Integrated remote teaching assistance and management system for education scene

Abstract

The invention discloses an integrated remote teaching assistance and management system for an education scene, belongs to the field of education informatization, and solves the problems that a traditional education system is split in function, tedious in process, high in safety risk and the like. The system integrates three modules: 1) remote call broadcast: supporting home / school / student real-time broadcast notification (including accessory poison check); 2) remote examination and approval: processing and configuring a multi-level examination and approval process, performing state synchronization and preventing tampering of block chain evidence storage; and 3) auxiliary teaching: supporting functions of courseware uploading, homework arrangement, statistics and the like. The data is stored in a relational database (such as MySQL), and the full-life-cycle security of the data is guaranteed through multi-factor authentication, RBAC permission control, high-strength encryption and block chain evidence storage. The beneficial effects are that function integration improves efficiency; security is enhanced through multi-factor authentication and the block chain; an approval specification process can be configured; visual report auxiliary decision making; a high-availability technology (such as WebSocket heartbeat) is guaranteed to be stable, and a whole-process digital and safe teaching management scheme is provided for schools.

Description

Technical Field

[0001] The present invention relates to the field of educational informatization technology, and specifically to an integrated remote teaching assistance and management system for schools, teachers, students and parents, which is used to solve the problems of traditional education management systems such as dispersed functions, low efficiency of real-time communication, cumbersome approval processes, and prominent data security risks. Background Art

[0002] With the rapid development of educational informatization, schools have an increasing demand for cross-scenario teaching management. In existing technologies, education management systems generally have the following pain points: Functional fragmentation: Communication tools (such as WeChat / QQ / DingTalk / Feishu / internal campus platforms), approval systems (such as paper forms / electronic message approval forms within WeChat groups), and teaching platforms (such as online classes / assignment assignments) are all independent of each other. Teachers need to switch between multiple systems to complete teaching management, which is inefficient. Lack of real-time performance: Traditional broadcast notifications rely on offline postings or group messaging, which cannot achieve immediate reach and status traceability; the approval process is not standardized: student leave applications, event registration, etc. must be manually passed through each level, which is prone to process delays and record loss; Data security risks: The storage and transmission of students' / parents' personal information (such as ID number and contact information) are at risk of being exposed in plain text, and operation logs are easily tampered with, making it difficult to meet the "Personal Information Protection Law" and education industry data security regulations; teaching data utilization is inefficient: data such as homework submission and learning progress are scattered across teachers' terminals, lacking unified statistical analysis and visualization.

[0003] In response to the above problems, the present invention proposes an integrated remote teaching assistance and management system, which integrates core functions through modular design, combines security protection technology with blockchain evidence storage, and realizes the digitization, security and efficiency of the entire education management process. Summary of the Invention

[0004] The purpose of this invention is to provide an integrated remote teaching assistance and management system for educational scenarios. By integrating the three core functions of remote communication, online approval, and teaching assistance, and combining multi-dimensional security protection and blockchain evidence storage technology, it solves the problems of traditional education management systems with dispersed functions, prominent safety hazards, and low process efficiency, and improves the digital level of teaching management and user experience.

[0005] The system of the present invention includes the following functional modules and databases: a remote call broadcast information module, a remote approval module, and an auxiliary teaching module.

[0006] The Remote Call Broadcast Information Module enables real-time voice / video calls, text chats, and broadcast notifications between teachers and students / parents, supporting message logging and status tracking. It includes three submodules: The Real-Time Communication Submodule establishes a two-way persistent connection between teachers and students / parents based on the WebSocket protocol (upgraded to the WSS encryption protocol). This supports the transmission of real-time voice (sampling rate ≥ 16kHz), video (resolution ≥ 720P), and text chat data. Communication is encrypted using TLS 1.3. A heartbeat mechanism (sending PING / PONG packets every 30 seconds) and a disconnection reconnection strategy (exponential backoff algorithm) ensure connection stability. The Broadcast Notification Submodule supports both instant and scheduled broadcasts. Teachers can call pre-stored broadcast templates (such as course adjustment and epidemic prevention and control notices) from the database, edit the content (including text and attachments), and then push it to designated classes / students / parents via WebSocket. Attachments are scanned by antivirus engines such as ClamAV or the Alibaba Cloud File Scan API before being uploaded. Scan results are synchronized to the database's "Call Broadcast Record Table" (e.g., the "Virus Scan Pass" field). Data recording submodule: stores the message ID, sender account, recipient account list (desensitized), message type, content summary, sending timestamp, sending status, and recipient read status of each call / broadcast in the database's "Call Broadcast Record Table", supporting message tracing and statistical analysis.

[0007] The remote approval module is used by teachers to review and approve student applications for leave, assignment submissions, and event registration online. It supports a multi-level approval process and data statistics. It consists of three modules: Application Submission: Students / parents complete the application form (including reasons for leave and attached materials) and select an approver (default is the homeroom teacher, with support for multiple approvers). Identity verification is performed before submission: Parents must complete an SMS verification code; students must verify their identity through a face-photo comparison (integrated with Baidu PaddlePaddle or Tencent Youtu AI services, with feature vector encryption) or an administrator-configured student ID. After generating a unique application ID, application data (student account, application type, timestamp, form content, and associated approver account) is encrypted with AES-256 and stored in the "Approval Application Form" in the database. Approval Processing: After logging in, teachers must complete a secondary verification step (such as fingerprint recognition) to access the approval interface and access a list of pending applications (sorted by urgency). The approval result (approved / rejected / returned for revisions) includes the approver's account, timestamp, comments, and status, and is updated in real time on the "Approval Application Form." For multi-level approvals, the system uses a built-in workflow engine (administrators can configure rules: "Leave ≤ 2 days: Home teacher approval; 2-5 days: Home teacher + Grade Director; > 5 days: Home teacher + Grade Director + Principal"). This automatically pushes the application to the next level of approvers (authentication required). Approval records are encrypted and stored synchronously on the Hyperledger Fabric consortium blockchain (written to the blockchain via smart contracts). Status synchronization: Students and parents obtain approval status via WebSocket subscriptions or scheduled polling (intervals ≤ 30 seconds). This information is then de-identified and pushed to the student user (as a pop-up notification).

[0008] The Assisted Teaching Module is used by teachers to upload courseware, assign homework, monitor student progress, answer questions, and generate teaching statistics. It consists of three modules: The Courseware Management Module: Before a teacher uploads courseware files (supporting PPT, PDF, and MP4 formats), they are scanned by ClamAV. After upload, a version number is generated and associated with information such as the course name and class, and stored in the database's "Courseware Storage Table." Courseware storage is encrypted using AES-256 encryption (the key is managed by Alibaba Cloud's KMS; only the key ID is stored in the database). Downloads require teacher login verification. The Homework Assignment Module: Teachers set homework content (text / attachment), deadlines, and grading criteria. The generated homework data is then stored in the database's "Homework Task Table." This data can be grouped by class or student (this requires verification of the teacher's class management permissions). The Learning Progress Tracking Module: After a student submits an assignment, the system automatically records the submission time and file path in the database's "Homework Submission Table." Teachers can query student completion rates, average submission time, and generate visual reports (supporting switching between overall class data and individual student data). Database Description

[0009] A relational database (such as MySQL) is used to store basic teacher / student / parent information, call and broadcast records, approval process data, teaching support data, and system operation logs. Specific data tables are as follows: User Information Table: Fields include user ID (primary key), account number, name, gender, class / role, contact information (AES-256 encrypted), password hash (SHA-256 + salt value, salt value ≥ 16 bytes), permission level (implemented through the role table, permission table, and user-role association table to improve query efficiency), last login IP address, and account status. Call and Broadcast Record Table: Fields include message ID (primary key), sender account number, recipient account list (masked), message type, content summary, sending timestamp, sending status, recipient read status, and message encryption method. Approval Application Form: Fields include application ID (primary key), student account number, application type, form content (masked), application timestamp, current approver account number, approval timestamp, approval comment (masked), approval result status, historical approval history (encrypted), and blockchain evidence hash (Hyperledger Fabric block hash). Courseware Storage Table: Fields include the courseware ID (primary key), file path (encrypted), associated course name, teaching class, uploading teacher account, upload time, file size, format type, version number, encryption key ID (linked to Alibaba Cloud KMS), and uploader IP. Homework Task Table: Fields include the homework ID (primary key), task content (masked), homework type, deadline, grading criteria, publishing teacher account, publishing class, publishing time, and permission control (teacher-class association table). Homework Submission Table: Fields include the submission ID (primary key), homework ID (foreign key), student account, submission time, submission content (AES-256 encrypted), whether graded, and grading teacher account. System Operation Log Table: Fields include the log ID (primary key), operation type, operation account, operation timestamp, operation content (length limit or linked to the approval application ID for external storage), IP address, operation result, and linked approval ID / homework ID. Security Protection Module Description

[0010] This system implements identity authentication, access control, data encryption, security auditing, and tamper prevention. Specifically, it includes the following: Identity Authentication Unit: Login verification uses "username + password + SMS verification code" or multi-factor authentication (e.g., password + fingerprint + face recognition). Passwords are stored using the SHA-256 hash algorithm with a salt value (salt value ≥ 16 bytes); plain text storage is prohibited. Access Control Unit: Permissions are assigned based on a RBAC model: Teachers have access to remote call broadcasting, approval, courseware management, and assignment assignments; students can only submit applications and view their individual assignment progress; parents can only view their children's application status and receive broadcast notifications; system administrators have the highest permissions (account deregistration and log export). Data Encryption Unit: Sensitive information (ID number, contact information) is stored using AES-256 encryption; transmission is encrypted using the TLS 1.3 protocol (WebSocket upgraded to WSS protocol). Courseware encryption keys are managed by Alibaba Cloud KMS to minimize key leakage risks. Security Audit Unit: The entire process of key operations (login, approval, data modification) is recorded, and audit logs are stored in a separate encrypted table (AES-256 encryption) with a retention period of ≥ 6 months. Anti-tampering unit: Generates SHA-512 hash values ​​for key data such as approval records and operation logs, and writes them into blocks through the Hyperledger Fabric consortium chain smart contract. The hash values ​​are bound to the block height and timestamp on the chain and stored in the database verification field to prevent data tampering. Beneficial effects

[0011] The beneficial effects of the present invention are reflected in the following aspects (0012-0016).

[0012] Functional integration: Integrates three core functions: remote communication, online approval, and teaching assistance, avoiding switching between multiple systems and improving teacher management efficiency.

[0013] High security: Multi-factor authentication, RBAC permission control, AES-256 / TLS 1.3 encryption, and blockchain storage are used to ensure data security throughout its entire lifecycle.

[0014] Process standardization: Multi-level approval rules are configurable (such as automatically matching the leave duration to the approver), and the approval status is synchronized in real time, reducing manual intervention and process delays.

[0015] Data visualization: Data such as teaching progress and homework completion rate are automatically generated into visual reports, supporting personalized analysis and assisting teaching decision-making.

[0016] High availability: WebSocket persistent connections support heartbeat mechanisms and disconnection reconnection. Technologies such as attachment virus scanning and tamper-proof hash values ​​improve system stability and reliability. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] Figure 12 is a diagram showing the overall architecture of the system of the present invention.

[0018] Figure 2 This is a flow chart of the interaction between the submodules of the remote call broadcast information module.

[0019] Figure 3 This is a flowchart for the application of blockchain evidence in approval records.

[0020] Figure 4 This is a schematic diagram of the approval process under the multi-level approval rule engine. DETAILED DESCRIPTION

[0021] Example 1: System initialization and user registration: Administrator configuration: After the system administrator logs in, he / she configures school information, class structure, user roles (teachers / students / parents) and permission rules (such as multi-level approval thresholds) through the background; User registration: Teachers register through the account assigned by the administrator, and students / parents register by binding "student account + parent mobile phone number"; Identity verification must be completed during registration (Teachers: ID card + face comparison; Students: Student card + face comparison; Parents: children's student ID number + SMS verification code).

[0022] Example 2: Real-time Voice Call and Broadcast Notification: Teacher initiates a call: The teacher clicks "Initiate Call" and selects a student / parent account. The system establishes a WSS-encrypted connection via WebSocket, transmitting voice (16kHz sampling rate) and video (720P resolution). After the call ends, the message record (message ID, sender, recipient, and timestamp) is stored in the "Call Broadcast Record Table." Scheduled Broadcast Notification: The teacher selects "Scheduled Broadcast," edits the template (e.g., "Parent-Teacher Meeting at 8:00 AM tomorrow"), and sets the delivery time (e.g., 7:30 AM tomorrow). At the set time, the system pushes the message to the designated class's parent client via WebSocket. Attachments (e.g., meeting agenda PDF) are scanned by ClamAV and sent, and a "Yes" virus scan result is recorded in the database.

[0023] Example 3: Student Leave Approval Process: Students submit their applications: They complete a "2-Day Leave" application form (reason: "Illness") and attach a hospital diagnosis certificate. The system verifies the student's identity (facial recognition passes) and generates an application ID "LV-20250723-001." The application data (student account number, application type, timestamp, form content, and associated approver = homeroom teacher) is encrypted with AES-256 and stored in the "Approval Application Form." Homeroom teacher first-level approval: After logging in and using fingerprint verification, the homeroom teacher enters the approval interface, views the application list (sorted by urgency), approves it with a "Agree," and enters a comment: "Leave approved, please monitor your health." The approval record (Approver = Homeroom Teacher, Timestamp = 2025072310:00, Comment = "Approved...") is updated in real time to the "Approval Application Form," and a SHA-512 hash value is generated and written to a blockchain via a Hyperledger Fabric smart contract. The system automatically pushes the second-level approval: Since the leave duration is ≤ 2 days (preset by the rule engine), no second-level approval is required, and the status is synchronized to the student end; the student end receives the "Approved" pop-up reminder through WebSocket, and the approval time and opinions are displayed synchronously.

[0024] Example 4: Courseware Upload and Homework Assignment: Courseware Upload: The teacher selects "Upload Courseware" and selects the PPT file "Mathematics - Function Chapter.pptx". The system calls ClamAV to scan (result = virus-free), generates version number "V1.0", associates the course "Senior Year 1 Mathematics" with the class "Class 1"; the courseware is encrypted with AES-256 (key ID = KMS-001) and stored, and the file path " / course / 1 / math / function.pptx" is encrypted and stored in the "Courseware Storage Table". Assignment: The teacher sets the assignment "Complete Function Exercises", the deadline is "20250725 20:00", and the grading standard is "10 points per question"; the assignment task data (assignment ID = HW-20250723-001, content = "Function Exercises", deadline = 20250725 20:00, grading standard = "10 points per question", publishing teacher = Teacher Zhang, publishing class = Class 1) is stored in the "Assignment Task Table"; the system verifies Teacher Zhang's management authority over "Class 1" (through the user-class association table) and allows publishing.

[0025] Example 5: Blockchain Evidence Storage and Data Tamper-Proofing: Approval records are uploaded to the blockchain: After the teacher completes the approval process, the system automatically generates a SHA-512 hash value (e.g., "a1b2c3…d4e5f6") for the approval record and writes it to a block via a smart contract on the Hyperledger Fabric consortium blockchain. The block height is "1001" and the timestamp is "2025072310:00:00." The hash value is bound to the block information and stored in the "Blockchain Evidence Hash" field of the "Approval Application Form." Data Tampering Detection: When an administrator queries the "Approval Application Form," the system recalculates the SHA-512 hash value for the record and compares it with the hash value stored on the blockchain. If there is a discrepancy, an alarm is triggered and the record is marked as "suspicious," requiring manual review. Summary

[0026] Through integrated design, multi-dimensional security protection and blockchain evidence storage technology, this invention effectively solves the problems of decentralized functions, prominent safety hazards and low process efficiency in traditional education management systems, and provides schools with a full-process digital and secure teaching assistance and management solution, which has significant promotion value and application prospects.

Claims

1. An integrated remote teaching assistance and management system for educational scenarios, characterized in that: include: Remote call broadcast information module, used to realize real-time voice / video calls, text chats and broadcast notifications between teachers and students / parents, supporting message recording and status tracing; The remote approval module is used for teachers to review and approve student requests for leave, homework submission, and event registration online, supporting multi-level approval processes and approval data statistics. Auxiliary teaching module, used by teachers to upload courseware, assign homework, check students' learning progress, answer questions interactively and collect teaching data statistics; Database, used to store basic information of teachers / students / parents, call broadcast records, approval process data, teaching auxiliary data and system operation logs; Security protection module, used to implement identity authentication, access control, data encryption, security auditing and anti-tampering functions; The remote call broadcast information module, remote approval module, auxiliary teaching module, and safety protection module are all connected to the database for communication, and perform function execution, recording, and synchronization by calling data in the database.

2. The system according to claim 1, wherein: The security protection module includes: The identity authentication unit uses "username + password + SMS verification code" or multi-factor authentication to verify user login. Password storage uses the SHA-256 hash algorithm plus a salt value (salt value length ≥ 16 bytes). Plain text storage is prohibited. The access control unit assigns minimum permissions to teachers, students, parents, and system administrators based on the RBAC model. Teachers can access remote call broadcast information, approval, courseware management, and homework assignment functions. Students can only submit applications and view their personal homework progress. Parents can only view their children's application status and receive broadcast notifications. System administrators have the highest permissions (such as account cancellation and log export). The data encryption unit uses AES-256 encryption to store sensitive information in the database (such as ID number and contact information), and uses TLS 1.3 protocol encryption during transmission (WebSocket is upgraded to wss protocol); The security audit unit records the entire process of key operations (such as login, approval, and data modification). The audit logs are stored in an independent encrypted table and retained for ≥6 months. The anti-tampering unit generates a SHA-512 hash value for key data such as approval records and operation logs, and writes it into the block through the smart contract of the Hyperledger Fabric alliance chain (or uploads it to the chain through the Ant Chain API). The hash value is bound to the block height and timestamp on the chain and stored in the database verification field to prevent the data from being illegally tampered with.

3. The system according to claim 1, wherein: The remote call broadcast information module includes: The real-time communication submodule establishes a two-way persistent connection between the teacher and the student / parent side based on the WebSocket protocol (upgraded to the WSS encryption protocol, supporting a heartbeat mechanism (such as sending PING / PONG packets every 30 seconds) and a disconnection reconnection strategy (such as an exponential backoff algorithm to ensure the stability of persistent connections). It supports the transmission of real-time voice (sampling rate ≥ 16kHz), video (resolution ≥ 720P), and text chat data. The communication process is encrypted using the TLS 1.3 protocol. The broadcast notification submodule supports both instant and scheduled broadcasts. The teacher calls pre-stored broadcast templates in the database (such as course adjustment and epidemic prevention and control notifications), edits the content (including text and attachments), and pushes it to the designated class / student / parent end via WebSocket. Attachments are scanned for viruses before being uploaded. The data recording submodule stores the message ID, sender account, recipient account list (desensitized), message type, content summary, sending timestamp, sending status, and recipient read status of each call / broadcast in the "Call Broadcast Record Table" of the database.

4. The system according to claim 1, wherein: The remote approval module includes: In the application submission unit, students / parents fill out the approval application form (such as the reason for leave and attached materials), select an approver (the default is the homeroom teacher, and multiple levels of approvers are supported). Before submission, the submitter's identity is verified. Parents are required to complete SMS verification, while students are required to complete identity verification (such as using the student card configured by the administrator, comparing student faces with photos (student face photos are compared through the integration of third-party AI services such as Baidu PaddlePaddle and Tencent Youtu, and facial feature vectors are encrypted and stored in the database). After generating a unique application ID, the application data (student account, application type, timestamp, form content, and associated approver account) is encrypted with AES-256 and stored in the "Approval Application Form" in the database; Approval processing unit: After logging in, teachers must pass secondary verification (such as fingerprint recognition) to enter the approval interface, read the list of applications to be approved (sorted by urgency), and the approval result (approval / rejection / return for modification) includes the approver's account, timestamp, comments, and status, which are updated in real time to the "Approval Application Form". In the case of multi-level approval, the application is automatically pushed to the next level of approvers (identity verification is required). The next level of approvers is designated by the current approver or automatically assigned by the system based on the role (the number of levels is determined by factors such as the student's leave type, urgency, and duration, and can be set by the administrator backend). Approval records are synchronized and encrypted and stored on the blockchain node; Status synchronization unit: students / parents obtain the approval status through WebSocket subscription or timed polling (interval ≤ 30 seconds). The status information is anonymized and pushed to the student user end (pop-up reminder).

5. The system according to claim 1, wherein: The auxiliary teaching module includes: In the courseware management unit, courseware files (supporting PPT, PDF, and MP4 formats) are scanned for viruses before being uploaded by the teacher. After uploading, a version number is generated and the course name, class, and other information are associated with the "courseware storage table" in the database. Courseware is encrypted using AES-256 when stored, and teachers must log in to their teacher account to download. In the assignment assignment unit, the teacher sets the assignment content (text / attachments), deadline, and grading criteria. After generating the assignment data, it is stored in the "Assignment Task Table" in the database. This data can be assigned by class or student group (this requires verification of the teacher's management / teaching permissions for the class). In the learning progress tracking unit, after students submit their homework, the system automatically records the submission time and file path to the "Homework Submission Table" in the database. Teachers can query and count student completion rates and average submission time and generate visual reports, supporting switching between overall class data and individual student data.

6. The system according to any one of claims 1 to 5, characterized in that The database uses a relational database (such as MySQL) and contains the following data tables: User information table, with fields including user ID (primary key), account number, name, gender, class / role, contact information (encrypted storage), password hash (SHA-256 + salt value), permission level (JSON format, permission level can be implemented through the role table (Role), permission table (Permission) and user-role association table (User_Role) to improve query efficiency), last login IP address, and account status; Call broadcast record table, fields include message ID (primary key), sender account, recipient account list (masked), message type, content summary, sending timestamp, sending status, recipient read status, and message encryption method; The approval application form has fields including application ID (primary key), student account, application type, form content (masked), application timestamp, current approver account, approval timestamp, approval opinion (masked), approval result status, historical approval records (encrypted), and blockchain evidence hash. Courseware storage table, fields include courseware ID (primary key), file path (encrypted), associated course name, teaching class, uploading teacher account, upload time, file size, format type, version number, uploader IP; Homework task table, fields include homework ID (primary key), task content (masked), homework type, deadline, grading criteria, publishing teacher account, publishing class, publishing time, and permission control; Homework submission table, fields include submission ID (primary key), homework ID (foreign key), student account, submission time, submission content (encrypted), whether it has been graded, and grading teacher account; System operation log table, fields include log ID (primary key), operation type, operation account, operation timestamp, operation content (length can be limited or external link storage (such as associated approval application ID)), IP address, operation result, associated approval ID / job ID.

Images