Dynamic logistics management method and device based on role permission, equipment and storage medium

Abstract

The invention relates to the technical field of information processing, in particular to a dynamic logistics management method and device based on role permission, equipment and a storage medium, site name mapping of a current operation main body is generated based on a role label, the role permission corresponding to the site name mapping is configured, manual screening operation of a user is reduced, data redundancy is prevented, and user experience is improved. Fine authority management is realized, data form fields in non-authority of role authority are identified, the data form fields in the non-authority are hidden, and displayable data information is obtained; a visual interaction interface is rendered according to the displayable data information, the display effect of horizontal axis granularity optimization data can be intelligently adjusted according to the time period, the user experience and satisfaction degree are improved, the displayable data information is backed up, historical data are not subjected to back calculation, the traceability of a statistical report is ensured, the error rate of parameter adjustment is reduced, and the user experience is improved. The displayable data information is updated by utilizing hierarchical parameter input information, and hierarchical independent parameter input avoids cross-hierarchy interference.

Description

Technical Field

[0001] The present invention relates to the field of information processing technology, and in particular to a role-based dynamic logistics management method, device, equipment and storage medium. Background Art

[0002] In the operational quality control management of the logistics industry, the existing logistics management systems generally have the following problems: extensive authority management, the data viewing scope of users at different levels (such as headquarters, region, province, and distribution) is fixed, and it is impossible to dynamically match permissions according to role attributes, resulting in data redundancy, requiring users to perform manual screening operations, reducing user viewing efficiency, and unable to achieve refined authority management; data display is rigid, trend chart display rules are fixed, and the horizontal axis granularity cannot be intelligently adjusted according to the time period. The flexibility is poor, resulting in poor data display effect, reduced user experience, and thus reduced user satisfaction; the parameter calculation mechanism is single, and parameters such as the minimum value, target value, and weight value lack hierarchical and independent management, and the back calculation of historical data after the parameter update leads to statistical confusion, which increases the error rate of parameter adjustment. Summary of the Invention

[0003] In order to overcome the shortcomings of the existing technology, the purpose of the present invention is to provide a hierarchical independent parameter entry to avoid cross-level interference, historical data is not backcalculated to ensure the traceability of statistical reports, reduce the error rate of parameter adjustment, dynamically match permissions according to role attributes, reduce user manual screening operations, prevent data redundancy, improve user viewing efficiency, realize refined permission management, and intelligently adjust the horizontal axis granularity according to time period to optimize data display effects, thereby improving user experience and satisfaction, which is a dynamic logistics management method, device, equipment and storage medium based on role permissions.

[0004] The first aspect of the present invention provides a dynamic logistics management method based on role authority, including: obtaining mandatory verification information for user login, and retrieving the corresponding role tag from a dynamic authority management center in real time based on the mandatory verification information; generating a site name mapping of the current operating subject based on the role tag, and configuring the role authority corresponding to the site name mapping; identifying non-authorization data form fields of the role authority, hiding the non-authorization data form fields, and obtaining displayable data information; rendering a visual interactive interface based on the displayable data information, monitoring and intercepting unauthorized operation events in the visual interactive interface, and obtaining operation interception information; backing up the displayable data information, and updating the displayable data information using hierarchical parameter entry information.

[0005] Optionally, in a first implementation method of the first aspect of the present invention, the compulsory verification information for user login is obtained, and the corresponding role tag is retrieved in real time from the dynamic permission management center based on the compulsory verification information, including: obtaining the compulsory verification information for user login, the compulsory verification information being one of password verification, dynamic token, biometrics, and device fingerprint; performing data cleaning on the compulsory verification information, and converting the format of the compulsory verification information into a standard format; connecting to the dynamic permission management center, and querying the role tag corresponding to the compulsory verification information from the dynamic permission management center in real time.

[0006] Optionally, in a second implementation method of the first aspect of the present invention, the site name mapping of the current operating subject is generated based on the role tag, and the role permissions corresponding to the site name mapping are configured, including: matching a predefined site template through the role tag; determining the site name mapping of the current operating subject based on the site template; retrieving the latest role permission dynamic configuration list from the dynamic permission management center in real time; and configuring the role permissions corresponding to the site name mapping based on the role permission dynamic configuration list.

[0007] Optionally, in a third implementation method of the first aspect of the present invention, the non-authorization data form fields of the role permissions are identified, the non-authorization data form fields are hidden, and displayable data information is obtained, including: obtaining a complete data form field in the logistics operation quality control management system; identifying the non-authorization data form fields in the complete data form fields that do not match the role permissions; hiding the form fields in the complete data form fields that correspond to the non-authorization data form fields to obtain displayable data information.

[0008] Optionally, in a fourth implementation method of the first aspect of the present invention, the visual interactive interface is rendered according to the displayable data information, and unauthorized operation events are monitored and intercepted in the visual interactive interface to obtain operation interception information, including: obtaining time period information set by the user, filtering the displayable data information according to the time period information to obtain displayable time period data information; rendering the visual interactive interface according to the displayable time period data information, and creating a listener; sending the visual interactive interface to the user terminal where the user logs in, so that the user terminal generates and displays a logistics operation quality control management page based on the visual interactive interface; using the listener to monitor unauthorized operation events in the logistics operation quality control management page; when the unauthorized operation event is monitored, intercepting the unauthorized operation event to obtain operation interception information.

[0009] Optionally, in a fifth implementation manner of the first aspect of the present invention, backing up the displayable data information and updating the displayable data information using hierarchical parameter entry information includes: obtaining hierarchical parameter entry information sent by the user terminal, the hierarchical parameter entry information including basic parameters and extended parameters, the basic parameters including a bottom value, a target value and a weight value, and the extended parameters including a data statistical period, an outlier tolerance and an assessment time window; backing up the displayable data information; and updating the displayable data information using the hierarchical parameter entry information.

[0010] Optionally, in a sixth implementation manner of the first aspect of the present invention, after backing up the displayable data information and updating the displayable data information using hierarchical parameter entry information, it also includes: generating an audit log record based on the operation interception information, and obtaining a timestamp from a timestamp service platform based on the generation time; inserting the timestamp into the audit log record; encrypting the audit log record to obtain record encryption information, and uploading the record encryption information to the blockchain; regularly scanning the abnormal permission allocation information of the dynamic permission management center, verifying the abnormal permission allocation information, and obtaining a verification result; generating a permission audit report based on the verification result, and sending the permission audit report to the management terminal.

[0011] The second aspect of the present invention provides a dynamic logistics management device based on role permissions, including: an acquisition and retrieval module, used to obtain mandatory verification information for user login, and to retrieve the corresponding role tag from the dynamic permission management center in real time based on the mandatory verification information; a generation and configuration module, used to generate a site name mapping of the current operating subject based on the role tag, and configure the role permissions corresponding to the site name mapping; an identification and hiding module, used to identify non-authorization data form fields of the role permissions, hide the non-authorization data form fields, and obtain displayable data information; a rendering and interception module, used to render a visual interactive interface according to the displayable data information, listen to and intercept unauthorized operation events in the visual interactive interface, and obtain operation interception information; a backup and update module, used to back up the displayable data information, and update the displayable data information using hierarchical parameter input information.

[0012] Optionally, in a first implementation method of the second aspect of the present invention, the acquisition and retrieval module includes: a first acquisition unit, used to obtain mandatory verification information for user login, wherein the mandatory verification information is one of password verification, dynamic token, biometric identification and device fingerprint; a cleaning and conversion unit, used to perform data cleaning on the mandatory verification information and convert the format of the mandatory verification information into a standard format; a connection query unit, used to connect to a dynamic authority management center and query the role tag corresponding to the mandatory verification information in real time from the dynamic authority management center.

[0013] Optionally, in a second implementation of the second aspect of the present invention, the configuration generation module includes: a matching unit for matching a predefined site template through the role tag; a determination unit for determining the site name mapping of the current operating subject based on the site template; a calling unit for calling the latest role permission dynamic configuration list from the dynamic permission management center in real time; and a configuration unit for configuring the role permission corresponding to the site name mapping based on the role permission dynamic configuration list.

[0014] Optionally, in a third implementation of the second aspect of the present invention, the identification and hiding module includes: a second acquisition unit, used to acquire the complete data form field in the logistics operation quality control management system; an identification unit, used to identify the non-authorization data form field in the complete data form field that does not match the role authority; and a hiding unit, used to hide the form field in the complete data form field that corresponds to the non-authorization data form field to obtain displayable data information.

[0015] Optionally, in a fourth implementation of the second aspect of the present invention, the rendering interception module includes: an acquisition and filtering unit, used to obtain time period information set by the user, and filter the displayable data information according to the time period information to obtain displayable time period data information; a rendering creation unit, used to render a visual interactive interface according to the displayable time period data information, and create a listener; a sending unit, used to send the visual interactive interface to the user terminal where the user logs in, so that the user terminal generates and displays a logistics operation quality control management page based on the visual interactive interface; a monitoring unit, used to use the listener to monitor unauthorized operation events in the logistics operation quality control management page; an interception unit, used to intercept the unauthorized operation event when monitoring the unauthorized operation event, and obtain operation interception information.

[0016] Optionally, in a fifth implementation of the second aspect of the present invention, the backup and update module includes: a third acquisition unit, used to acquire hierarchical parameter entry information sent by the user terminal, the hierarchical parameter entry information including basic parameters and extended parameters, the basic parameters including a bottom value, a target value and a weight value, and the extended parameters including a data statistical period, an outlier tolerance and an assessment time window; a backup unit, used to back up the displayable data information; and an update unit, used to update the displayable data information using the hierarchical parameter entry information.

[0017] Optionally, in a sixth implementation manner of the second aspect of the present invention, it further includes: a generation and acquisition module, used to generate an audit log record based on the operation interception information, and obtain a timestamp from a timestamp service platform based on the generation time; an insertion module, used to insert the timestamp into the audit log record; an encryption upload module, used to encrypt the audit log record, obtain record encryption information, and upload the record encryption information to the blockchain; a scanning and verification module, used to regularly scan the abnormal permission allocation information of the dynamic permission management center, verify the abnormal permission allocation information, and obtain a verification result; a generation and sending module, used to generate a permission audit report based on the verification result, and send the permission audit report to the management terminal.

[0018] The third aspect of the present invention provides a role-based authority dynamic logistics management device, which includes: a memory and at least one processor, wherein the memory stores instructions; at least one processor calls the instructions in the memory to enable the role-based authority dynamic logistics management device to execute each step of the role-based authority dynamic logistics management method described above.

[0019] A fourth aspect of the present invention provides a computer-readable storage medium having instructions stored thereon, which, when executed by a processor, implement the various steps of any of the above-mentioned role-authority-based dynamic logistics management methods.

[0020] In the technical solution of the present invention, by obtaining the mandatory verification information of the user login, the corresponding role tag is retrieved from the dynamic permission management center in real time based on the mandatory verification information, the site name mapping of the current operating subject is generated based on the role tag, and the role permission corresponding to the site name mapping is configured. It can dynamically match permissions according to role attributes, reduce user manual screening operations, prevent data redundancy, improve user viewing efficiency, implement refined permission management, identify non-authorized data form fields of role permissions, hide non-authorized data form fields, and obtain displayable data information; render a visual interactive interface based on the displayable data information, and intelligently adjust the horizontal axis granularity according to the time period to optimize the data display effect, improve user experience and satisfaction, back up the displayable data information, and ensure the traceability of statistical reports without backcalculating historical data, reduce the error rate of parameter adjustment, and use hierarchical parameter entry information to update the displayable data information. Independent hierarchical parameter entry avoids cross-level interference. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] Figure 1 A first flow chart of a role-based authority dynamic logistics management method provided by an embodiment of the present invention;

[0022] Figure 2 A second flow chart of the role-based authority dynamic logistics management method provided by an embodiment of the present invention;

[0023] Figure 3 A third flow chart of the role-based authority dynamic logistics management method provided in an embodiment of the present invention;

[0024] Figure 4 A fourth flow chart of the role-based authority dynamic logistics management method provided by an embodiment of the present invention;

[0025] Figure 5 A schematic diagram of the structure of a dynamic logistics management device based on role authority provided by an embodiment of the present invention;

[0026] Figure 6 Another structural diagram of a role-based dynamic logistics management device provided by an embodiment of the present invention;

[0027] Figure 7 A schematic diagram of the structure of a role-based authority dynamic logistics management device provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0028] The present invention provides a dynamic logistics management method, device, equipment and storage medium based on role permissions. Independent parameter entry of different levels avoids cross-level interference. Historical data is not recalculated to ensure the traceability of statistical reports, reduce the error rate of parameter adjustment, dynamically match permissions according to role attributes, reduce user manual screening operations, prevent data redundancy, improve user viewing efficiency, realize refined permission management, and intelligently adjust the horizontal axis granularity according to time period to optimize data display effect, thereby improving user experience and satisfaction.

[0029] The terms "first," "second," "third," "fourth," and the like (if any) in the description and claims of the present invention and in the accompanying drawings are used to distinguish similar objects and are not necessarily used to describe a particular order or precedence. It should be understood that the terms used in this manner are interchangeable where appropriate so that the embodiments described herein can be implemented in an order other than that illustrated or described herein. In addition, the terms "including" or "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product, or apparatus that includes a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units that are not explicitly listed or that are inherent to these processes, methods, products, or apparatus.

[0030] For ease of understanding, the specific process of the embodiment of the present invention is described below. Figure 1 An embodiment of the role-based authority dynamic logistics management method in the embodiment of the present invention includes:

[0031] 101. Obtain the mandatory verification information of the user login, and retrieve the corresponding role tag from the dynamic permission management center in real time based on the mandatory verification information;

[0032] In this embodiment, the system requires mandatory verification when the user logs in. This verification may include a password, verification code, multi-factor authentication, etc. After the system passes the verification information, it retrieves the user's role tag from the authority management center in real time.

[0033] 102. Generate the site name mapping of the current operation subject based on the role tag, and configure the role permissions corresponding to the site name mapping;

[0034] In this embodiment, through role tags, the system generates a site name mapping that can be accessed by the corresponding operating subject (user). The site name may represent different resources, platforms, systems or specific operating areas. Once the mapping relationship between the site name and the role is determined, it is necessary to configure the role permissions corresponding to these sites to ensure that users can only perform operations related to their roles.

[0035] 103. Identify the non-authorized data form fields of the role permissions, hide the non-authorized data form fields, and obtain the displayable data information;

[0036] In this embodiment, the form fields in the system contain multiple data items, and different roles have different permissions. The purpose of this step is to identify which data fields the role does not have access to by judging the role permissions. Once it is identified which fields are non-authorized (that is, the user does not have permission to view or edit), the system will hide these fields so that the user cannot see or modify the data. By hiding the fields that do not need to be displayed, the system will ultimately show the user the data form that they have access to and that meets the role requirements.

[0037] 104. Rendering a visual interactive interface based on the displayable data information, monitoring and intercepting unauthorized operation events in the visual interactive interface, and obtaining operation interception information;

[0038] In this embodiment, the displayable data information previously filtered out according to permission control is presented as an interface that users can interact with. Through visualization, users can intuitively view and operate this data. The system needs to monitor the user's interactive behavior, especially the real-time detection and interception of unauthorized operations (that is, users attempt to access or modify data for which they do not have permission). Once the system detects an unauthorized operation, it records and returns the relevant interception information for subsequent audit, analysis or notification to the user.

[0039] 105. Back up the displayable data information and update the displayable data information using the hierarchical parameter input information;

[0040] In this embodiment, a database backup tool is used to back up the displayable data information, and the displayable data information is updated using the hierarchical parameter input information.

[0041] In an embodiment of the present invention, by obtaining the mandatory verification information of the user login, the corresponding role tag is retrieved from the dynamic permission management center in real time based on the mandatory verification information, the site name mapping of the current operating subject is generated based on the role tag, and the role permission corresponding to the site name mapping is configured. It can dynamically match permissions according to role attributes, reduce user manual screening operations, prevent data redundancy, improve user viewing efficiency, implement refined permission management, identify non-authorized data form fields of role permissions, hide non-authorized data form fields, and obtain displayable data information; render a visual interactive interface based on the displayable data information, intelligently adjust the horizontal axis granularity according to the time period to optimize the data display effect, improve user experience and satisfaction, back up the displayable data information, do not backcalculate historical data to ensure the traceability of statistical reports, reduce the error rate of parameter adjustment, use hierarchical parameter entry information to update the displayable data information, and independently enter hierarchical parameters to avoid cross-level interference.

[0042] See also Figure 2 The second embodiment of the role-based authority dynamic logistics management method in the embodiment of the present invention includes:

[0043] 201. Obtaining mandatory verification information for user login, where the mandatory verification information is one of password verification, dynamic token, biometric identification, and device fingerprint;

[0044] In this embodiment, the system requires mandatory verification when a user logs in, and the mandatory verification information is one of password verification, dynamic token, biometrics, and device fingerprint.

[0045] 202. Clean the data of the mandatory verification information and convert the format of the mandatory verification information into a standard format;

[0046] In this embodiment, a deduplication operation is performed on the mandatory verification information to retain unique records, fill in missing values ​​of the mandatory verification information and remove abnormal values, and convert the format of the mandatory verification information into a standard format.

[0047] 203. Connect to the dynamic rights management center and query the role tag corresponding to the mandatory verification information in real time from the dynamic rights management center;

[0048] In this embodiment, a dynamic rights management center is connected. The dynamic rights management center is usually a centralized service responsible for managing the rights information of users, devices, roles, etc., and the role tags related to the role are queried from the rights management center through mandatory verification information.

[0049] 204. Match predefined site templates by role tags;

[0050] In this embodiment, the site template is a predefined page layout and functional structure. Different user roles require different site templates. Specifically, the predefined site templates are matched through role tags.

[0051] 205. Determine the site name mapping of the current operating subject based on the site template;

[0052] In this embodiment, the site name mapping of the current operating entity is determined based on the site template, such as headquarters, region, province, or branch.

[0053] 206. Retrieve the latest dynamic configuration list of role permissions from the dynamic permissions management center in real time;

[0054] In this embodiment, a request is sent to the dynamic permission management center to obtain the latest permission configuration of the current user role. The permission management center returns the latest permission configuration list of the user role based on the request, and obtains the role permission dynamic configuration list. The role permission dynamic configuration list includes the resources that the role can access, the operations that can be performed, and the corresponding permission levels.

[0055] 207. Configure the role permissions corresponding to the site name mapping based on the dynamic configuration list of role permissions;

[0056] In this embodiment, the role permissions corresponding to the site name mapping are configured based on the role permission dynamic configuration list, and a dynamic configuration management tool is used to ensure that the role permission mapping can take effect in real time.

[0057] In an embodiment of the present invention, the accuracy of user identity is ensured by mandatory verification information (such as passwords, dynamic tokens, biometrics, etc.), combined with real-time query of the dynamic permission management center and matching of role tags, the security of the system is effectively improved. The dynamic permission management center and the real-time retrieval of role permissions can make timely adjustments and responses according to the actual situation of the user, making permission management more flexible, real-time and accurate. Data cleaning and format conversion ensure the consistency and standardization of verification information and role permissions, thereby reducing potential errors or inconsistencies and improving the reliability of the system. Through the predefined matching of site templates and role tags, the complex permission configuration process is simplified and the operational efficiency is improved. According to the dynamic configuration of role permissions, the role permissions related to the site name mapping can be adjusted at any time to ensure that the system can be flexibly adjusted according to changing needs.

[0058] See also Figure 3 The third embodiment of the role-based authority dynamic logistics management method in the embodiment of the present invention includes:

[0059] 301. Obtain complete data form fields in the logistics operation quality control management system;

[0060] In this embodiment, by accessing the database management system (such as MySQL, PostgreSQL, etc.), running SQL query statements, obtaining form fields related to the quality control management system, confirming that each field can correctly record relevant data, missing data should be identified and supplemented, for example, the order number field cannot be empty, and the inspection result field should have clear options such as "qualified" or "unqualified".

[0061] 302. Identify non-authorized data form fields in the complete data form that do not match the role permissions;

[0062] In this embodiment, the permission allocation of each data field is checked one by one. For example, if a role cannot access certain fields or does not have the permission to modify a specific field, but the field still appears in the role's operation interface, then these fields are mismatched. Alternatively, through the system's access log or permission configuration file, find out which fields should not appear in the permission list of different roles. If a field is "invisible" or "read-only" for a role, but is still editable or viewable in the user interface, then the content of this field needs to be adjusted to ensure that the content of this field is not exposed to irrelevant roles.

[0063] 303. Hide the form fields corresponding to the non-authorized data form fields in the complete data form fields to obtain displayable data information;

[0064] In this embodiment, once the system identifies which fields are not authorized (i.e., the user does not have the authority to view or edit them), it will hide these fields so that the user cannot see or modify the data. By hiding the fields that do not need to be displayed, the system will ultimately show the user the data form that they have the authority to access and that meets the role requirements, thereby obtaining displayable data information.

[0065] 304. Obtain the time period information set by the user, filter the displayable data information according to the time period information, and obtain the displayable time period data information;

[0066] In this embodiment, time period information is obtained from the user end. The time period information is input or selected by the user. Once the user sets the time period, the system needs to verify the validity of the time period to ensure that the time period is reasonable and prevent the user from entering an invalid time period. Once the time period information set by the user is obtained and verified, the displayable data information is filtered according to the time period information to obtain the displayable time period data information.

[0067] 305. Render a visual interactive interface based on the displayable time period data information and create a listener;

[0068] In this embodiment, a visual interactive interface is rendered based on the displayable time period data information. Specifically, the X-axis and Y-axis of the chart are constructed based on the filtered data. The X-axis represents the time period (such as divided by day, week, month, etc.), and the Y-axis displays the data values ​​related to time. A listener is created for the visual interface to monitor the user's interactive operations.

[0069] 306. Sending the visual interactive interface to the user terminal where the user logs in, so that the user terminal generates and displays a logistics operation quality control management page based on the visual interactive interface;

[0070] In this embodiment, the visual interactive interface is sent to the user terminal where the user logs in. Once the visual interface is transmitted to the user terminal, the user terminal parses the visual interactive interface and then generates and displays a logistics operation quality control management page.

[0071] 307. Use the listener to monitor unauthorized operation events in the logistics operation quality control management page;

[0072] In this embodiment, a listener is used to monitor unauthorized operation events in the logistics operation quality control management page. The working principle of the listener is to continuously monitor specific events on the page or in the back-end system, and intercept and process the events when they occur. Unauthorized operations must be planned in advance in the system's permission design to ensure that the listener can correctly identify and prevent these behaviors.

[0073] 308. When an unauthorized operation event is detected, the unauthorized operation event is intercepted to obtain operation interception information;

[0074] In this embodiment, when an unauthorized operation event is monitored, the unauthorized operation event is intercepted. For example, when a user attempts to access reports, data records, etc. that he or she does not have permission to view, or when an ordinary user attempts to modify administrator permissions or modify other users' operation permissions, or when a user attempts to delete or edit other users' records or sensitive configurations in the system, the event is intercepted. After intercepting the unauthorized operation, the system needs to record detailed operation interception information to obtain operation interception information.

[0075] In an embodiment of the present invention, by identifying and hiding form fields that do not match role permissions, it is ensured that only users with qualified permissions can access the corresponding data, effectively preventing unauthorized access and improving system security. Data is filtered according to the time period information set by the user, making the displayed data more accurate, reducing the interference of irrelevant data, and improving the efficiency and relevance of data display. By rendering a visual interactive interface and creating a listener, the interactive experience of the user interface is optimized, allowing users to operate the system intuitively and conveniently, improving the usability of the system. The real-time monitoring function of the listener can instantly capture and intercept unauthorized operations, ensuring that the system can respond to abnormal situations in a timely manner during operation, thereby avoiding security vulnerabilities and data leakage. The process of automatically filtering, rendering and intercepting operation events reduces manual intervention, ensures the accuracy and efficiency of operations, and improves the automation level of overall management.

[0076] See also Figure 4 The fourth embodiment of the role-based authority dynamic logistics management method in the embodiment of the present invention includes:

[0077] 401. Obtain hierarchical parameter input information sent by the user terminal. The hierarchical parameter input information includes basic parameters and extended parameters. Basic parameters include a guaranteed value, a target value, and a weight value. Extended parameters include a data statistical period, an abnormal value tolerance, and an assessment time window.

[0078] In this embodiment, once the user enters and submits the hierarchical parameter input information, the system transmits the hierarchical parameter input information to the background database through the interface. The hierarchical parameter input information includes basic parameters and extended parameters. The basic parameters include the minimum value, target value and weight value. The extended parameters include the data statistical period, outlier tolerance and assessment time window.

[0079] 402. Back up the displayable data information;

[0080] In this embodiment, a database backup tool is used to back up the displayable data information.

[0081] 403. Update the displayable data information using the hierarchical parameter input information;

[0082] In this embodiment, the top-level parameters, such as overall performance and business goals, are updated first. Then, the middle level is updated, such as data updates by department and region. Finally, the bottom-level details are updated according to the specific situation, such as the performance of individual employees and the sales of specific products. The updates at each level must be able to affect the lower levels. For example, adjustments to the annual sales target should automatically affect the updates of quarterly and monthly targets to avoid data inconsistencies.

[0083] 404. Generate an audit log record based on the operation interception information, and obtain a timestamp from the timestamp service platform based on the generation time;

[0084] In this embodiment, an audit log record is generated based on the operation interception information. The audit log record is a core file used to track user operations. It contains detailed records of each key operation and is connected to the timestamp service platform to obtain a timestamp from the timestamp service platform based on the generation time.

[0085] 405. Insert timestamp into audit log record;

[0086] In this embodiment, a timestamp is inserted into the time pad position of the audit log record.

[0087] 406. Encrypt the audit log record to obtain encrypted record information, and upload the encrypted record information to the blockchain;

[0088] In this embodiment, an encryption algorithm is selected, and the audit log records are encrypted using the selected encryption algorithm (such as AES, RSA) to obtain record encryption information. A suitable blockchain platform is selected, and the necessary smart contracts are configured to store the record encryption information. The system constructs the record encryption information into a blockchain transaction, and submits the signed transaction to the blockchain network. The blockchain network verifies it, and after the verification is passed, the record encryption information is stored in the blockchain.

[0089] 407. Periodically scan abnormal permission allocation information of the dynamic permission management center, verify the abnormal permission allocation information, and obtain verification results;

[0090] In this embodiment, the abnormal permission allocation information of the dynamic permission management center is scanned regularly and verified. The verification includes compliance check, permission overlap check, historical permission review, user responsibility matching check and abnormal pattern recognition to obtain verification results.

[0091] 408. Generate a permission audit report based on the verification results, and send the permission audit report to the management terminal;

[0092] In this embodiment, a permission audit report is generated based on the verification results. The permission audit report includes an exception description, exception type, impact scope and risk assessment. The permission audit report is sent to the management terminal via email or internal system.

[0093] In the embodiment of the present invention, by backing up and encrypting audit log records and uploading the encrypted information to the blockchain, the security and tamper-proofness of the data during the processing are ensured, and audit logs and timestamps are generated and uploaded to the blockchain, providing strong audit tracking, enhancing the transparency and traceability of the system, regularly scanning abnormal permissions and generating permission audit reports, effectively ensuring the compliance of permission allocation, timely discovering and correcting abnormal permissions, and improving the system's permission management efficiency. By automatically updating data information, generating audit logs, and verifying permissions, manual intervention is reduced, and the automation and efficiency of the overall process are improved. The entire process has the function of real-time monitoring of abnormal permissions and log records, enhancing the prevention of potential security risks, and ensuring the security and stability of the system.

[0094] The above describes the dynamic logistics management method based on role authority in the embodiment of the present invention. The following describes the dynamic logistics management device based on role authority in the embodiment of the present invention. Figure 5 In one embodiment of the present invention, a dynamic logistics management device based on role authority includes:

[0095] The acquisition module 501 is used to obtain the mandatory verification information of the user login and retrieve the corresponding role tag from the dynamic rights management center in real time based on the mandatory verification information;

[0096] A generation configuration module 502 is used to generate a site name mapping of the current operating subject based on the role tag and configure the role authority corresponding to the site name mapping;

[0097] Identification and hiding module 503, used to identify non-authorized data form fields of the role, hide the non-authorized data form fields, and obtain displayable data information;

[0098] The rendering interception module 504 is used to render a visual interactive interface according to the displayable data information, monitor and intercept unauthorized operation events in the visual interactive interface, and obtain operation interception information;

[0099] The backup and update module 505 is used to back up the displayable data information and update the displayable data information using the hierarchical parameter input information.

[0100] In this embodiment, by obtaining the mandatory verification information of the user login, the corresponding role tag is retrieved from the dynamic permission management center in real time based on the mandatory verification information, the site name mapping of the current operating subject is generated based on the role tag, and the role permission corresponding to the site name mapping is configured. It can dynamically match permissions according to role attributes, reduce user manual screening operations, prevent data redundancy, improve user viewing efficiency, implement refined permission management, identify non-authorized data form fields of role permissions, hide non-authorized data form fields, and obtain displayable data information; render a visual interactive interface based on the displayable data information, and intelligently adjust the horizontal axis granularity according to the time period to optimize the data display effect, improve user experience and satisfaction, back up the displayable data information, and do not backcalculate historical data to ensure the traceability of statistical reports, reduce the error rate of parameter adjustment, and use hierarchical parameter entry information to update the displayable data information. Independent hierarchical parameter entry avoids cross-level interference.

[0101] See also Figure 6 Another embodiment of the role-based authority dynamic logistics management device in the embodiment of the present invention includes:

[0102] The acquisition module 501 is used to obtain the mandatory verification information of the user login and retrieve the corresponding role tag from the dynamic rights management center in real time based on the mandatory verification information;

[0103] A generation configuration module 502 is used to generate a site name mapping of the current operating subject based on the role tag and configure the role authority corresponding to the site name mapping;

[0104] Identification and hiding module 503, used to identify non-authorized data form fields of the role, hide the non-authorized data form fields, and obtain displayable data information;

[0105] The rendering interception module 504 is used to render a visual interactive interface according to the displayable data information, monitor and intercept unauthorized operation events in the visual interactive interface, and obtain operation interception information;

[0106] The backup and update module 505 is used to back up the displayable data information and update the displayable data information using the hierarchical parameter input information;

[0107] In this embodiment, the acquisition and retrieval module 501 includes: a first acquisition unit 5011, used to obtain the mandatory verification information of the user login, the mandatory verification information is one of password verification, dynamic token, biometric identification and device fingerprint; a cleaning and conversion unit 5012, used to perform data cleaning on the mandatory verification information and convert the format of the mandatory verification information into a standard format; a connection query unit 5013, used to connect to the dynamic authority management center, and query the role label corresponding to the mandatory verification information in real time from the dynamic authority management center.

[0108] In this embodiment, the configuration generation module 502 includes: a matching unit 5021, which is used to match the predefined site template through the role tag; a determination unit 5022, which is used to determine the site name mapping of the current operating subject based on the site template; a calling unit 5023, which is used to call the latest role permission dynamic configuration list from the dynamic permission management center in real time; and a configuration unit 5024, which is used to configure the role permission corresponding to the site name mapping based on the role permission dynamic configuration list.

[0109] In this embodiment, the identification and hiding module 503 includes: a second acquisition unit 5031, used to obtain the complete data form fields in the logistics operation quality control management system; an identification unit 5032, used to identify the non-authorized data form fields in the complete data form fields that do not match the role permissions; a hiding unit 5033, used to hide the form fields in the complete data form fields that correspond to the non-authorized data form fields to obtain displayable data information.

[0110] In this embodiment, the rendering interception module 504 includes: an acquisition and filtering unit 5041, which is used to obtain the time period information set by the user, filter the displayable data information according to the time period information, and obtain the displayable time period data information; a rendering creation unit 5042, which is used to render the visual interactive interface according to the displayable time period data information, and create a listener; a sending unit 5043, which sends the visual interactive interface to the user terminal where the user logs in, so that the user terminal generates and displays the logistics operation quality control management page based on the visual interactive interface; a monitoring unit 5044, which is used to use the listener to monitor unauthorized operation events in the logistics operation quality control management page; an interception unit 5045, which is used to intercept the unauthorized operation event when it is monitored, and obtain operation interception information.

[0111] In this embodiment, the backup and update module 505 includes: a third acquisition unit 5051, which is used to obtain the hierarchical parameter entry information sent by the user terminal, the hierarchical parameter entry information includes basic parameters and extended parameters, the basic parameters include a minimum value, a target value and a weight value, and the extended parameters include a data statistical period, an abnormal value tolerance and an assessment time window; a backup unit 5052, which is used to back up the displayable data information; an update unit 5053, which is used to update the displayable data information using the hierarchical parameter entry information.

[0112] In this embodiment, it also includes: a generation and acquisition module 506, which is used to generate an audit log record according to the operation interception information, and obtain a timestamp from the timestamp service platform based on the generation time; an insertion module 507, which is used to insert the timestamp into the audit log record; an encryption upload module 508, which is used to encrypt the audit log record, obtain record encryption information, and upload the record encryption information to the blockchain; a scanning and verification module 509, which is used to regularly scan the abnormal permission allocation information of the dynamic permission management center, verify the abnormal permission allocation information, and obtain a verification result; a generation and sending module 510, which is used to generate a permission audit report according to the verification result, and send the permission audit report to the management terminal.

[0113] above Figure 5 and Figure 6 The role-based authority dynamic logistics management device in the embodiment of the present invention is described in detail from the perspective of modular functional entities. The role-based authority dynamic logistics management device in the embodiment of the present invention is described in detail from the perspective of hardware processing.

[0114] Figure 7 It is a structural diagram of a role-based authority dynamic logistics management device provided by an embodiment of the present invention. The role-based authority dynamic logistics management device 600 may have relatively large differences due to different configurations or performances, and may include one or more processors (central processing units, CPU) 610 (for example, one or more processors) and a memory 620, and one or more storage media 630 (for example, one or more massive storage devices) for storing application programs 633 or data 632. Among them, the memory 620 and the storage medium 630 can be short-term storage or persistent storage. The program stored in the storage medium 630 may include one or more modules (not shown in the figure), and each module may include a series of instruction operations in the role-based authority dynamic logistics management device 600. Furthermore, the processor 610 can be configured to communicate with the storage medium 630, and execute a series of instruction operations in the storage medium 630 on the role-based authority dynamic logistics management device 600 to implement the steps of the role-based authority dynamic logistics management method provided in the above-mentioned method embodiments.

[0115] The role-based permission dynamic logistics management device 600 may further include one or more power supplies 640, one or more wired or wireless network interfaces 650, one or more input and output interfaces 660, and / or one or more operating systems 631, such as Windows Server, Mac OS X, Unix, Linux, FreeBSD, etc. It will be understood by those skilled in the art that Figure 7 The illustrated structure of the role-based authority dynamic logistics management device does not constitute a limitation on the role-based authority dynamic logistics management device, and may include more or fewer components than shown in the figure, or a combination of certain components, or a different arrangement of components.

[0116] The present invention also provides a computer-readable storage medium, which can be a non-volatile computer-readable storage medium or a volatile computer-readable storage medium. The computer-readable storage medium stores instructions, which, when executed on a computer, enable the computer to execute the steps of a dynamic logistics management method based on role authority.

[0117] Those skilled in the art will clearly understand that, for the convenience and brevity of description, the specific working processes of the above-described systems, devices, and units can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0118] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention is essentially or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes several instructions for enabling a computer device (which can be a personal computer, server, or network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM), random access memory (RAM), magnetic disk or optical disk, etc., various media that can store program code.

[0119] Finally, it should be noted that the above description is merely a preferred embodiment of the present invention and is not intended to limit the present invention. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art will be able to modify the technical solutions described in the aforementioned embodiments or substitute equivalents for some of the technical features. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of the present invention shall be included within the scope of protection of the present invention.

Claims

1. A dynamic logistics management method based on role authority, characterized in that: include: Obtaining mandatory verification information for user login, and retrieving corresponding role tags from the dynamic rights management center in real time based on the mandatory verification information; Generate a site name mapping for the current operating subject based on the role tag, and configure role permissions corresponding to the site name mapping; Identify the non-authorized data form fields of the role authority, hide the non-authorized data form fields, and obtain displayable data information; Rendering a visual interactive interface based on the displayable data information, monitoring and intercepting unauthorized operation events in the visual interactive interface to obtain operation interception information; The displayable data information is backed up, and the displayable data information is updated using the hierarchical parameter input information.

2. The role-based authority dynamic logistics management method according to claim 1 is characterized in that: The obtaining of the mandatory verification information of the user login and the real-time retrieval of the corresponding role tag from the dynamic rights management center based on the mandatory verification information include: Obtaining mandatory verification information for user login, wherein the mandatory verification information is one of password verification, dynamic token, biometric identification, and device fingerprint; Performing data cleaning on the mandatory verification information and converting the format of the mandatory verification information into a standard format; Connecting to a dynamic rights management center, and querying the role tag corresponding to the mandatory verification information from the dynamic rights management center in real time.

3. The role-based authority dynamic logistics management method according to claim 1 is characterized in that: Generating a site name mapping of the current operating subject based on the role tag and configuring role permissions corresponding to the site name mapping includes: Matching a predefined site template through the role tag; Determine a site name mapping for a current operating entity based on the site template; Retrieve the latest dynamic configuration list of role permissions from the dynamic permissions management center in real time; The role permissions corresponding to the site name mapping are configured based on the role permission dynamic configuration list.

4. The role-based authority dynamic logistics management method according to claim 1 is characterized in that: The identifying of the non-authorized data form fields of the role authority, hiding the non-authorized data form fields, and obtaining displayable data information includes: Obtain complete data form fields in the logistics operation quality control management system; Identifying non-authorized data form fields in the complete data form fields that do not match the role authority; The form fields corresponding to the non-authorized data form fields in the complete data form fields are hidden to obtain displayable data information.

5. The role-based authority dynamic logistics management method according to claim 1 is characterized in that: The rendering of a visual interactive interface according to the displayable data information, monitoring and intercepting unauthorized operation events in the visual interactive interface, and obtaining operation interception information includes: Obtaining time period information set by the user, filtering the displayable data information according to the time period information, and obtaining the displayable time period data information; Rendering a visual interactive interface according to the displayable time period data information and creating a listener; Sending the visual interactive interface to the user terminal where the user logs in, so that the user terminal generates and displays a logistics operation quality control management page based on the visual interactive interface; Using the listener to monitor unauthorized operation events in the logistics operation quality control management page; When the unauthorized operation event is monitored, the unauthorized operation event is intercepted to obtain operation interception information.

6. The role-based authority dynamic logistics management method according to claim 1 is characterized in that: The backing up of the displayable data information and updating the displayable data information using the hierarchical parameter input information includes: Obtaining hierarchical parameter input information sent by the user terminal, wherein the hierarchical parameter input information includes basic parameters and extended parameters. The basic parameters include a minimum value, a target value, and a weight value. The extended parameters include a data statistical period, an abnormal value tolerance, and an assessment time window. Backing up the displayable data information; The displayable data information is updated using the hierarchical parameter input information.

7. The role-based authority dynamic logistics management method according to claim 1 is characterized in that: After backing up the displayable data information and updating the displayable data information using the hierarchical parameter input information, the method further includes: Generate an audit log record based on the operation interception information, and obtain a timestamp from a timestamp service platform based on the generation time; inserting the timestamp into the audit log record; Encrypting the audit log record to obtain encrypted record information, and uploading the encrypted record information to the blockchain; Periodically scanning abnormal authority allocation information of the dynamic authority management center, verifying the abnormal authority allocation information, and obtaining a verification result; Generate a permission audit report based on the verification result, and send the permission audit report to the management terminal.

8. A dynamic logistics management device based on role authority, characterized in that: include: An acquisition module is used to obtain mandatory verification information for user login, and to retrieve the corresponding role tag from the dynamic rights management center in real time based on the mandatory verification information; A configuration generation module is used to generate a site name mapping of the current operating subject based on the role tag, and configure the role authority corresponding to the site name mapping; An identification and hiding module is used to identify the non-authorized data form fields of the role authority, hide the non-authorized data form fields, and obtain displayable data information; A rendering and interception module is used to render a visual interactive interface according to the displayable data information, monitor and intercept unauthorized operation events in the visual interactive interface, and obtain operation interception information; The backup and update module is used to back up the displayable data information and update the displayable data information using the hierarchical parameter input information.

9. A dynamic logistics management device based on role authority, characterized in that: The role-based authority dynamic logistics management device includes: a memory and at least one processor, wherein the memory stores instructions; At least one of the processors calls the instructions in the memory to enable the role-authority-based dynamic logistics management device to execute each step of the role-authority-based dynamic logistics management method as described in any one of claims 1-7.

10. A computer-readable storage medium having instructions stored thereon, characterized in that: When the instructions are executed by the processor, the various steps of the role-based authority dynamic logistics management method as described in any one of claims 1 to 7 are implemented.

Images