Archive management all-in-one machine cross-region management system and method based on hybrid architecture

By constructing a hybrid architecture archive management system and adopting federal authentication and multi-level protection mechanisms, the problems of authentication silos and weak security in cross-domain archive scheduling are solved, and efficient and secure cross-regional archive scheduling is achieved.

CN120705855BActive Publication Date: 2026-05-01HEBEI CHENDA ELECTRONIC TECH CO LTD
View PDF 2 Cites 0 Cited by

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
HEBEI CHENDA ELECTRONIC TECH CO LTD
Filing Date
2025-08-27
Publication Date
2026-05-01

AI Technical Summary

Technical Problem

The lack of a collaborative scheduling mechanism and integrated security control framework among multi-regional archive nodes in existing technologies leads to problems such as authentication silos, resource dispersion, opaque paths, and weak scheduling security during cross-regional archive scheduling, affecting the continuity, timeliness, and security of cross-regional archive scheduling.

Method used

A cross-regional management system for integrated archive management based on a hybrid architecture is constructed. A federated authentication mechanism is used to generate scheduling authorization tokens. A scheduling search is performed in combination with cross-domain scheduling guidance vectors. A secure cross-domain scheduling channel is generated through protection configuration optimization and multi-level protection processing is carried out to realize cross-domain scheduling response.

Benefits of technology

It improves the efficiency of linkage response, the accuracy of identity authentication, the security of data transmission, and the traceability of the entire process in the cross-regional archive scheduling process, ensuring the continuity and security of cross-regional scheduling.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN120705855B_ABST
    Figure CN120705855B_ABST
Patent Text Reader

Abstract

The application provides a mixed-architecture-based archive management all-in-one machine cross-region management system and method, relates to the technical field of archive management, and comprises the following modules: an archive dispatch request receiving module, which is used for building an archive management mixed architecture according to multiple archive management all-in-one machines and receiving a cross-domain archive dispatch request of a user; a federal authentication module, which is used for constructing a cross-domain dispatch guide vector; a dispatch search module, which is used for performing dispatch search on the archive management mixed architecture; a protection configuration optimization module, which is used for performing protection configuration optimization on a first cross-domain dispatch channel; and a cross-domain dispatch response module, which is used for performing multi-level protection on a first dispatch archive resource, obtaining a second dispatch archive resource, and performing cross-domain dispatch response in combination with a second cross-domain dispatch channel. The application can solve the technical problem of poor security of cross-region archive dispatch in the prior art and achieve the technical effect of improving the security of cross-region archive dispatch.
Need to check novelty before this filing date? Find Prior Art

Description

A Cross-Regional Management System and Method for Integrated Document Management System Based on Hybrid Architecture Technical Field

[0001] This application relates to the field of archival management technology, and in particular to a cross-regional management system and method for an all-in-one archival management machine based on a hybrid architecture. Background Technology

[0002] More and more enterprises, institutions, universities, and government agencies are deploying integrated archive management systems to achieve centralized storage, efficient retrieval, and intelligent classification of archival data. However, with the expansion of business scale and the multi-regional distribution of organizational structures, traditional stand-alone or local area network architectures are no longer sufficient to meet the needs of cross-regional archive sharing, remote access, and collaborative processing.

[0003] Currently, most traditional systems rely on centralized architecture or single-node scheduling mechanisms, lacking systematic support for the coordinated scheduling capabilities between multiple regional file nodes. This leads to the scheduling link being prone to interruption when facing high concurrency or highly sensitive file requests, making it impossible to optimize link performance and reconstruct risks. Consequently, when users need to retrieve file resources across domains, problems such as authentication silos, resource dispersion, opaque paths, large scheduling latency, and weakened security measures often occur.

[0004] In summary, existing technologies suffer from technical problems such as authentication silos, resource fragmentation, opaque paths, and weak scheduling security during cross-regional archive scheduling due to the lack of collaborative scheduling mechanisms and integrated security control frameworks among multi-regional archive nodes. These problems further affect the continuity, timeliness, and security of cross-regional archive scheduling. Summary of the Invention

[0005] The purpose of this application is to provide a cross-regional management system and method for an integrated archive management machine based on a hybrid architecture, in order to solve the technical problems in the existing technology that, due to the lack of a collaborative scheduling mechanism and integrated security control framework among multiple regional archive nodes, authentication silos, resource dispersion, path opacity and weak scheduling security occur during the cross-regional archive scheduling process, which further affect the continuity, timeliness and security of cross-regional archive scheduling.

[0006] In view of the above problems, this application provides a cross-regional management system and method for an all-in-one document management machine based on a hybrid architecture.

[0007] Firstly, this application provides a cross-regional management system for an integrated archive management machine based on a hybrid architecture, comprising: an archive scheduling request receiving module, used to build an integrated archive management architecture based on multiple integrated archive management machines, and to receive cross-regional archive scheduling requests from users based on the integrated archive management architecture; a federated authentication module, used to perform federated authentication on the user through a federated identity authentication mechanism, generate a scheduling authorization token, and construct a cross-regional scheduling guidance vector based on the cross-regional archive scheduling request; a scheduling search module, used to activate a cross-regional scheduling evaluation model, combine the scheduling authorization token and the cross-regional scheduling guidance vector to perform a scheduling search on the integrated archive management architecture, and determine a first cross-regional scheduling channel and a first scheduling archive resource; a protection configuration optimization module, used to optimize the protection configuration of the first cross-regional scheduling channel to obtain a second cross-regional scheduling channel; and a cross-regional scheduling response module, used to perform multi-level protection on the first scheduling archive resource to obtain a second scheduling archive resource, and to perform a cross-regional scheduling response in conjunction with the second cross-regional scheduling channel.

[0008] Preferably, the cross-regional management system of the integrated archive management machine based on a hybrid architecture further includes: an archive scheduling constraint construction unit, used to construct archive scheduling constraints based on the scheduling authorization token and the cross-domain scheduling guidance vector; a scheduling path decision unit, used to make scheduling path decisions on the hybrid archive management architecture based on the archive scheduling constraints to obtain a first space of archive scheduling paths; an optimization search unit, used to perform optimization search on the first space of archive scheduling paths based on the cross-domain scheduling evaluation model to generate a first cross-domain scheduling channel; and an archive search unit, used to perform archive search on the first cross-domain scheduling channel based on the archive scheduling constraints to generate the first scheduled archive resources.

[0009] Preferably, the cross-regional management system of the integrated archive management machine based on a hybrid architecture further includes: an evaluation layer, used to evaluate each archive scheduling path in the first space of the archive scheduling path according to the cross-domain scheduling evaluation model, and establish a scheduling path evaluation space, wherein the cross-domain scheduling evaluation model includes multi-dimensional scheduling evaluation indicators, including archive scheduling efficiency and archive scheduling break rate; a scheduling path evaluation constraint construction layer, used to construct scheduling path evaluation constraints according to the multi-dimensional scheduling evaluation indicators; an optimization analysis layer, used to perform optimization analysis on the first space of the archive scheduling path based on the scheduling path evaluation space and the scheduling path evaluation constraints, and generate a second space of the archive scheduling path; a vectorized weight allocation layer, used to perform vectorized weight allocation according to the multi-dimensional scheduling evaluation indicators, and generate a scheduling path optimality function; and an optimization layer, used to perform scheduling path optimality maximization optimization on the second space of the archive scheduling path according to the scheduling path optimality function, and obtain the first cross-domain scheduling channel.

[0010] Preferably, the cross-regional management system of the integrated archive management machine based on a hybrid architecture further includes: a protection configuration parameter acquisition unit, used to acquire protection configuration parameters of the first cross-regional scheduling channel and generate a current protection configuration scheme; a risk prediction unit, used to perform risk prediction on the first cross-regional scheduling channel according to the current protection configuration scheme and obtain a protection configuration risk coefficient; a configuration optimization adjustment unit, used to perform configuration optimization adjustment on the current protection configuration scheme according to the protection configuration risk threshold if the protection configuration risk coefficient is greater than or equal to the protection configuration risk threshold, and obtain a protection configuration optimization result; and a protection configuration optimization unit, used to optimize the protection configuration of the first cross-regional scheduling channel according to the protection configuration optimization result and generate a second cross-regional scheduling channel.

[0011] Preferably, the cross-regional management system of the integrated archive management machine based on a hybrid architecture further includes: an archive scheduling simulation layer, used to perform archive scheduling simulation on the first cross-regional scheduling channel according to the current protection configuration scheme, and obtain archive scheduling simulation data; a risk association detection layer, used to perform risk association detection on the archive scheduling simulation data, and obtain a scheduling risk association feature sequence; a scheduling risk evaluation model input layer, used to input the scheduling risk association feature sequence into P scheduling risk evaluation models, and obtain P scheduling risk evaluation coefficients, where P is a positive integer greater than 1; and a lumped value calculation layer, used to calculate the lumped value of the P scheduling risk evaluation coefficients, and generate the protection configuration risk coefficient.

[0012] Preferably, the cross-regional management system of the integrated archive management machine based on a hybrid architecture further includes: a privacy-sensitive detection unit, used to perform privacy-sensitive detection on the first scheduled archive resource to obtain an archive privacy-sensitive detection sequence; a data value detection unit, used to perform data value detection on the first scheduled archive resource to obtain an archive data value detection sequence; a de-identification and encryption protection parsing unit, used to perform de-identification and encryption protection parsing on the first scheduled archive resource based on the archive privacy-sensitive detection sequence and the archive data value detection sequence to obtain an archive protection first strategy; a permission embedding protection parsing unit, used to perform permission embedding protection parsing on the first scheduled archive resource based on the archive privacy-sensitive detection sequence and the archive data value detection sequence to obtain an archive protection second strategy; and a multi-level protection processing unit, used to perform multi-level protection processing on the first scheduled archive resource according to the archive protection first strategy and the archive protection second strategy to generate the second scheduled archive resource.

[0013] Preferably, the cross-regional management system of the integrated file management machine based on a hybrid architecture further includes: a federated authentication factor activation unit, used to activate federated authentication factors, the federated authentication factors including role identity, basic password, biometrics, geographical location, network trust level and terminal trust level; and an authentication unit, used to authenticate the user based on the federated authentication protocol and the federated authentication factors, obtain federated authentication results, and generate the scheduling authorization token based on the federated authentication results, the scheduling authorization token including the file scheduling authorization scope.

[0014] Preferably, the cross-regional management system of the integrated archive management machine based on a hybrid architecture further includes: an archive scheduling and parsing system construction unit, used to construct an archive scheduling and parsing system based on an archive scheduling intent indicator set; an intent parsing unit, used to perform intent parsing on the cross-regional archive scheduling request based on the archive scheduling and parsing system to obtain the archive scheduling and parsing result; and a cross-regional scheduling guidance vector establishment unit, used to establish the cross-regional scheduling guidance vector based on the archive scheduling and parsing result.

[0015] Preferably, the cross-regional management system of the integrated file management machine based on a hybrid architecture further includes: the cross-domain scheduling response module is also used to monitor the user's cross-domain scheduling process in real time, obtain cross-domain scheduling monitoring data, and encrypt and store the cross-domain scheduling monitoring data according to blockchain.

[0016] Secondly, this application also provides a cross-regional management method for an integrated archive management machine based on a hybrid architecture, comprising: building an integrated archive management architecture based on multiple integrated archive management machines, and receiving cross-regional archive scheduling requests from users based on the integrated archive management architecture; performing federated authentication on the users through a federated identity authentication mechanism to generate a scheduling authorization token, and constructing a cross-regional scheduling guidance vector based on the cross-regional archive scheduling request; activating a cross-regional scheduling evaluation model, and performing a scheduling search on the integrated archive management architecture in combination with the scheduling authorization token and the cross-regional scheduling guidance vector to determine a first cross-regional scheduling channel and a first scheduling archive resource; optimizing the protection configuration of the first cross-regional scheduling channel to obtain a second cross-regional scheduling channel; performing multi-level protection on the first scheduling archive resource to obtain a second scheduling archive resource, and performing a cross-regional scheduling response in combination with the second cross-regional scheduling channel.

[0017] The technical solution provided in this application has at least the following technical effects or advantages: by achieving the technical goal of constructing a hybrid architecture for archive management that integrates joint authentication, path optimization, multi-level protection and trusted evidence storage, it achieves the technical effects of improving the linkage response efficiency, identity authentication accuracy, data transmission security and full-process traceability in the cross-regional archive scheduling process.

[0018] The above description is merely an overview of the technical solution of this application. To better understand the technical means of this application and to facilitate its implementation according to the description, and to make the above and other objects, features, and advantages of this application more apparent, specific embodiments of this application are described below. It should be understood that the content described in this section is not intended to identify key or important features of the embodiments of this application, nor is it intended to limit the scope of this application. Other features of this application will become readily apparent through the following description. Attached Figure Description

[0019] To more clearly illustrate the technical solutions in this application or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are merely exemplary. For those skilled in the art, other drawings can be obtained based on the provided drawings without creative effort.

[0020] Figure 1 is a schematic diagram of the cross-regional management system of the file management all-in-one machine based on the hybrid architecture of this application.

[0021] Figure 2 is a flowchart illustrating the cross-regional management method of the integrated document management machine based on the hybrid architecture of this application.

[0022] Figure labeling: 1. Archive scheduling request receiving module; 2. Federal authentication module; 3. Scheduling search module; 4. Protection configuration optimization module; 5. Cross-domain scheduling response module. Detailed Implementation

[0023] This application provides a cross-regional management system and method for integrated archival management based on a hybrid architecture. It addresses the technical problems in existing technologies where the lack of a collaborative scheduling mechanism and integrated security control framework among multi-regional archival nodes leads to authentication silos, resource fragmentation, opaque paths, and weak scheduling security during cross-regional archival scheduling. These issues further affect the continuity, timeliness, and security of cross-regional archival scheduling. The application achieves the technical goal of constructing a hybrid archival management architecture that integrates joint authentication, path optimization, multi-level protection, and trusted evidence storage. This results in improved response efficiency, accuracy of identity authentication, data transmission security, and full-process traceability during cross-regional archival scheduling.

[0024] The technical solutions of this application will now be clearly and completely described with reference to the accompanying drawings. Obviously, the described embodiments are only a part of the embodiments of this application, and not all of them. It should be understood that this application is not limited to the exemplary embodiments described herein. All other embodiments obtained by those skilled in the art based on the embodiments of this application without creative effort are within the scope of protection of this application. It should also be noted that, for ease of description, only the parts related to this application are shown in the accompanying drawings, not all of them.

[0025] Example 1, please refer to Figure 1. This application provides a cross-regional management system for an all-in-one document management machine based on a hybrid architecture, specifically including:

[0026] The file scheduling request receiving module 1 is used to build a hybrid file management architecture based on multiple file management all-in-one machines, and to receive cross-domain file scheduling requests from users based on the hybrid file management architecture.

[0027] Specifically, an integrated archive management machine is a hardware device that integrates archive acquisition, storage, processing, and scheduling functions. It enables comprehensive archive management in a local environment and is deployed at archive management units or business nodes. Multiple integrated archive management machines refer to a distributed deployment of multiple devices in different geographical areas. These devices may be disconnected or weakly interconnected, thus requiring unified management through technical means to build a hybrid archive management architecture. This hybrid architecture is a system design approach that combines centralized and distributed architectures. On one hand, it has a unified central platform for scheduling and access control; on the other hand, it retains the local autonomy of each integrated archive management machine, achieving a balance between resource scheduling flexibility and management efficiency.

[0028] Based on the hybrid architecture of record management, cross-domain record scheduling requests are received from users. Users issue instructions to access or invoke record resources in other regions through access nodes. Cross-domain record scheduling requests include the type of record required, permission verification information, and the target location for scheduling.

[0029] The Federation Authentication Module 2 is used to perform federated authentication on the user through a federated identity authentication mechanism, generate a scheduling authorization token, and construct a cross-domain scheduling guidance vector based on the cross-domain file scheduling request.

[0030] Specifically, federated identity authentication mechanisms refer to verifying user identity using a combination of multiple factors and dimensions, including role recognition, password verification, biometrics, device trustworthiness, geographical location, and network environment. Compared to single verification methods, this offers higher security and robustness. Federated authentication refers to the process of achieving unified user identity verification across different systems, platforms, or regions through a shared authentication protocol. For example, a user's authentication result in one location can be trusted and inherited by an archive system in another region, thus avoiding duplicate logins and permission conflicts. After completing federated authentication for a user, a scheduling authorization token is generated. This token is a data identifier carrying the authentication result and the scope of scheduling permissions, recording information such as the types of archives the user can access, operation permissions, and valid time range. For example, it might allow an archivist to access five administrative documents from 2021 onwards within ten minutes. Subsequently, a cross-domain scheduling guidance vector is constructed based on the user's submitted cross-domain archive scheduling request. This vector is a set of numbers used for algorithm calculations to express dimensions such as time requirements, geographical span, priority, and security level in the scheduling intent, facilitating path optimization and resource matching by the scheduling algorithm. If a user wants to quickly download fifty engineering drawings from 2022 onwards, and the request originates from a location 3,000 kilometers away from the file storage location, the scheduling guidance vector will reflect characteristics such as "high scheduling speed," "large geographical span," and "high resource consumption" to guide the system to prioritize high-bandwidth, low-risk channels, ensuring a balance between user experience and system load.

[0031] The scheduling search module 3 is used to activate the cross-domain scheduling evaluation model, and combine the scheduling authorization token and the cross-domain scheduling guidance vector to perform scheduling search on the file management hybrid architecture to determine the first cross-domain scheduling channel and the first scheduling file resource.

[0032] Specifically, activating the cross-domain scheduling evaluation model refers to invoking an internal analysis mechanism for path evaluation and resource matching after receiving a user's scheduling request. This mechanism includes multiple evaluation indicators to score and rank different scheduling paths. The scheduling authorization token is an authorization credential generated after user authentication, recording the user's role, access permissions, operational scope, and time limits, serving as one of the bases for executing scheduling operations. The cross-domain scheduling guidance vector structures the user's scheduling intent parameters, such as target region, data type, and scheduling time limit, into a vector form, enabling rapid location of resources and paths that meet the requirements during scheduling. The hybrid archive management architecture is a network system composed of a central control unit and multiple geographically distributed archive nodes, supporting both centralized management and distributed response, suitable for cross-regional scheduling applications. During the scheduling search process, the evaluation model, scheduling token, and guidance vector are combined to traverse feasible paths and resource nodes within the hybrid architecture, comprehensively evaluating path performance and resource matching. Ultimately, the path with the highest overall score is determined as the first cross-domain scheduling channel, while the set of archives that best matches the user's intent and permission scope is locked as the first scheduling archive resource.

[0033] The protection configuration optimization module 4 is used to optimize the protection configuration of the first cross-domain scheduling channel to obtain the second cross-domain scheduling channel.

[0034] Specifically, the protection configuration of the first cross-domain scheduling channel is optimized. Based on the assessed security risk coefficient and combined with resource status and preset strategies, the security configuration parameters of the first cross-domain scheduling channel are systematically optimized and adjusted to improve its stability and risk resistance in actual scheduling processes. Protection configuration refers to various technical and strategic configuration items affecting the security of the scheduling channel, including data transmission encryption level, authentication mechanism complexity, access control model, and link redundancy design. Optimization involves using algorithms to find the combination scheme that minimizes risk or optimizes performance among multiple optional configurations. Ultimately, the optimized channel becomes the second cross-domain scheduling channel, which outperforms the first cross-domain scheduling channel in scheduling performance, risk protection capabilities, and resource utilization efficiency, and will replace the original path in subsequent scheduling executions.

[0035] The cross-domain scheduling response module 5 is used to perform multi-level protection on the first scheduling file resource, obtain the second scheduling file resource, and perform cross-domain scheduling response in conjunction with the second cross-domain scheduling channel.

[0036] Specifically, the first scheduling archive resource is protected at multiple levels. Based on its privacy sensitivity level and data value level, multi-layered security protection measures are applied, including de-identification processing, encrypted transmission, access control, operation permission restrictions, and dynamic tracking. This prevents unauthorized access or content leakage during transmission, thereby ensuring information compliance and usage security. The second scheduling archive resource generated after multi-level protection is a version of the original archive resource with added security packaging or control tags, possessing higher anti-tampering and risk resistance capabilities. Meanwhile, the second cross-domain scheduling channel is an optimized data scheduling path with higher performance stability, more comprehensive security configuration, and support for the transmission or cross-domain access of sensitive archives. When the second scheduling archive resource and the second cross-domain scheduling channel are used together, a secure and reliable cross-domain scheduling response can be achieved. The cross-domain scheduling response includes not only the action of transferring data from one management node to another, but also authorization verification, data validation, and transmission integrity assurance during the process.

[0037] Furthermore, this application also includes: an archive scheduling constraint construction unit, used to construct archive scheduling constraints based on the scheduling authorization token and the cross-domain scheduling guidance vector; a scheduling path decision unit, used to make scheduling path decisions for the archive management hybrid architecture based on the archive scheduling constraints to obtain a first space of archive scheduling paths; an optimization search unit, used to perform optimization search on the first space of archive scheduling paths based on the cross-domain scheduling evaluation model to generate the first cross-domain scheduling channel; and an archive search unit, used to perform archive search on the first cross-domain scheduling channel based on the archive scheduling constraints to generate the first scheduled archive resource.

[0038] Specifically, a scheduling authorization token is a digital identity and permission certificate generated by the user through federated authentication. It records the user's role permissions, schedulable file types, access scope, operational restrictions, and validity period. A cross-domain scheduling guidance vector is a structured expression of the user's scheduling intent, including multi-dimensional parameters such as scheduling timeliness, geographical span, scheduling priority, and risk tolerance. Based on the scheduling authorization token and the cross-domain scheduling guidance vector, file scheduling constraints are constructed, forming a set of logical rules to limit the scope of scheduling behavior. For example, access to low-security files located 300 kilometers away is only permitted within eight minutes, and copying operations are prohibited.

[0039] After the constraints for archival scheduling are established, scheduling path decisions are made for the hybrid archival management architecture. The hybrid archival management architecture is a technical architecture that organizes archival management nodes across multiple regions through a combination of central control and edge autonomy, supporting the establishment of temporary or persistent scheduling connections between different regions. Scheduling path decision-making refers to evaluating feasible paths according to the current constraints, thus constituting the first space of archival scheduling paths, which is a set of candidate paths that satisfy the scheduling request. For example, a user can access a document from node A via a high-bandwidth link or from node B via a low-load link; both belong to the first space.

[0040] Next, the cross-domain scheduling evaluation model is invoked to analyze and filter the various paths in the first space of the file scheduling path. The cross-domain scheduling evaluation model is a multi-dimensional comprehensive evaluation mechanism used to establish a scheduling path evaluation space and to find the optimal path under the current conditions, namely the first cross-domain scheduling channel, using an optimization search method.

[0041] After obtaining the first cross-domain scheduling channel, resource search is performed within the first cross-domain scheduling channel according to the original file scheduling constraints. File search refers to finding file resources that match the requested content in the target path nodes, filtering and matching according to the file type, permission level, etc. specified in the scheduling token, and finally outputting the first scheduled file resources, that is, the optimal set of files available for use under the current conditions.

[0042] Furthermore, this application also includes: an evaluation layer, used to evaluate each archive scheduling path in the first space of the archive scheduling path according to the cross-domain scheduling evaluation model, and establish a scheduling path evaluation space, wherein the cross-domain scheduling evaluation model includes multi-dimensional scheduling evaluation indicators, including archive scheduling efficiency and archive scheduling chain break rate; a scheduling path evaluation constraint construction layer, used to construct scheduling path evaluation constraints according to the multi-dimensional scheduling evaluation indicators; an optimization analysis layer, used to perform optimization analysis on the first space of the archive scheduling path based on the scheduling path evaluation space and the scheduling path evaluation constraints, and generate a second space of the archive scheduling path; a vectorized weight allocation layer, used to perform vectorized weight allocation according to the multi-dimensional scheduling evaluation indicators, and generate a scheduling path optimality function; and an optimization layer, used to perform scheduling path optimality maximization optimization on the second space of the archive scheduling path according to the scheduling path optimality function, and obtain the first cross-domain scheduling channel.

[0043] Specifically, the cross-domain scheduling evaluation model is a computational mechanism used to measure the quality of different archival scheduling paths. Based on the performance of archival scheduling paths under different indicators, it scores or ranks the paths to help select the optimal solution. The first space of archival scheduling paths refers to the set of all possible paths that can be used for scheduling under basic constraints. Substituting each archival scheduling path in the first space into the cross-domain scheduling evaluation model for scoring, a scheduling path evaluation space containing all the scoring results is formed. The scheduling path evaluation space is a multi-dimensional structure that records the performance of each archival scheduling path across various evaluation dimensions, including the archival scheduling efficiency and the archival scheduling disconnection rate, providing a data foundation for subsequent selection. The multi-dimensional scheduling evaluation indicators included in the cross-domain scheduling evaluation model are used to measure the comprehensive performance of the paths. Archival scheduling efficiency measures the time required, throughput, and response latency during the scheduling process, while the archival scheduling disconnection rate measures the probability of connection interruption during historical operation, reflecting its stability.

[0044] After the evaluation is completed, it is necessary to construct scheduling path evaluation constraints based on multi-dimensional scheduling evaluation indicators, including file scheduling efficiency constraints and file scheduling chain breakage rate constraints, that is, to bind performance evaluation with scheduling objectives.

[0045] After establishing the scheduling path evaluation constraints, an optimization analysis is performed on the original first space of archival scheduling paths to eliminate paths that do not meet the scheduling path evaluation constraints, thus forming the second space of archival scheduling paths. The second space of archival scheduling paths is a subset of the first space of archival scheduling paths; its paths not only meet the basic scheduling conditions but also are closer to the user's scheduling goals in terms of performance.

[0046] Next, multi-dimensional scheduling evaluation metrics are used to vectorize the weights of the archive scheduling paths in the second space of the archive scheduling path. Each evaluation metric is transformed into a set of computable vector dimensions, and a weight is assigned to each dimension to reflect user preferences or default strategies. The scheduling path suitability function is used to comprehensively evaluate the performance of each path across multiple dimensions and output a suitability score for ranking and decision-making. Specifically, scheduling path suitability = archive scheduling efficiency × scheduling efficiency weight - archive scheduling breakage rate × scheduling breakage rate weight.

[0047] Finally, based on the scheduling path optimization function, the file scheduling path in the second space of the file scheduling path is maximized and optimized, that is, the path with the highest score is found and determined as the first cross-domain scheduling channel. This path is the optimal path in terms of performance, stability and policy preference, and will be used as the main data transmission channel in actual scheduling.

[0048] Furthermore, this application also includes: a protection configuration parameter acquisition unit, used to acquire protection configuration parameters of the first cross-domain scheduling channel and generate a current protection configuration scheme; a risk prediction unit, used to perform risk prediction on the first cross-domain scheduling channel according to the current protection configuration scheme and obtain a protection configuration risk coefficient; a configuration optimization adjustment unit, used to perform configuration optimization adjustment on the current protection configuration scheme according to the protection configuration risk threshold if the protection configuration risk coefficient is greater than or equal to the protection configuration risk threshold, and obtain a protection configuration optimization result; and a protection configuration optimization unit, used to optimize the protection configuration of the first cross-domain scheduling channel according to the protection configuration optimization result and generate a second cross-domain scheduling channel.

[0049] Specifically, collecting the protection configuration parameters of the first cross-domain scheduling channel refers to extracting information on the security mechanisms of the first cross-domain scheduling channel after the scheduling path is determined. This includes encryption level, authentication mechanism, access control policy, redundancy backup settings, and link hardening level. The protection configuration parameters reflect the current security protection capabilities of the first cross-domain scheduling channel, providing basic data for subsequent risk assessment and adjustments.

[0050] After the protection configuration scheme is generated, risk prediction is performed on the first cross-domain scheduling channel to determine whether the current protection capabilities can cope with potential risks. Risk prediction is conducted by simulating possible anomalies during the scheduling process, such as network attacks, link interruptions, or privilege leaks, and by combining this with historical fault data for evaluation. The final output is called the protection configuration risk coefficient, which is a quantitative score of the security status; the higher the score, the greater the risk.

[0051] If the risk coefficient is greater than or equal to the preset protection configuration risk threshold, it indicates that the current configuration has security vulnerabilities and needs to be optimized and adjusted. The protection configuration risk threshold is a risk tolerance limit set based on business needs, security levels, and historical experience. When the protection configuration risk coefficient reaches or exceeds this value, a configuration optimization and adjustment process is triggered to adjust the current solution according to existing strategies and rules, thereby improving overall security.

[0052] Finally, based on the optimization results, the protection configuration of the first cross-domain scheduling channel is optimized. This essentially involves structural reconstruction or policy upgrades of the original channel, ultimately generating the second cross-domain scheduling channel. The second cross-domain scheduling channel is an alternative path built on a more secure configuration. It retains the scheduling characteristics of the first cross-domain scheduling channel while enhancing its protection capabilities, thereby reducing the risk of scheduling interruptions or information leakage.

[0053] Furthermore, this application also includes: an archive scheduling simulation layer, used to perform archive scheduling simulation on the first cross-domain scheduling channel according to the current protection configuration scheme, and obtain archive scheduling simulation data; a risk association detection layer, used to perform risk association detection on the archive scheduling simulation data, and obtain a scheduling risk association feature sequence; a scheduling risk assessment model input layer, used to input the scheduling risk association feature sequence into P scheduling risk assessment models, and obtain P scheduling risk assessment coefficients, where P is a positive integer greater than 1; and a lumped value calculation layer, used to calculate the lumped value of the P scheduling risk assessment coefficients, and generate the protection configuration risk coefficient.

[0054] Specifically, the current protection configuration scheme refers to a comprehensive description of the encryption strategies, authentication mechanisms, transmission control methods, and node security protection measures already set in the first cross-domain scheduling channel, used to guide the security simulation of subsequent scheduling processes. File scheduling simulation refers to the virtual execution of the scheduling process of files from the initiating node to the target node in the first cross-domain scheduling channel, without actually triggering real scheduling operations, through internal system logic or simulation mechanisms. This includes multiple dimensions such as data transmission paths, access permission verification, and channel stability assessment, ultimately generating file scheduling simulation data that reflects the behavioral characteristics and potential weaknesses of the first cross-domain scheduling channel in simulated scheduling, such as latency, authentication failure rate, and link packet loss.

[0055] After obtaining the file scheduling simulation data, further risk correlation detection is performed on the file scheduling simulation data. That is, it is to analyze whether the problems that appear in the simulation match the known risk patterns, identify the factors that may trigger security incidents, and form a scheduling risk correlation feature sequence. Each element represents a potential risk factor, such as authentication delay exceeding five seconds or path jitter frequency greater than once per second.

[0056] Subsequently, the scheduling risk-related feature sequence is input into P scheduling risk assessment models for evaluation, where P is a positive integer greater than 1, indicating the use of multiple models with different structures or algorithms to assess the risk, thereby enhancing the accuracy and robustness of the prediction results. The P scheduling risk assessment models may include statistical analysis-based models, neural network-based prediction models, rule-based inference models, etc., each calculating the potential risk level during the scheduling process from different dimensions and outputting P scheduling risk assessment coefficients.

[0057] Finally, the P scheduling risk evaluation coefficients are processed centrally, and a representative centralized value is obtained by calculating the average, median, or weighted aggregation. This value is the final protection configuration risk coefficient, used to measure the overall risk level of the scheduling channel under the current configuration scheme. Table 1 shows a partial record of the most recent cross-domain scheduling protection configuration evaluation.

[0058] Table 1: Partial Records of the Most Recent Cross-Domain Dispatch Protection Configuration Assessment

[0059] Dispatch Channel Number Current Protection Configuration Scheme Summary Archive Dispatch Simulation Data Summary Risk Association Feature Sequence P-value Risk Assessment Model List Risk Assessment Coefficients for Each Model T-20250620-01 AES128 Encryption, Single Factor Authentication Authentication Delay 3 seconds, Link Interruption 1 time [Authentication Delay, Interruption Risk] 5 [Model A, Model B, Model C, Model D, Model E] [0.55, 0.62, 0.58, 0.60, 0.59] T-20250 620-02 AES256 encryption, two-factor authentication, stable throughout, no packet loss [high path security] 4 [Model A, Model B, Model C, Model D] [0.21, 0.25, 0.22, 0.24] T-20250620-03 Plaintext transmission, no authentication mechanism, multiple interruptions, 2 access failures [unstable path, high access failure rate] 6 [Model A~F] [0.78, 0.82, 0.81, 0.79, 0.84, 0.80] surface

[0060] Furthermore, this application also includes: a privacy-sensitive detection unit, used to perform privacy-sensitive detection on the first scheduling archive resource to obtain an archive privacy-sensitive detection sequence; a data value detection unit, used to perform data value detection on the first scheduling archive resource to obtain an archive data value detection sequence; a de-identification and encryption protection parsing unit, used to perform de-identification and encryption protection parsing on the first scheduling archive resource based on the archive privacy-sensitive detection sequence and the archive data value detection sequence to obtain an archive protection first strategy; a permission embedding protection parsing unit, used to perform permission embedding protection parsing on the first scheduling archive resource based on the archive privacy-sensitive detection sequence and the archive data value detection sequence to obtain an archive protection second strategy; and a multi-level protection processing unit, used to perform multi-level protection processing on the first scheduling archive resource according to the archive protection first strategy and the archive protection second strategy to generate the second scheduling archive resource.

[0061] Specifically, the first-level dispatch archive resources undergo privacy sensitivity testing to identify whether they contain sensitive information, such as personal identification information, contact information, bank account numbers, and health records. The sensitivity level is then scored or marked, ultimately forming an archive privacy sensitivity testing sequence. Next, the first-level dispatch archive resources undergo data value testing to assess the importance of each archive resource at the business, legal, or strategic level. For example, assessing the impact of a financial statement on tax audits or the criticality of a contract to the company's interests will output an archive data value testing sequence to represent the application value level of the archives.

[0062] After obtaining the two detection sequences, the first scheduled archive resource is anonymized and encrypted for protection based on them. Sensitive fields are replaced, masked, or obscured, and high-value or high-risk parts are processed using encryption algorithms, forming the first archive protection strategy. Subsequently, based on the archive privacy sensitivity detection sequence and the archive data value detection sequence, the first scheduled archive resource is subjected to permission embedding protection analysis. That is, according to the sensitivity and value level of the archive, corresponding access permission tags and operation restrictions are assigned to each archive, generating the second archive protection strategy, including access permissions such as who can access, viewing time, whether copying is allowed, and whether downloading is supported.

[0063] Finally, the first and second archival protection strategies are combined and applied to the first scheduled archival resources to achieve multi-level protection processing and generate the second scheduled archival resources. Multi-level protection processing means not only performing security processing on the archival data itself, but also embedding its access management into the overall scheduling process, thereby maintaining high security and control throughout the entire process of data transmission before, during, and after transmission.

[0064] Furthermore, this application also includes: a federated authentication factor activation unit, used to activate federated authentication factors, the federated authentication factors including role identity, basic password, biometrics, geographical location, network trust level and terminal trust level; and an authentication unit, used to authenticate the user based on the federated authentication protocol and the federated authentication factors, obtain a federated authentication result, and generate the scheduling authorization token based on the federated authentication result, the scheduling authorization token including the file scheduling authorization scope.

[0065] Specifically, upon receiving a user's cross-domain file access request, the system activates a federated authentication factor, proactively retrieving a set of multi-dimensional authentication elements for identity verification. The federated authentication factor is a set of information elements covering multiple dimensions, capable of identifying and confirming the authenticity and credibility of a user's identity from different perspectives. Among these, role identity refers to the user's permission level or functional label within the organization, such as system administrator, file viewer, or auditor; the basic password is the user's traditional identification information, a combination of numbers, letters, or symbols; biometrics include unique physical characteristics such as fingerprints, face, iris, or voice, used for accurate identity verification; geolocation indicates the user's current physical location, determined through GPS, IP address, or base station data; network trust assesses the security level of the user's network environment, such as whether it is a trusted local area network or whether there is a proxy or man-in-the-middle risk; and terminal trust is a judgment on the trustworthiness of the user's device itself, such as whether a controlled terminal is being used or whether jailbreak or malware exists.

[0066] Federated authentication protocols are cross-system, cross-organizational authentication collaboration mechanisms that allow multiple independent systems to collaboratively verify identities based on a shared authentication framework, avoiding duplicate logins and permission conflicts. Based on federated authentication protocols, document management kiosks deployed in different regions or organizations can trust each other and share the authentication system. During the authentication process, federated authentication factors are invoked to comprehensively verify the user, including checking password correctness, geographical location compliance, and network environment security, thereby obtaining a federated authentication result, which can be either passed, rejected, or passed with authorization.

[0067] Based on the joint authentication results, a scheduling authorization token is generated. The scheduling authorization token is a structured information carrier used to identify the user's identity, permissions, and operational boundaries throughout the cross-domain scheduling process. The scheduling authorization token contains the scope of file scheduling permissions, that is, the types, quantity, and level of files the user is authorized to access in the current session or operation, as well as the specific actions allowed, such as only allowing viewing of files from a specific city and year, and disallowing downloading or copying.

[0068] Furthermore, this application also includes: an archive scheduling parsing system construction unit, used to construct an archive scheduling parsing system based on an archive scheduling intent index set; an intent parsing unit, used to perform intent parsing on the cross-domain archive scheduling request based on the archive scheduling parsing system to obtain archive scheduling parsing results; and a cross-domain scheduling guidance vector establishment unit, used to establish the cross-domain scheduling guidance vector based on the archive scheduling parsing results.

[0069] Specifically, the archive scheduling intent indicator set is a set of parameters used to characterize a user's scheduling behavior intent, including factors such as scheduling time requirements, geographical scope, archive type, priority level, and access method. The archive scheduling intent indicator set can be extracted from the user's scheduling request content, past operating habits, or system preset rules. Its purpose is to help more accurately understand how the user wants to schedule archives, and then construct an archive scheduling parsing system. This system organizes the archive scheduling intent indicator set according to a logical structure, forming a standardized and callable parsing framework to support semantic understanding and purpose identification of scheduling requests.

[0070] When a user submits a cross-domain file scheduling request, the file scheduling parsing system is invoked to analyze and match the natural language, structured fields, or operation commands in the original request one by one, extracting the core scheduling intent elements. The intent parsing process outputs a file scheduling parsing result, which is a structured representation. For example, a user may want to download financial files from 2021 onwards via a high-speed channel and hopes that the scheduling time will not exceed 5 minutes.

[0071] Cross-domain scheduling guidance vectors are generated by mapping the results of archive scheduling analysis and are characterized by their clear dimensions and computational capabilities. For example, if the archive scheduling analysis results indicate high priority, large geographical span, and high bandwidth requirements, then the values ​​at the corresponding positions in the cross-domain scheduling guidance vector will reflect these preferences or constraints, thereby guiding the subsequent scheduling path optimization model to make accurate response decisions. The cross-domain scheduling guidance vector is a numerical encoding of scheduling intent, used to drive the scheduling path selection and resource matching process within the system.

[0072] Furthermore, this application also includes: the cross-domain scheduling response module is also used to monitor the user's cross-domain scheduling process in real time, obtain cross-domain scheduling monitoring data, and encrypt and store the cross-domain scheduling monitoring data according to the blockchain.

[0073] Specifically, real-time monitoring of a user's cross-domain scheduling process refers to continuously collecting key data such as the status information of the scheduling path, user access behavior, resource call records, and scheduling result feedback throughout the entire process of a user's cross-regional file scheduling operation. This enables dynamic tracking and security supervision of the entire operation, forming cross-domain scheduling monitoring data, including timestamps, user identifiers, access path IDs, scheduling status codes, error messages, and security alarm records.

[0074] Subsequently, the cross-domain scheduling and monitoring data is encrypted and stored using blockchain. Blockchain is a distributed ledger technology with characteristics including immutability, full traceability, and multi-party consensus, making it suitable for storing critical operational data to ensure transparency and trustworthiness. Encrypted storage refers to encrypting the cross-domain scheduling and monitoring data before writing it to the blockchain, forming a chain of records.

[0075] In summary, the cross-regional management system for integrated archive management based on a hybrid architecture provided in this application has the following technical effects: by achieving the technical goal of constructing a hybrid archive management architecture that integrates joint authentication, path optimization, multi-level protection, and trusted evidence storage, it achieves the technical effects of improving the linkage response efficiency, identity authentication accuracy, data transmission security, and full-process traceability in the cross-regional archive scheduling process.

[0076] Example 2: Based on the same inventive concept as the cross-regional management system for integrated archive management machines based on a hybrid architecture as described in the previous examples, this application also provides a cross-regional management method for integrated archive management machines based on a hybrid architecture, as shown in Figure 2, including: S1: Building a hybrid archive management architecture based on multiple integrated archive management machines, and receiving cross-regional archive scheduling requests from users based on the hybrid archive management architecture; S2: Performing federated authentication on the user through a federated identity authentication mechanism, generating a scheduling authorization token, and constructing a cross-regional scheduling guidance vector based on the cross-regional archive scheduling request; S3: Activating a cross-regional scheduling evaluation model, performing a scheduling search on the hybrid archive management architecture in combination with the scheduling authorization token and the cross-regional scheduling guidance vector, and determining a first cross-regional scheduling channel and a first scheduling archive resource; S4: Optimizing the protection configuration of the first cross-regional scheduling channel to obtain a second cross-regional scheduling channel; S5: Performing multi-level protection on the first scheduling archive resource to obtain a second scheduling archive resource, and performing a cross-regional scheduling response in combination with the second cross-regional scheduling channel.

[0077] Furthermore, the cross-regional management method for the integrated archive management machine based on a hybrid architecture also includes: constructing archive scheduling constraints based on the scheduling authorization token and the cross-domain scheduling guidance vector; making scheduling path decisions on the hybrid archive management architecture based on the archive scheduling constraints to obtain a first space of archive scheduling paths; performing optimization search on the first space of archive scheduling paths based on the cross-domain scheduling evaluation model to generate a first cross-domain scheduling channel; and performing archive search on the first cross-domain scheduling channel based on the archive scheduling constraints to generate the first scheduled archive resources.

[0078] Furthermore, the cross-regional management method for the integrated archive management machine based on a hybrid architecture also includes: evaluating each archive scheduling path in the first space of the archive scheduling path according to the cross-domain scheduling evaluation model, establishing a scheduling path evaluation space, wherein the cross-domain scheduling evaluation model includes multi-dimensional scheduling evaluation indicators, including archive scheduling efficiency and archive scheduling break rate; constructing scheduling path evaluation constraints according to the multi-dimensional scheduling evaluation indicators; performing optimization analysis on the first space of the archive scheduling path based on the scheduling path evaluation space and the scheduling path evaluation constraints to generate a second space of the archive scheduling path; performing vectorized weight allocation according to the multi-dimensional scheduling evaluation indicators to generate a scheduling path optimality function; and performing scheduling path optimality maximization optimization on the second space of the archive scheduling path according to the scheduling path optimality function to obtain the first cross-domain scheduling channel.

[0079] Furthermore, the cross-regional management method for the integrated archive management machine based on a hybrid architecture also includes: collecting protection configuration parameters of the first cross-regional scheduling channel and generating a current protection configuration scheme; performing risk prediction on the first cross-regional scheduling channel according to the current protection configuration scheme to obtain a protection configuration risk coefficient; if the protection configuration risk coefficient is greater than or equal to a protection configuration risk threshold, performing configuration optimization adjustment on the current protection configuration scheme according to the protection configuration risk threshold to obtain a protection configuration optimization result; and optimizing the protection configuration of the first cross-regional scheduling channel according to the protection configuration optimization result to generate a second cross-regional scheduling channel.

[0080] Furthermore, the cross-regional management method of the integrated archive management machine based on a hybrid architecture also includes: performing archive scheduling simulation on the first cross-regional scheduling channel according to the current protection configuration scheme to obtain archive scheduling simulation data; performing risk correlation detection on the archive scheduling simulation data to obtain a scheduling risk correlation feature sequence; inputting the scheduling risk correlation feature sequence into P scheduling risk evaluation models to obtain P scheduling risk evaluation coefficients, where P is a positive integer greater than 1; calculating the set value of the P scheduling risk evaluation coefficients to generate the protection configuration risk coefficient.

[0081] Furthermore, the cross-regional management method for the integrated archive management machine based on a hybrid architecture further includes: performing privacy sensitivity detection on the first scheduled archive resource to obtain an archive privacy sensitivity detection sequence; performing data value detection on the first scheduled archive resource to obtain an archive data value detection sequence; performing de-identification encryption protection parsing on the first scheduled archive resource based on the archive privacy sensitivity detection sequence and the archive data value detection sequence to obtain an archive protection first strategy; performing permission embedding protection parsing on the first scheduled archive resource based on the archive privacy sensitivity detection sequence and the archive data value detection sequence to obtain an archive protection second strategy; and performing multi-level protection processing on the first scheduled archive resource according to the archive protection first strategy and the archive protection second strategy to generate the second scheduled archive resource.

[0082] Furthermore, the cross-regional management method for the integrated file management machine based on a hybrid architecture also includes: activating a federated authentication factor, which includes role identity, basic password, biometrics, geographical location, network trust level, and terminal trust level; authenticating the user based on the federated authentication protocol according to the federated authentication factor to obtain a federated authentication result, and generating the scheduling authorization token based on the federated authentication result, wherein the scheduling authorization token includes the scope of file scheduling authorization.

[0083] Furthermore, the cross-regional management method of the integrated archive management machine based on a hybrid architecture also includes: constructing an archive scheduling parsing system based on an archive scheduling intent index set; performing intent parsing on the cross-regional archive scheduling request based on the archive scheduling parsing system to obtain the archive scheduling parsing result; and establishing the cross-regional scheduling guidance vector based on the archive scheduling parsing result.

[0084] Furthermore, the cross-regional management method of the integrated file management machine based on hybrid architecture also includes: real-time monitoring of the user's cross-domain scheduling process, obtaining cross-domain scheduling monitoring data, and encrypting and storing the cross-domain scheduling monitoring data according to blockchain.

[0085] The various embodiments in this specification are described in a progressive manner, with each embodiment focusing on the differences from other embodiments. The cross-regional management system and specific examples of the hybrid architecture-based integrated archive management machine in the foregoing embodiment one are also applicable to the cross-regional management method of the hybrid architecture-based integrated archive management machine in this embodiment. Through the foregoing detailed description of the cross-regional management system of the hybrid architecture-based integrated archive management machine, those skilled in the art can clearly understand the cross-regional management method of the hybrid architecture-based integrated archive management machine in this embodiment. Therefore, for the sake of brevity, it will not be described in detail here.

[0086] The above description of the disclosed embodiments enables those skilled in the art to make or use this application. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of this application. Therefore, this application is not to be limited to the embodiments shown herein, but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.

[0087] Obviously, those skilled in the art can make various modifications and variations to this application without departing from the spirit and scope of this application. Therefore, if such modifications and variations fall within the scope of this application and its equivalents, this application also intends to include such modifications and variations.

Claims

1. A cross-regional management system for integrated document management based on a hybrid architecture, characterized in that: The system includes: an archive scheduling request receiving module, used to build a hybrid archive management architecture based on multiple integrated archive management machines, and to receive cross-domain archive scheduling requests from users according to the hybrid archive management architecture; a federated authentication module, used to perform federated authentication on the user through a federated identity authentication mechanism, generate a scheduling authorization token, and construct a cross-domain scheduling guidance vector based on the cross-domain archive scheduling request; a scheduling search module, used to activate a cross-domain scheduling evaluation model, combine the scheduling authorization token and the cross-domain scheduling guidance vector to perform a scheduling search on the hybrid archive management architecture, and determine a first cross-domain scheduling channel and a first scheduling archive resource; and protection. The configuration optimization module is used to optimize the protection configuration of the first cross-domain scheduling channel to obtain a second cross-domain scheduling channel; the cross-domain scheduling response module is used to perform multi-level protection on the first scheduling archive resource to obtain the second scheduling archive resource, and perform cross-domain scheduling response in conjunction with the second cross-domain scheduling channel; the scheduling search module includes: an archive scheduling constraint construction unit, used to construct archive scheduling constraints based on the scheduling authorization token and the cross-domain scheduling guidance vector; and a scheduling path decision unit, used to make scheduling path decisions for the archive management hybrid architecture based on the archive scheduling constraints to obtain a first space of archive scheduling paths. The optimization search unit is used to perform an optimization search on the first space of the file scheduling path according to the cross-domain scheduling evaluation model to generate the first cross-domain scheduling channel; the file search unit is used to perform a file search on the first cross-domain scheduling channel according to the file scheduling constraints to generate the first scheduled file resources; the optimization search unit includes: an evaluation layer, used to evaluate each file scheduling path in the first space of the file scheduling path according to the cross-domain scheduling evaluation model to establish a scheduling path evaluation space, wherein the cross-domain scheduling evaluation model includes multi-dimensional scheduling evaluation indicators, and the multi-dimensional scheduling evaluation indicators include file scheduling efficiency and file... The system includes: a scheduling path disconnection rate; a scheduling path evaluation constraint construction layer, used to construct scheduling path evaluation constraints based on the multi-dimensional scheduling evaluation indicators; an optimization analysis layer, used to perform optimization analysis on the first space of the file scheduling path based on the scheduling path evaluation space and the scheduling path evaluation constraints, generating a second space of the file scheduling path; a vectorized weight allocation layer, used to perform vectorized weight allocation based on the multi-dimensional scheduling evaluation indicators, generating a scheduling path optimality function; and an optimization layer, used to maximize the scheduling path optimality in the second space of the file scheduling path based on the scheduling path optimality function, obtaining the first cross-domain scheduling channel.

2. The cross-regional management system for integrated document management based on a hybrid architecture as described in claim 1, characterized in that, The protection configuration optimization module includes: a protection configuration parameter acquisition unit, used to acquire protection configuration parameters of the first cross-domain scheduling channel and generate a current protection configuration scheme; a risk prediction unit, used to perform risk prediction on the first cross-domain scheduling channel according to the current protection configuration scheme and obtain a protection configuration risk coefficient; a configuration optimization adjustment unit, used to perform configuration optimization adjustment on the current protection configuration scheme according to the protection configuration risk threshold if the protection configuration risk coefficient is greater than or equal to the protection configuration risk threshold, and obtain a protection configuration optimization result; and a protection configuration optimization unit, used to optimize the protection configuration of the first cross-domain scheduling channel according to the protection configuration optimization result and generate a second cross-domain scheduling channel.

3. The cross-regional management system for integrated document management based on a hybrid architecture as described in claim 2, characterized in that, The risk prediction unit includes: an archive scheduling simulation layer, used to perform archive scheduling simulation on the first cross-domain scheduling channel according to the current protection configuration scheme, and obtain archive scheduling simulation data; a risk association detection layer, used to perform risk association detection on the archive scheduling simulation data, and obtain a scheduling risk association feature sequence; a scheduling risk evaluation model input layer, used to input the scheduling risk association feature sequence into P scheduling risk evaluation models, and obtain P scheduling risk evaluation coefficients, where P is a positive integer greater than 1; and a lumped value calculation layer, used to calculate the lumped value of the P scheduling risk evaluation coefficients, and generate the protection configuration risk coefficient.

4. The cross-regional management system for integrated document management based on a hybrid architecture as described in claim 1, characterized in that, The cross-domain scheduling response module includes: a privacy-sensitive detection unit, used to perform privacy-sensitive detection on the first scheduling archive resource to obtain an archive privacy-sensitive detection sequence; a data value detection unit, used to perform data value detection on the first scheduling archive resource to obtain an archive data value detection sequence; a de-identification and encryption protection parsing unit, used to perform de-identification and encryption protection parsing on the first scheduling archive resource based on the archive privacy-sensitive detection sequence and the archive data value detection sequence to obtain an archive protection first strategy; a permission embedding protection parsing unit, used to perform permission embedding protection parsing on the first scheduling archive resource based on the archive privacy-sensitive detection sequence and the archive data value detection sequence to obtain an archive protection second strategy; and a multi-level protection processing unit, used to perform multi-level protection processing on the first scheduling archive resource according to the archive protection first strategy and the archive protection second strategy to generate a second scheduling archive resource.

5. The cross-regional management system for integrated document management based on a hybrid architecture as described in claim 1, characterized in that, The federated authentication module includes: a federated authentication factor activation unit, used to activate federated authentication factors, the federated authentication factors including role identity, basic password, biometrics, geographical location, network trust level and terminal trust level; and an authentication unit, used to authenticate the user based on the federated authentication protocol and the federated authentication factors, obtain a federated authentication result, and generate the scheduling authorization token based on the federated authentication result, the scheduling authorization token including the file scheduling authorization scope.

6. The cross-regional management system for integrated document management based on a hybrid architecture as described in claim 1, characterized in that, The federal authentication module further includes: a file scheduling parsing system construction unit, used to construct a file scheduling parsing system based on a set of file scheduling intent indicators; an intent parsing unit, used to perform intent parsing on the cross-domain file scheduling request based on the file scheduling parsing system to obtain file scheduling parsing results; and a cross-domain scheduling guidance vector establishment unit, used to establish the cross-domain scheduling guidance vector based on the file scheduling parsing results.

7. The cross-regional management system for integrated document management based on a hybrid architecture as described in claim 1, characterized in that, The cross-domain scheduling response module is also used to monitor the user's cross-domain scheduling process in real time, obtain cross-domain scheduling monitoring data, and encrypt and store the cross-domain scheduling monitoring data according to the blockchain.

8. A cross-regional management method for an integrated document management machine based on a hybrid architecture, characterized in that: The cross-regional management system based on the hybrid architecture of the integrated archive management machine according to any one of claims 1 to 7 is executed as follows: a hybrid archive management architecture is built based on multiple integrated archive management machines, and a user's cross-regional archive scheduling request is received according to the hybrid archive management architecture; federated authentication is performed on the user through a federated identity authentication mechanism to generate a scheduling authorization token, and a cross-regional scheduling guidance vector is constructed according to the cross-regional archive scheduling request; a cross-regional scheduling evaluation model is activated, and a scheduling search is performed on the hybrid archive management architecture in combination with the scheduling authorization token and the cross-regional scheduling guidance vector to determine a first cross-regional scheduling channel and a first scheduling archive resource; protection configuration optimization is performed on the first cross-regional scheduling channel to obtain a second cross-regional scheduling channel; multi-level protection is performed on the first scheduling archive resource to obtain a second scheduling archive resource, and a cross-regional scheduling response is performed in combination with the second cross-regional scheduling channel.

Citation Information

Patent Citations

  • Archive management system based on big data technology

    CN120086884A

  • Archive data security integration management system

    CN120257327A