A security education digital management system based on multi-dimensional permission management and control
The multi-dimensional access control-based digital management system for safety education has solved the problems of low training efficiency and manual certificate generation in enterprise safety education and training, and has achieved digital closed-loop management and improved accuracy of the entire training process.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- NORTHWEST ENGINEERING CORPORATION LIMITED
- Filing Date
- 2026-04-16
- Publication Date
- 2026-07-17
AI Technical Summary
Existing enterprise safety education and training systems lack digital closed-loop management, resulting in low training efficiency, untimely information synchronization, inability to accurately distribute training content according to trainees' job attributes, reliance on manual operation for certificate generation which is prone to errors, and inability to automatically link with course learning outcomes.
The security education digital management system adopts multi-dimensional access control. Through the initialization configuration module, multi-dimensional access information is established; the knowledge management module accurately publishes courses; the examination management module automatically generates examination results; the certificate management module automatically generates digital certificates; and the statistical analysis module performs data analysis to achieve digital closed-loop management of the entire training process.
It has achieved digital closed-loop management of the entire training process, improved the matching and accuracy of training content, reduced human error, and enhanced training efficiency and the standardization and traceability of certificates.
Smart Images
Figure CN122414540A_ABST
Abstract
Description
Technical Field
[0001] This disclosure relates to the field of management system technology, and in particular to a security education digital management system based on multi-dimensional access control. Background Technology
[0002] Currently, enterprises generally use a traditional method combining offline centralized lectures and paper-based examinations when conducting safety education and training, which suffers from low efficiency and extensive management. Although some online learning platforms or examination systems have been put into use, their functions are relatively independent and have failed to build a digital closed loop covering the entire training process.
[0003] Some companies have begun to introduce online learning platforms or examination systems, but the existing systems have relatively limited functions and are not interconnected, failing to form a digital closed loop covering the entire training process. Manual switching between multiple systems is still required, leading to untimely information synchronization and potential omissions or errors. Furthermore, there is a lack of resource delivery mechanisms based on job attributes or organizational structure, preventing the accurate distribution of training content according to trainees' job positions, departments, and other attributes. Moreover, most systems still rely on administrators manually designing certificate templates, entering information, and outputting files, which is inefficient, error-prone, and lacks automatic linking of certificates to course learning outcomes, making traceability and verification difficult. Summary of the Invention
[0004] To overcome the problems existing in related technologies, this disclosure provides a digital management system for safety education based on multi-dimensional access control, which realizes digital closed-loop management of the entire training process. It can accurately control the release of courses based on the multi-dimensional access information of trainees, and automatically generate digital certificates when preset conditions are met, thereby effectively improving the accuracy and efficiency of enterprises in the process of safety education and training.
[0005] According to a first aspect of the present disclosure, a security education digital management system based on multi-dimensional access control is provided, the system including an initialization configuration module, a knowledge management module, an examination management module, a certificate management module, and a statistical analysis module; The initialization configuration module is used to establish multi-dimensional permission information based on the initialization configuration information. The multi-dimensional permission information includes the correspondence between user identifier, job identifier, job group identifier and permission information. The knowledge management module is used to determine course publishing information based on the course creation information; determine target users based on the course creation information and the multi-dimensional permission information, and publish the course publishing information to the target users; and determine the target users' learning progress of the course. The examination management module is used to determine the test paper data according to the question distribution information corresponding to the course number of the course; send the test paper data to the target user, and determine the examination result data based on the target user's answer data, wherein the examination result data includes at least the examination score; The certificate management module is used to generate a digital certificate based on the target user's name, course name, course number, exam score, and exam date when the target user's course learning progress meets the preset learning conditions and the exam score meets the preset passing conditions. The statistical analysis module is used to determine the target display data based on the course learning progress and the exam result data.
[0006] In one exemplary embodiment of this disclosure, the course creation information further includes course permission information; the knowledge management module is specifically used for: Obtain courseware retrieval information and filter out target courseware corresponding to the courseware retrieval information from a preset courseware library; the courseware retrieval information includes keyword information or classification information; The course publishing information is obtained by associating and mapping the course creation information with the target courseware.
[0007] In one exemplary embodiment of this disclosure, the knowledge management module is further configured to: Update the multi-dimensional permission information based on the course permission information in the course creation information; The target user is determined based on the multi-dimensional permission information, and the course release information is sent to the target user; wherein the target user has access to the course release information.
[0008] In one exemplary embodiment of this disclosure, the knowledge management module is further configured to: Determine at least one of the following course learning records for the target user: completion time, learning duration, course learning progress, and completion status.
[0009] In one exemplary embodiment of this disclosure, the examination management module is specifically used for: Based on the question distribution information, question type information, difficulty information, knowledge point classification information, and score information are determined, and three-dimensional question distribution data is determined according to the question type information, difficulty information, knowledge point classification information, and score information; wherein, the row dimension in the three-dimensional question distribution data is used to represent the knowledge point classification information, the column dimension is used to represent the difficulty information, and the depth dimension is used to represent the question type information, and the data elements in the three-dimensional question distribution data are used to represent the question set, the question set containing question identifiers and score information; When a manual test paper generation instruction is received, the test paper data is generated based on the filtering results of the target questions in the question set; When a random test paper generation instruction is received, the target questions are randomly selected from the question set in the three-dimensional test paper distribution data according to the preset question type, preset knowledge point type, preset difficulty ratio, preset number of questions and preset score, and the test paper data is generated.
[0010] In one exemplary embodiment of this disclosure, the examination management module is specifically used for: Assign an exam number and an access token to the target user; Determine the exam configuration information, which includes at least one of the following: exam duration, exam time period, and exam result configuration. When the target user enters the examination process, the target user is authenticated based on the examination number and the access token. If the authentication is successful, the examination paper data is sent to the target user, and the examination configuration information is executed.
[0011] In one exemplary embodiment of this disclosure, the examination management module is further configured to: Monitor the answering behavior data of the target user, wherein the answering behavior data includes at least one of the following: page focus state, screen switching frequency, and changes in the examination terminal device; If abnormal behavior is detected in the answer behavior data, an abnormal prompt message is sent to the target user or the exam task corresponding to the target user is terminated.
[0012] In one exemplary embodiment of this disclosure, the certificate management module is specifically used for: If the target user's course learning progress is greater than or equal to a preset progress threshold, and the exam score is greater than or equal to a preset passing threshold, then obtain the certificate configuration template and determine the certificate number corresponding to the target user. The digital certificate is obtained by filling the user's name, certificate number, course completion time, exam date, course name, and exam score into the preset positions of the certificate configuration template.
[0013] In one exemplary embodiment of this disclosure, the certificate management module is further configured to: Calculate the digest value of the digital certificate, and perform encryption operations on the digest value based on a preset key to generate a digital signature; Write the digital signature into the signature field corresponding to the digital certificate.
[0014] In one exemplary embodiment of this disclosure, the statistical analysis module is specifically used for: Calculate and display at least one of the following metrics for target users across a preset time frame: number of learners, average learning completion rate, average learning duration, and exam pass rate.
[0015] The technical solutions provided by the embodiments of this disclosure may include the following beneficial effects: In this embodiment, the safety education digital management system based on multi-dimensional permission control provided by this disclosure completes course publishing, learning progress collection, examination organization, grade evaluation, certificate generation, and result analysis through a unified system architecture. This avoids data loss and repetitive operations caused by fragmented multi-platform systems, achieving digital closed-loop management of the entire training process. By establishing a multi-dimensional permission correspondence covering user identifiers, positions, and position groups, course content can be accurately pushed according to organizational structure and job responsibilities, improving the matching degree of training content. Certificate generation is triggered based on the dual conditions of learning progress and examination results, and necessary certification information is automatically filled in, so that the certificate can be directly bound to the course results, reducing delays and errors caused by manual production, improving the standardization and traceability of certificate issuance, and effectively improving the accuracy and efficiency of enterprises in the safety education and training process.
[0016] It should be understood that the above general description and the following detailed description are exemplary and explanatory only, and are not intended to limit this disclosure. Attached Figure Description
[0017] The accompanying drawings, which are incorporated in and form part of this disclosure, illustrate embodiments consistent with this disclosure and, together with the description, serve to explain the principles of this disclosure.
[0018] Figure 1 This disclosure is a schematic diagram illustrating the structure of a security education digital management system based on multi-dimensional access control, according to an exemplary embodiment.
[0019] Figure 2 This is a hardware structure diagram of the computer device housing the security education digital management system based on multi-dimensional permission control, according to an embodiment of this disclosure. Detailed Implementation
[0020] Exemplary embodiments will now be described in detail, examples of which are illustrated in the accompanying drawings. When the following description relates to the drawings, unless otherwise indicated, the same numerals in different drawings denote the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with this disclosure. Rather, they are merely examples of apparatuses and methods consistent with some aspects of this disclosure as detailed in the appended claims.
[0021] The terminology used in this disclosure is for the purpose of describing particular embodiments only and is not intended to be limiting of the disclosure. The singular forms “a,” “the,” and “the” as used in this disclosure and the appended claims are also intended to include the plural forms unless the context clearly indicates otherwise. It should also be understood that the term “and / or” as used herein refers to and includes any and all possible combinations of one or more of the associated listed items.
[0022] It should be understood that although the terms first, second, third, etc., may be used in this disclosure to describe various information, such information should not be limited to these terms. These terms are used only to distinguish information of the same type from one another. For example, without departing from the scope of this disclosure, first information may also be referred to as second information, and similarly, second information may also be referred to as first information. Depending on the context, the word "if" as used herein may be interpreted as "when," "when," or "in response to determination."
[0023] The embodiments of this disclosure will now be described in detail.
[0024] like Figure 1 As shown, Figure 1 This disclosure is a schematic diagram of the structure of a security education digital management system based on multi-dimensional access control, according to an exemplary embodiment, including an initialization configuration module 110, a knowledge management module 120, an examination management module 130, a certificate management module 140, and a statistical analysis module 150.
[0025] The initialization configuration module 110 can be used to receive initialization configuration information and establish multi-dimensional permission information based on the initialization configuration information. This multi-dimensional permission information includes the correspondence between user identifiers, job identifiers, job group identifiers, and permission information.
[0026] In some embodiments, the digital management system for safety education can receive initial configuration information through interface input or batch import. This initial configuration information may include user basic data, job configuration data, and permission allocation data. The user basic data may include fields such as user identifier, user name, user employee number, job identifier, and job group identifier. The job configuration data may include the correspondence between job identifiers and job names, as well as the affiliation between jobs and job groups, such as fields such as job identifier, job name, and job group identifier for different jobs. The permission allocation data may include permission information corresponding to different users, different jobs, and different job groups. For example, different users may have different exam participation permissions and certificate viewing permissions; different jobs may have different course access permissions; and different job groups may have different system management permissions. For instance, if a job group is an administrator, it may have permissions such as course creation, exam management, certificate generation, and data statistics. If a job group is a regular student, it may not have system management permissions such as course creation and exam management.
[0027] In some embodiments, multi-dimensional permission information, including the correspondence between user identifiers, job identifiers, job group identifiers, and permission information, can be generated based on user basic data, job configuration data, and permission allocation data. This permission information may include at least one of the following: course access permission, exam participation permission, certificate viewing permission, and system management permission. As an example, each user can be traversed to obtain their user identifier, their assigned job identifier, and their job group identifier. The corresponding permission configurations for each of these three identifiers in the permission allocation data can then be found, and after aggregation and deduplication, a comprehensive permission set for the user can be formed. Based on this comprehensive permission set, a multi-dimensional permission data model can be constructed. For example, the user identifier can be used as the first dimension, the permission type in the comprehensive permission set as the second dimension, and the corresponding permission status (e.g., permission granted, no permission granted) as the attribute value at the intersection of the two dimensions, thereby combining them to obtain structured multi-dimensional permission information.
[0028] By constructing multi-dimensional permission information based on initial configuration information, it is possible to achieve hierarchical management of user permissions, and to achieve refined management of teaching resources based on the permission hierarchy of different users.
[0029] The knowledge management module 120 can be used to determine course publishing information based on the course creation information; identify target users based on the course creation information and multi-dimensional permission information; publish the course publishing information to the target users; and determine the target users' learning progress of the course. Course creation information includes at least one of the following: course number, course name, course category, course hours, and course permission information. This course can be a safety education course, such as a company's safety production training course, safe operation training, high-risk operation training, emergency drill training, etc. Specific courses can be determined according to actual circumstances, and this disclosure does not impose any special limitations.
[0030] In some embodiments, the knowledge management module 120 can obtain course creation information, which includes at least one of the following: course number, course name, course category, course hours, and course permission information. The knowledge management module 120 can perform integrity checks on the fields in the obtained course creation information to ensure information integrity.
[0031] In some embodiments, the knowledge management module 120 can configure the courseware resources for the course. All courseware can be stored in a preset courseware library, and the classification information corresponding to each courseware can be recorded. The system can receive and obtain courseware retrieval information from the administrator and filter target courseware corresponding to that retrieval information from the preset courseware library. This retrieval information may include keyword information or classification information; that is, the system supports retrieving courseware resources from the preset courseware library based on classification information or keyword information. If the retrieval information is classification information, a set of candidate courseware corresponding to that classification information can be returned; if the retrieval information is keyword information, fuzzy matching based on the courseware name or the courseware content summary can be performed to return a set of candidate courseware containing keyword information. The system can further receive and obtain at least one target courseware corresponding to the course selected by the administrator from the candidate courseware set, and adjust the order in response to a drag-and-drop action to obtain the target courseware after order adjustment. This target courseware may include video courseware and document courseware.
[0032] After completing the above operations, the course creation information and target courseware can be associated and mapped to generate structured course publishing information. This enables accurate identification of the multi-dimensional permissions associated with a course in a multi-user, multi-position environment, thereby achieving unified management of course resources for users with different permissions.
[0033] In some embodiments, course permission information can be obtained from the course creation information. This course permission information may include the visibility scope and operation permissions of the course. Specifically, when creating course creation information, users under certain positions or position groups can be pre-configured to access the course and their corresponding operation permissions. For example, a course on high-voltage electrical work procedures may be only open to specific electrician position groups, and configurations may be made regarding whether participation in the exam, viewing exam results, or downloading certificates are allowed. Existing multi-dimensional permission information can be updated based on this course permission information, binding the access permissions between the course creation information and the corresponding user identifier, position identifier, and position group identifier.
[0034] In some embodiments, the updated multidimensional permission information can be traversed to obtain the target user corresponding to the course creation information. This target user is a user with access rights to the course number corresponding to the course creation information. The course publishing information is then sent to this target user, specifically to their corresponding learning platform, such as a mobile learning platform, a web platform, or a WeChat mini-program. Through multidimensional permission mapping, course content can be accurately pushed to users with different organizational structures and positions, improving the efficiency and accuracy of course publishing.
[0035] In some embodiments, during the course publishing process, the system can also verify whether the basic course information and target courseware are complete to determine if the preset publishing conditions are met. If the verification passes, the course is pushed to the target user's learning interface; if the verification fails, a message indicating missing fields or errors is displayed, and course publishing is blocked. This ensures that courses are only allowed to be published if the information is complete and meets the preset conditions, effectively preventing problems caused by omissions, errors, or non-standard configurations that prevent students from learning the course properly, thus improving the reliability of course publishing.
[0036] In some embodiments, the access time, learning progress, and completion status of a target user's access to a course on the learning platform can be monitored. Specifically, this includes: recording the access time and generating a learning record when a user enters a course; generating a complete course learning record when a preset time threshold is reached or the course is fully played. This course learning record can include at least one of the following: learning completion time, learning duration, course learning progress, and completion status. The learning completion time can represent a timestamp indicating the completion of all learning tasks in the course; the learning duration can represent the effective time the target user has spent learning the course; the course learning progress can represent the percentage of time the user has completed learning the course; and the completion status can include "not completed" and "completed." This enables the tracking and quantification of user learning behavior, providing a data foundation for subsequent course completion determination, exam eligibility assessment, and statistical analysis.
[0037] The exam management module 130 is used to determine the exam paper data based on the question distribution information corresponding to the course number; send the exam paper data to the target user; and determine the exam result data based on the target user's answer data; the exam result data includes at least the exam score.
[0038] In some embodiments, the examination management module 130 can obtain corresponding question distribution information from a preset question bank based on the course number. This question distribution information may include question type information, difficulty information, knowledge point classification information, and score information for each type of question corresponding to the course number. Each question in the question bank contains a unique question identifier, question stem, options, and correct answer, and is bound to the aforementioned attribute tags such as question type information, difficulty information, knowledge point classification information, and score information.
[0039] The three-dimensional test item distribution data can be determined based on the question type information, difficulty information, knowledge point classification information, and score information. Specifically, the row dimension of this three-dimensional test item distribution data represents knowledge point classification information, the column dimension represents difficulty information, the depth dimension represents question type information, and the data elements in the three-dimensional test item distribution data represent a set of questions, which includes question identifiers and score information.
[0040] As an example, knowledge point classification information, such as different types of knowledge points like laws and regulations, and job specifications, can be used as the row dimension; difficulty information, such as easy, medium, and difficult questions, can be used as the column dimension; and question type information, such as multiple choice, true / false, and fill-in-the-blank questions, can be used as the depth dimension, thus constructing a structured three-dimensional test question distribution data. In this three-dimensional test question distribution data, the intersection of the above three dimensions constitutes the corresponding data elements, and each data element corresponds to a specific set of questions. For example, the data element "Laws and Regulations (row dimension) - Difficult Questions (column dimension) - Multiple Choice Questions (depth dimension)" contains the question identifiers and score information of all questions that meet these three intersection attributes.
[0041] This multi-dimensional information cross-mapping method transforms the question bank into a three-dimensional data structure with high-dimensional indexing capabilities. During subsequent random question generation, there's no need to traverse the entire question bank; the system can directly and accurately locate the target data element and extract the question based on preset conditions, improving the efficiency and flexibility of subsequent question generation.
[0042] When determining the test paper data, corresponding test paper data can be constructed based on manual test paper assembly instructions or random test paper assembly instructions. When a manual test paper assembly instruction is received, the examination management module 130 can display the above-mentioned three-dimensional test question distribution data as the display data of the question bank to the administrator. The administrator can locate the corresponding data element by selecting the knowledge point, difficulty, and question type nodes, and combine them based on the administrator's selection results of the target questions in the question set corresponding to the data element to generate structured test paper data.
[0043] Upon receiving a random test paper generation instruction, the exam management module 130 can slice the three-dimensional test paper distribution data according to preset question types and preset knowledge point types, filtering out irrelevant row and depth dimensions to obtain a target question type set. Based on preset difficulty ratios (e.g., 40% easy, 40% medium, 20% difficult) and a preset number of questions, it calculates the number of questions to be extracted at each difficulty level. Random questions are then extracted according to the calculated number at each difficulty level, with deduplication verification performed during the extraction process to ensure the uniqueness of the target questions. The extracted target questions can be combined with preset scores for total score verification. After verification, the target questions are merged in a preset order to generate the final test paper data. This test paper data includes question stems, options, correct answers, and score configurations. After obtaining the test paper data, it can be associated with the test paper data, course number, and target user for scheduling, loading, and distribution during the examination process. The preset question types, preset knowledge point types, preset difficulty ratios, preset number of questions, preset scores, preset order, etc., can be determined according to the actual situation, and this disclosure does not impose any special restrictions.
[0044] By determining the test paper data based on the three-dimensional test question distribution data, we can achieve efficient test paper generation while ensuring the proportion of knowledge points and difficulty levels, reducing computing power consumption and computational delay, and making the system practical and universal.
[0045] In some embodiments, the examination management module 130 can be used to issue examination tasks to target users, verify target users before the examination begins, and execute configuration constraint control during the examination.
[0046] Before distributing exam data to target users, the exam management module 130 can assign a unique exam number and access token to each target user. The exam number identifies the exam task, while the access token authenticates the target user. This ensures accurate assignment and security of exam tasks, preventing impersonation, unauthorized access, and other problems.
[0047] The exam management module 130 can obtain exam configuration information, which can be pre-configured by the administrator and may include at least one of the following: exam duration, exam time period, and exam result configuration. Specifically, exam duration represents the total time from the start of the exam to automatic submission; exam time period represents the allowed time range for entering the exam process; and exam result configuration allows setting whether the exam results are immediately visible to the target user after the exam ends, or whether they are displayed to the target user only after administrator review.
[0048] When a target user enters the examination process, the examination management module 130 receives the examination number and access token entered by the target user. It then verifies the user's identity by comparing this information with pre-stored examination task information in the database. If verification is successful, the module loads the corresponding exam paper data for the target user, enters the formal examination page, and automatically executes the corresponding examination configuration information. For example, if the examination duration is 60 minutes, the timer can start at the beginning of the examination and the answer sheet can be automatically submitted at the end of the time limit. If the examination results are configured to be non-public, the user cannot immediately view their score after the examination; the examination management module 130 only returns the examination result data to the administrator. The system can automatically perform countdown and timed submission operations during the examination, achieving fully automated management from entering the examination to submitting the answer sheet, reducing manual intervention and improving examination organization efficiency.
[0049] In some embodiments, during the examination, the examination management module 130 can record the user's answer data and answer behavior data. The answer data may include the content of the answer to each question, the timestamp of the answer, etc.; the answer behavior data may include at least one of the following: page focus state, screen switching frequency, and changes in the examination terminal device. The page focus state indicates whether the examination page is currently in focus, such as whether it is minimized or obscured by other windows; the screen switching frequency indicates the frequency with which the user switches from the examination interface to other applications or browser tabs per unit of time; the changes in the examination terminal device indicate whether the examination terminal changes during the examination, such as a sudden change in network address, browser change, or device identifier change.
[0050] If the exam management module 130 detects abnormal behavior in the answering behavior data, it can issue an abnormality prompt message to the target user or suspend the exam task corresponding to the target user. Specifically, if a change in page focus is detected, an abnormality prompt message can be issued to the target user; if the screen switching frequency exceeds a preset threshold, or if a change in terminal device is detected, it can be determined that the exam session poses a cheating risk, and the exam task corresponding to the target user can be suspended. The abnormality prompt message can be sent to the exam interface where the target user is located, indicating the abnormal behavior and issuing a warning; suspending the exam task corresponding to the target user can be achieved by freezing the exam interface. The exam management module 130 can generate an abnormal behavior log along with the abnormal behavior data and the reason for suspension, for administrators to use for subsequent review, statistics, or appeal processing. By setting behavioral rules such as focus changes, screen switching frequency, and device changes, potential cheating behaviors can be automatically identified. Once an abnormal situation is identified, an alarm can be triggered or the exam can be suspended, effectively preventing abnormal operations and improving the fairness and credibility of online exams.
[0051] In some embodiments, the exam management module 130 can automatically submit answer data after the target user completes the exam task or reaches the exam time limit.
[0052] In some embodiments, after obtaining the target user's answer data, the examination management module 130 can also evaluate the target user's answer data according to preset evaluation rules, calculate scores, and generate corresponding examination result data. This examination result data may include at least the examination score, and may also include information such as course number, user identifier, detailed question scores, grade level, and examination date. This can save a significant amount of manual grading and result statistics work.
[0053] Through the above methods, the exam management module 130 can achieve automated and complete exam process management, from question extraction to exam paper delivery and score generation.
[0054] The certificate management module 140 can generate a digital certificate based on the target user's name, course name, exam score, and exam date when the target user's course learning progress meets the preset learning conditions and the exam score meets the preset passing conditions.
[0055] In some embodiments, if the target user's course learning progress is greater than or equal to a preset progress threshold, and the exam score is greater than or equal to a preset passing threshold, then a certificate configuration template is obtained. The preset progress threshold and preset passing threshold can be set according to specific circumstances; for example, the preset progress threshold can be set to 100%, and the preset passing threshold can be set to 60 points. The certificate configuration template can include information such as a certificate background image configuration, certificate title, main text content, background text content, issuing institution information, seal information, and issuance date. The certificate background image configuration can include visual background settings such as borders and badges. The certificate title can include graduation certificate, qualification certificate, job training certificate, etc. The main text content can include preset standardized text content, including placeholders in preset positions for filling in the target user's name, certificate number, course completion time, exam date, course name, and exam score. The background text content can include additional explanatory text such as issuance statements and legal clauses. The issuing institution information can include the institution name, department, and responsible person's signature information. The seal information can be the issuing institution's seal image element. By automatically triggering the certificate generation process and dynamically filling in personalized fields based on preset certificate configuration templates, the generation of digital certificates is automated and flexible.
[0056] In some embodiments, a unique certificate number corresponding to each target user can be generated according to a preset numbering and coding rule. For example, the certificate number can be obtained by combining the issuance date, the target user's user ID, or the course number. This ensures that each certificate has a unique identifier, facilitating subsequent management, traceability, and querying.
[0057] In some embodiments, a digital certificate can be signed after generation to improve its anti-counterfeiting and verifiability. A preset hash algorithm, such as SHA-256, can be used to calculate the digest of the digital certificate's file content, yielding a digest value. This digest value uniquely represents all the content data of the current digital certificate. Further, an encryption operation can be performed on the digest value based on a preset key, such as a preset private key, to obtain a corresponding digital signature. This digital signature can be used as a reverse lookup and authentication credential during digital certificate distribution and verification; the generated digital signature can be written into the signature field of the digital certificate file. During subsequent certificate verification, the signature field in the digital certificate can be extracted to obtain the digital signature, and the digest value can be recalculated on the digital certificate's file content. Then, the digital signature in the signature field is decrypted using a preset public key. If the decrypted digest value matches the recalculated digest value, the digital certificate verification is successful; if the decrypted digest value does not match the recalculated digest value, the digital certificate verification fails, and the digital certificate can be determined to be forged or tampered with. This achieves the immutability of the certificate content, and by comparing the digest value using the public key during verification, forgery and tampering can be effectively prevented. The preset key, preset private key, and preset public key can be determined according to the actual situation, and this disclosure does not impose any special restrictions.
[0058] In some embodiments, after generating a digital certificate, the certificate management module 140 can also send the digital certificate to the target user and record the issuance information of the digital certificate. The certificate management module 140 can also support exporting the digital certificate as a PDF (Portable Document Format) file for easy archiving, printing, or online verification by the user.
[0059] The certificate management module 140 enables an integrated process for digital certificates, from generation and recording to querying and exporting, thereby improving the automation and standardization of digital certificate management.
[0060] The statistical analysis module 150 is used to determine the target display data based on the course learning progress and exam results data.
[0061] In some embodiments, at least one of the following target data can be calculated for each course within a preset time dimension: the number of learners, average completion rate, average study time, and exam pass rate. The preset time dimension can be set by the administrator, such as this week, this month, or this year; the number of learners can represent the number of target users who have logged in and studied the course within the preset time dimension; the average completion rate can represent the average course learning progress of all target users within the preset time dimension; the average study time can represent the average study time of all target users within the preset time dimension; and the exam pass rate can represent the percentage of target users whose exam scores exceed a preset passing threshold within the preset time dimension who complete the course exam. This allows administrators to comprehensively understand user learning outcomes and improve course evaluation efficiency.
[0062] The statistical analysis module 150 can also construct statistical charts based on the number of learners, average completion rate, average learning duration, and exam pass rate for target users, and display detailed statistical details in list format. Furthermore, it supports exporting statistical charts and detailed lists to Excel files for later archiving or external reporting. This allows administrators to more intuitively identify course learning progress, improve data reuse efficiency, and reduce manual processing costs.
[0063] Corresponding to the embodiments of the aforementioned systems, this disclosure also provides embodiments of the terminals to which they are applied.
[0064] This disclosed embodiment of a security education digital management system based on multi-dimensional access control can be applied to computer devices, such as servers or terminal devices. The device embodiment can be implemented through software, hardware, or a combination of both. Taking software implementation as an example, as a logical device, it is formed by its processor reading the corresponding computer program instructions from non-volatile memory into memory for execution. From a hardware perspective, such as... Figure 2 The diagram shown is a hardware structure diagram of a computer device housing the security education digital management system based on multi-dimensional access control, according to an embodiment of this disclosure. Except for... Figure 2 In addition to the processor 210, memory 230, network interface 220, and non-volatile memory 240 shown, the server or electronic device on which the security education digital management system 231 based on multi-dimensional permission control is located in the embodiment may also include other hardware depending on the actual function of the computer device, which will not be described in detail here.
[0065] The implementation process of the functions and roles of each module in the above system is detailed in the implementation process of the corresponding steps in the above method, and will not be repeated here.
[0066] The foregoing has described specific embodiments of this disclosure. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps recited in the claims may be performed in a different order than that shown in the embodiments and may still achieve the desired results. Furthermore, the processes depicted in the drawings do not necessarily require the specific or sequential order shown to achieve the desired results. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.
[0067] Other embodiments of this disclosure will readily occur to those skilled in the art upon consideration of the specification and practice of the invention applied herein. This disclosure is intended to cover any variations, uses, or adaptations of this disclosure that follow the general principles of this disclosure and include common knowledge or customary techniques in the art not claimed herein. The specification and examples are to be considered exemplary only, and the true scope and spirit of this disclosure are indicated by the following claims.
[0068] It should be understood that this disclosure is not limited to the precise structures described above and shown in the accompanying drawings, and various modifications and changes can be made without departing from its scope. The scope of this disclosure is limited only by the appended claims.
[0069] The above description is merely a preferred embodiment of this disclosure and is not intended to limit this disclosure. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this disclosure should be included within the scope of protection of this disclosure.
Claims
1. A digital management system for security education based on multi-dimensional access control, characterized in that, The system includes an initialization configuration module, a knowledge management module, an examination management module, a certificate management module, and a statistical analysis module; The initialization configuration module is used to establish multi-dimensional permission information based on the initialization configuration information. The multi-dimensional permission information includes the correspondence between user identifier, job identifier, job group identifier and permission information. The knowledge management module is used to determine course publishing information based on the course creation information. The target user is determined based on the course creation information and the multi-dimensional permission information, and the course publishing information is published to the target user. Determine the target user's learning progress in the course; The examination management module is used to determine the test paper data according to the question distribution information corresponding to the course number of the course; send the test paper data to the target user, and determine the examination result data based on the target user's answer data, wherein the examination result data includes at least the examination score; The certificate management module is used to generate a digital certificate based on the target user's name, course name, course number, exam score, and exam date when the target user's course learning progress meets the preset learning conditions and the exam score meets the preset passing conditions. The statistical analysis module is used to determine the target display data based on the course learning progress and the exam result data.
2. The system according to claim 1, characterized in that, The knowledge management module is specifically used for: Obtain courseware retrieval information and filter target courseware corresponding to the courseware retrieval information from a preset courseware library; the courseware retrieval information includes keyword information or classification information; The course publishing information is obtained by associating and mapping the course creation information with the target courseware.
3. The system according to claim 1, characterized in that, The course creation information also includes course permission information; the knowledge management module is further used for: Update the multi-dimensional permission information based on the course permission information; The target user is determined based on the multi-dimensional permission information, and the course release information is sent to the target user; wherein the target user has access to the course release information.
4. The system according to claim 1, characterized in that, The knowledge management module is further used for: Determine at least one of the following course learning records for the target user: completion time, learning duration, course learning progress, and completion status.
5. The system according to claim 1, characterized in that, The examination management module is specifically used for: Based on the question distribution information, question type information, difficulty information, knowledge point classification information, and score information are determined, and three-dimensional question distribution data is determined according to the question type information, difficulty information, knowledge point classification information, and score information; wherein, the row dimension in the three-dimensional question distribution data is used to represent the knowledge point classification information, the column dimension is used to represent the difficulty information, and the depth dimension is used to represent the question type information, and the data elements in the three-dimensional question distribution data are used to represent the question set, the question set containing question identifiers and score information; When a manual test paper generation instruction is received, the test paper data is generated based on the selection results of the target questions in the question set; When a random test paper generation instruction is received, the target questions are randomly selected from the question set in the three-dimensional test question distribution data according to the preset question type, preset knowledge point type, preset difficulty ratio, preset number of questions and preset score, and the test paper data is generated.
6. The system according to claim 1, characterized in that, The examination management module is also specifically used for: Assign an exam number and an access token to the target user; Determine the exam configuration information, which includes at least one of the following: exam duration, exam time period, and exam result configuration. When the target user enters the examination process, the target user is authenticated based on the examination number and the access token. If the authentication is successful, the examination paper data is sent to the target user, and the examination configuration information is executed.
7. The system according to claim 1, characterized in that, The examination management module is also used for: Monitor the answering behavior data of the target user, wherein the answering behavior data includes at least one of the following: page focus state, screen switching frequency, and changes in the examination terminal device; If abnormal behavior is detected in the answer behavior data, an abnormal prompt message is sent to the target user or the exam task corresponding to the target user is terminated.
8. The system according to claim 1, characterized in that, The certificate management module is specifically used for: If the target user's course learning progress is greater than or equal to a preset progress threshold, and the exam score is greater than or equal to a preset passing threshold, then obtain the certificate configuration template and determine the certificate number corresponding to the target user. The digital certificate is obtained by filling the user's name, certificate number, course completion time, exam date, course name, and exam score into the preset positions of the certificate configuration template.
9. The system according to claim 1, characterized in that, The certificate management module is also used for: Calculate the digest value of the digital certificate, and perform encryption operations on the digest value based on a preset key to generate a digital signature; Write the digital signature into the signature field corresponding to the digital certificate.
10. The system according to claim 1, characterized in that, The statistical analysis module is specifically used for: Calculate and display at least one of the following metrics for target users across a preset time frame: number of learners, average learning completion rate, average learning duration, and exam pass rate.