A digital media management method, system and related device

Abstract

The application relates to the technical field of digital media management, in particular to a digital media management method, system and related equipment, which comprises the following steps: obtaining an operation request of a digital media management system, analyzing and extracting a request type, operation subject permission information and request parameter configuration; based on a preset multi-level permission mapping rule, checking the matching degree of the permission information and the operation request, and generating a check result containing a permission matching coefficient and a missing item identifier; when the matching is checked, obtaining the current state information of a target object, combining the request type, the state information and the parameter configuration to execute corresponding digital media management operations; real-time monitoring of operation execution progress, system resource occupation rate and data consistency, generation of feedback results; when the feedback results meet the preset completion conditions, updating the target object state, synchronizing the associated data and recording the operation log with a time stamp; when the conditions are not met, triggering the corresponding fault tolerance processing mechanism based on the fault type. The application helps to improve the security and operation stability of the digital media management system.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of digital media management, and in particular to a digital media management method, system and related equipment. BACKGROUND

[0002] With the continuous iteration of digital media technology, digital media management systems have been widely applied in media communication, online education, enterprise digital operation and other multi-scene scenarios. The managed resources cover various types such as audio and video, text and image, virtual digital assets, and the user roles are also subdivided into administrators, editors, ordinary users, cross-department partners and different levels. Under the background of accelerating digital transformation, the interaction frequency and scheduling scale of digital media resources are continuously improving, and the operation requests are showing diversified and personalized characteristics, which puts forward more stringent requirements on the permission control, operation execution efficiency and stability of the system.

[0003] The existing digital media management technology still has obvious deficiencies: on the one hand, traditional permission verification mostly adopts single-level design, lacks flexible multi-level permission mapping rules, and cannot accurately verify the matching degree of operation subject permission and request, which is easy to cause the risk of exceeding authority operation and threatens resource security; on the other hand, the monitoring of operation execution process is not comprehensive enough, lacks real-time tracking of execution progress, resource occupancy rate and data consistency, and the fault handling mechanism is not targeted enough, it is difficult to quickly recover after operation failure, which is easy to cause data synchronization exception, state disorder and other problems, affecting the system stability and user experience. SUMMARY

[0004] In order to help improve the security and running stability of the digital media management system, the present application provides a digital media management method, system and related equipment.

[0005] In a first aspect, the present application provides a digital media management method, which adopts the following technical solution:

[0006] A digital media management method, comprising:

[0007] Obtaining an operation request of a digital media management system;

[0008] Parsing the operation request to extract the request type, operation subject permission information and request parameter configuration;

[0009] Based on the preset multi-level permission mapping rule, verifying the matching degree of the operation subject permission information and the operation request, and generating a permission verification result containing a permission matching coefficient and a missing item identifier;

[0010] If the permission verification result is matched, obtaining the current state information of the target object;

[0011] Based on the request type, the current state information and the request parameter configuration, performing a corresponding digital media management operation;

[0012] monitoring the execution progress, system resource occupancy and data consistency of the digital media management operation in real time, and generating operation feedback results;

[0013] If the operation feedback results meet the preset completion conditions, the current state information of the target object is updated, the associated data is synchronized, and the operation log with a timestamp is recorded.

[0014] If the operation feedback results do not meet the preset completion conditions, the corresponding fault-tolerant processing mechanism is triggered based on the fault type.

[0015] Optionally, based on the preset multi-level permission mapping rule, the matching degree of the operation subject permission information and the operation request is verified, and a permission verification result including a permission matching coefficient and a missing item identifier is generated.

[0016] Based on the request type of the operation request, the corresponding permission verification dimension is determined.

[0017] The role identifier, department identifier, special permission identifier and authorized validity period in the operation subject permission information are extracted.

[0018] Based on the role identifier, the preset role permission library is queried to obtain a basic permission set corresponding to the permission verification dimension.

[0019] Based on the department identifier and the target object identifier, the department hierarchical relationship table and the set permission configuration table are queried to determine the department association range of the operation subject and the department access restriction rule of the target object, and a data access range permission is generated.

[0020] Based on the special permission identifier and the authorized validity period, a temporary permission set is supplemented and a temporary permission that exceeds the validity period is filtered to generate a complete permission set.

[0021] The target permission corresponding to the operation request is compared with the complete permission set item by item, and a permission matching coefficient is calculated.

[0022] If the permission matching coefficient is greater than or equal to a first coefficient threshold, a permission matching verification result is generated.

[0023] If the permission matching coefficient is less than the first coefficient threshold, a permission mismatching verification result is generated, and the missing items and the missing types of permissions are recorded.

[0024] Optionally, based on the department identifier and the target object identifier, the department hierarchical relationship table and the set permission configuration table are queried to determine the department association range of the operation subject and the department access restriction rule of the target object, and a data access range permission is generated.

[0025] Based on the target object identifier, the data classification label of the target object is extracted.

[0026] Based on the department identifier, the department hierarchy table is queried to determine the superior department, peer department and subordinate department of the operation subject, forming the department association range;

[0027] The permission configuration table of the file set to which the target object belongs is queried, and the department allowed list, department prohibited list and associated business tag are obtained;

[0028] Determine whether the department association range of the operation subject exists intersection with the department allowed list and is not in the department prohibited list;

[0029] If there is intersection and not in the prohibited list, the data classification label of the target object is checked for relevance with the associated business tag of the operation subject department, and the tag association degree is calculated;

[0030] If the tag association degree is greater than or equal to the association degree threshold, it is determined that the data access range permission is allowed to access, and the access priority is marked;

[0031] If the department association range has no intersection with the department allowed list, is in the prohibited list, or the tag association degree is less than the association degree threshold, it is determined that the data access range permission is limited to access, and the limitation reason is marked and the applicable permission upgrade path is returned.

[0032] Optionally, the request type includes a file set state change request; based on the request type, the current state information and the request parameter configuration, the corresponding digital media management operation is executed, including:

[0033] The target state corresponding to the file set state change request is extracted from the request parameter configuration, and the operation subject identity is extracted from the operation subject permission information;

[0034] Based on the current state information, it is judged whether the current state is changeable;

[0035] If the current state information is not changeable, return a state change failure prompt, and output the current limitation condition and the target state range that can be changed;

[0036] If the current state information is changeable, the corresponding permission level is checked based on the operation subject identity, and it is judged whether the state change permission for the current state information is possessed;

[0037] If the state change permission is possessed, the associated data of all files and subfolders under the target set is obtained;

[0038] If the target state is disabled, the access permissions of all files and subfolders under the target set are synchronously updated to be visible only to managers, and the original attributes and associated data are preserved;

[0039] If the target state is deleted, it is checked whether there are unfinished tasks under the target set;

[0040] If there is an unfinished task, the state change operation is suspended, and the unfinished task is executed first before resuming the change;

[0041] If there is no unfinished task, the target set and subordinate files / folders are moved to the corresponding recycle bin, and the deletion time and operation subject information are recorded;

[0042] After the state change operation is completed, a state change report is generated and pushed to all managers of the target set, and the target set operation log is updated.

[0043] Optionally, the request type includes a portrait comparison operation request; based on the request type, the current state information, and the request parameter configuration, a corresponding digital media management operation is executed, including:

[0044] Target portrait data, comparison library identifier, and comparison accuracy requirement corresponding to the portrait comparison operation request are extracted from the request parameter configuration;

[0045] Based on the current state information, the state of the portrait library corresponding to the comparison library identifier is checked;

[0046] The enabled state, data integrity, and update time of the portrait library are queried;

[0047] If the portrait library is in a disabled state, the data integrity is less than the integrity threshold, or the update time is more than the time threshold, a portrait library unavailable prompt is returned, and the portrait library is suggested to be enabled / updated;

[0048] If the portrait library is available, a target comparison algorithm is selected based on the comparison accuracy requirement;

[0049] The resource requirement parameters of the target comparison algorithm are obtained;

[0050] The resource occupation data of the current system is collected in real time, and the resource satisfaction degree is calculated based on the resource requirement parameters and the resource occupation data;

[0051] According to the resource satisfaction degree, the comparison operation is executed, and the comparison result is generated.

[0052] Optionally, the execution progress of the digital media management operation, the system resource occupation rate, and the data consistency are monitored in real time, and the operation feedback result is generated, including:

[0053] Based on the request type, a monitoring node based on the execution progress is set;

[0054] The timestamp, operation execution state, and corresponding system resource occupation rate are recorded at each monitoring node, and the execution progress is updated synchronously;

[0055] Calculate the time interval between adjacent monitoring nodes, if the time interval exceeds the preset timeout threshold of the corresponding node, mark the current node as a timeout node, and record the timeout duration and the change of system resource occupancy rate before and after the node, forming an execution progress exception record;

[0056] Based on the execution progress exception record, analyze the system resource occupancy rate change amplitude;

[0057] If the system resource occupancy rate change amplitude exceeds the preset amplitude change threshold, mark it as a resource exception, and calculate the resource overload coefficient;

[0058] Check the data consistency and determine whether there is data inconsistency;

[0059] If there is data inconsistency, mark it as a data exception, and record the data exception condition;

[0060] Based on the execution progress, resource overload coefficient and data exception condition, generate an operation feedback result.

[0061] Optionally, checking the data consistency and determining whether there is data inconsistency includes:

[0062] Based on the request type, obtain the operation type;

[0063] If the operation type is a file operation, obtain the current hash value of the file involved in the operation;

[0064] Compare the current hash value with the preset original hash value;

[0065] If the current hash value is inconsistent with the original hash value, it is determined that there is data inconsistency;

[0066] If the operation type is a portrait comparison operation, obtain the feature matching data corresponding to the comparison result, including the number of feature point matches, the matching threshold and the feature extraction timestamp;

[0067] Call the preset matching logic verification model, and compare the feature matching data with the standard matching logic of the corresponding reference feature in the feature library, and generate a comparison result;

[0068] If the number of feature point matches deviates from the standard logic calculation result by more than the allowed range, the matching threshold does not conform to the preset rules, or the feature extraction timestamp exceeds the effective update period of the feature library, causing the reference feature to be invalid, it is determined that there is data inconsistency.

[0069] In a second aspect, the application also discloses a digital media management system, which adopts the following technical scheme:

[0070] A digital media management system comprises:

[0071] A request acquisition module is configured to acquire an operation request of the digital media management system.

[0072] A request analysis module is configured to analyze the operation request, and extract a request type, operation subject permission information, and request parameter configuration.

[0073] A permission verification module is configured to verify a matching degree of the operation subject permission information and the operation request based on a preset multi-level permission mapping rule, and generate a permission verification result containing a permission matching coefficient and a missing item identifier.

[0074] A state acquisition module is configured to acquire current state information of the target object if the permission verification result is matched.

[0075] An operation execution module is configured to execute a corresponding digital media management operation based on the request type, the current state information, and the request parameter configuration.

[0076] A monitoring feedback module is configured to monitor an execution progress of the digital media management operation, a system resource occupation rate, and data consistency in real time, and generate an operation feedback result.

[0077] A first processing module is configured to update the current state information of the target object, synchronize associated data, and record a time-stamped operation log if the operation feedback result meets a preset completion condition.

[0078] A second processing module is configured to trigger a corresponding fault-tolerant processing mechanism based on a fault type if the operation feedback result does not meet the preset completion condition.

[0079] In a third aspect, the present application provides a computer device, which adopts the following technical solution:

[0080] An intelligent terminal includes a memory and a processor, the memory is configured to store a computer program capable of running on the processor, and the processor is configured to execute the method of the first aspect when loading the computer program.

[0081] By adopting the above technical solution, the computer program is generated based on the method of the first aspect and stored in the memory to be loaded and executed by the processor, so that the intelligent terminal is manufactured based on the memory and the processor, and the user can use it conveniently.

[0082] In a fourth aspect, the present application provides a computer readable storage medium, which adopts the following technical solution:

[0083] A computer readable storage medium stores a computer program, and the computer program is loaded by the processor to execute the method of the first aspect.

[0084] By adopting the technical scheme, the computer program generated based on the method of the first aspect is stored in a computer readable storage medium, and is loaded and executed by a processor. Through the computer readable storage medium, the readability and storage of the computer program are facilitated.

[0085] In summary, the present application has the following beneficial technical effects:

[0086] By presetting the multi-level permission mapping rule, the matching degree of the operation subject permission information and the operation request is accurately verified, and a verification result containing a permission matching coefficient and a missing item identifier is generated. The risk of overstepping the power caused by the traditional single-level permission design is effectively avoided, and the safety of digital media resources is ensured from the source of permission control. At the same time, during the execution of the digital media management operation, the execution progress, the system resource occupation rate and the data consistency are monitored in real time. According to different situations of the operation feedback result, the target object state update, the associated data synchronization, the operation log recording with time stamp or the accurate fault handling based on the fault type are respectively executed. The abnormal problems in the operation execution can be found and solved in time, the data synchronization exception and the state disorder are avoided, and the safety and the operation stability of the digital media management system are significantly improved. BRIEF DESCRIPTION OF DRAWINGS

[0087] Figure 1 is the main flowchart of a digital media management method of an embodiment of the present application;

[0088] Figure 2 is the step flowchart of generating a permission verification result;

[0089] Figure 3 is the step flowchart of generating a data access range permission;

[0090] Figure 4 is the step flowchart of executing a corresponding digital media management operation based on the request type, the current state information and the request parameter configuration Figure 1 ;

[0091] Figure 5 is the step flowchart of executing a corresponding digital media management operation based on the request type, the current state information and the request parameter configuration Figure 2 ;

[0092] Figure 6 is the step flowchart of generating an operation feedback result;

[0093] Figure 7 is the step flowchart of verifying the data consistency;

[0094] Figure 8 is the module diagram of a digital media management system of an embodiment of the present application.

[0095] Explanation of reference signs:

[0096] 1, request acquisition module; 2, request analysis module; 3, permission verification module; 4, state acquisition module; 5, operation execution module; 6, monitoring feedback module; 7, first processing module; 8, second processing module. DETAILED DESCRIPTION

[0097] In a first aspect, the application discloses a digital media management method.

[0098] Reference Figure 1 A digital media management method includes steps S101 to S108:

[0099] Step S101: Obtain the operation request of the digital media management system.

[0100] Specifically, the operation request refers to a specific instruction initiated by the user through the system front-end interface (such as a web page or a client) or a system internal triggering mechanism, such as creating a file collection, uploading a file, performing a portrait comparison, and deleting a folder, etc., which contains operation targets, operation types, and other key core information; in this embodiment, after the user logs in to the digital media management system, the user initiates a request by clicking the operation button (such as adding a file collection, uploading, and comparing, etc.) on the corresponding function module page, and the system temporarily stores the request in the request queue after receiving it, and waits for processing in order of priority.

[0101] Step S102: Analyze the operation request and extract the request type, operation subject permission information, and request parameter configuration.

[0102] Specifically, the request type refers to the specific category of the operation, including file management (file collection creation, state change, file upload / download / deletion, etc.), portrait management (portrait merging, modification, comparison task management, etc.), and basic management (watermark template setting, label maintenance, etc.), different types correspond to different processing logic; the operation subject permission information refers to the user account attributes initiating the operation, including the department (such as the finance department, the operation and maintenance department), the role (main administrator, collaborative administrator, ordinary personnel, super administrator), the assigned file operation permission (such as file addition, folder deletion, label maintenance, etc.), and special authorization (such as temporary cross-department access permission); the request parameter configuration refers to the specific details of the operation request, such as the collection name, type, and label type when creating a file collection; the target file and comparison library identifier when performing a portrait comparison; the target file ID and watermark type when downloading a file, etc.

[0103] In this embodiment, the system parses the request message (such as JSON format) and extracts the above three types of core information, wherein the operation subject permission information is associated with the user account database for subsequent permission verification and operation execution.

[0104] Step S103: Based on the preset multi-level permission mapping rule, the matching degree of the operation subject permission information and the operation request is verified, and a permission verification result containing a permission matching coefficient and a missing item identifier is generated.

[0105] Specifically, the multi-level permission mapping rule refers to the association rule combining the role, department, and file operation permission, for example, the main administrator has all operation permissions of the file set, the ordinary personnel can only perform the assigned file operation, and can only operate the department file set and the collaborative administrator cannot transfer the main administrator permission, etc.; the permission matching coefficient refers to the matching degree of the operation subject permission and the required permission (value 0-1), for example, the request to delete the file set requires the main administrator or super administrator permission, if the operation subject is the collaborative administrator, the matching coefficient is 0.5; if it is an ordinary personnel, the matching coefficient is 0; the missing item identifier refers to the record of the specific permission item (such as lacking file set deletion permission, no cross-department access permission) and type (role permission is insufficient, department permission is limited, no specific operation permission is assigned) when the permission is not matched.

[0106] In this embodiment, the system compares the operation subject permission and the required permission item by item through the multi-level rule, generates a quantitative verification result, avoids the limitation of single-level verification, and ensures the accuracy of permission control.

[0107] Step S104: If the permission verification result is matched, the current state information of the target object is obtained.

[0108] Specifically, the target object refers to the action object of the operation request, such as a file set, a single file / folder, portrait data, a comparison task, etc.; the current state information refers to the real-time attribute of the target object, for example, the state of the file set (normal, disabled, deleted), the upload state of the file (completed, uploading), the state of the portrait data (valid, invalid, gray list), and the state of the comparison task (waiting, comparing, paused, completed, failed).

[0109] In this embodiment, after the permission verification, the system queries the latest state of the target object from the corresponding database or cache, for example, after verifying the permission to delete the file set, it is queried whether the file set is currently in the normal or disabled state, which provides a basis for the state of the subsequent operation execution.

[0110] Step S105: Based on the request type, the current state information, and the request parameter configuration, the corresponding digital media management operation is executed.

[0111] Specifically, in this embodiment, the corresponding processing module is called according to the request type, and the current state of the target object and the request parameter are combined to execute the specific operation logic.

[0112] Step S106: Real-time monitoring of the execution progress of the digital media management operation, system resource occupation rate and data consistency, and generating operation feedback results.

[0113] Specifically, the execution progress refers to the percentage or stage of operation completion, such as file upload progress (30% / 100%), portrait comparison task progress (in comparison / completed), file set deletion progress (check associated tasks / move to recycle bin / log update); the system resource occupation rate refers to the real-time usage rate of CPU, memory and network bandwidth during operation, which is used to determine whether there is resource overload (such as CPU occupation rate rising to more than 90% during portrait comparison); the data consistency refers to the integrity and accuracy of data before and after operation, such as whether the hash value after file upload is consistent with the local file, whether the label association after portrait merging is correct, and whether the recycle bin data after file deletion matches the original data; the operation feedback result refers to the execution status report generated by integrating the execution progress, system resource occupation rate and data consistency, including execution success, execution in progress, exception, timeout and resource shortage, etc. When there is an exception, the specific reason (such as data inconsistency, permission change, system failure) needs to be recorded.

[0114] In this embodiment, the system sets monitoring nodes for different operation types (such as "check- upload- check integrity" node for file upload, "algorithm start- feature extraction- comparison- result generation" node for comparison task), records timestamps, execution status and resource occupation rate at each node, synchronously checks data consistency, and finally generates feedback results.

[0115] Step S107: If the operation feedback result meets the preset completion condition, update the current state information of the target object, synchronize the associated data and record the operation log with timestamp.

[0116] Specifically, the preset completion condition refers to 100% execution progress, system resource occupation rate within normal threshold, and data consistency check passing, such as file upload completion and hash value matching, portrait comparison task generating valid results, and permission synchronization update after file set state change; the associated data synchronization refers to the update of other data associated with the target object, such as synchronously updating the storage path index after file movement, synchronously updating the file associated label after portrait label maintenance, and synchronously updating the shared personnel permission list after file set permission change; the operation log refers to the record of operation subject (user ID, name), operation time (accurate to seconds), operation content (such as uploading file 000036.jpg to collection permission test, deleting comparison task ID: 12345), operation result (success / failure), target object information, and the log cannot be tampered with, which is used for auditing and tracing.

[0117] In this embodiment, after the operation is completed, the system automatically updates the target object state (such as changing the file state from uploading to stored, and changing the comparison task state from comparing to completed), synchronizes the associated data to the corresponding database, and writes the operation log with a timestamp, supporting subsequent statistical query.

[0118] Step S108: If the operation feedback result does not meet the preset completion condition, trigger the corresponding fault tolerance processing mechanism based on the fault type.

[0119] Specifically, the fault type includes resource overload (CPU / memory occupancy rate exceeds threshold), data inconsistency (file hash value mismatch, label association error), execution timeout (operation exceeds the preset time), permission change (user permission is revoked during operation), and system failure (server exception, network interruption), etc.; the fault tolerance processing mechanism refers to the remedial measures for different faults, for example, for resource overload, pause the current operation, release low-priority task resources first, and resume the operation when the resource occupancy rate falls below the threshold; for data inconsistency, roll back to the state before the operation, push an abnormal reminder to the operator and administrator, and record the data abnormality details (such as file 000030.jpg hash value mismatch after uploading); for execution timeout, terminate the current operation, return a timeout prompt, and suggest checking the network or system load, and can re-initiate the operation; for permission change, immediately terminate the operation, return a permission insufficient prompt, and require re-verification of the permission before initiating the request again; for system failure, automatically save the operation progress, resume the operation after the system recovers, and if it cannot be recovered, roll back the data and notify the relevant personnel.

[0120] In this embodiment, the system automatically triggers the corresponding processing mechanism according to the fault type monitored and fed back, reduces data loss, state disorder, and other problems, and improves the system stability.

[0121] Reference Figure 2 In one embodiment of the present embodiment, step S103 verifies the matching degree of the operation subject permission information and the operation request based on the preset multi-level permission mapping rule, and generates a permission verification result containing a permission matching coefficient and a missing item identifier, including steps S201 to S208:

[0122] Step S201: Determine the corresponding permission verification dimension based on the request type of the operation request.

[0123] Specifically, the permission verification dimension is based on the type of operation request, and is a specific direction or level for fine verification of the operation subject's permissions from different levels. Different request types require different permission dimensions to be verified. For example, if the request type is file collection deletion, the permission verification dimension includes role permissions (whether it is a main administrator / super administrator), file collection department permissions (whether it is the operation subject's department or has cross-department permissions), and operation permissions (whether it has file collection deletion permissions). If the request type is portrait label maintenance, the permission verification dimension includes portrait management module access permissions, file label maintenance permissions of the target file collection, and portrait label association permissions (whether it is allowed to modify the label of the portrait).

[0124] In this embodiment, the system has a built-in request type-permission dimension mapping table. For example, file upload corresponds to file addition permission + collection access permission, and comparison task priority corresponds to portrait comparison task management permission. After request analysis, the corresponding verification dimension is automatically matched.

[0125] Step S202: Extract the role identifier, department identifier, special permission identifier, and authorization validity period from the operation subject's permission information.

[0126] Specifically, the role identifier refers to the unique code of the user's role in the system (e.g., MA for main administrator, CA for collaborative administrator, GU for ordinary personnel, and SA for super administrator), which is associated with a preset role permission library. The department identifier refers to the unique code of the user's department (e.g., FIN-001 for the finance department and OPS-002 for the operations department), which is associated with a department hierarchy table. The special permission identifier refers to a temporary granted permission code (e.g., TEMP-CROSS-001 for temporary cross-department access permission), which needs to be combined with the authorization validity period to determine its effectiveness. The authorization validity period refers to the effective time range of the special permission (e.g., from 2025-11-0100:00:00 to 2025-11-1023:59:59), which will be automatically filtered from the permission set after expiration.

[0127] In this embodiment, the system user management database is queried for association, for example, the permission information of user Zhang San is: role identifier "MA", department identifier "FIN-001", no special permission identifier, and no authorization validity period (only special permissions need to be set).

[0128] Step S203: Query the preset role permission library based on the role identifier to obtain the basic permission set corresponding to the permission verification dimension.

[0129] Specifically, the role is a basic permission carrier, and the default permission is obtained through the role first, and then supplemented or limited by subsequent dimensions to ensure the hierarchy of permission verification; the preset role permission library is a structured database in the digital media management system for storing various management different role corresponding permission sets, which is used to provide standardized role permission benchmark for permission verification, and realize quick query and matching of basic permissions of operation subjects.

[0130] In the embodiment, the main administrator (MA) has all the permissions of the file set by default (creation, state change, permission assignment, deletion, etc.), and full operation permissions of subordinate files / folders (upload, download, modification, tag maintenance, etc.); the collaborative administrator (CA) has file set operation permissions except for transferring the main administrator and deleting the file set by default, and full operation permissions of subordinate files / folders; the ordinary person (GU) has only query permission by default, and needs to be assigned specific operation permissions (such as file download and file tag maintenance) additionally; the super administrator (SA) has all module permissions of the system, including user management, role assignment, system parameter configuration, etc.; for example, if the operation subject role identifier is MA and the permission verification dimension is file set deletion, the basic permission set queried from the role permission library includes the file set deletion permission and all department access permissions.

[0131] Step S204: based on the department identifier and the target object identifier, querying the department hierarchical relationship table and the set permission configuration table to determine the department association range of the operation subject and the department access restriction rule of the target object, and generating data access range permissions.

[0132] Specifically, the target object identifier is a symbolic information for uniquely identifying and positioning a specific digital media object in the digital media management system, and is the core index for distinguishing different operation targets in the system; the department hierarchical relationship table refers to a database recording the hierarchical structure of enterprise organization, for example, the superior department of the R&D department of Shenzhen General Company is Shenzhen General Company, and the subordinate departments are R&D Department 1 and R&D Department 2, which is used to determine the department association range; the set permission configuration table refers to a database recording the department-level permission rules of a single file set, including three core fields of department allowed list, department prohibited list and associated business tag, for example, the allowed list of the financial report set is the finance department and the general affairs department; the department association range refers to the department range that the operation subject can associate, and the default rule is that the ordinary person / collaborative administrator: the current department+the superior department; the main administrator / super administrator: all departments, for example, the association range of the operation subject of the operation and maintenance department is the operation and maintenance department (current level), the technical center (superior department) and the operation and maintenance group (subordinate department); the data access range permission refers to the department dimension access permission generated based on the department association range and the set permission configuration, and the result is divided into allowed access and limited access.

[0133] For example, in this embodiment, the department level relationship table is queried through the department identifier "OPS-002" (operation and maintenance department), and it is determined that the department association range is "operation and maintenance department, technical center, operation and maintenance group"; the collection permission configuration table is queried through the target object identifier "COL-001" (financial statement collection), and the allowed list "finance department, general management" and the prohibited list "operation and maintenance department" are obtained; it is determined that there is no intersection between the department association range and the allowed list, and the data access range permission "restricted access" is generated.

[0134] Step S205: Based on the special permission identifier and the authorized validity period, the temporary permission set is supplemented and the temporary permissions exceeding the validity period are filtered, and a complete permission set is generated.

[0135] Specifically, in this embodiment, the temporary permission set refers to the temporary permission list corresponding to the special permission identifier, which is valid only within the authorized validity period; the complete permission set refers to the final permission list after integrating the basic permission set, the data access range permission, and the valid temporary permission.

[0136] Step S206: The target permission corresponding to the operation request is compared with the complete permission set item by item, and a permission matching coefficient is calculated.

[0137] Specifically, in this embodiment, the target permission refers to the complete permission list required by the operation request; the permission matching coefficient refers to an index (value 0-1) quantifying the matching degree of the operation subject permission and the target permission, and the calculation logic is permission matching coefficient = (intersection number of complete permission set and target permission) ÷ (total number of target permission). The higher the permission matching coefficient, the higher the matching degree.

[0138] Step S207: If the permission matching coefficient is greater than or equal to the first coefficient threshold, a permission matching check result is generated.

[0139] Specifically, in this embodiment, the first coefficient threshold refers to the system preset permission matching determination standard, and the threshold value of core operations (such as collection deletion and role permission modification) is set to 1.0 (complete matching is required), and the threshold value of ordinary operations (such as file download and label maintenance) is set to 0.8.

[0140] Step S208: If the permission matching coefficient is less than the first coefficient threshold, a permission mismatch check result is generated, and the permission missing items and the missing types are recorded.

[0141] Specifically, in the embodiment, the missing item of authority refers to a specific authority in the target authority that is not included in the complete authority set, for example, in the request for deleting a financial collection, the complete authority set lacks the collection deletion authority, and the collection deletion authority is the missing item; the missing type refers to the reason classification of the missing authority, including role authority missing (such as ordinary personnel without collection deletion authority), department authority missing (such as the operation and maintenance department without financial collection access authority), and temporary authority missing (such as temporary cross-department authority expiration).

[0142] With reference to Figure 3 In one of the implementation manners of the embodiment, step S204 queries the department hierarchical relationship table and the collection authority configuration table based on the department identifier and the target object identifier, determines the department association range of the operation subject and the department access restriction rule of the target object, and generates the data access range authority including steps S301 to S307:

[0143] Step S301: Based on the target object identifier, the data classification label of the target object is extracted.

[0144] Specifically, in the embodiment, the data classification label refers to the business attribute label of the target object, which is used to associate the business scope of the operation subject department and determine the rationality of access, for example, the classification label of the financial report collection is financial-report-2024, and the classification label of the employee portrait is internal personnel-employee.

[0145] Step S302: Query the department hierarchical relationship table based on the department identifier to determine the superior department, peer department and subordinate department of the department where the operation subject is located, and form a department association range.

[0146] Specifically, the department association range is a collection of all departments associated with the operation subject in the index management system based on the hierarchical relationship and business cooperation rules of the department to which the subject belongs.

[0147] Step S303: Query the authority configuration table of the target object belonging to the file collection, and obtain the department allowed list, the department prohibited list and the associated business label.

[0148] Specifically, in the embodiment, the department allowed list and the department prohibited list are the core configuration items of the file collection authority management, which are used to accurately limit which departments can access the target file collection and which departments are explicitly prohibited from accessing from the department dimension, and are the key components of the multi-level authority mapping rule; the associated business label refers to the business domain label to which the file collection belongs, which is used to match the business scope of the operation subject department, for example, the associated business label of the financial report collection is financial-budget-report, and the associated business label of the R&D document collection is technical-R&D-document.

[0149] Step S304: Determine whether the department association range of the operation subject has intersection with the department allowed list and is not in the department prohibited list.

[0150] Step S305: If there is intersection and is not in the prohibited list, check the association between the data classification label of the target object and the associated business label of the operation subject department, and calculate the label association degree.

[0151] Specifically, the label association degree is an index (value 0-1) quantifying the matching degree of the target object data classification label and the department associated business label. In this embodiment, the label association degree = number of matching keywords ÷ total number of keywords of the target object label. For example, the target label "finance-report-2024" (3 keywords) and the department label "finance-budget-report" (3 keywords) match the keywords "finance, report" (2 keywords), and the label association degree = 2 / 3 ≈ 0.67.

[0152] Step S306: If the label association degree is greater than or equal to the association degree threshold, determine that the data access range permission is allowed to access, and mark the access priority.

[0153] Specifically, in this embodiment, the association degree threshold refers to the system preset label association judgment standard, and the default threshold is 0.7. The threshold for core business data (such as financial statements and core R&D documents) is set to 0.9. The access priority refers to the resource scheduling priority divided according to the label association degree. When the label association degree is greater than or equal to 0.9, a high priority is marked (CPU and memory resources are preferentially allocated), and when the label association degree is between 0.7 and 0.9, a medium priority is marked. For example, if the label association degree is 0.8, 0.8≥0.7, it is determined that the data access range permission is allowed to access, and a medium priority is marked.

[0154] Step S307: If the department association range has no intersection with the department allowed list, is in the prohibited list, or the label association degree is less than the association degree threshold, determine that the data access range permission is limited to access, mark the limitation reason, and return the applicable permission upgrade path.

[0155] Specifically, in this embodiment, the permission upgrade path refers to a compliance process for guiding users to obtain missing permissions. If the department has no access permission, the path contacts the target set of main administrators to apply for cross-department access. If the label association degree is insufficient, the path contacts the department administrator to update the department business label. For example, if the label association degree is 0.6, 0.6<0.7, it is determined that the data access range permission is limited to access, the limitation reason is marked as insufficient label association degree, and the permission upgrade path is returned to contact the finance department administrator to update the department business label to finance-report.

[0156] Reference Figure 4In one of the implementations of the embodiment, the step S105 performs the corresponding digital media management operation based on the request type, the current state information and the request parameter configuration, including steps S401-S410:

[0157] Step S401: Extract the target state corresponding to the file set state change request from the request parameter configuration, and extract the operation subject identity from the operation subject permission information.

[0158] Specifically, the request type includes a file set state change request; the target state refers to the final state after the file set is changed. In this embodiment, the file set has three states: normal, disabled and deleted. Restoration is the reverse operation of the deleted state (disabled state after restoration); the operation subject identity refers to complete identity information including user ID, name, department and role, which is used for secondary permission verification, such as USER-001 / Zhang San / finance department / main administrator.

[0159] Step S402: Based on the current state information, determine whether the current state is a changeable state.

[0160] Specifically, the changeable state refers to the current state that allows to be changed to the target state; in this embodiment, the normal state can be changed to disabled and deleted, and the deleted state can only be changed to restoration; for example, the target set COL-001 is in the normal state, and the target state is deleted, so it is determined to be a changeable state.

[0161] Step S403: If the current state information is not a changeable state, return a state change failure prompt and output the current restriction condition and the changeable target state range.

[0162] Specifically, the restriction condition refers to the rule that causes the state to be unchangeable, such as the deleted state only supports the restoration operation and cannot be directly changed to disabled; the changeable target state range refers to all target states allowed to be changed under the current state, such as the changeable range of the deleted state is only restoration.

[0163] In this embodiment, if the current state is deleted and the target state is disabled, the system returns a prompt that the current set is in the deleted state and cannot perform the disabled operation, only supports restoration to the disabled state and then adjustment, and the changeable range is restoration.

[0164] Step S404: If the current state information is a changeable state, verify the corresponding permission level based on the operation subject identity and determine whether it has the state change permission for the current state information.

[0165] Specifically, the permission level refers to the permission level divided according to the role. In this embodiment, the permission level from high to low is super administrator>main administrator>collaborative administrator>ordinary personnel, and the higher the level, the more operations can be performed.

[0166] Step S405: If the state change permission is available, the associated data of all files and subfolders under the target set is obtained.

[0167] Specifically, in the embodiment, the target set refers to a specific file set selected by the user from the file set created by the system as the direct object of the current operation in the specific business operation scenario (such as file uploading, deletion, portrait comparison, and permission assignment); the associated data refers to the key information of all resources under the target set, including file / subfolder ID, storage path, associated task (such as unfinished uploading / comparison task), access permission configuration, and tag information.

[0168] Step S406: If the target state is disabled, the access permission of all files and subfolders under the target set is synchronously updated to be visible only to managers, and the original attributes and associated data are preserved.

[0169] Specifically, in the embodiment, the manager refers to the main administrator, the collaborative administrator, and the super administrator, and the ordinary personnel has no management permission; the original attribute refers to the inherent information of the file / folder, including the creation time, the uploader, the file size, the format, the tag, and the like, and the access permission is hidden in the disabled state without modifying the original attribute.

[0170] Step S407: If the target state is deleted, it is checked whether there is an unfinished task under the target set.

[0171] Specifically, in the embodiment, the unfinished task refers to an operation associated with the resource under the target set and not yet executed, including file uploading / download task, portrait comparison task, and tag synchronization task, which is queried from the task management database.

[0172] Step S408: If there is an unfinished task, the state change operation is suspended, and the unfinished task is executed first before the change is resumed.

[0173] Specifically, in the embodiment, when there is an unfinished task, the system generates a suspension work order, records the suspension reason (such as the existence of an unfinished comparison task), and pushes a reminder to the operation subject and the task responsible person to avoid task failure caused by forced deletion.

[0174] Step S409: If there is no unfinished task, the target set and the subordinate files / folders are moved to the corresponding recycle bin, and the deletion time and the operation subject information are recorded.

[0175] Step S410: After the state change operation is completed, a state change report is generated and pushed to all managers of the target set, and the operation log of the target set is updated.

[0176] Specifically, the state change report refers to a document recording key information of the state change, including the state before and after the change, the operation time, the operator, the influence range (the number of subordinate files), the associated task processing situation, etc.; the operation log refers to an unalterable operation record containing the operation subject, time, content, and result, which is stored in an operation log database to support subsequent auditing and querying.

[0177] In this embodiment, after the state change is completed, the system generates a report "2025-11-1110:30:00, Zhang San (finance department) deletes the collection 'COL-001' from normal to the recycle bin, and synchronously moves the subordinate 4 resources, with no unfinished task", and pushes it to all managers (main administrator Zhang San and collaborative administrator Li Si), and updates the operation log.

[0178] Reference Figure 5 In one of the embodiments of the present embodiment, step S105 performs the corresponding digital media management operation based on the request type, the current state information, and the request parameter configuration, including steps S501 to S508.

[0179] Step S501: Extract the target portrait data, the comparison library identifier, and the comparison accuracy requirement corresponding to the portrait comparison operation request from the request parameter configuration.

[0180] Specifically, the request type includes a portrait comparison operation request; the target portrait data refers to the source of the portrait to be compared, including a user-uploaded picture file (such as "Li Qin (1).webp") and a system-stored portrait resource (such as portrait ID "FACE-001"); the comparison library identifier refers to the unique code of the target portrait library, and in the present embodiment, common portrait libraries include an employee portrait library (EMP-001) and an external visitor library (VIS-001) for specifying the data source for comparison; the comparison accuracy requirement refers to the comparison accuracy level selected by the user, which is divided into high accuracy (suitable for identity verification, such as employee attendance) and fast matching (suitable for batch screening, such as monitoring portrait retrieval), and the higher the accuracy, the greater the resource consumption.

[0181] Step S502: Based on the current state information, verify the state of the portrait library corresponding to the comparison library identifier.

[0182] Specifically, the portrait library state refers to the available state of the portrait library, including enabled and disabled, and the data integrity and update time also need to be verified; in the present embodiment, the system verifies the enabled state, data integrity, and update time of the comparison library based on the current state information to determine whether it is available, and only when the portrait library state, data integrity, and update time are all up to standard is it considered available.

[0183] Step S503: Query the enabled state, data integrity, and update time of the portrait library.

[0184] Specifically, in the embodiment, the enabled state refers to the use switch of the portrait library, the enabled state can perform comparison, and the disabled state cannot be used (for example, the visitor library is disabled due to expired data); the data integrity refers to the proportion of the number of portraits in the portrait library that have successfully extracted feature values to the total number of portraits, for example, 980 portraits have extracted features in the library of 1000 portraits, so the data integrity is 980 ÷ 1000 × 100% = 98%, and low integrity will lead to a decrease in comparison accuracy; the update time refers to the time when the portrait library last added / modified / deleted a portrait, which is used to determine whether the data is expired (for example, if the portrait of an employee who has left is not deleted, the comparison result will be incorrect).

[0185] Step S504: If the portrait library is in a disabled state, the data integrity is less than the integrity threshold, or the update time is more than the time threshold, return a prompt that the portrait library is not available, and suggest to enable / update the portrait library.

[0186] Specifically, in the embodiment, the integrity threshold refers to the minimum standard of the data integrity of the portrait library preset by the system, and the default threshold is 90%; if the threshold is lower, it means that a large number of portraits in the library have no feature values and cannot be compared normally; the time threshold refers to the data validity period of the portrait library preset by the system, and the default threshold is 30 days; if the update time is more than the threshold, it means that the data may be expired and needs to be updated (for example, add new employee portraits or delete portraits of employees who have left).

[0187] Step S505: If the portrait library is available, select the corresponding target comparison algorithm based on the comparison accuracy requirement.

[0188] Specifically, the target comparison algorithm refers to an algorithm used to perform portrait feature extraction and matching, in the embodiment, the target comparison algorithm is divided into two categories: deep learning algorithm (such as ResNet-50) and feature value hash algorithm (such as LBP) according to accuracy; among them, the deep learning algorithm has high accuracy (accuracy ≥ 95%) and high resource consumption, and is suitable for identity verification; the feature value hash algorithm has fast matching speed (100+ portraits per second) and low resource consumption, and is suitable for batch screening.

[0189] Step S506: Obtain the resource requirement parameters of the target comparison algorithm.

[0190] Specifically, in this embodiment, the resource requirement parameter refers to a system resource threshold required for target comparison algorithm execution, including CPU core number requirement, memory occupation requirement, and calculation time threshold. Among them, the CPU core number requirement refers to the minimum CPU core number requirement preset by the system for different operation types (such as portrait comparison, file compression, and batch label generation), which is used to ensure that the operation can be completed within a reasonable time and avoid task lag or timeout due to insufficient CPU resources; the memory occupation requirement refers to the minimum memory capacity required during operation execution, which is used to store temporary data (such as portrait feature vectors and file cache blocks) to avoid data writing to the disk (swap partition) due to insufficient memory, thereby reducing processing speed; and the calculation time threshold refers to the maximum allowed execution time preset by the system for various operations, which is used to determine whether the operation is timed out.

[0191] Step S507: Real-time collection of resource occupation data of the current system, and calculation of resource satisfaction degree based on the resource requirement parameter and the resource occupation data.

[0192] Specifically, the resource occupation data refers to the real-time resource usage of the system, including idle CPU core number, remaining memory capacity, and current running task number. Among them, the idle CPU core number refers to the number of CPU cores in the system that are not occupied by any task; the remaining memory capacity refers to the physical memory capacity of the system that is not used; the current running task number refers to the total number of tasks in the system that are in execution or waiting for resources, including user-initiated operations (such as file upload and portrait comparison) and system background tasks (such as log cleaning and index updating); and the resource satisfaction degree refers to an index (with a value of 0-1) quantifying the matching degree of system resources and algorithm requirements, which in this embodiment satisfies the following calculation formula:

[0193] R = α × (C 空闲 / C 需求 ) + β × (M 剩余 / M 需求 ) + γ × (1-T 当前 / T 阈值 )

[0194] Wherein, R is the resource satisfaction degree; α, β and γ are weight coefficients, and in this embodiment, α = 0.4, β = 0.3, and γ = 0.3; C 空闲 is the idle CPU core number; C 需求 is the CPU core number requirement; M 剩余 is the remaining memory capacity; M 需求 is the memory occupation requirement; and T 当前The average task time consumption of the current system is a core index for measuring system running efficiency and rationality of resource allocation, and refers to the average time (including resource waiting time + actual execution time) of a certain type of task from starting to completing within a statistical period (such as 1 hour or 1 day). The average task time consumption = the sum of the total time consumption of the same type of task within the statistical period ÷ the total number of the same type of task completed within the statistical period; T 阈值 The calculation time threshold.

[0195] Step S508: According to the resource satisfaction degree, the comparison operation is performed, and a comparison result is generated.

[0196] Specifically, in the embodiment, whether to perform the comparison operation is determined according to the resource satisfaction degree:

[0197] If R≥0.8, the portrait comparison task is directly started, sufficient resources are allocated, and the comparison is performed according to the selected algorithm;

[0198] If 0.5≤R<0.8, resource optimization scheduling is triggered: idle background services (such as temporary statistical services) in the system are closed, part of the memory is released, the priority of non-urgent tasks is lowered, and the comparison task is started after optimization;

[0199] If R<0.5, the comparison precision level (such as high precision→fast) is reduced or an asynchronous comparison mode is adopted: the comparison task is added to the task queue, a unique task identifier is generated and returned to the operation subject, and the comparison result is pushed through email / system message after the system resource is idle, wherein the comparison result refers to the final output of the portrait comparison, including the matching state (success / failure), the similarity, the matched portrait ID / name and the comparison time consumption, etc.

[0200] Reference Figure 6 In one embodiment of the embodiment, step S106 monitors the execution progress of the digital media management operation, the system resource occupation rate and the data consistency in real time, and generates operation feedback results including steps S601 to S608:

[0201] Step S601: Based on the request type, set the monitoring node based on the execution progress.

[0202] Specifically, in the embodiment, the monitoring node refers to the key check point divided according to the operation execution process, which is used to track the progress in real time. The monitoring nodes of different request types are different, for example, the monitoring nodes of file uploading are: checking file format→uploading data→checking file integrity→logging.

[0203] Step S602: Record the time stamp, operation execution state and corresponding system resource occupation rate at each monitoring node, and update the execution progress synchronously.

[0204] Specifically, in this embodiment, the timestamp refers to the precise time when the monitoring node is triggered; the operation execution status refers to the result of the node execution (success / failure / timeout); and the execution progress refers to the percentage of operation completion, and the calculation logic is: (the number of completed nodes / the total number of nodes) x 100%, for example, if 2 of 4 nodes are completed, the execution progress is 50%.

[0205] Step S603: Calculate the time interval between adjacent monitoring nodes, and if the time interval exceeds the preset timeout threshold of the corresponding node, mark the current node as a timeout node, and record the timeout duration and the change of the system resource occupancy rate before and after the node to form an execution progress abnormality record.

[0206] Specifically, in this embodiment, the time interval refers to the time difference between triggering of two adjacent monitoring nodes, for example, if the triggering time of node 1 is 10:30:00 and the triggering time of node 2 is 10:35:00, the time interval is 5 minutes; the timeout threshold refers to the maximum allowed time consumption preset for each monitoring node; the timeout duration refers to the part of the actual time interval exceeding the timeout threshold; and the execution progress abnormality record refers to a document recording the timeout node, the timeout duration and the resource change, which is used to analyze the timeout reason (such as slow uploading caused by resource overload).

[0207] Step S604: Analyze the system resource occupancy rate change amplitude based on the execution progress abnormality record.

[0208] Specifically, the resource occupancy rate change amplitude refers to the fluctuation proportion of the resource occupancy rate between adjacent nodes, and the calculation logic is:

[0209] |current node resource occupancy rate - last node resource occupancy rate| ÷ last node resource occupancy rate x 100%.

[0210] Step S605: If the system resource occupancy rate change amplitude exceeds the preset amplitude change threshold, mark it as a resource abnormality, and calculate the resource overload coefficient.

[0211] Specifically, in this embodiment, the amplitude change threshold refers to the upper limit of the resource occupancy fluctuation preset by the system, and the default threshold is 50%. If the threshold is exceeded, it means that the resource occupancy is unstable and affects the operation execution. The resource overload coefficient refers to an index quantifying the degree of resource overload (the value is ≥0), and the calculation logic is: (current resource occupancy rate - resource demand threshold) ÷ resource demand threshold. If the current occupancy rate is ≤ the resource demand threshold, the coefficient is 0. The larger the coefficient, the more serious the overload.

[0212] Step S606: Check the data consistency and determine whether there is data inconsistency.

[0213] Specifically, in this embodiment, data consistency refers to the integrity and accuracy of data before and after operation, for example, the hash value after file upload is consistent with the local file, and the portrait comparison result meets the standard logic, which is the core indicator to judge whether the operation is effective.

[0214] Step S607: If there is data inconsistency, mark it as data anomaly and record the data anomaly condition.

[0215] Specifically, in this embodiment, the data anomaly condition refers to the key information recording the data inconsistency, including operation type, target object ID, anomaly reason (such as hash value inconsistency, feature matching deviation) and difference between current data and standard data, which is used for subsequent troubleshooting and repair.

[0216] Step S608: Based on the execution progress, resource overload coefficient and data anomaly condition, generate operation feedback result.

[0217] Specifically, in this embodiment, the operation feedback result refers to the final execution report of the three dimensions of progress, resources and data, which is divided into execution success (progress 100%, no resource anomaly, data consistency), execution anomaly (progress less than 100% or resource / data anomaly), and execution timeout (existence of timeout node and timeout duration exceeding threshold), which is used for user to understand the operation result.

[0218] Reference Figure 7 In one of the embodiments of the present embodiment, step S606 verifies the data consistency and determines whether there is data inconsistency, including steps S701 to S707:

[0219] Step S701: Based on the request type, obtain the operation type.

[0220] Specifically, in this embodiment, the operation type refers to the operation category according to the request type, which is mainly divided into file operation (upload, download, modify, delete) and portrait operation (comparison, merge, label maintenance), and the data consistency verification methods of the two types of operations are different.

[0221] Step S702: If the operation type is file operation, obtain the current hash value of the file involved in the operation.

[0222] Specifically, in this embodiment, the hash value refers to the unique identifier of the file content, and in this embodiment, the MD5 hash value (128-bit string) is used by default. Any slight change in file content will cause the hash value to change, which is used to verify the file integrity. The current hash value refers to the hash value of the file calculated by the system after the file operation is completed, for example, after the file FILE-0036.jpg is uploaded, the MD5 value is calculated as "E41D2124A83312B2C1D6E7F8A9B0C1D2".

[0223] Step S703: comparing the current hash value with the preset original hash value.

[0224] Specifically, in the embodiment, the original hash value refers to a fixed-length string calculated by the system through a preset hash algorithm in the reference state of the file.

[0225] Step S704: if the current hash value is inconsistent with the original hash value, it is determined that there is data inconsistency.

[0226] Step S705: if the operation type is a portrait comparison operation, the feature matching data corresponding to the comparison result is obtained, and the feature matching data includes the number of feature point matches, the matching threshold, and the feature extraction timestamp.

[0227] Specifically, in the embodiment, the feature matching data refers to the core data in the portrait comparison process, which is used to verify the rationality of the comparison result, including the number of feature point matches, the matching threshold, and the feature extraction timestamp; the number of feature point matches refers to the number of feature point matches between the target portrait and the portrait in the library extracted by the comparison algorithm (such as 2048 feature points extracted by ResNet-50 algorithm, and 1800 matches); the matching threshold refers to the minimum feature point matching ratio for determining a successful match (such as 80%, that is, the number of matches ≥1638 (2048x80%) is determined to be successful); the feature extraction timestamp refers to the extraction time of the target portrait feature value (such as “2025-11-1009:30:00”), which is used to determine whether the feature value is expired.

[0228] Step S706: calling a preset matching logic verification model, and comparing the feature matching data with the standard matching logic of the corresponding reference feature in the feature library, and generating a comparison result.

[0229] Specifically, in the embodiment, the matching logic verification model refers to a built-in verification algorithm in the system, which stores the standard matching logic of different comparison algorithms, such as “ResNet-50 algorithm under 80% threshold, similarity 90% corresponds to matching number 1843”, which is used to determine whether the actual comparison result meets the standard; the reference feature refers to the standard feature data of the target matching portrait in the feature library, such as the reference feature point number 2048 and the standard matching threshold 80% of the employee Zhang San, which is the reference standard of the comparison result.

[0230] Step S707: if the number of feature point matches deviates from the standard logic calculation result by more than the allowed range, the matching threshold does not meet the preset rules, or the feature extraction timestamp exceeds the effective update period of the feature library, resulting in invalid reference features, it is determined that there is data inconsistency.

[0231] Specifically, in the embodiment, the allowed range refers to the maximum deviation (default ±5%) of the number of feature point matches and the standard logical calculation result, for example, the standard number of matches is 1843, the allowed range is 1751-1935, and if it exceeds, it means that the comparison result is abnormal; the matching threshold rule refers to the matching threshold which needs to match the algorithm type, such as the LBP algorithm threshold 70%, the ResNet-50 algorithm threshold 80%, and cannot be adjusted at will, otherwise it will cause the matching result to deviate; the feature library effective update period refers to the effective time of the reference feature (default 30 days), if the feature extraction timestamp exceeds 30 days, the reference feature may have been changed (such as the reference feature has been deleted after the employee leaves), which will cause the comparison result to be invalid.

[0232] In a second aspect, the application also discloses a digital media management system.

[0233] Referring to Figure 8 A digital media management system comprises:

[0234] A request acquisition module is configured to acquire an operation request of the digital media management system.

[0235] A request analysis module is configured to analyze the operation request, and extract a request type, operation subject permission information and request parameter configuration.

[0236] A permission verification module is configured to verify the matching degree between the operation subject permission information and the operation request based on a preset multi-level permission mapping rule, and generate a permission verification result containing a permission matching coefficient and a missing item identifier.

[0237] A state acquisition module is configured to acquire current state information of a target object if the permission verification result is matched.

[0238] An operation execution module is configured to execute a corresponding digital media management operation based on the request type, the current state information and the request parameter configuration.

[0239] A monitoring feedback module is configured to monitor the execution progress of the digital media management operation, the system resource occupancy rate and the data consistency in real time, and generate an operation feedback result.

[0240] A first processing module is configured to update the current state information of the target object, synchronize associated data and record a time-stamped operation log if the operation feedback result meets a preset completion condition.

[0241] A second processing module is configured to trigger a corresponding fault-tolerant processing mechanism based on a fault type if the operation feedback result does not meet the preset completion condition.

[0242] In a third aspect, the embodiments of the present application disclose an intelligent terminal, comprising a memory and a processor, the memory is used for storing a computer program capable of running on the processor, when the processor loads the computer program, a number medium management method in the above embodiments is executed.

[0243] In a fourth aspect, the embodiments of the present application disclose a computer readable storage medium, and the computer readable storage medium stores a computer program, when the processor loads the computer program, a number medium management method in the above embodiments is executed.

[0244] The above are preferred embodiments of the present application, not to limit the protection scope of the present application, therefore: all equivalent changes made according to the structure, shape, principle of the present application should be covered in the protection scope of the present application.

Claims

1. A digital media management method, characterized by, The method comprises the following steps: acquiring an operation request of a digital media management system; parsing the operation request to extract a request type, operation subject permission information, and request parameter configuration; based on a preset multi-level permission mapping rule, checking the matching degree of the operation subject permission information and the operation request, and generating a permission check result containing a permission matching coefficient and a missing item identifier; if the permission check result is matched, acquiring the current state information of the target object; based on the request type, the current state information, and the request parameter configuration, performing a corresponding digital media management operation; real-time monitoring of the execution progress, system resource occupation rate, and data consistency of the digital media management operation, and generating an operation feedback result; if the operation feedback result meets the preset completion condition, updating the current state information of the target object, synchronizing the associated data, and recording the operation log with a timestamp; if the operation feedback result does not meet the preset completion condition, triggering a corresponding fault tolerance processing mechanism based on the fault type; wherein, based on the preset multi-level permission mapping rule, checking the matching degree of the operation subject permission information and the operation request, and generating a permission check result containing a permission matching coefficient and a missing item identifier comprises: based on the request type of the operation request, determining the corresponding permission check dimension; extracting the role identifier, department identifier, special permission identifier, and authorized validity period from the operation subject permission information; based on the role identifier, querying the preset role permission library to obtain a set of basic permissions corresponding to the permission check dimension; based on the department identifier and the target object identifier, querying the department hierarchical relationship table and the set permission configuration table to determine the department association range of the operation subject and the department access restriction rule of the target object, and generating data access range permissions; based on the special permission identifier and the authorized validity period, supplementing a set of temporary permissions and filtering temporary permissions that exceed the validity period to generate a complete permission set; comparing the target permissions corresponding to the operation request with the complete permission set item by item to calculate the permission matching coefficient; if the permission matching coefficient is greater than or equal to a first coefficient threshold, a permission matching check result is generated; if the permission matching coefficient is less than the first coefficient threshold, a permission mismatching check result is generated, and the missing items and missing types are recorded; based on the department identifier and the target object identifier, querying the department hierarchical relationship table and the set permission configuration table to determine the department association range of the operation subject and the department access restriction rule of the target object, and generating data access range permissions comprises: based on the target object identifier, extracting the data classification label of the target object; based on the department identifier, querying the department hierarchical relationship table to determine the superior department, peer department, and subordinate department of the department where the operation subject is located, forming a department association range; querying the permission configuration table of the file set to which the target object belongs, and obtaining the department allowed list, the department prohibited list, and the associated business label; determining whether the department association range of the operation subject has an intersection with the department allowed list and is not in the department prohibited list; if there is an intersection and it is not in the prohibited list, checking the association between the data classification label of the target object and the associated business label of the department of the operation subject, and calculating the label association degree; If the label correlation degree is greater than or equal to the correlation degree threshold, it is determined that the data access range permission is allowed to access, and the access priority is marked; If the department correlation range has no intersection with the department allowed list, is in the prohibited list, or the label correlation degree is less than the correlation degree threshold, it is determined that the data access range permission is limited to access, and the limitation reason is marked and the applicable permission upgrade path is returned.

2. The method of claim 1, wherein, The request type includes a file collection state change request; Based on the request type, the current state information, and the request parameter configuration, the corresponding digital media management operation is executed, including: Extracting the target state corresponding to the file collection state change request from the request parameter configuration, and extracting the operation subject identity from the operation subject permission information; Based on the current state information, it is determined whether the current state is a changeable state; If the current state information is an unchangeable state, a state change failure prompt is returned, and the current limitation condition and the target state range that can be changed are output; If the current state information is a changeable state, the corresponding permission level is checked based on the operation subject identity, and it is determined whether the state change permission for the current state information is possessed; If the state change permission is possessed, the associated data of all files and subfolders under the target collection is obtained; If the target state is disabled, the access permissions of all files and subfolders under the target collection are synchronously updated to be visible only to managers, and the original attributes and associated data are preserved; If the target state is deleted, it is checked whether there is an unfinished task under the target collection; If there is an unfinished task, the state change operation is suspended, and the unfinished task is executed first, and then the change is restored; If there is no unfinished task, the target collection and subordinate files / folders are moved to the corresponding recycle bin, and the deletion time and operation subject information are recorded; After the state change operation is completed, a state change report is generated and pushed to all managers of the target collection, and the target collection operation log is updated.

3. The method of claim 1, wherein, The request type includes a portrait comparison operation request; Based on the request type, the current state information, and the request parameter configuration, the corresponding digital media management operation is executed, including: Extracting the target portrait data, comparison library identifier, and comparison accuracy requirement corresponding to the portrait comparison operation request from the request parameter configuration; Based on the current state information, the state of the portrait library corresponding to the comparison library identifier is checked; The enabled state, data integrity, and update time of the portrait library are queried; If the portrait library is in a disabled state, the data integrity is less than the integrity threshold, or the update time is more than the time threshold, a portrait library unavailable prompt is returned, and the portrait library is suggested to be enabled / updated; If the portrait library is available, the corresponding target comparison algorithm is selected based on the comparison accuracy requirement; The resource requirement parameters of the target comparison algorithm are obtained; The resource occupation data of the current system is collected in real time, and the resource satisfaction degree is calculated based on the resource requirement parameters and the resource occupation data; According to the resource satisfaction degree, the comparison operation is executed, and the comparison result is generated.

4. The method of claim 1, wherein, Real-time monitoring of the execution progress of the digital media management operation, the system resource occupation rate, and the data consistency, and generating an operation feedback result, including: Based on the request type, a monitoring node based on the execution progress is set; At each monitoring node, the timestamp, operation execution state, and corresponding system resource occupation rate are recorded, and the execution progress is synchronously updated; Calculate the time interval between adjacent monitoring nodes, if the time interval exceeds the preset timeout threshold of the corresponding node, mark the current node as a timeout node, and record the timeout duration and the change of system resource occupancy rate before and after the node, forming an execution progress exception record; Based on the execution progress exception record, analyze the system resource occupancy rate change amplitude; If the system resource occupancy rate change amplitude exceeds the preset amplitude change threshold, mark it as a resource exception, and calculate the resource overload coefficient; Check the data consistency and determine whether there is data inconsistency; If there is data inconsistency, mark it as a data exception and record the data exception condition; Based on the execution progress, resource overload coefficient and data exception condition, generate an operation feedback result.

5. The method of claim 4, wherein, The data consistency is checked, and whether there is data inconsistency includes: Based on the request type, get the operation type; If the operation type is file operation, get the current hash value of the file involved in the operation; Compare the current hash value with the preset original hash value; If the current hash value is inconsistent with the original hash value, it is determined that there is data inconsistency; If the operation type is portrait comparison operation, get the feature matching data corresponding to the comparison result, which includes the number of feature point matches, the matching threshold and the feature extraction timestamp; Call the preset matching logic verification model, and compare the feature matching data with the standard matching logic of the corresponding reference feature in the feature library, and generate the comparison result; If the number of feature point matches deviates from the standard logic calculation result by more than the allowed range, the matching threshold does not conform to the preset rules, or the feature extraction timestamp exceeds the effective update period of the feature library, resulting in invalid reference features, it is determined that there is data inconsistency.

6. A digital media management system, characterized by It includes: Request acquisition module, used for acquiring operation request of digital media management system; Request analysis module, used for analyzing operation request, extracting request type, operation subject permission information and request parameter configuration; Permission verification module, used for verifying the matching degree of operation subject permission information and operation request based on preset multi-level permission mapping rules, generating permission verification result containing permission matching coefficient and missing item identifier; State acquisition module, if the permission verification result is matched, the state acquisition module is used to acquire the current state information of the target object; Operation execution module, used for executing corresponding digital media management operation based on request type, current state information and request parameter configuration; Monitoring feedback module, used for real-time monitoring of execution progress, system resource occupancy rate and data consistency of digital media management operation, generating operation feedback result; First processing module, if the operation feedback result meets the preset completion condition, the first processing module is used to update the current state information of the target object, synchronize the associated data and record the operation log with timestamp; Second processing module, if the operation feedback result does not meet the preset completion condition, the second processing module is used to trigger the corresponding fault tolerance processing mechanism based on fault type; Wherein, based on the preset multi-level permission mapping rules, the matching degree of operation subject permission information and operation request is verified, and the permission verification result containing permission matching coefficient and missing item identifier is generated, which includes: Determine the corresponding authority verification dimension based on the request type of the operation request; Extract the role identifier, department identifier, special authority identifier, and authorization validity period in the operation subject authority information; Query the preset role authority library based on the role identifier to obtain the basic authority set corresponding to the authority verification dimension; Query the department hierarchical relationship table and the set authority configuration table based on the department identifier and the target object identifier to determine the department association range of the operation subject and the department access restriction rules of the target object, and generate data access range authority; Based on the special authority identifier and the authorization validity period, supplement the temporary authority set and filter the temporary authorities that exceed the validity period to generate a complete authority set; Compare the target authority corresponding to the operation request with the complete authority set item by item, and calculate the authority matching coefficient; If the authority matching coefficient is greater than or equal to the first coefficient threshold, generate the verification result of authority matching; If the authority matching coefficient is less than the first coefficient threshold, generate the verification result of authority mismatch, and record the authority missing items and missing types; Query the department hierarchical relationship table and the set authority configuration table based on the department identifier and the target object identifier to determine the department association range of the operation subject and the department access restriction rules of the target object, and generate data access range authority, including: Extract the data classification label of the target object based on the target object identifier; Query the department hierarchical relationship table based on the department identifier to determine the superior department, peer department, and subordinate department of the department where the operation subject is located, forming a department association range; Query the authority configuration table of the file set to which the target object belongs, and obtain the department allowed list, department prohibited list, and associated business label; Determine whether the department association range of the operation subject intersects with the department allowed list and is not in the department prohibited list; If there is an intersection and it is not in the prohibited list, verify the association between the data classification label of the target object and the associated business label of the department of the operation subject, and calculate the label association degree; If the label association degree is greater than or equal to the association degree threshold, determine that the data access range authority is allowed to access, and mark the access priority; If the department association range has no intersection with the department allowed list, is in the prohibited list, or the label association degree is less than the association degree threshold, determine that the data access range authority is restricted access, mark the restriction reason, and return the applicable authority upgrade path.

7. A smart terminal comprising a memory, a processor, characterized in that, A memory for storing a computer program capable of running on a processor, when the processor loads the computer program, the method of any one of claims 1-5 is executed.

8. A computer-readable storage medium having stored therein a computer program, the computer-readable storage medium being characterized by, The computer program is loaded by the processor, and the method of any one of claims 1-5 is executed.

Images