first comparison information reserved in the target data service includes: If the first verification information is consistent with the first comparison information reserved in the target data service, then the enterprise user is determined to be legitimate; If the first verification information is inconsistent with the first comparison information reserved in the target data service, it is determined that the enterprise user is illegal.

6. The method according to claim 1, characterized in that Before obtaining the first character sequence entered by the enterprise user when requesting to log in to the target data service, the method further includes: Acquire the communication time when the enterprise user establishes communication with the target data service, and the communication environment data of the enterprise user; If there is a broadcast event of the communication environment data by other data services in the overseas oil and gas operation system within the set time period before the communication time, the enterprise user is directly allowed to log in to the target data service, and the broadcast event is triggered by the other data service when the enterprise user logs out.

7. The method according to claim 1, characterized in that The overseas oil and gas operation system further includes a relay service, the relay service being used to connect the target data service and the non-enterprise user, wherein the relay service communicates with the target data service via an intranet, and the relay service communicates with the non-enterprise user via an extranet. The method further includes: When a non-enterprise user logs into the relay service, obtaining a second character sequence entered by the non-enterprise user and forwarded by the relay service, the target data service does not store the second character sequence, and the second character sequence of each non-enterprise user is different; Mapping the second character sequence using a preset mapping algorithm to obtain second verification information; Verifying whether the non-enterprise user is legitimate based on the second verification information and second comparison information reserved in the target data service; The verification result is sent to the relay service, so that the relay service determines whether to allow the non-enterprise user to log in to the relay service based on the verification result.

8. The method according to any one of claims 1 to 7, characterized in that The mapping algorithm is asymmetric.

9. A login device for an overseas oil and gas operation system, characterized in that: The overseas oil and gas operation system includes multiple data services, and the device is set in a target data service, where the target data service is any data service in the overseas oil and gas operation system. The device includes: an acquiring unit, configured to acquire a first character sequence entered by an enterprise user when requesting to log into the target data service, wherein the target data service does not store the first character sequence, and the first character sequence of each enterprise user is different; a mapping unit, configured to perform mapping processing on the first character sequence using a preset mapping algorithm to obtain first verification information; A verification unit is used to verify whether the enterprise user is legal based on the first verification information and the first comparison information reserved in the target data service; if the enterprise user is legal, the enterprise user is allowed to log in to the target data service; if the enterprise user is not legal, the enterprise user is denied to log in to the target data service.

10. An electronic device, characterized in that: The electronic device includes one or more processors and one or more memories, wherein at least one program code is stored in the one or more memories, and the at least one program code is loaded and executed by the one or more processors to implement the method according to any one of claims 1 to 8.

Images