92 results about "Authority control" patented technology

The invention provides an agent collaborative question-answering method and system based on context awareness and authority control, and belongs to the technical field of artificial intelligence. The method comprises the following steps: acquiring user query, and triggering a user context manager to generate a session state user context object containing a permission label and preference; the central scheduler performs task decomposition based on the query intention and the context, dynamically selects an intelligent agent through a multi-dimensional scoring model and binds a knowledge source; the authority-aware agent execution engine executes triple authority verification and intermediate result desensitization processing in the whole process, and supports agent fault tolerance and audit log recording. The method realizes unification of knowledge security and access flexibility, supports multi-scene adaptive question and answer, and has good expandability and fault-tolerant capability.

The invention provides an archive sharing authority control method and system applied to an archive hosting management system, and relates to the technical field of archive hosting management. The method comprises the following steps: firstly, calling a scene dependency relationship set (including upstream, downstream and parallel scene dependency sub-relationships) of an archive to be shared and behavior influence degree data (including influence records on each scene) of a sharing application user from a system, and then constructing a scene dependency chain and sorting according to association strength; analyzing the user behavior influence record and the scene dependency chain corresponding hierarchy to generate an influence degree conduction result, extracting the authority adaptation demand and scene influence weight of each hierarchy scene, and finally generating a dynamic sharing authority scheme through a multi-scene authority association algorithm of a dynamic authority derivation rule base. And a permission execution link is imported to realize user access permission configuration, so that the accuracy and flexibility of file sharing permission control are effectively improved.

The embodiment of the invention relates to a dynamic permission control method and system based on user behavior characteristics, and the method comprises the steps: obtaining a basic access permission and a historical behavior baseline of a current user in response to a login operation; collecting current operation behavior characteristics of a current user, wherein the current operation behavior characteristics comprise a current access path and a current data query quantity; acquiring context environment information of the current user under the current operation; determining the current operation deviation degree of the current user by using a multi-dimensional scoring mechanism based on the historical behavior baseline, the current operation behavior characteristics and the context environment information; determining a risk level corresponding to the current operation based on the deviation degree of the current operation; and based on the determined risk level, performing risk control processing on the current user according to a preset risk control strategy. According to the embodiment of the invention, the abnormal behavior of the current user can be sensed in time and the response is made according to the preset risk control strategy to prevent data leakage.

The invention discloses an ABAC-based power enterprise intelligent office knowledge authority management method, which comprises the following steps of: designing user attributes, knowledge attributes and an access mechanism by adopting an ABAC authority control framework, and constructing authority control models of companies, departments, organizations and personal documents; obtaining the authority control model, constructing an access control strategy library, and performing authority control on large model question and answer content through a question and answer control technology in document vectorization; establishing an authority control performance optimization strategy according to the authority control, and reducing the occupation of authority control check resources; according to the scheme, the strict safety control requirement of a power enterprise can be met, the requirements of knowledge sharing and intelligentization in the enterprise can be met, the consistency and real-time performance of user attribute data are ensured, the effectiveness of authority management is ensured, authority management and control of knowledge ontology and large model questions and answers are realized, knowledge safety is ensured, occupation of authority control check resources is reduced, and the enterprise experience is improved. And the system response speed is improved.

The invention relates to the technical field of computers, and discloses a knowledge base-based authority control method, device and equipment and a medium, and the method comprises the steps: obtaining a to-be-accessed target knowledge base and a user identity information set, and carrying out the grading processing of the knowledge content in the target knowledge base through a natural language model, and obtaining a plurality of knowledge categories; determining an initial user identifier corresponding to each piece of initial user identity information in the user identity information set, and establishing a corresponding relationship between each initial user identifier and the knowledge category; receiving an access request of a target knowledge base, determining a target user identifier from the user token information in the access request, and determining an authorized target knowledge category from the corresponding relationship according to the target user identifier; and performing legality verification on the access request, and if the verification is passed, allowing the access request to access the knowledge content corresponding to the target knowledge category. The method can be applied to financial science and technology and medical care service program systems, and fine-grained permission allocation and access verification can be achieved.

The invention relates to the technical field of software version control and code security management, in particular to an authority control method, system and device under front-end code monorepo warehouse management and a medium. The method supports file-level, directory-level and extended-name-level multi-dimensional authority rules, fills the blank of Git native capability, and realizes fine-grained control; the method is realized completely based on a Git hook, does not need additional services or middleware, is compatible with any Git hosting platform, and realizes zero external dependence; permission file modification is ensured to be authorized by an administrator through digital signature, so that a developer is prevented from relaying permission rules privately; the signature verification process is completed at the local hook, an external certificate server does not need to be connected, the security and the offline availability are both considered, and the tamper-resistant capability is enhanced.

The invention provides a cloud disk data access control and authority management method and system based on a zero-trust architecture, and relates to the technical field of cloud computing, and the method comprises the steps: generating a real-time risk score through calculating a user access behavior deviation degree, a geographic position and a device fingerprint; reading the distributed permission strategy library in parallel by adopting a consistent Hash algorithm, and obtaining dynamic permission configuration; based on an attribute access control strategy, constructing a multi-dimensional permission decision matrix in combination with a data sensitivity label and an access environment context; and finally executing fine-grained access control and recording a verification process. According to the method, dynamic and continuous identity verification and refined authority control are realized, and the cloud disk data access security is remarkably improved.

The invention discloses a workflow permission control method and system based on a quantum encryption mechanism. The method comprises the following steps: in response to a submitted application, obtaining a first quantum process key and a first quantum group key; performing encryption processing on the applied service data according to the first quantum process key; performing encryption processing on the applied permission data according to the first quantum group key; in response to an approval request for the application, decrypting the permission data according to the first quantum group key, and determining an approval permission of an approval request object; and decrypting the service data by using the first quantum process key according to the approval authority. Thus, during examination and approval, the authority data is decrypted through the first quantum group key to verify the authority, then the service data is decrypted by using the first quantum process key as required, and the preposed authority protection is constructed, so that the situation that a non-approver obtains information beyond the authority can be effectively intercepted, and the problem that the non-approver tends to be the approver to divulge is solved to a certain extent; and the confidentiality of the application information is ensured.

The invention relates to the technical field of identity verification, and particularly discloses a terminal user identity-based agent tool calling permission control system, which comprises a receiving module for receiving a tool calling request initiated by a terminal user; the processing module is used for acquiring real-time user attributes from the user attribute service based on the user identity identification; the user identity identification and the real-time user attribute are combined to form a dynamic permission context; the matching module is used for establishing an authority strategy database based on original strategy data collected from a plurality of strategy data sources, inputting the dynamic authority context into the authority strategy database for rule matching, and outputting an authority judgment result; and the control module is used for executing corresponding tool calling control operation according to the permission judgment result. According to the method, the calling process of the agent tool is safer and more transparent and has dynamic adaptive capacity, and the compliance and risk prevention and control capacity of an enterprise in a sensitive business scene are remarkably improved.

The invention discloses a method and a system for establishing, managing and inquiring a relational network, storing and managing digital contents of an uploader and an owner based on a relation and controlling access authority based on the relation, and relates to an internet information technology, in particular to a method and a system for firstly establishing the relational network and then storing and managing the digital contents of the uploader and the owner based on the relation. A system that then stores digital content as members belonging to a relational network and determines access permissions according to relationships includes creating and expanding the relational network, storing digital information as belonging to members, and setting relationship-based access permissions, inviting new users corresponding to the members, and determining the access permissions according to the relationships. Judging whether the relationship between the member corresponding to any user and any member meets the set relationship-based access permission of the target digital content of the member or not, and supporting the access of the member under the condition that the relationship between the member and any member meets the set relationship-based access permission of the target digital content of the member; meanwhile, query of member groups based on specific relation modes (such as paternal lines, maternal lines, ancestors, offspring and the like) is supported.

The application discloses a kind of workflow authority control method and system based on quantum encryption mechanism.Method includes: in response to the application submitted, obtain first quantum flow key and first quantum group key;According to the first quantum flow key, the business data of application is encrypted;According to the first quantum group key, the authority data of application is encrypted;In response to the approval request of application, according to the first quantum group key, the authority data is decrypted, and the approval authority of the approval request object is determined;According to the approval authority, the business data is decrypted with the first quantum flow key.In this way, when approving, first decrypt the authority data through the first quantum group key to verify the authority, then decrypt the business data as needed with the first quantum flow key, build pre-authorization protection, which can effectively intercept unauthorized access to information by non-approval person, to some extent solve the problem of non-approval person impersonating approval person to leak information, and protect the confidentiality of application information.

The invention relates to a dynamic authority control API execution method and device and a storage medium, and the method comprises the steps: receiving an API request sent by a user, and carrying out the authority verification of the API request; evaluating the risk of the API request in response to the fact that the permission verification is not passed; issuing a dynamic temporary permission in response to the risk assessment result meeting a threshold value; and completing the API request according to the dynamic temporary permission.

The invention provides a distributed database data access method and related equipment, and relates to the technical field of computers. The method comprises the following steps: acquiring a data access request initiated by a user, wherein the data access request is a request based on an SQL statement; analyzing the SQL statement to obtain a to-be-accessed data table; determining a permission label of the to-be-accessed data table, wherein the permission label comprises at least one of a table permission label, a column permission label and a row permission label; performing permission verification on the user based on the permission label of the to-be-accessed data table; and if the permission verification is passed, executing the SQL statement to query the distributed database to obtain a data access result, and returning the data access result to the user. The authority control granularity can be refined, an authority strategy does not need to be independently configured for the data table, and the operation and maintenance difficulty is reduced.

The invention relates to an authority control method and device, a data management system, equipment and a storage medium. The method comprises the following steps: collecting fingerprint data corresponding to each touch operation from the first detection of the touch operation for a main operation interface of a system; according to the fingerprint data collected this time and fingerprint data collected before this time, determining a user state corresponding to the touch operation this time; under the condition of determining that the user state corresponding to the touch operation is a user change state, determining an authority level corresponding to the fingerprint data collected at the time; according to the permission level corresponding to the fingerprint data collected this time and the permission level corresponding to the fingerprint data collected before this time, a permission system corresponding to the touch operation this time is regulated and controlled. In the operation process, the user is dynamically identified, the permission level of the user is dynamically matched, and the permission system is adjusted, so that the purpose of adjusting the operation permission along with the change of the identity of the user in the operation process is achieved, and the data security is improved.

The invention discloses an archive data intra-city cross-archive system and method, belongs to the technical field of archive management, and aims to solve the technical problems of low archive data cross-archive transmission efficiency, insufficient safety and scattered management. Comprising a data acquisition module, an encryption transmission module, a cross-museum management module, an authority control module and a data storage module, the data acquisition module is used for performing format conversion and metadata annotation on the archive data to generate structured data conforming to the national standard; the encryption transmission module is used for constructing a special data transmission channel based on SSL and AES-256 algorithms; the cross-museum management module is used for constructing a cross-museum data directory index, providing cross-museum data business process examination and approval, and performing block chain evidence storage on cross-museum data operation records; the authority control module is used for providing authority management for different archive users; and the data storage module is used for realizing intra-city active-active data redundancy backup through distributed storage.

The application relates to the technical field of data security management, and discloses a business permission control method, device, equipment and medium, which can be applied to the business management application scenarios of financial technology and medical health. When a business access request initiated by a client is received, the user account information corresponding to the client is queried; permission matching calculation is performed on the user account information and at least one access rule in a preset rule library, so that the permission determination can be calculated in real time based on the rule conditions configured in the rule library, instead of relying on the static permission configuration of a single account, the flexibility and timeliness of the permission determination are improved; a business management operation corresponding to the permission determination result is executed to respond to the business access request, the business response is strictly corresponding to the real-time determination result, the permission out of control caused by the lag of static configuration is avoided, and the precision of the business permission control is improved.

The invention relates to the technical field of data management, in particular to a digital capability open platform based on a micro-service architecture and dynamic permission management and control, which is characterized in that through a collaborative architecture of'packaging decoupling + service management + dynamic permission + unified adaptation + real-time governance + full-chain tracking + centralized configuration ', the capability reuse rate is improved by 80%, the interface docking period is shortened from 2 weeks to 2 hours, and the power consumption is reduced. The authority strategy takes effect on the second level, the data leakage risk is reduced by 95%, 99.99% availability is guaranteed through automatic switching within 3 seconds of single-point faults, 90% script maintenance is reduced through protocol automatic conversion, 85% production faults are reduced through online detection and elastic capacity expansion, strategy change and rollback are shortened to 30 seconds from 30 minutes through graphical centralized configuration, operation and maintenance manpower is saved by 70%, compliance auditing is met in the whole process, and the method is suitable for large-scale popularization and application. And rapid, safe, low-cost and high-quality open sharing of the electric power digitization capability is realized.

The invention discloses an authority control method, device and system, electronic equipment and a storage medium, and is used for solving the problems that an existing authority control mode is low in stability and network delay is caused when a large number of API requests are authenticated, and the method comprises the steps that an API gateway receives an API request sent by a client side, and sends the API request to the client side; the API request carries destination IP address information and service identification information; acquiring authority authentication credential information according to the API request; determining a target Pod corresponding to the target IP address and the service identifier according to a preset corresponding relationship among the IP address, the service identifier and the Pod; adding the authority authentication credential information to a specified field of the API request to obtain a processed target API request; and forwarding the target API request to an auxiliary container of the target Pod, so that the OPA in the auxiliary container performs authority authentication according to the authority authentication credential information.

The embodiment of the invention provides a file updating method and device, electronic equipment and a storage medium, and relates to the technical field of computers. The method comprises the steps of obtaining an authority level of a target account in response to an editor obtaining request triggered by the target account; if the permission level meets a preset condition, a first editor is sent to the target account, so that the target account edits current first function configuration information of the in-vehicle infotainment system through the first editor, and second function configuration information is obtained; the second function configuration information is compared with the first function configuration information, difference information between the second function configuration information and the first function configuration information is obtained, and the difference information is pushed to all the vehicle machine terminals running the vehicle machine system. When the target account sends the editor obtaining request, whether the first editor is sent to the target account or not can be judged according to the permission level of the target account, and permission control over the editor is effectively achieved.

The invention discloses a universal API data access control method and device, equipment and a storage medium, and the method comprises the steps: obtaining a data model and a database table corresponding to the data model, and creating an associated universal API function according to the data model and the database table; configuring a table-level permission, a row-level permission and a column-level permission for the combination of the role and the data model; dynamically analyzing and applying a table-level permission, a row-level permission and a column-level permission through a universal API function of the universal API module; the system can be seamlessly integrated with a general API and a low-code platform, complete decoupling of authority management and business logic is realized, table-level, row-level and column-level refined data access control can be provided at the same time, the security, flexibility and development efficiency of data access are improved, increasingly complicated business requirements are met, and the system is suitable for popularization and application. According to the invention, refined, dynamic and code-free authority control of the universal API is realized, and the speed and efficiency of the universal API data access control method are improved.

The invention discloses an authority control method and system. The method comprises the following steps: when an instrument controller reads authentication information; judging whether the access control system has a record of face recognition corresponding to the authentication information within a preset time or not; if yes, instrument use permission verification is carried out, and if not, an access control system is prompted to carry out face recognition. According to the scheme, under the condition that the hardware cost is not increased, authority control with relatively high safety can be realized.

The invention provides an authority control method and device, equipment and a storage medium. The method comprises the following steps: determining a first application programming interface API corresponding to an access request according to request information carried by the access request; determining a target authentication policy corresponding to the first API from a plurality of authentication policies according to the first API and a pre-configured mapping relationship between APIs and authentication policies; according to the target authentication strategy and the subscription message of the first API, authentication information carried in the access request is authenticated, an authentication result is obtained, and the authentication result is used for indicating whether the access request has the permission to access the first API; and performing authority control on the access request according to the authentication result. Dynamic adjustment can be carried out according to different authority control requirements, the security and flexibility of the system are improved, and the complexity of authority management is simplified.

The invention discloses an enterprise park management method and system, belongs to the technical field of data authority, and aims to solve the technical problems of insufficient flexibility and poor expansibility of data authority management in the prior art. Comprising the steps that interceptor rules are configured according to user requirements, and the authority and range of data access are defined through the interceptor rules; analyzing an interceptor rule configured by a user, and generating a corresponding data access plan; accessing corresponding data resources according to the data access plan, and obtaining required data; performing authority control on the acquired data according to an interceptor rule so as to ensure the security line and the compliance of the data; and performing necessary conversion processing on the obtained data, and performing data sharing on the converted data through a unified interface or platform.

The invention provides a medical data credible circulation method and system based on multi-level authority dynamic management, and the method comprises the steps: constructing a multi-mode matching index, and carrying out the feature extraction and vectorization of medical text data, structured data and image data; establishing a three-layer index architecture and an intelligent routing layer; constructing a user-permission-data relation graph by applying a graph algorithm, evaluating a permission use mode in real time, and detecting an abnormal behavior; the abnormal judgment threshold is dynamically adjusted in combination with situation factors such as medical emergency degree, abnormal behaviors are subjected to grading processing, and evidence obtaining information is automatically collected. The invention further comprises a data classification method based on security classification and timeliness and a fine-grained permission control mechanism using the minimum permission principle, and dynamic permission granting and recycling are supported. By balancing security and availability, secure sharing and effective utilization of medical data are realized, and diversified data access requirements are met.

The invention relates to the technical field of information management, in particular to a UML (Unified Modeling Language) model driven authority control method and related products, and the method comprises the following steps: generating a domain concept model and a use case model of a target system based on user requirements and a UML model; correlating the domain concept model with the use case model, and generating an access control model of the target system based on RBAC3; performing unified formalized modeling on the access control model according to a preset structure to obtain a corresponding unified structure model; and performing conflict detection on the access control model based on the unified structure model. According to the method, strict logical reasoning of an authority management mechanism is realized through unified structure specifications; and then, potential strategy conflict problems in scenes such as role inheritance and permission allocation are systematically analyzed, so that the permission management process is more efficient and safer, the configuration error risk is reduced, and the flexibility and safety of permission management on a low-code platform are improved.

The invention discloses an access permission control method and equipment for distributed data services, and belongs to the technical field of big data security and data governance, and the method comprises the following steps: in a data structure corresponding to a data permission strategy of a distributed data system, constructing a dynamic permission condition for a data resource security demand; the method comprises the following steps: when an access request of a user to data resources is received, acquiring basic ternary information and context information of the access request; and evaluating the basic ternary information and the contextual information of the access request based on a dynamic permission condition so as to allow or reject the access request. According to the method, the accuracy and safety of permission decision making are improved.

The invention relates to the technical field of role authority control, and discloses a role authority control method and system based on a public health physical examination platform, and the method comprises the steps: employing an attribute-based security access control model in an authority distribution module, constructing a fine-grained access rule, refining the authority control rule into user, resource and operation context attributes, and carrying out the operation of the user, the resource and the operation context attributes; multi-dimensional association is carried out; a permission check node is embedded in the business process module, and strong binding of permission and an operation scene is ensured; when a scene is started to be executed, the authority management module generates a role template in real time, and the authority distribution module automatically matches a user identity and an operation demand according to a constructed rule; a user permission use track is recorded through an audit log module, permission adjustment suggestions are triggered in combination with a risk scoring model, and closed-loop management is formed; the invention further designs a dynamic token system based on the context awareness mechanism, and the permission range and the effective use time of the token are automatically adjusted in real time according to the use context.

The invention belongs to the technical field of AI training data annotation, and particularly relates to an AI active learning-based annotation quality dynamic verification and authority management and control method, which comprises the following steps of: initializing a core module, a rule base and an authority matrix; the AI active learning model samples and distributes samples based on data uncertainty and annotator ability matching; the dynamic verification module executes multi-dimensional verification and feeds back abnormal features; the authority management and control module dynamically adjusts the authority according to the verification result; and iteratively optimizing the model and the rule base based on feedback, and circulating until the annotated data meets a quality threshold value. According to the method, autonomous optimization of labeling quality, resource dynamic configuration and advanced avoidance of abnormal labeling are realized, the abnormal labeling recognition accuracy and the resource configuration efficiency are remarkably improved, the model iteration speed is increased, and excessive dependence on manual intervention is not needed.

The application discloses a permission control method and related devices, wherein the permission control method comprises the following steps: after receiving a SQL statement executed by a current user, parsing and verifying the SQL statement to obtain an operation operation tree corresponding to the SQL statement; identifying an operation type and operation information of the operation operation tree; transmitting the operation type and the operation information to a Ranger plug-in, so that the Ranger plug-in judges whether the current user has an operation permission of a database according to the operation type and the operation information; if yes, the SQL statement is continuously executed; otherwise, information of a permission exception is returned. Through the above method, pre-control and fine control of user permissions can be realized.

The application discloses a power device operation audit generation method under hierarchical permission control and relates to the technical field of power device operation audit. The specific implementation scheme is as follows: after the permission level of the power device and the operation level of the staff are adjusted in real time, it is judged whether the staff has the operation permission, the time sequence data of the staff during the operation of the power device is divided into data windows, the time sequence data in each window is marked with identification information after being encrypted by using a hash algorithm, and the identification information is stored in each operated power device, and audit information is automatically generated. According to the application, the operation permission can be dynamically adjusted according to the real-time dangerous state of the equipment and the actual skill of the staff, and the distributed trusted operation audit record with the anti-destruction and anti-tampering capability can be synchronously generated.