Power generation enterprise report external release and cross-system integration system and method

Abstract

The application provides a power generation enterprise report external release and cross-system integration system and method, wherein the system comprises: an external release module configured to generate an access link of a report, and disable the access link according to a cancellation instruction; a permission control module configured to extract a feature vector of a release scenario, input the feature vector into a pre-trained classification model to output a permission recommendation list, and use the permission recommendation list to configure operation permissions of other target systems on the access link; a menu hanging module configured to hang the access link in a menu bar of a target system; and a cross-system integration module configured to render a display page corresponding to the access link in the target system according to the operation permissions, and set a data exchange interface to obtain data involved in a calculation process of the report. The application automatically generates a permission recommendation list by using a classification model, thereby improving the efficiency and accuracy of permission configuration; and the data exchange interface is set to obtain the data involved in the calculation process, thereby facilitating verification and traceability verification of external systems.

Description

Technical Field

[0001] This invention relates to the field of cross-system report integration technology, and in particular to a system and method for power generation companies to publish reports to external systems and integrate them across systems. Background Technology

[0002] Power generation companies typically involve multiple business systems, such as production management systems, financial systems, OA office systems, and safety monitoring systems. Different systems need to share and integrate report data to achieve cross-departmental and cross-system collaborative work.

[0003] In related technologies, power generation companies currently mainly use the following two methods for external dissemination and cross-system integration of telegrams: 1. File export and manual distribution. Users export reports as Excel or PDF files in the reporting system and send them to users in other systems via email, instant messaging tools, or shared folders. This solution has the following drawbacks: poor data real-time performance, reports need to be re-exported and redistributed after updates, low security, once the file is sent, it is out of system control and its usage cannot be traced, frequent operations, and reliance on manual completion of the export and distribution process. 2. Direct generation between systems. While integrating reporting systems with other business systems through direct database access, API calls, or page embedding achieves a degree of automation, it still suffers from the following shortcomings: The granularity of access control is coarse, typically only controlling user access to reports and lacking fine-grained configuration for specific operation permissions such as save, recalculate, and import; permission settings rely entirely on manual static configuration by the publisher; and cross-system interfaces can only access data on the rendered page surface, failing to obtain the original or intermediate data used in calculations. This prevents external business systems from conducting secondary verification and source tracing of report results, severely impacting the credibility and decision-making efficiency of cross-system collaborative analysis.

[0004] Based on the above analysis of the development status of this technology field, the existing technologies lack a solution that can automatically recommend cross-system operation permissions based on machine learning algorithms and obtain the original or intermediate data involved in the report calculation process when recalculation is allowed. Summary of the Invention

[0005] The purpose of this invention is to provide a system and method for power generation companies to publish reports externally and integrate across systems, in order to solve the above-mentioned problems in the prior art.

[0006] According to a first aspect of the present invention, a system for external publication and cross-system integration of power generation enterprise reports is provided, comprising: The external publishing module is used to generate access links for reports and disable access links based on cancellation commands. The access control module is used to extract feature vectors of the publishing scenario, input the feature vectors into a pre-trained classification model to output a permission recommendation list, and use the permission recommendation list to configure the operation permissions of other target systems for accessing the link; The menu attachment module is used to attach access links to the menu bar of the target system; The cross-system integration module is used to render the display page corresponding to the access link in the target system according to the operation permissions, and to set up a data exchange interface to obtain the data involved in the report calculation process.

[0007] According to a second aspect of the present invention, a method for external publication and cross-system integration of power generation enterprise reports is provided, comprising: Access links to reports generated through the external publishing module are disabled based on cancellation commands. The feature vector of the publishing scenario is extracted through the permission control module. The feature vector is input into the pre-trained classification model to output the permission recommendation list. The permission recommendation list is used to configure the operation permissions of other target systems for accessing the link. The access link is attached to the menu bar of the target system through the menu attachment module; The cross-system integration module renders the corresponding display page of the access link in the target system according to the operation permissions, and sets up a data exchange interface to obtain the data involved in the report calculation process.

[0008] According to a third aspect of the present invention, an electronic device is provided, comprising: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the computer program, when executed by the processor, implements the steps of the method for external publication of power generation enterprise reports and cross-system integration as provided in the second aspect of the present disclosure.

[0009] According to a fourth aspect of the present invention, a computer-readable storage medium is provided, on which an information transmission implementation program is stored, which, when executed by a processor, implements the steps of the power generation enterprise report external publication and cross-system integration method provided in the second aspect of the present disclosure.

[0010] The technical solution provided by the embodiments of the present invention has the following beneficial effects: it automatically generates a permission recommendation list by using a pre-trained classification model, replacing the method that relies entirely on manual configuration, thereby improving the efficiency and accuracy of permission configuration; it sets up a data exchange interface to obtain the data involved in the report calculation process, which facilitates secondary verification and traceability by external systems, and avoids data inconsistency and security risks caused by the separation of page permissions and interface permissions in traditional solutions.

[0011] It should be understood that the above general description and the following detailed description are exemplary and explanatory only, and are not intended to limit this disclosure. Attached Figure Description

[0012] To more clearly illustrate the technical solutions in one or more embodiments of this specification or in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in this specification. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0013] Figure 1 This is a schematic diagram of the power generation enterprise report external release and cross-system integration system according to an embodiment of the present invention; Figure 2 This is a schematic diagram illustrating the configuration for external report publishing according to an embodiment of the present invention; Figure 3 This is a flowchart of the method for external publication and cross-system integration of power generation enterprise reports according to an embodiment of the present invention; Figure 4 This is a schematic diagram of an electronic device according to an embodiment of the present invention. Detailed Implementation

[0014] To enable those skilled in the art to better understand the technical solutions in one or more embodiments of this specification, the technical solutions in one or more embodiments of this specification will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only a part of the embodiments of this specification, and not all of the embodiments. Based on one or more embodiments of this specification, all other embodiments obtained by those skilled in the art without creative effort should fall within the protection scope of this document.

[0015] System Implementation Examples According to embodiments of the present invention, a system for external reporting and cross-system integration of power generation enterprises is provided. Figure 1 This is a schematic diagram of the power generation enterprise report external publication and cross-system integration system according to an embodiment of the present invention, such as... Figure 1 As shown, the power generation enterprise report external publication and cross-system integration system according to an embodiment of the present invention specifically includes: The external publishing module 10 is used to generate access links for reports and disables the access links based on cancellation commands. External release module 10 is specifically used for: Set up an access link consisting of a URL locator, encryption token, timestamp, and verification code; The encryption token uses the HMAC-SHA256 algorithm, takes the report identifier, the publishing system identifier and the timestamp as inputs, and is generated by encryption signing with the publishing system's private key. The verification code is generated by concatenating the report identifier and the encryption token and performing an MD5 hash operation on the first 8 bits.

[0016] An example of the access connection format is: https: / / domain / report?id=reportID&token=encryption token&ts=timestamp&sign=verification.

[0017] In this embodiment of the invention, when the cancellation command is triggered, the system does not delete the access link, but updates the status field of the record in the publication record table from 1 (valid) to 0 (cancelled).

[0018] The permission control module 12 is used to extract the feature vector of the publishing scenario, input the feature vector into a pre-trained classification model to output a permission recommendation list, and use the permission recommendation list to configure the operation permissions of other target systems for accessing the link; Access control module 12 is specifically used for: The report names and column headings are classified using a text analysis model to obtain the report content characteristics; the report data volume includes the number of rows, columns, and the number of indicators included; the report update frequency can be divided into daily, weekly, monthly, and annual reports. Preferably, a data sensitivity score is established as a feature of the report content; Obtain data from other target systems, including historical behavioral characteristics, visitor's department and job level, to obtain visitor characteristics; historical behavioral characteristics include the number of times reports were accessed in the past 30 days, the number and percentage of export operations performed, and the types and number of operations that were rejected; The system obtains access scenario characteristics, including access time, access device type, access network environment, and target system name. Access device types include PCs, mobile devices, and tablets, while access network environments include intranet IP segments, VPN access, and public IPs.

[0019] The report content features, visitor features, and access scenario features are used as feature vectors for the publishing scenario. The feature vectors are input into a pre-trained classification model, which outputs a permission recommendation list including browsing, querying, saving, recalculating, importing, and combination forms.

[0020] Traditional access control is static, while in this embodiment of the invention, the system needs to automatically determine which permissions should be granted based on report content, visitor identity, and access scenario, and even be able to predict risks and automatically tighten permissions. The specific implementation is as follows: The classification model specifically includes: an embedding layer, a feature fusion layer, multiple fully connected layers, and an output layer; The textual features in the feature vector are converted into dense vectors through the embedding layer. The dense vector is concatenated with the numerical features in the feature vector through the feature fusion layer to obtain the fused feature vector. The fused feature vector is input into the fully connected layer for interaction to obtain the high-level semantic representation. The high-level semantic representation is input into the output layer to obtain the tags of each operation permission in the permission recommendation list. Preferably, the embedding layer uses a pre-trained BERT model to extract semantic vectors as the initial embedding matrix to obtain dense vectors; each fully connected layer is followed by a batch normalization layer, a ReLU activation function layer, and a random deactivation layer, and high-order interaction features between categorical and numerical features are extracted through layer-by-layer nonlinear transformation to generate high-order semantic representations; the output layer uses a Sigmoid activation function and determines the recommended labels for each operation permission through threshold decision; for operation permissions with dependencies, the open probability of the dependent permission is multiplied by the open probability of the dependent permission, and the result is used as the final output probability of the dependent permission; In this embodiment of the invention, query and export operations are supported by default.

[0021] Menu hooking module 14 is used to hook access links to the menu bar of the target system; Menu hook module 14 is specifically used for: Create an iframe element in the page menu bar of the target system. Set the src attribute of the iframe element to the access link of the report and automatically concatenate the single sign-on token as a URL parameter. Set the access link to the page source address of the iframe element. Implement secure cross-domain communication between the iframe and the host system through the postMessage API to transmit information such as menu click events and adaptive adjustment of report height. Configure sandbox security attributes for iframe elements. Sandbox security attributes include allowing script execution to support report page interaction functions, allowing the same-origin policy to support the transmission of single sign-on tokens, allowing form submission to support the input and submission of query conditions, and allowing pop-up windows to support the export and printing of report data.

[0022] The cross-system integration module 16 is used to render the display page corresponding to the access link in the target system according to the operation permissions, and to set up a data exchange interface to obtain the data involved in the report calculation process.

[0023] Cross-system integration module 16 specifically includes: The page access unit is used to obtain the encryption token and verification code in the access link when the target system detects that the user clicks on the access link in the menu bar, render and display the page when the verification is successful and the encryption token is valid, and control the interactive state of the displayed page through operation permissions. The real-time verification process for link access is as follows: Extract the report ID, token, timestamp, and verification code from the request. Recalculate the verification code and compare it with the verification code in the request. If they do not match, the link is considered to have been tampered with, access is denied, and an alarm log is recorded. Query the publishing record table in the database to determine if the token is valid. If the status is canceled or expired, return the link invalid page and record the access log. After successful verification, parse the publishing user ID in the token and render the report using the user's permission context.

[0024] The data exchange unit is used to obtain the original or intermediate data involved in the report calculation process, provided that the operation permission allows for recalculation.

[0025] External systems can usually only obtain the final display results of the report, such as the final calculated result of 1050MWh of monthly power generation. However, they cannot obtain information related to this indicator, such as daily power generation details, coal consumption rate, and equipment operating hours. The source data can be obtained through the interface provided by the data exchange unit, which has calculation significance in the power generation enterprise scenario.

[0026] Cross-system integration module 16 also includes: The Single Sign-On (SSO) unit is used to configure SSO protocol adaptation to support plug-in access of the SSO protocol.

[0027] Single sign-on is an authentication mechanism that allows users to access multiple mutually trusted systems after logging in once, without having to re-enter their credentials.

[0028] The above technical solutions of the embodiments of the present invention will be illustrated with reference to the following accompanying drawings.

[0029] Figure 2 This is a schematic diagram illustrating the configuration for external report publishing according to an embodiment of the present invention, such as... Figure 2 The image shows the system interface for publishing power generation company reports. Publishing reports involves showcasing and publishing report templates via links. Published templates can be linked to the current system or other business systems via menus, supporting intelligent permission configuration and manual configuration adjustments.

[0030] In summary, addressing the existing problems, this invention, a power generation enterprise report publishing and cross-system integration system, utilizes a pre-trained classification model to automatically generate a permission recommendation list, replacing the previous method of relying entirely on manual configuration. This improves the efficiency and accuracy of permission configuration. Access links are constructed from a URL, encryption token, timestamp, and verification code, providing tamper-proof capabilities. Published links become invalid in real-time, and issued links can be revoked at any time, effectively preventing unauthorized dissemination and long-term exposure of report data. Target systems can view permission-controlled report pages via iframe sandbox embedding. The sandbox security attributes ensure normal report interaction while limiting potential security threats to the target system. A data exchange interface is set up to obtain data involved in the report calculation process, facilitating secondary verification and source tracing by external systems. This avoids data inconsistencies and security risks caused by the separation of page permissions and interface permissions in traditional solutions, improving the credibility and decision-making efficiency of cross-system collaborative analysis.

[0031] Method Implementation Examples According to embodiments of the present invention, a method for power generation companies to publish reports externally and integrate across systems is provided. Figure 3 This is a flowchart of the method for external publication and cross-system integration of power generation enterprise reports according to an embodiment of the present invention, such as... Figure 3 As shown, the method for external publication and cross-system integration of power generation enterprise reports according to an embodiment of the present invention specifically includes: In step S310, the access link for the report is generated through the external publishing module, and the access link is invalidated according to the cancellation command, specifically including: Set up an access link consisting of a URL locator, encryption token, timestamp, and verification code; The encryption token uses the HMAC-SHA256 algorithm, takes the report identifier, the publishing system identifier and the timestamp as inputs, and is generated by encryption signing with the publishing system's private key. The verification code is generated by concatenating the report identifier and the encryption token and performing an MD5 hash operation on the first 8 bits.

[0032] In step S320, the feature vector of the publishing scenario is extracted through the permission control module. The feature vector is then input into a pre-trained classification model to output a permission recommendation list. This permission recommendation list is used to configure the operation permissions of other target systems for accessing the link, specifically including: By classifying report names and column headings using a text analysis model, report content characteristics are obtained; data from other target systems, including historical behavior characteristics, visitor department and job level, are obtained to obtain visitor characteristics; and access scenario characteristics are obtained, including access time, access device type, access network environment, and target system name. The report content features, visitor features, and access scenario features are used as feature vectors for the publishing scenario. The feature vectors are input into a pre-trained classification model, which outputs a permission recommendation list including browsing, querying, saving, recalculating, importing, and combination forms.

[0033] The classification model specifically includes: an embedding layer, a feature fusion layer, multiple fully connected layers, and an output layer; The textual features in the feature vector are converted into dense vectors through the embedding layer. The dense vector is then concatenated with the numerical features in the feature vector through the feature fusion layer to obtain a fused feature vector. The fused feature vector is then input into a fully connected layer for interaction to obtain a high-level semantic representation. Finally, the high-level semantic representation is input into an output layer to obtain the tags for each operation permission in the permission recommendation list.

[0034] In step S330, the access link is attached to the menu bar of the target system via the menu attachment module, specifically including: Create an iframe element in the target system's page menu bar, set the access link to the page source address of the iframe element, and configure the sandbox security attribute for the iframe element.

[0035] In step S340, the cross-system integration module renders the display page corresponding to the access link in the target system according to the operation permissions, and sets up a data exchange interface to obtain the data involved in the report calculation process, specifically including: When the target system detects a user's click on an access link in the menu bar through the page access unit, it obtains the encryption token and verification code from the access link. When the verification is successful and the encryption token is valid, the page is rendered and displayed, and the interactive state of the displayed page is controlled through operation permissions. The data exchange unit can obtain the original or intermediate data involved in the report calculation process, provided that the operation permission allows for recalculation.

[0036] Configure SSO protocol adaptation through the single sign-on unit to support plug-in access of the single sign-on protocol.

[0037] In summary, addressing the existing problems, this invention provides a method for external publication and cross-system integration of power generation enterprise reports. It utilizes a pre-trained classification model to automatically generate a permission recommendation list, replacing the previous reliance on manual configuration and improving the efficiency and accuracy of permission configuration. Access links are constructed from a URL, encryption token, timestamp, and verification code, providing tamper-proof capabilities. Published links become invalid in real-time, and issued links can be revoked at any time, effectively preventing unauthorized dissemination and long-term exposure of report data. Target systems can view the access-controlled report pages via iframe sandbox embedding. The sandbox security attributes ensure normal report interaction while limiting potential security threats to the target system. A data exchange interface is set up to obtain data involved in the report calculation process, facilitating secondary verification and source tracing by external systems. This avoids data inconsistencies and security risks caused by the separation of page permissions and interface permissions in traditional solutions, improving the credibility and decision-making efficiency of cross-system collaborative analysis.

[0038] Electronic device examples Figure 4 This is a schematic diagram of an electronic device according to an embodiment of the present invention. The electronic device 400 may include at least one processor 410 and a memory 420. The processor 410 can execute instructions stored in the memory 420. The processor 410 is communicatively connected to the memory 420 via a data bus. In addition to the memory 420, the processor 410 can also be communicatively connected to an input device 430, an output device 440, and a communication device 450 via the data bus.

[0039] Processor 410 can be any conventional processor, such as a commercially available CPU. Processors may also include graphics processing units (GPUs), field-programmable gate arrays (FPGAs), systems-on-chips (SoCs), application-specific integrated circuits (ASICs), or combinations thereof.

[0040] The memory 420 can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic storage, flash memory, magnetic disk or optical disk.

[0041] In this embodiment of the present disclosure, the memory 420 stores executable instructions, and the processor 410 can read the executable instructions from the memory 420 and execute the instructions to implement all or part of the steps of the power generation enterprise report external publication and cross-system integration method in any of the above exemplary embodiments.

[0042] Computer-readable storage medium embodiments In addition to the methods and systems described above, exemplary embodiments of this disclosure may also be computer program products or computer-readable storage media storing such computer program products, wherein the computer program products include computer program instructions that can be executed by a processor to implement all or part of the steps described in any of the above exemplary embodiments of the method for external publication of power generation enterprise reports and cross-system integration.

[0043] Computer program products can be written in any combination of one or more programming languages ​​to perform the operations of the embodiments of this application. Programming languages ​​include object-oriented programming languages ​​such as Java and C++, as well as conventional procedural programming languages ​​such as C or similar languages, and scripting languages ​​(e.g., Python). The program code can be executed entirely on the user's computing device, partially on the user's device, as a standalone software package, partially on the user's computing device and partially on a remote computing device, or entirely on a remote computing device or server.

[0044] Computer-readable storage media may be any combination of one or more readable media. A readable medium may be a readable signal medium or a readable storage medium. A readable storage medium may be, for example,, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination thereof. More specific examples of readable storage media include: static random access memory (SRAM) having one or more electrically connected wires; electrically erasable programmable read-only memory (EEPROM); erasable programmable read-only memory (EPROM); programmable read-only memory (PROM); read-only memory (ROM); magnetic storage; flash memory; magnetic disk or optical disk; or any suitable combination thereof.

[0045] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, and not to limit them; although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some or all of the technical features; and these modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the scope of the technical solutions of the embodiments of the present invention.

Claims

1. A system for external reporting and cross-system integration of power generation enterprises, characterized in that, include: The external publishing module is used to generate access links for reports and disable access links based on cancellation commands. The permission control module is used to extract feature vectors of the publishing scenario, input the feature vectors into a pre-trained classification model to output a permission recommendation list, and use the permission recommendation list to configure the operation permissions of other target systems for the access link; A menu attach module is used to attach the access link to the menu bar of the target system; The cross-system integration module is used to render the display page corresponding to the access link in the target system according to the operation permissions, and set up a data exchange interface to obtain the data involved in the report calculation process.

2. The system according to claim 1, characterized in that, The external publishing module is specifically used for: Set the access link consisting of a URL locator, encryption token, timestamp, and verification code; The encryption token uses the HMAC-SHA256 algorithm, takes the report identifier, the publishing system identifier and the timestamp as inputs, and is generated by encryption signing with the publishing system private key. The verification code is generated by concatenating the report identifier and the encryption token and performing an MD5 hash operation on the first 8 bits.

3. The system according to claim 1, characterized in that, The access control module is specifically used for: By classifying report names and column headings using a text analysis model, report content characteristics are obtained; data from other target systems, including historical behavior characteristics, visitor department and job level, are obtained to obtain visitor characteristics; and access scenario characteristics are obtained, including access time, access device type, access network environment, and target system name. The report content features, visitor features, and access scenario features are used as feature vectors for the publishing scenario. The feature vectors are input into a pre-trained classification model, and the classification model outputs a permission recommendation list including browsing, querying, saving, recalculating, importing, and combination forms.

4. The system according to claim 1, characterized in that, The classification model specifically includes: an embedding layer, a feature fusion layer, a multi-layer fully connected layer, and an output layer; The embedding layer converts textual features in the feature vector into dense vectors. The feature fusion layer concatenates the dense vectors with numerical features in the feature vectors to obtain a fused feature vector. The fused feature vector is then input into the fully connected layer for interaction to obtain a high-level semantic representation. Finally, the high-level semantic representation is input into the output layer to obtain the tags for each operation permission in the permission recommendation list.

5. The system according to claim 1, characterized in that, The menu attachment module is specifically used for: Create an iframe element in the page menu bar of the target system, set the access link to the page source address of the iframe element, and configure sandbox security attributes for the iframe element.

6. The system according to claim 1, characterized in that, The cross-system integration module specifically includes: The page access unit is used to obtain the encryption token and verification code in the access link when the target system detects that the user clicks on the access link in the menu bar, render and display the page when the verification is successful and the encryption token is valid, and control the interactive state of the displayed page through the operation permission. The data exchange unit is used to obtain the original or intermediate data involved in the report calculation process, provided that the operation permission allows for recalculation.

7. The system according to claim 1, characterized in that, The cross-system integration module also includes: The Single Sign-On (SSO) unit is used to configure SSO protocol adaptation to support plug-in access of the SSO protocol.

8. A method for external publication and cross-system integration of power generation enterprise reports, characterized in that, include: Access links to reports generated through the external publishing module are disabled based on cancellation commands. The feature vector of the publishing scenario is extracted by the permission control module, and the feature vector is input into a pre-trained classification model to output a permission recommendation list. The permission recommendation list is used to configure the operation permissions of other target systems for the access link. The access link is attached to the menu bar of the target system via the menu attachment module; The cross-system integration module renders the display page corresponding to the access link in the target system according to the operation permissions, and sets up a data exchange interface to obtain the data involved in the report calculation process.

9. An electronic device, characterized in that, include: The memory, the processor, and the computer program stored in the memory and executable on the processor, wherein when executed by the processor, the computer program implements the steps of the power generation enterprise report external publication and cross-system integration method as described in claim 8.

10. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores an information transmission implementation program, which, when executed by a processor, implements the steps of the power generation enterprise report external release and cross-system integration method as described in claim 8.

Images