Bidirectional real-time updated human resource management data center system

Abstract

The invention discloses a two-way real-time updated human resource management data center system, which comprises at least two heterogeneous systems, a heterogeneous system registration module, a data center and a heterogeneous system permission allocation module, and is characterized in that the data center defines different registered heterogeneous systems as different application roles; different application roles are distributed with modification permissions for different data; the data modification auditing module is used for auditing the received data modification request of each heterogeneous system in real time and storing the modification conforming to the modification permission to the data center; the data synchronous updating module is used for updating the data modification information stored in the data center to all heterogeneous systems in real time; according to the system, each heterogeneous system is endowed with a modification permission within the range of own authority, so that two-way updating is realized, the management efficiency is improved, the management efficiency of enterprises, administrative functional departments, commercial institutions, financial institutions and other enterprises can be improved, and refined permission control of new and old employees is realized.

Description

Technical Field

[0001] The present invention relates to the technical field of administrative human resource management systems, in particular to the technical field of a bidirectional real-time updated human resource management data middle platform system. Background Art

[0002] Human resource management refers to a series of management tasks that an enterprise or organization performs to effectively develop, allocate, use and safeguard human resources through management activities such as planning, organizing, leading and controlling. The core goal of human resource management is to ensure that an enterprise or organization can attract, develop, motivate and retain outstanding talents to achieve organizational strategies and operational goals.

[0003] Currently, with the advancement of information technology, there are more and more work systems on the market that provide convenient services for various departments of companies in industries such as administration, commerce, or finance. This results in human resources managers often having to switch back and forth between multiple systems to view and manage the work permissions of each employee in their respective systems, which is inefficient and requires a lot of work for each user to manually modify permissions.

[0004] Existing human resource management systems, such as the human resource management system and management method disclosed in the invention application with publication number CN116739538A and the blockchain-based human resource management system disclosed in the invention application with publication number CN118013581A, although they perform routine human resource management, do not allow human resource management personnel to quickly assign permissions to individual employees. As a result, whenever a new employee joins or the responsibilities of an old employee change, the human resource management personnel need to individually configure permissions for the employee, which results in a lot of repetitive work. This not only delays the rapid onboarding of new employees, but also makes it difficult for old employees to quickly adapt to changes in the organizational structure. At the same time, manual operations can easily lead to arbitrary and uncontrollable authorization.

[0005] Chinese patent CN105303084A discloses a rights management system and method for use in games, chat platforms, etc., which gives different users different levels of rights. Although the system involves the allocation of rights levels, it is just an ordinary personnel classification, dividing personnel into administrators and ordinary members, and the roles and responsibilities corresponding to administrators and ordinary members are different. The essence of the system is that administrators manage ordinary members. Such allocation only distinguishes between administrators and ordinary members. It is a simple two-dimensional division of labor roles and cannot be applied to administrative human resources management, etc., which divides members of the same type (for example: corporate employees, administrative agency staff, etc.) into different work rights, thereby realizing different rights for different positions of corporate employees and administrative agency staff, and corporate management and administrative management have different roles in different industries and scenarios. The permissions are very complex. Not only are the permissions for each level different, but the permissions for the same level in different departments are also different. For example, the permissions for P9 and P10 in Alibaba are different, and the permissions for P9s in different departments are also different from each other. Such a complex scenario cannot be implemented in the above-mentioned system that only distinguishes between administrators and ordinary members. In the existing technology, the allocation of these permissions is manually input by the human resources department, which consumes a lot of manpower. Not only does it increase a lot of labor costs in the input stage, but in the event of changes in authority, subsequent modifications are also labor-intensive and inefficient. In addition, in the existing manual input and modification, there is no function to track the history of permission changes, which is not only less secure, but also makes it impossible to conduct subsequent human resources audits, thereby causing security risks in the management of enterprises and administrative functional departments.

[0006] In addition, the existing technology such as "Tencent E-Signature Enterprise Edition" also has a permission management function. However, Tencent E-Signature controls the user's viewing and operation permissions through roles. Administrators can assign different roles to employees in different positions to control their permissions; however, Tencent E-Signature is a product that provides electronic contract signing and evidence preservation services for enterprises and individuals. It is used to manage various receipts, rental contracts signed by both parties, etc. The signing process and results are all fixedly preserved through blockchain technology; the system is only a tool for signing contracts, which is the management of contracts, rather than the management of human resources and people; Tencent E-Signature distinguishes between different roles to initiate contract applications and approve contract templates. It is just a normal contract approval process. Salesmen and handlers initiate contracts, and business administrators can modify contract templates, seal modules, etc. The system's permissions are only to prevent salesmen from arbitrarily modifying the contract content when signing electronic contracts online. It is the management of the contract itself, not the management of personnel; Tencent E-Signature is a role setting within this system. There is no communication synchronization, and it is impossible to update permissions between multiple systems.

[0007] In summary, the existing human resource management and authority management are isolated single systems; human resource management is limited to the management of manual entry in a single system; authority management is limited to the management of a specific transaction processing process, such as: game characters, corporate contract signing, corporate OA system, corporate ERP system, etc.

[0008] Human resources are the most core resources of all kinds of enterprises, institutions and administrative departments. The low efficiency of human resource management leads to low efficiency and high cost of the entire society. For example, the permissions of employee A can be modified, added or deleted in the company's financial management software, but they cannot be directly updated synchronously in the OA system, ERP system, sales department contract system, R&D department project development system, etc. This leads to the inability to connect different systems of the company and achieve unified permissions, resulting in the need to enter and modify the permissions of the same employee A separately in each system. This not only makes the management efficiency low, but also makes it easy for inconsistent permissions to occur in each system because they are entered separately. It is even easy to cause management loopholes during employee transfers and resignations. For example, the above-mentioned finance department employee A resigns and all his permissions are deleted in the financial management system. However, the R&D system retains his previous permissions because it is not updated in time, which can easily lead to major risks such as leakage of R&D data. Similarly, similar problems exist in medical institutions, universities, government administrative departments, etc.

[0009] Chinese patent CN117592035A discloses a method and apparatus for unified management of user permissions for enterprise-level application systems. This method, based on a mapping relationship model, achieves automatic unified management of everything from employee position changes to system user adjustments and finally to system permission information. However, this method still has the following problems: 1. It only enables one-way information retrieval from the human resources management system, without the ability to update personnel information and permissions from other heterogeneous systems to the management system. Each employee's assigned application system and access rights to each application system are determined based on the job system calculation model within the human resources management system. This only provides one-way authorization from the human resources system to other systems. This system cannot achieve real-time updates, as all permissions are determined by the human resources system. Personnel updates in other systems cannot be promptly fed back to the human resources system, resulting in high management costs. This is especially true in multi-site application scenarios such as hospitals and schools, where all permissions must pass through the headquarters human resources management system, resulting in low efficiency and high costs. When changes to personnel information and permissions in Heterogeneous System 1 occur, they must be manually reported to the headquarters' HR department, who then manually modify the information and permissions. This traditional management approach results in information lags, often requiring ten days or even half a month for the personnel information to be updated. This is especially true when confidential information is involved. Departing employees can exploit this time lag to steal technical and commercial secrets. By the time headquarters manually updates the permissions, other Heterogeneous Systems 2, 3, and so on, will receive the updated permissions, at which point the update has lost its value. 2. This method uses a computational model to calculate an employee's application permissions and role information. This type of permission management is fixed and unchanging. Any changes require manual modification of permissions in the human resources system to affect the employee's access rights in other systems. This approach only implements top-down permission management and does not provide real-time permission updates from the bottom up. 3. This method only periodically and manually updates permissions from the HR system to various applications in batches. This only reduces the workload of data entry in other applications, but does not achieve real-time updates at the source. It only enables updates after the data is entered into the system. Furthermore, it does not achieve synchronized updates between subsidiaries and branches of large groups such as hospitals and schools. Without real-time synchronized updates, it cannot solve the problem of information leakage caused by personnel transfers and resignations. 4. Each application only passively receives updated information. Not only does it not have any active update permissions, but there is no difference in permissions between each other. It can only passively update the permissions of specific personnel in the application. The application itself cannot obtain different authorization management permissions. Therefore, all updates to personnel and permissions need to be manually filled out and submitted to the headquarters human resources department for review and approval. After the application is entered into the system by the human resources system, it is updated through the unified user management system before the information can be updated. 5. When a system encounters data anomalies or crashes, it is impossible to actively request system data and the system can only be updated passively. This results in untimely updates of individual systems and difficulty in obtaining data in real time. Summary of the Invention

[0010] The purpose of the present invention is to solve the problems in the existing technology and propose a bidirectional real-time updated human resources management data middle-end system, which can realize bidirectional real-time synchronous update of personnel permissions in all management systems within the organization, and grant different modification permissions to different heterogeneous systems, thereby improving management efficiency and reducing management risks.

[0011] To achieve the above objectives, the present invention proposes a bidirectional real-time updating human resource management data middle platform system, comprising at least two heterogeneous systems, a heterogeneous system registration module, a data center, and a data synchronization update module. The heterogeneous systems involve personnel information and personnel permissions. All heterogeneous systems are registered with the data center through the heterogeneous system registration module. The data center updates the personnel information and personnel permissions of each heterogeneous system through the data synchronization update module. The system also includes: Heterogeneous system permission allocation module: The data center defines different registered heterogeneous systems as different application roles, and different application roles are assigned different data modification permissions; Data modification review module: This module reviews data modification requests received from various heterogeneous systems in real time, compares the modification permissions of the corresponding application roles, saves modifications that meet the modification permissions to the data center, and rejects modifications that do not meet the update permissions. Data synchronization update module: updates the data modification information saved in the data center to all heterogeneous systems in real time.

[0012] Preferably, the heterogeneous system registration module is an external heterogeneous system that first registers with the data center to obtain data. System information, server information and IP address must be provided when registering the application. After successful registration, the system will generate a unique APP code. All APP codes are granted to application roles respectively, and different application roles have different data modification permissions.

[0013] Preferably, the data modification permissions include general information and sensitive information. The sensitive information includes personnel position, personnel role, personnel confidential information access permissions, personnel seal permissions, personnel mobile phone number, and personnel ID number; general information includes personnel public vehicle permissions, personnel dining permissions, and personnel parking permissions.

[0014] Preferably, the data modification information in the data synchronization update module includes personnel roles, personnel information, and personnel permissions of personnel in all heterogeneous systems.

[0015] Preferably, it also includes an access acquisition module: allowing heterogeneous systems registered in this system to access and obtain employee data information through standardized interfaces; employee data information includes employee basic information, role information, role association and personnel management scope.

[0016] As an option, an HR audit module is also included: all data access and modification activities are recorded to support auditing and problem tracking.

[0017] Preferably, the human resources audit module includes an information synchronization log module and an interface call log module. The information synchronization log module is used by the system to notify all heterogeneous systems through the message queue after the data is changed, complete information synchronization, and record the synchronization log; the interface call log module is used to record call log information for all data interface calls.

[0018] Preferably, the call log information includes application information, server information, access parameters and return results.

[0019] Beneficial effects of the present invention: 1) Effective two-way updates improve management efficiency: This system provides a unified platform for personnel information and permission information. When logging in to multiple heterogeneous systems, completely consistent personnel information and permission information can be obtained. There is no need for managers of each system to switch back and forth between multiple systems to check, nor is there a need to repeatedly update personnel information and permission information in each heterogeneous system. The system achieves the effect of inputting information into one system and synchronizing it across all systems, thereby reducing a large amount of repetitive manual labor in the management process, saving a lot of time, and improving management efficiency. This efficiency improvement is not just about synchronizing and updating data from the HR system to various heterogeneous systems. Instead, each heterogeneous system is given different modification permissions. After modifications are made within the permissions of the system itself, they can be synchronized to all heterogeneous systems in real time through the data center. This achieves two-way real-time synchronization and updates, rather than one-way passive acceptance by heterogeneous systems. This not only improves the efficiency of input and update work, but also improves the efficiency of entering personnel permission changes into the system, eliminating the tedious steps of manual reporting to the HR department, allowing manual permission change information to be entered into the system in real time. This not only improves the confidentiality of technical secrets and commercial secrets, but also provides two-way real-time updates. It is particularly suitable for high-efficiency management in multi-site application scenarios such as hospitals and schools. 2) Each heterogeneous system is granted modification permissions within its own scope of authority: Different heterogeneous systems are assigned different modification permissions through the heterogeneous system permission allocation module, improving efficiency while ensuring data security. Each heterogeneous system can only make modification requests within the scope of its assigned modification permissions. Each system is granted the corresponding modification permissions based on its function. After such modifications are made in any heterogeneous system, they can be transmitted to the data center in real time. The data center then updates all heterogeneous systems in real time through the data synchronization update module, ensuring the real-time update of permissions across departments and systems. 3) Heterogeneous systems can proactively request updates: Even if a heterogeneous system is attacked and experiences data anomalies or system crashes, after the system recovers and stabilizes, it can proactively request data from the data center through the access acquisition module, enabling timely data and permissions recovery and convenient real-time access. 4) Enables refined permission control: By creating roles and assigning specific permissions to each role, managers can ensure that employees can only access information and resources relevant to their job responsibilities, thereby achieving refined permission control. The flexibility of roles also means that when an employee's responsibilities change, managers can simply change their role rather than reconfiguring all permissions, allowing for rapid adaptation to changes in the organizational structure. 5) Strong security and compliance: The system's synchronization logs and interface call logs provide detailed audit logs, helping to track the history of permission changes and ensure that any permission changes are authorized and recorded, thereby enhancing system security. Unified management makes it easier to ensure that all employee permission settings comply with company policies and legal requirements, and that all systems are fully synchronized and updated, helping to avoid compliance risks and information leaks caused by improper permission management. 6) Automation can be implemented to reduce human errors: Through the automated service management of the data synchronization module, information and permissions updates and synchronization operations are automatically performed, reducing problems caused by human errors. The automated process also ensures that all employee permissions are updated in a timely manner when needed. For example, when an employee is promoted or transferred, the system can automatically adjust their information and permissions to ensure that employees always have the correct access rights. 7) Improved employee satisfaction and productivity: Employees can quickly obtain permissions related to their job positions without having to wait for tedious manual processing, which can improve employee satisfaction and work efficiency. As a unified permission management system, this system can also reduce the time employees waste when searching for resources and information, helping them complete their work faster and thus improving overall productivity.

[0020] The features and advantages of the present invention will be described in detail through embodiments with reference to the accompanying drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] Figure 1 It is a structural diagram of the human resources management data middle platform system with bidirectional real-time updates of the present invention. DETAILED DESCRIPTION

[0022] See Figure 1The present invention proposes a bidirectional real-time updated human resource management data middle platform system, comprising at least two heterogeneous systems, a heterogeneous system registration module, a data center, and a data synchronization update module. The heterogeneous systems involve personnel information and personnel permissions. All heterogeneous systems are registered to the data center through the heterogeneous system registration module. The data center updates the personnel information and personnel permissions of each heterogeneous system through the data synchronization update module. It also includes a heterogeneous system permission allocation module: the data center defines different registered heterogeneous systems as different application roles, and different application roles are assigned different data modification permissions; a data modification review module: real-time review of data modification requests received from each heterogeneous system, comparison and matching of the modification permissions of the corresponding application roles, saving modifications that comply with the modification permissions to the data center, and rejecting modifications that do not comply with the update; a data synchronization update module: updating the data modification information saved in the data center to all heterogeneous systems in real time.

[0023] The heterogeneous system registration module is an external heterogeneous system that first registers with the data center to obtain data. System information, server information and IP address must be provided during application registration. After successful registration, the system will generate a unique APP code. All APP codes are granted to application roles respectively, and different application roles have different data modification permissions; the data modification permissions include general information and sensitive information. The sensitive information includes personnel positions, personnel roles, personnel confidential information access permissions, personnel seal permissions, personnel mobile phone numbers, and personnel ID numbers; general information includes personnel public vehicle permissions, personnel dining permissions, and personnel parking permissions; the heterogeneous system registration module implements system access and application permission management, introduces a fine-grained permission control mechanism, and ensures that only authenticated and authorized heterogeneous systems can access the data center. Before accessing the data center, the heterogeneous system to be accessed needs to be registered. Only systems registered in the data center have permission to access the data center, and in the data center, different personnel information reading permissions, personnel information modification, personnel permission modification, and accessible interfaces or callback interfaces can be set for different heterogeneous systems.

[0024] Heterogeneous system permission allocation module: The data center defines different registered heterogeneous systems as different application roles, and different application roles are assigned different data modification permissions; each heterogeneous system has different security level permissions and is granted different modification permissions; for example: heterogeneous system 1 can modify personnel dining permissions; heterogeneous system 2 can modify R&D personnel's permission to access confidential information, etc., so that the data center can modify the relevant information and permission settings of different heterogeneous systems within its own authority; the permission allocation of this module is the modification permission that each heterogeneous system can upload to the data center, not the specific access rights of a certain user to the heterogeneous system; because when registering with the heterogeneous system registration module, each heterogeneous system is assigned a unique APP code, and application roles are granted according to the respective APP codes, so that the provision of different data modification permissions for different application roles is convenient to implement.

[0025] Data modification review module: Real-time review of data modification requests received from various heterogeneous systems, matching the modification permissions of the corresponding application roles, saving modifications that meet the modification permissions to the data center, and rejecting modifications that do not meet the update requirements; the data modification review module controls each heterogeneous system to make modifications within the scope of the assigned permissions, thereby ensuring the security of the data center and the accuracy of the data.

[0026] The data modification information in the data synchronization and update module includes the personnel roles, personnel information, personnel permissions, etc. in all heterogeneous systems; when the data synchronization and update module monitors each heterogeneous system's request for personnel information or permission modification, it first determines whether it complies with its modification permissions. If so, it agrees to the modification and saves it to the data center; the data synchronization and update module is a real-time monitoring and synchronization update method. When there is a change in personnel information, the synchronization mechanism is automatically triggered to update the latest personnel information and permission information to all heterogeneous systems.

[0027] The data synchronization and update module involves processes such as automated monitoring, periodic data synchronization, message queue integration, and external command response. Automated monitoring ensures that the system can detect data changes or status updates in a timely manner, thereby triggering corresponding synchronization operations. Periodic data synchronization automatically executes data synchronization tasks at preset time intervals to ensure data consistency and accuracy. Message queue integration utilizes message queue technology, enabling the system to asynchronously process external messages and achieve message delivery and load balancing. Message queue services are used to asynchronously receive and respond to commands or data updates from the external environment. The external command response process is to receive and execute commands from the outside, supporting dynamic adjustment and flexible configuration.

[0028] The data synchronization and update module can perform data checking and synchronization tasks according to a predetermined schedule. An efficient scheduler is integrated within the system to ensure that all tasks can be started and executed on time. The data synchronization and update module not only improves the flexibility and response speed of data processing, but also enhances the stability and scalability of the system. This design pattern enables the system to maintain high performance and high reliability when processing large-scale data and high-concurrency requests, making it suitable for complex application scenarios that require real-time data processing and rapid response.

[0029] The data synchronization and update module realizes automation and intelligent triggering. The data middle platform has a complete data communication mechanism and uses an event-driven architecture to ensure that any changes in personnel data can be captured in real time and trigger the corresponding callback interface. Heterogeneous systems can obtain all personnel-related data by actively accessing the interface. In the event of changes in personnel data, the callback interface will be triggered immediately to notify the system connected to the data middle platform to update the personnel data. Personnel data changes include transfers, role changes, and changes in personnel management scope.

[0030] Access and Acquisition Module: Allows other heterogeneous systems registered with this system to access and obtain employee data information through a standardized interface; employee data information includes basic employee information, role information, role associations, and personnel management scope; the standardized interface adopts a RESTFUL API interface; the access and acquisition module is suitable for when a heterogeneous system crashes or data is abnormal, and can actively obtain the latest employee data information from the data center.

[0031] HR Audit Module: records all data access and modification activities, supports auditing and problem tracking; the HR Audit Module includes an information synchronization log module and an interface call log module. The information synchronization log module is used when data is changed. The system notifies all heterogeneous systems through the message queue to complete information synchronization and record the synchronization log; the interface call log module records call log information for all data interface calls; the call log information includes application information, server information, access parameters and return results.

[0032] This system has a personnel role management association setting function, including a role management module, a personnel role association module, and a management scope setting module. The role management module uniformly manages personnel roles in all heterogeneous systems to ensure the consistency of personnel role data; the personnel role association module sets the roles of personnel in all heterogeneous systems in the data middle-office system; the management scope setting module grants corresponding management scope permissions based on the responsibilities of personnel in different heterogeneous systems; the role management module assigns system roles to all personnel without entering the heterogeneous system to assign role permissions; process roles are assigned to all personnel, and the role information can be directly read in the process engine to find the corresponding personnel and perform process flow; the management scope permissions set by the management scope setting module are applied to system roles and process roles; the role management association setting module realizes centralized management of roles and permissions, introduces role inheritance and delegation mechanisms, allows the creation of hierarchical role structures, simplifies permission management, and supports custom roles and permission templates to meet the specific needs of different organizations and departments.

[0033] This system is a centralized data management and synchronization platform. By granting different modification permissions to different heterogeneous systems, it enables personnel data information in each heterogeneous system to be synchronized to all systems in real time. The platform simplifies cross-system permission allocation and process management. In addition, the data middle platform has an efficient data communication mechanism that can synchronize and update personnel information through interfaces in real time to ensure data consistency and timeliness of all access systems. A data synchronization mechanism is established to ensure that any update in any heterogeneous system can be reflected in the data middle platform in real time. The middle platform system is an efficient data management and synchronization system that provides data modification, update, and access services for authorized heterogeneous systems. It ensures data security through fine permission control, simplifies cross-system permission allocation and process management, ensures data consistency, security, and real-time performance, and provides enterprises with a reliable and efficient data management solution. In addition, the architectural design of the data middle platform system has good scalability and can easily integrate new systems and applications. It provides API documentation and developer guides to support third-party developers to quickly integrate and develop.

[0034] The above embodiments are intended to illustrate the present invention, not to limit the present invention. Any solution that is a simple transformation of the present invention falls within the protection scope of the present invention.

Claims

1. A bidirectional, real-time updating human resources management data center system includes at least two heterogeneous systems, a heterogeneous system registration module, a data center, and a data synchronization update module. The heterogeneous systems involve personnel information and personnel permissions. All heterogeneous systems are registered with the data center through the heterogeneous system registration module. The data center updates the personnel information and personnel permissions of each heterogeneous system through the data synchronization update module. It is characterized by: Also includes Heterogeneous system permission allocation module: The data center defines different registered heterogeneous systems as different application roles, and different application roles are assigned the permission to modify different data; Data modification review module: This module reviews data modification requests received from various heterogeneous systems in real time, compares the modification permissions of the corresponding application roles, saves modifications that meet the modification permissions to the data center, and rejects modifications that do not meet the update permissions. Data synchronization update module: updates the data modification information saved in the data center to all heterogeneous systems in real time.

2. The bidirectional real-time updating human resources management data middle platform system according to claim 1 is characterized by: The heterogeneous system registration module is an external heterogeneous system that first registers with the data center to obtain data. When registering an application, system information, server information and IP address must be provided. After successful registration, the system will generate a unique APP code. All APP codes are granted to application roles respectively, and different application roles have different data modification permissions.

3. The bidirectional real-time updating human resources management data middle platform system according to claim 2, characterized in that: The data modification permissions include general information and sensitive information. The sensitive information includes personnel positions, personnel roles, personnel confidential information access permissions, personnel seal permissions, personnel mobile phone numbers, and personnel ID card numbers; general information includes personnel public vehicle permissions, personnel dining permissions, and personnel parking permissions.

4. The bidirectional real-time updating human resources management data middle platform system according to claim 1 is characterized by: The data modification information in the data synchronization update module includes the personnel role, personnel information, and personnel authority of the personnel in all heterogeneous systems.

5. The bidirectional real-time updating human resources management data middle platform system according to claim 1 is characterized by: It also includes an access and acquisition module: allowing heterogeneous systems registered in this system to access and obtain employee data information through standardized interfaces; employee data information includes employee basic information, role information, role association and personnel management scope.

6. The bidirectional real-time updating human resource management data middle platform system according to claim 1, characterized in that: It also includes a human resources audit module: records all data access and modification activities to support auditing and problem tracking.

7. The bidirectional real-time updating human resource management data middle platform system according to claim 6, characterized in that: The human resources audit module includes an information synchronization log module and an interface call log module. The information synchronization log module is used by the system to notify all heterogeneous systems through the message queue after the data is changed, complete information synchronization, and record the synchronization log; the interface call log module is used to record call log information for all data interface calls.

8. The bidirectional real-time updating human resource management data middle platform system according to claim 7, characterized in that: The call log information includes application information, server information, access parameters and return results.

Images