A key lending management system and method based on permission hierarchy

Abstract

The application discloses a kind of key lending management system and method based on authority grading, belong to key management technical field.The application of a kind of key lending management system and method based on authority grading, including hierarchical dynamic authority control module, identity authentication module, whole-process business control module, intelligent early warning module, block chain traceability module and data statistics visualization module.The application solves the problem that the prior art relies on manual approval and checking, the process is complicated, the efficiency is low, when multiple people borrow at the same time, queuing, process jamming, and unclear responsibility, management confusion are prone to occur, the application can realize hierarchical dynamic authority control, accurately adapt to job requirements, and avoid security risks.The whole-process digital automatic processing standardizes the approval process, reduces labor costs and improves management efficiency.Meanwhile, the operation data is encrypted and chained, traceable and tamper-proof, which facilitates accident accountability, realizes risk pre-control, and improves the safety control capability.

Description

Technical Field

[0001] This invention relates to the field of key management technology, specifically to a key borrowing management system and method based on hierarchical access control. Background Technology

[0002] With the large-scale development of various public and office spaces, the number of equipment, warehouses, computer rooms, and other supporting facilities within these spaces continues to increase, leading to a significant surge in the number of keys. Simultaneously, the increasing mobility of employees due to job rotation, transfers, and resignations further expands the frequency and scope of key borrowing. Consequently, the industry is demanding increasingly stringent requirements for refined, standardized, and secure key management. As the core credential for the control of premises equipment and areas, the standardized management of keys directly impacts the security of premises property, the safe operation of equipment, and the overall security of area control.

[0003] The current key borrowing system relies on manual registration, requiring borrowers to manually fill out a registration form, specifying the key name, borrowing time, return time, and purpose. This process is not only time-consuming and labor-intensive but also prone to errors, omissions, and alterations, making data accuracy difficult to guarantee. While some locations have introduced electronic registration tools, the borrowing process still requires manual approval and verification. This process is cumbersome and inefficient, especially when multiple people are borrowing keys simultaneously, leading to queues, delays, and impacting work efficiency. Furthermore, the lack of a standardized borrowing process means that some borrowings are made without approval, hindering the implementation of borrowing regulations and potentially causing ambiguity in responsibility. Therefore, this system does not meet the current needs. To address this, we propose a key borrowing management system and method based on hierarchical access control. Summary of the Invention

[0004] The purpose of this invention is to provide a key borrowing management system and method based on hierarchical access control, which can achieve hierarchical dynamic access control, accurately adapt to operational needs, and avoid access security risks. Its fully digital and automated processing standardizes approval processes, reduces labor costs, and improves management efficiency. Simultaneously, operational data is encrypted and uploaded to the blockchain, making it traceable and tamper-proof, facilitating accident accountability, enabling proactive risk control, and comprehensively improving security and prevention capabilities, thus solving the problems mentioned in the background art.

[0005] To achieve the above objectives, the present invention provides the following technical solution: a key borrowing and management system based on hierarchical access control, comprising: The hierarchical dynamic access control module is used to classify the security level of keys and the borrowing permission of personnel. Through job position, permission, key level, four-dimensional matching rules, combined with personnel on-duty status, work validity period, and historical compliance data, it realizes dynamic allocation of permissions, temporary authorization, automatic revocation and adaptive adjustment. The identity authentication module is used to verify personnel identity through facial recognition, fingerprint recognition, and employee ID password; The full-process business management module is used to realize the closed-loop management of key information entry, borrowing application, permission verification, hierarchical approval, key collection, return verification and data archiving. The intelligent early warning module is used to configure borrowing time thresholds according to key level, so as to realize real-time early warning and closed-loop handling of scenarios such as overdue return, unauthorized borrowing, and abnormal identity authentication. The blockchain traceability module is used to encrypt and store the entire process data of key borrowing on the blockchain, so as to achieve data anti-tampering and full-chain traceability; The data statistics and visualization module is used to automatically collect key borrowing core data and generate visual reports.

[0006] Preferably, the four-dimensional matching rules are as follows: Job level rules: Based on the job level hierarchy of ordinary employees, department administrators, park maintenance personnel, and super administrators, the highest level of key borrowing that can be matched is limited level by level; Personnel permission status rules: Based on the personnel's on-duty compliance status, off-duty transfer status, and historical borrowing compliance records, the borrowing permission is granted, downgraded, or frozen in real time; Key security level rules: Keys are divided into ordinary keys, restricted keys, and confidential keys. High-security level keys are only open to personnel with high-level permissions, achieving level isolation and non-downward compatibility; Scenario validity rules: Distinguish between daily fixed operation scenarios and temporary operation scenarios. Regular scenarios are matched with fixed long-term permissions, while temporary scenarios are matched with single-time temporary permissions bound to the validity period of the operation. Preferably, the hierarchical dynamic permission control module supports adaptive authorization for temporary tasks and automatic control of personnel change permissions. It can automatically generate time-limited temporary permissions based on work order information for temporary repairs, inspections, and project operations, and automatically reclaim permissions after the work cycle ends. At the same time, it can identify personnel transfer, resignation, and long-term absence status, and automatically freeze or clear the corresponding key borrowing permissions. Preferably, the timeout warning mechanism of the intelligent early warning module is as follows: when the key is not returned after the borrowing time, the borrower and the administrator will be reminded through APP push, SMS and in-system message. If the timeout exceeds 24 hours, the key borrowing permission of the corresponding person will be automatically locked until the key is returned.

[0007] Preferably, the intelligent early warning module also has an abnormal behavior recognition and early warning function, which can identify and warn against unauthorized forced applications, multiple failed identity authentications, unauthorized key transfers, unauthorized key removal from the cabinet, and malicious prying of the cabinet in real time. Based on the identification and early warning results, the management personnel can remotely lock the key and freeze personnel permissions to complete the closed-loop record of abnormal handling.

[0008] Preferably, the blockchain traceability module adopts consortium blockchain distributed storage and hash encryption technology. The data stored on the chain includes personnel identity authentication information, borrowing application information, multi-level approval records, key collection time, return time, key unique number, usage purpose, and full-process data of abnormal handling.

[0009] Preferably, the full-process business control module is configured with a hierarchical approval mechanism. Ordinary keys adopt an automatic system approval mode, restricted keys adopt a single-person approval mode by department administrators, and confidential keys adopt a multi-level approval mode. Only after approval can the smart key cabinet be unlocked to complete the key retrieval operation.

[0010] A key borrowing management method based on hierarchical access control, applied in a key borrowing management system based on hierarchical access control, includes the following steps: S1: Enter basic key information and complete security level classification, enter employee information and complete job permission classification, configure basic borrowing time threshold, hierarchical approval rules and dynamic permission control rules; S2: Borrowers complete multiple identity verifications through the terminal and submit key borrowing applications and usage information; S3: Automatically verify personnel borrowing permissions through four-dimensional matching rules, match the corresponding approval process according to the key level, and complete automated or manual hierarchical approval; S4: After approval, unlock the smart key cabinet to retrieve the key, monitor the key usage status in real time, and update cloud data synchronously; S5: Real-time identification of behaviors such as overdue borrowing, unauthorized borrowing, and abnormal identity, automatically triggering warnings and completing closed-loop processing; S6: After the key is used, return it for verification. Once it is confirmed that there are no errors, update the key status and encrypt and archive all process data on the blockchain. S7: Automatically generates multi-dimensional visual data reports, enabling administrators to optimize permission configurations and control processes based on the data.

[0011] Compared with the prior art, the beneficial effects of the present invention are: 1. The hierarchical dynamic permission control module of the present invention dynamically adjusts permissions by combining personnel status and work requirements through a four-dimensional matching rule of job level, personnel permissions, key security level and usage scenario. It can automatically complete operations such as temporary authorization, permission revocation and permission downgrade, which not only ensures the convenience of routine operations, but also eliminates the security risks caused by permission redundancy and permission legacy, and greatly improves the accuracy and adaptability of permission control.

[0012] 2. This invention achieves full-process digitalization and automation, effectively avoiding problems such as errors, omissions, and process bottlenecks caused by manual filling, significantly reducing manual management costs and improving the efficiency of key borrowing management. At the same time, the standardized approval process eliminates violations such as unauthorized key retrieval and borrowing beyond authorized levels, ensuring that the key management process is based on evidence and regulations. 3. This invention encrypts and stores all process operation data on the blockchain. The data is tamper-proof and fully traceable. In the event of lost, misused, or misappropriated keys or security incidents, complete operation records can be retrieved quickly to accurately locate key information such as borrowers, approvers, operation time, and usage links. This clearly defines the responsibilities of all parties, eliminates buck-passing, and provides legal and valid data evidence for handling security incidents and holding people accountable. 4. This invention sets up a dedicated early warning mechanism for various risk scenarios such as overdue return, unauthorized borrowing, identity abnormalities, and key abnormalities. It can proactively identify abnormal behavior in real time and quickly push early warning information. In conjunction with the closed-loop handling process of management personnel, it can realize early detection, early warning, and early handling of risks, change the traditional manual passive investigation and control mode, effectively avoid the security risks caused by lost keys, unauthorized misappropriation, and illegal use, and comprehensively improve the security and control capabilities of the venue. Attached Figure Description

[0013] Figure 1 This is a schematic diagram of a key borrowing management system based on hierarchical access control according to the present invention; Figure 2 This is a schematic diagram of a key borrowing management method based on hierarchical access control according to the present invention. Detailed Implementation

[0014] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0015] To address the issues of cumbersome and inefficient processes relying on manual approval and verification in existing technologies, which can lead to queuing and process bottlenecks when multiple people borrow keys simultaneously, and the lack of standardized procedures resulting in unauthorized key retrieval, management systems are difficult to implement, and problems such as unclear responsibilities and management chaos can arise, please refer to [link / reference needed]. Figure 1 This embodiment provides the following technical solution: A key borrowing and management system based on hierarchical access control includes: The hierarchical dynamic access control module is used to classify the security level of keys and the borrowing permission of personnel. Through job position, permission, key level, four-dimensional matching rules, combined with personnel on-duty status, work validity period, and historical compliance data, it realizes dynamic allocation of permissions, temporary authorization, automatic revocation and adaptive adjustment. The identity authentication module is used to verify personnel identity through facial recognition, fingerprint recognition, and employee ID password to prevent identity theft. The full-process business management module is used to realize the closed-loop management of key information entry, borrowing application, permission verification, hierarchical approval, key collection, return verification, and data archiving. The intelligent early warning module is used to configure borrowing time thresholds according to key level, so as to realize real-time early warning and closed-loop handling of scenarios such as overdue return, unauthorized borrowing, and abnormal identity authentication. The blockchain traceability module is used to encrypt and store the entire process data of key borrowing on the blockchain, so as to achieve data anti-tampering and full-chain traceability; The data statistics and visualization module is used to automatically collect key borrowing core data, generate visual reports, and provide data support for management decisions.

[0016] The four-dimensional matching rules are as follows: Job level rules: Based on the job level hierarchy of ordinary employees, department administrators, park operation and maintenance personnel, and super administrators, the highest level of key borrowing that can be matched is limited level by level; Personnel permission status rules: Based on the personnel's on-duty compliance status, off-duty and transfer status, and historical borrowing compliance records, the borrowing permission is granted, downgraded, or frozen in real time; Key security level rules: Keys are divided into ordinary keys, restricted keys, and confidential keys. High-security level keys are only open to personnel with high-level permissions, achieving level isolation and non-downward compatibility; Scenario validity rules: Distinguish between daily fixed operation scenarios and temporary operation scenarios. Regular scenarios are matched with fixed long-term permissions, while temporary scenarios are matched with single-time temporary permissions bound to the validity period of the operation. The hierarchical dynamic access control module supports adaptive authorization for temporary tasks and automatic management of personnel transfer permissions. It can automatically generate time-limited temporary permissions based on work order information for temporary repairs, inspections, and project operations, and automatically reclaim permissions after the work cycle ends. It can also identify personnel transfers, resignations, and long-term absences, automatically freezing or clearing the corresponding key borrowing permissions. The intelligent early warning module's timeout warning mechanism works as follows: when a key is not returned after the borrowing period, the borrower and administrator will be notified via APP push, SMS, and in-system messages. If the timeout exceeds 24 hours, the borrower's key borrowing privileges will be automatically locked until the key is returned.

[0017] The intelligent early warning module also has an abnormal behavior recognition and early warning function. It can identify and warn against unauthorized forced applications, multiple failed identity authentications, unauthorized key transfers, unauthorized key removal from the cabinet, and malicious prying of the cabinet in real time. Based on the identification and early warning results, the management personnel can remotely lock the key and freeze personnel permissions to complete the closed-loop record of abnormal handling.

[0018] The blockchain traceability module adopts consortium blockchain distributed storage and hash encryption technology. The data stored on the chain includes personnel identity authentication information, borrowing application information, multi-level approval records, key collection time, return time, key unique number, usage purpose, and full-process data for abnormal handling. All data is tamper-proof and cannot be deleted once generated, and has legal effect.

[0019] The full-process business control module is configured with a hierarchical approval mechanism. Ordinary keys are approved automatically by the system, restricted keys are approved by a single department administrator, and confidential keys are approved through a multi-level approval process. Only after approval can the smart key cabinet be unlocked to complete the key retrieval operation.

[0020] A key borrowing management method based on hierarchical access control is applied in a key borrowing management system based on hierarchical access control, and includes the following steps: S1. Basic Information Configuration: Administrators configure basic system data and control rules through the web management interface. All keys are entered into a hierarchical system based on their security and confidentiality levels, categorized into three levels: ordinary keys, restricted keys, and classified keys. A unique key number, corresponding device, and controlled area information are entered. Simultaneously, based on employee job titles, key borrowing permissions are divided into four levels: ordinary employee, department administrator, park maintenance, and super administrator. Borrowing duration thresholds and hierarchical approval rules are uniformly configured for different key levels. Ordinary keys use automatic system approval rules, restricted keys use single-person department administrator approval rules, and classified keys use multi-level hierarchical approval rules. Furthermore, a four-dimensional hard matching rule for job title, personnel permissions, key security level, and usage scenario is entered and enabled, along with temporary operation authorization rules and personnel change permission revocation rules, completing the initial setup of the entire key hierarchical control system.

[0021] S2. Identity Verification and Application Submission: Key borrowers complete real-name identity verification via mobile terminal or on-site identity verification terminal, using one or more combinations of facial recognition, fingerprint recognition, and employee ID password to prevent identity theft, proxy borrowing, and other violations. After successful identity verification, the operator selects the target key number online, fills in the purpose of borrowing the key and the expected borrowing duration, and completes the key borrowing application submission.

[0022] S3. Dynamic Permission Verification and Tiered Approval: The system invokes preset four-dimensional hard matching rules to automatically verify applicant permissions based on job level, personnel permission status, key security level, and usage scenario. It strictly enforces the isolation rule that higher-level keys are not backward compatible, while also incorporating personnel on-duty status, work validity period, and historical compliance records to achieve adaptive permission determination. After successful permission verification, the system matches the corresponding approval process based on the key level. Ordinary keys are automatically approved; restricted keys are pushed to the corresponding department administrator for approval; and confidential keys initiate multi-level approval. Once all approval processes are completed and approved, legitimate key retrieval permissions are generated. For temporary repair and inspection scenarios, the system automatically generates time-limited temporary permissions, which are automatically revoked upon work expiration. For personnel transfers or resignations, the system automatically freezes or clears the corresponding borrowing permissions.

[0023] S4. Key Retrieval and Status Monitoring: After the entire approval process is completed, the system automatically unlocks the corresponding compartment of the smart key cabinet, and the operator can retrieve the corresponding key on-site. After the key is retrieved, the system collects the key's departure status, operator information, and retrieval time in real time and uploads them to the cloud server simultaneously. It continuously monitors the key's borrowing status, cabinet status, and usage status in real time, tracking the key's flow throughout the entire lifecycle and enabling real-time monitoring of the key's status.

[0024] S5. Intelligent Early Warning and Anomaly Handling: Real-time risk monitoring is conducted throughout the key borrowing process, automatically identifying various abnormal behaviors and completing closed-loop handling. For scenarios where keys are not returned on time, the system provides multi-level reminders through three channels—APP push notifications, SMS, and in-system messages—based on differentiated time thresholds for different key levels. After 24 hours of non-return, the system automatically locks the borrower's key borrowing privileges. Simultaneously, it can identify unauthorized applications, multiple failed identity authentications, unauthorized key transfers, unauthorized key removal from the locker, and malicious prying, promptly pushing warning details to administrators. Administrators can remotely lock keys and freeze the privileges of violators, and the entire verification and handling process is fully recorded, forming a closed-loop management system of early warning, verification, handling, and archiving.

[0025] S6. Key Return and Data Archiving: After completing the key usage, the operator returns the key to the smart key cabinet. The terminal automatically verifies the integrity of the key and the compliance of the return. Once verified, the system updates the key's standby status in the cabinet and accurately records the official return time. Simultaneously, the system archives all data from the entire borrowing process, including personnel identification information, borrowing application information, multi-level approval records, key collection and return times, unique key number, usage purpose, and anomaly handling records, through a consortium blockchain combined with hash encryption technology. This data is tamper-proof and undeletable, supports multi-dimensional conditional traceability, and ensures the records are authentic, valid, and legally binding.

[0026] S7. Data Statistics and Management Optimization: Automatically collects core data from multiple dimensions, including key borrowing frequency, overdue return rate, number of unauthorized borrowings, access usage rate for each position, and key idle time. It automatically generates daily, weekly, and monthly reports, as well as visual analysis charts, supporting online viewing, export, and sharing of data. Managers can leverage these visual data reports to accurately identify weaknesses in key management, and specifically optimize four-dimensional access control rules, hierarchical approval processes, key borrowing time thresholds, and access control strategies. This continuous iteration and optimization of the key management system achieves a transformation from experience-based management to data-driven, refined, and intelligent management.

[0027] It should be noted that, in this document, relational terms such as "first" and "second" are used only to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such process, method, article, or apparatus.

[0028] Although embodiments of the invention have been shown and described, it will be understood by those skilled in the art that various changes, modifications, substitutions and alterations can be made to these embodiments without departing from the principles and spirit of the invention.

Claims

1. A key borrowing and management system based on hierarchical access control, characterized in that, include: The hierarchical dynamic access control module is used to classify the security level of keys and the borrowing permission of personnel. Through job position, permission, key level, four-dimensional matching rules, combined with personnel on-duty status, work validity period, and historical compliance data, it realizes dynamic allocation of permissions, temporary authorization, automatic revocation and adaptive adjustment. The identity authentication module is used to verify personnel identity through facial recognition, fingerprint recognition, and employee ID password; The full-process business management module is used to realize the closed-loop management of key information entry, borrowing application, permission verification, hierarchical approval, key collection, return verification and data archiving. The intelligent early warning module is used to configure borrowing time thresholds according to key level, so as to realize real-time early warning and closed-loop handling of scenarios such as overdue return, unauthorized borrowing, and abnormal identity authentication. The blockchain traceability module is used to encrypt and store the entire process data of key borrowing on the blockchain, so as to achieve data anti-tampering and full-chain traceability; The data statistics and visualization module is used to automatically collect key borrowing core data and generate visual reports.

2. The key borrowing management system based on hierarchical access control according to claim 1, characterized in that, The four-dimensional matching rules are as follows: Job level rules: According to the job level of ordinary employees, department administrators, park operation and maintenance level, and super administrator, the highest level of key borrowing that can be matched is limited level by level. Personnel access control rules: Based on personnel's on-duty compliance status, off-duty / transfer status, and historical borrowing compliance records, grant, downgrade, or freeze borrowing permissions in real time; Key security level rules: Divide keys into ordinary keys, restricted keys, and confidential keys. High-security-level keys are only accessible to personnel with high-level permissions, achieving level isolation and non-downward compatibility; Scenario validity rules: Differentiate between daily fixed work scenarios and temporary work scenarios. Regular scenarios are matched with fixed long-term permissions, while temporary scenarios are matched with single-use temporary permissions bound to the work's validity period.

3. A key borrowing management system based on hierarchical access control as described in claim 2, characterized in that, The hierarchical dynamic permission control module supports adaptive authorization for temporary operations and automatic control of personnel change permissions. It can automatically generate time-limited temporary permissions based on work order information for temporary emergency repairs, inspections, and project operations, and automatically reclaim permissions after the operation cycle ends. At the same time, it can identify personnel transfer, resignation, and long-term absence status, and automatically freeze or clear the corresponding key borrowing permissions.

4. The key borrowing management system and method based on hierarchical access control as described in claim 1, characterized in that, The timeout warning mechanism of the intelligent early warning module is as follows: when the key is not returned after the borrowing time, the borrower and the administrator will be reminded through APP push, SMS and in-system message. If the timeout exceeds 24 hours, the key borrowing permission of the corresponding person will be automatically locked until the key is returned.

5. A key borrowing management system and method based on hierarchical access control according to claim 4, characterized in that, The intelligent early warning module also has an abnormal behavior recognition and early warning function. It can identify and warn against unauthorized forced applications, multiple failed identity authentications, unauthorized key transfers, unauthorized key removal from the cabinet, and malicious prying of the cabinet in real time. Based on the identification and early warning results, the management personnel can remotely lock the key and freeze personnel permissions to complete the closed-loop record of abnormal handling.

6. The key borrowing management system and method based on hierarchical access control according to claim 1, characterized in that, The blockchain traceability module adopts consortium blockchain distributed storage and hash encryption technology. The data stored on the chain includes personnel identity authentication information, borrowing application information, multi-level approval records, key collection time, return time, key unique number, usage purpose, and full-process data for abnormal handling.

7. A key borrowing management system based on hierarchical access control as described in claim 1, characterized in that, The full-process business management module is configured with a hierarchical approval mechanism. Ordinary keys are approved automatically by the system, restricted keys are approved by a single department administrator, and confidential keys are approved through a multi-level approval process. Only after approval can the smart key cabinet be unlocked to complete the key retrieval operation.

8. A key borrowing management method based on hierarchical access control, applied in the key borrowing management system based on hierarchical access control as described in claim 7, characterized in that, Includes the following steps: S1: Enter basic key information and complete security level classification, enter employee information and complete job permission classification, configure basic borrowing time threshold, hierarchical approval rules and dynamic permission control rules; S2: Borrowers complete multiple identity verifications through the terminal and submit key borrowing applications and usage information; S3: Automatically verify personnel borrowing permissions through four-dimensional matching rules, match the corresponding approval process according to the key level, and complete automated or manual hierarchical approval; S4: After approval, unlock the smart key cabinet to retrieve the key, monitor the key usage status in real time, and update cloud data synchronously; S5: Real-time identification of behaviors such as overdue borrowing, unauthorized borrowing, and abnormal identity, automatically triggering warnings and completing closed-loop processing; S6: After the key is used, return it for verification. Once it is confirmed that there are no errors, update the key status and encrypt and archive all process data on the blockchain. S7: Automatically generates multi-dimensional visual data reports, enabling administrators to optimize permission configurations and control processes based on the data.

Images