Personalized interface design method and system for power marketing system

Abstract

The invention relates to a personalized interface design method of an electric power marketing system, which comprises the following steps of: adopting a unified API (Application Program Interface) management platform, externally providing service interfaces in RESTful and GraphQL forms, and supporting interface registration, discovery and dynamic routing; modularized construction is carried out according to service functions, power utilization analysis, energy efficiency management, bill management, contract management and demand response are included, and interfaces are achieved through butt joint of corresponding service systems. Various customer attributes are collected and analyzed, a user portrait system is established, and dynamic allocation of interface permissions is realized in combination with RBAC; the configuration center is used for managing interface opening strategies, interface routes and service parameters of different client types in a centralized mode, and dynamic adjustment and online configuration of the interface capacity are achieved; oAuth2 / JWT authentication is adopted, and fine-grained current limiting, black and white list and risk identification security policies are implemented on a gateway layer. According to the invention, on-demand authorization and personalized service capability of the interface are realized.

Description

TECHNICAL FIELD

[0001] The present application relates to the field of personalized interface design, and in particular to a personalized interface design method for a power marketing system. BACKGROUND

[0002] With the advancement of energy internet and smart grid construction, power enterprise marketing business evolves towards digitization, intelligentization and refinement, and customer types are increasingly diverse, including residents, industries, businesses and distributed users. These customers differ significantly in electricity behavior, business demands and management focus, and require marketing systems to have the ability to adapt flexibly, provide classified services and respond individually, promoting the transformation of system architecture from traditional single interface management to hierarchical and on-demand configuration. SUMMARY

[0003] To solve the above problems, the purpose of the present application is to provide a personalized interface design method for a power marketing system, which realizes on-demand authorization and individual service capability of the interface.

[0004] To achieve the above purpose, the present application adopts the following technical solutions:

[0005] A personalized interface design method for a power marketing system, comprising the following steps:

[0006] A unified API interface management platform is adopted to provide RESTful and GraphQL form service interfaces externally, supporting interface registration, discovery and dynamic routing;

[0007] According to the modular construction of business function modules, including electricity analysis, energy efficiency management, bill management, contract management and demand response, the interface is realized by connecting the corresponding business system;

[0008] Collect and analyze various customer attributes to establish a user portrait system, and realize dynamic allocation of interface permissions in combination with RBAC;

[0009] The configuration center is used to centrally manage the interface opening strategies, interface routing and business parameters of different customer types, realizing dynamic adjustment and online configuration of interface capability;

[0010] OAuth2 / JWT authentication is adopted, and fine-grained flow limiting, black and white list and risk identification security strategies are implemented at the gateway layer.

[0011] Further, the API interface will interface according to the basic information query, intelligent analysis, value-added service category subdivision, and define the accessible interface list according to the customer type; and maintain detailed metadata for each API, including the business it belongs to, the target customer group, input and output parameters, version number, access permission level information; in the configuration center, according to the ID or attributes of different types of users, maintain their accessible interface information, and realize flexible adjustment of interface capabilities.

[0012] Further, the API interface will interface according to the basic information query, intelligent analysis, value-added service category subdivision, and define the accessible interface list according to the customer type, as follows: the basic information query class includes user information, basic power consumption data, account and bill information query; the intelligent analysis class includes energy efficiency analysis, power consumption trend prediction, power consumption anomaly detection; the value-added service class includes energy-saving service customization, personalized early warning, interactive marketing, contract management, etc.; combined with customer types, an accessible API interface list is established for each type of customer.

[0013] Further, after the user logs in to the system, according to its identity, type, signed service information, etc., the available interface list is dynamically obtained from the configuration center, and is issued to the front end, and the front end only shows the available entry; when the interface request reaches the API gateway, the user portrait and access token are automatically read, and only the target interface accessed by the user is routed; different types of users return different data fields or business content for the same interface.

[0014] Further, OAuth2 / JWT authentication is adopted, and fine-grained flow limiting, black and white list, and risk identification security strategies are implemented in the gateway layer, as follows:

[0015] Before accessing the interface, the client needs to complete identity authentication through the authentication center to obtain a security token; when the gateway layer receives the request, it automatically verifies the legality and validity of the JWT token, including signature verification, expiration verification, and user uniqueness verification, etc., to prevent unauthorized and counterfeit requests;

[0016] The gateway layer, according to the interface category, user level or calling frequency, customizes the maximum access rate of each interface, dynamically limits the flow for single user, single IP or globally, prevents malicious interface brushing and excessive calling from causing system pressure; and configures the black and white list strategy in the gateway, shields known high-risk or malicious IP, account, application, while configuring the white list access for specific strategic customers, intranet systems or third-party partners, to improve the controllability of security level; integrate the risk identification module to monitor the access behavior characteristics in real time, such as abnormal frequency, parameter anomaly, geographical location mutation, etc., once the risk rules are triggered, automatically limit, alarm or block the related request channel.

[0017] The power marketing system based on personalized interface design comprises an interface layer, a gateway layer, a business layer, a user portrait and permission management module, a configuration center and a security authentication and access control unit; the interface layer adopts a unified API interface management platform to provide service interfaces in the form of RESTful, GraphQL and the like to the outside, supports interface registration, discovery and dynamic routing; the business layer is modularized according to business functions, such as power consumption analysis, energy efficiency management, bill management, contract management and demand response, and the interface is realized by connecting the corresponding business system; the user portrait and permission management module collects and analyzes various customer attributes, establishes a user portrait system and realizes dynamic allocation of interface permissions in combination with RBAC; the configuration center uses Nacos or Apollo to centrally manage the interface opening strategies, interface routing and business parameters of different customer types, realizes dynamic adjustment and online configuration of interface capabilities; and the security authentication and access control unit connects the interface access to a unified access authentication center, supports OAuth2 / JWT authentication and implements fine-grained flow limiting, black and white list and risk identification security strategies in the gateway layer.

[0018] Further, the API interface subdivides the interface into basic information query, intelligent analysis and value-added service categories, and defines the accessible interface list according to the customer type; and detailed metadata of each API is maintained, including the business to which it belongs, the target customer group, the input and output parameters, the version number, the access permission level information; in the configuration center, the accessible interface information of different types of users is maintained according to their IDs or attributes, realizing flexible adjustment of interface capabilities.

[0019] Further, the API interface subdivides the interface into basic information query, intelligent analysis and value-added service categories, and defines the accessible interface list according to the customer type, specifically as follows: the basic information query category includes user information, basic power consumption data, account and bill information query; the intelligent analysis category includes energy efficiency analysis, power consumption trend prediction and power consumption anomaly detection; the value-added service category includes energy-saving service customization, personalized early warning, interactive marketing and contract management; in combination with the customer type, the accessible API interface list is established for each type of customer.

[0020] Further, after the user logs in the system, the user's available interface list is dynamically obtained from the configuration center according to his / her identity, type, signed service and the like, and is issued to the front end, and the front end only shows the available entry; when the interface request reaches the API gateway, the user portrait and access token are automatically read, and the request is only routed to the target interface that the user has access to; different types of users return different data fields or business contents for the same interface.

[0021] Further, the gateway layer customizes the maximum access rate of each interface according to the interface category, user level or calling frequency, dynamically limits the flow of single user, single IP or globally, prevents malicious interface brushing, excessive calling and causes system pressure, and configures black and white list strategy in the gateway, shields known high-risk or malicious IP, account, application, at the same time, configures white list access for specific strategic customers, intranet system or third-party partners, improves the controllability of security level, integrates risk identification module, and monitors access behavior characteristics in real time, such as abnormal frequency, parameter anomaly, geographical location mutation, etc., once the risk rules are triggered, the related request channel is automatically limited, alarmed or blocked.

[0022] The application has the following beneficial effects:

[0023] The application realizes real on-demand authorization and individual service ability by dividing the interface according to the business type and customer type in multiple dimensions, and combining user portrait, dynamic permission configuration and interface metadata. Each type of customer can obtain the interface and data support that meets the actual needs, which greatly improves the adaptability and user experience of the system. At the same time, the interface capacity can be flexibly expanded with business adjustment, without the need for large-scale reconstruction, supporting multi-business rapid online and individual application driving. BRIEF DESCRIPTION OF DRAWINGS

[0024] Figure 1 The method flowchart of the application. DETAILED DESCRIPTION

[0025] The application will be further described in detail below in combination with the drawings and specific embodiments:

[0026] A personalized interface design method of a power marketing system, comprising the following steps:

[0027] A unified API interface management platform is adopted to provide RESTful and GraphQL form service interfaces, support interface registration, discovery and dynamic routing;

[0028] According to the business function modular construction, including power consumption analysis, energy efficiency management, bill management, contract management, demand response, the interface is realized by the corresponding business system;

[0029] Collect and analyze various customer attributes (such as type, contract, power consumption preference, etc.), establish a user portrait system, and realize dynamic allocation of interface permissions in combination with RBAC (role-based permission control);

[0030] A configuration center (such as Nacos, Apollo) is adopted to centrally manage the interface opening strategy, interface routing and business parameters of different customer types, realize the dynamic adjustment and online configuration of interface capacity;

[0031] OAuth2 / JWT authentication is adopted, and fine-grained flow limiting, black and white list, and risk identification security strategies are implemented at the gateway layer.

[0032] In the embodiment, the API interface subdivides the interfaces according to basic information query, intelligent analysis, and value-added service categories, and defines the accessible interface list according to the customer type; and detailed metadata of each API is maintained, including the business to which the API belongs, the target customer group, the input and output parameters, the version number, the access permission level information, and the like; in the configuration center, the accessible interface information of different types of users is maintained according to the ID or attribute of the users, so as to realize flexible adjustment of the interface capability.

[0033] In the embodiment, the API interface subdivides the interfaces according to basic information query, intelligent analysis, and value-added service categories, and defines the accessible interface list according to the customer type, specifically as follows: the basic information query category includes user information, basic power consumption data, account and bill information query; the intelligent analysis category includes energy efficiency analysis, power consumption trend prediction, and power consumption anomaly detection; the value-added service category includes energy-saving service customization, personalized early warning, interactive marketing, contract management, and the like, and supports differentiated services for high-value customers or customers with special needs; in combination with the customer type (such as residential users, enterprise users, commercial users, and distributed energy users), an accessible API interface list is established for each type of customer. For example, enterprise users can access the intelligent analysis and value-added service category interfaces, while ordinary residents can mainly access the basic information query category and part of the intelligent analysis interfaces. Through such hierarchical authorization, more targeted and secure service delivery is realized for different customers.

[0034] In the embodiment, after a user logs in to the system, the user portrait and the access token are automatically read, and only the target interface to which the user has access right is routed, according to the identity, type, and signed service information of the user, so that different data fields or business contents are returned to different types of users for the same interface. For example, ordinary residents can only see the monthly power consumption overview, and enterprise users can view complex data such as time-of-use pricing and multi-dimensional reports.

[0035] In the embodiment, OAuth2 / JWT authentication is adopted, and fine-grained flow limiting, black and white list, and risk identification security strategies are implemented at the gateway layer, specifically as follows:

[0036] Before accessing the interface, the client needs to complete identity authentication through the authentication center to obtain a security token (such as access_token); when receiving a request, the gateway layer automatically verifies the legality and validity of the JWT token, including signature verification, expiration verification, and user uniqueness verification, so as to prevent unauthorized and counterfeit requests;

[0037] At the gateway layer, the maximum access rate for each interface can be customized based on interface type, user level, or call frequency. Dynamic rate limiting can be implemented for single users, single IPs, or globally to prevent malicious interface spamming and excessive calls that could put pressure on the system. Blacklist and whitelist policies are configured on the gateway to block known high-risk or malicious IPs, accounts, and applications. Whitelist access is also configured for specific strategic customers, intranet systems, or third-party partners to improve the controllability of security levels. A risk identification module is integrated to monitor access behavior characteristics in real time, such as abnormal frequency, abnormal parameters, and sudden changes in geographical location. Once a risk rule is triggered, the relevant request channels are automatically restricted, alerted, or blocked.

[0038] A power marketing system based on personalized interface design includes an interface layer, a gateway layer, a business layer, a user profiling and permission management module, a configuration center, and a security authentication and access control unit. The interface layer adopts a unified API interface management platform, providing service interfaces in RESTful, GraphQL, and other formats, supporting interface registration, discovery, and dynamic routing. The business layer is built according to modular business functions, such as electricity consumption analysis, energy efficiency management, billing management, contract management, and demand response, with interfaces implemented by corresponding business systems. The user profiling and permission management module collects and analyzes various customer attributes (such as type, contract, electricity preferences, etc.) to establish a user profile system, and uses RBAC (Role-Based Access Control) to dynamically allocate interface permissions. The configuration center uses Nacos or Apollo to centrally manage interface opening policies, interface routes, and business parameters for different customer types, enabling dynamic adjustment and online configuration of interface capabilities. The security authentication and access control unit provides unified access to the authentication center for interface access, supports OAuth2 / JWT authentication, and implements fine-grained rate limiting, blacklists / whitelists, and risk identification security policies at the gateway layer.

[0039] In this implementation, the API interface is subdivided into basic information query, intelligent analysis, and value-added service categories, and an accessible interface list is defined according to customer type. Detailed metadata is maintained for each API, including its business, target customer group, input and output parameters, version number, and access permission level. In the configuration center, the accessible interface information is maintained based on the ID or attributes of different user types, enabling flexible adjustment of interface capabilities.

[0040] In this implementation, the API interface is categorized into basic information query, intelligent analysis, and value-added services, and an accessible interface list is defined according to customer type, as follows: Basic information query includes user information, basic electricity consumption data, and account and billing information queries; intelligent analysis includes energy efficiency analysis, electricity consumption trend prediction, and electricity consumption anomaly detection; value-added services include customized energy-saving services, personalized early warnings, interactive marketing, and contract management, supporting differentiated services for high-value customers or customers with special needs. Based on customer type (e.g., residential users, enterprise users, commercial users, distributed energy users, etc.), an accessible API interface list is established for each customer type. For example, enterprise users can access intelligent analysis and value-added service interfaces, while ordinary residents mainly access basic information query interfaces and some intelligent analysis interfaces. This hierarchical authorization enables more targeted and secure service delivery to different customers.

[0041] In this implementation, after a user logs into the system, the system dynamically retrieves a list of available interfaces from the configuration center based on their identity, type, and signed service agreements, and distributes this list to the front end. The front end only displays available entry points. When an interface request reaches the API gateway, the system automatically reads the user profile and access token, routing the request only to the target interface that the user is authorized to access. For the same interface, different types of users receive different data fields or business content. For example, ordinary residents can only see an overview of their monthly electricity consumption, while enterprise users can view more complex data such as time-of-use pricing and multi-dimensional reports.

[0042] In this implementation, at the gateway layer, the maximum access rate for each interface is customized based on interface type, user level, or call frequency. Dynamic rate limiting is implemented for single users, single IPs, or globally to prevent malicious interface spamming and excessive calls from causing system pressure. A blacklist / whitelist policy is configured on the gateway to block known high-risk or malicious IPs, accounts, and applications. Whitelist access is also configured for specific strategic customers, intranet systems, or third-party partners to improve the controllability of security levels. A risk identification module is integrated to monitor access behavior characteristics in real time, such as abnormal frequency, abnormal parameters, and sudden changes in geographical location. Once a risk rule is triggered, the relevant request channels are automatically restricted, alerted, or blocked.

[0043] Those skilled in the art will understand that embodiments of the present invention can be provided as methods, systems, or computer program products. Therefore, the present invention can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present invention can take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0044] This invention is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart illustrations and / or block diagrams. Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0045] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0046] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0047] The above description is merely a preferred embodiment of the present invention and is not intended to limit the present invention in any other way. Any person skilled in the art may make changes or modifications to the above-disclosed technical content to create equivalent embodiments. However, any simple modifications, equivalent changes, and modifications made to the above embodiments based on the technical essence of the present invention without departing from the scope of the present invention shall still fall within the protection scope of the present invention.

Claims

1. A method of designing a personalized interface of a power marketing system, characterized by, The method comprises the following steps: A unified API interface management platform is adopted to provide RESTful and GraphQL form service interfaces, support interface registration, discovery and dynamic routing; According to the business function modularization construction, including power consumption analysis, energy efficiency management, bill management, contract management, demand response, the interface is realized by the corresponding business system; Collect and analyze various customer attributes, establish user portrait system, and realize dynamic allocation of interface permissions combined with RBAC; The configuration center is adopted to centrally manage the interface opening strategies, interface routing and business parameters of different customer types, realize dynamic adjustment and online configuration of interface capabilities; OAuth2 / JWT authentication is adopted, and fine-grained flow limiting, black and white list and risk identification security strategies are implemented at the gateway layer.

2. The method of claim 1, wherein, The API interface classifies the interfaces according to basic information query, intelligent analysis and value-added service, and defines the accessible interface list according to the customer type; Detailed metadata is maintained for each API, including the business it belongs to, the target customer group, input and output parameters, version number, access permission level information, etc. In the configuration center, the accessible interface information of different types of users is maintained according to their ID or attributes, realizing flexible adjustment of interface capabilities.

3. The method of claim 2, wherein the method further comprises: The API interface classifies the interfaces according to basic information query, intelligent analysis and value-added service, and defines the accessible interface list according to the customer type, as follows: the basic information query class includes user information, basic power consumption data, account and bill information query; the intelligent analysis class includes energy efficiency analysis, power consumption trend prediction and power consumption anomaly detection; the value-added service class includes energy-saving service customization, personalized early warning, interactive marketing and contract management; combined with the customer type, the accessible API interface list is established for each type of customer.

4. The method of claim 1, wherein, After the user logs in the system, the available interface list is dynamically obtained from the configuration center according to the user's identity, type and signed service information, and is sent to the front end, and the front end only shows the available entrance; When the interface request reaches the API gateway, the user portrait and access token are automatically read, and the request is only routed to the target interface that the user has access to; different types of users return different data fields or business content for the same interface.

5. The method of claim 1, wherein the method further comprises: The OAuth2 / JWT authentication is adopted, and fine-grained flow limiting, black and white list and risk identification security strategies are implemented at the gateway layer, as follows: Before accessing the interface, the client needs to complete identity authentication through the authentication center and obtain a security token; the gateway layer automatically verifies the legality and validity of the JWT token when receiving the request, including signature verification, expiration verification and user uniqueness verification, etc., to prevent unauthorized and counterfeit requests; The gateway layer customizes the maximum access rate of each interface according to the interface category, user level or calling frequency, dynamically limits the flow of single user, single IP or globally, prevents malicious interface brushing, excessive calling and causes system pressure; and configures the black and white list strategy in the gateway, shields known high-risk or malicious IP, account and application, at the same time, configures the white list access for specific strategic customers, intranet systems or third-party partners, improves the controllability of security level; integrates the risk identification module, monitors the access behavior characteristics in real time, such as abnormal frequency, parameter anomaly, geographical location mutation and the like, once the risk rules are triggered, the related request channel is automatically limited, alarmed or blocked.

6. A power marketing system based on the personalized interface design of any one of claims 1-5, characterized in that, The API interface management platform is adopted in the interface layer, and the service interfaces in the form of RESTful, GraphQL and the like are provided externally, the interface registration, discovery and dynamic routing are supported; the business layer is modularized according to the business function, such as power consumption analysis, energy efficiency management, bill management, contract management and demand response, and the interface is realized by connecting the corresponding business system; the user portrait and permission management module collects and analyzes various customer attributes, establishes a user portrait system, and realizes the dynamic allocation of interface permissions in combination with RBAC; the configuration center adopts Nacos or Apollo to centrally manage the interface opening strategies, interface routing and business parameters of different customer types, realizes the dynamic adjustment and online configuration of interface capabilities; the security authentication and access control unit accesses the unified access authentication center for interface access, supports OAuth2 / JWT authentication, and implements fine-grained flow limiting, black and white list and risk identification security strategies in the gateway layer.

7. The power marketing system according to claim 6, characterized by The API interface classifies the interfaces into basic information query, intelligent analysis and value-added service categories, and defines the accessible interface list according to the customer type; Detailed metadata of each API is maintained, including the business to which the API belongs, the target customer group, input and output parameters, version number, access permission level information and the like; In the configuration center, the accessible interface information of different types of users is maintained according to the ID or attribute of the user, and the flexible adjustment of interface capabilities is realized.

8. The power marketing system of claim 7, wherein, The API interface classifies the interfaces into basic information query, intelligent analysis and value-added service categories, and defines the accessible interface list according to the customer type, specifically as follows: the basic information query category includes user information, basic power consumption data, account and bill information query; the intelligent analysis category includes energy efficiency analysis, power consumption trend prediction and power consumption anomaly detection; the value-added service category includes energy saving service customization, personalized early warning, interactive marketing and contract management; the accessible API interface list is established for each type of customer in combination with the customer type.

9. The power marketing system of claim 6, wherein, After the user logs in the system, the available interface list of the user is dynamically obtained from the configuration center according to the identity, type and signed service information of the user, and is issued to the front end, and the front end only shows the available entrance. When the interface request arrives at the API gateway, the user profile and access token are automatically read, and the request is only routed to the target interface that the user has access to; for the same interface, different types of users return different data fields or business content.

10. The power marketing system of claim 6, wherein, The gateway layer customizes the maximum access rate of each interface according to the interface category, user level or call frequency, dynamically limits the flow for single user, single IP or globally, prevents malicious interface brushing, excessive calls and causes system pressure; and configures black and white list strategy in the gateway, shields known high-risk or malicious IP, account, application, at the same time, configures white list access for specific strategic customers, intranet systems or third-party partners, improves the controllability of security level; integrate risk identification module, real-time monitor access behavior characteristics, such as abnormal frequency, parameter anomaly, geographical location mutation, etc., once the risk rules are triggered, automatically limit, alarm or block related request channel.

Images