193 results about "Authority control" patented technology

The invention relates to the technical field of data security, in particular to a data asset classification and grading and authority dynamic management system, which comprises an asset parameter acquisition module, a classification feature judgment module, a grading weight calculation module and an authority dynamic adaptation module. According to the method, metadata and path parameters are automatically collected through a distributed crawler in combination with a regular expression, naming parameters and content feature parameters are separated to generate a structured parameter set, field naming similarity is quantized through a Levenshtein distance, content character distribution features are verified through chi-square verification, and a naming similarity and distribution feature dual verification mechanism is constructed. According to the method, sensitivity, access frequency and data volume weight are dynamically distributed through an entropy weight method, grading parameters are generated through linear superposition, an RBAC model is combined with a Dijkstra algorithm to verify access path topology legality, unauthorized access is blocked, and the heterogeneous data classification grading and authority control dynamic adaptive capacity is improved.

The invention provides an agent collaborative question-answering method and system based on context awareness and authority control, and belongs to the technical field of artificial intelligence. The method comprises the following steps: acquiring user query, and triggering a user context manager to generate a session state user context object containing a permission label and preference; the central scheduler performs task decomposition based on the query intention and the context, dynamically selects an intelligent agent through a multi-dimensional scoring model and binds a knowledge source; the authority-aware agent execution engine executes triple authority verification and intermediate result desensitization processing in the whole process, and supports agent fault tolerance and audit log recording. The method realizes unification of knowledge security and access flexibility, supports multi-scene adaptive question and answer, and has good expandability and fault-tolerant capability.

The invention relates to the technical field of Web front-end development, and discloses a front-end intelligent menu caching and dynamic authority control method. The method comprises the following steps: firstly, checking whether menu cache data in a local storage of a browser exists and is valid, if so, directly using the cache data, otherwise, obtaining latest menu data from a server and caching according to a preset strategy; the menu data change state of the server side is monitored in a timed polling or WebSocket mode, and the local cache is updated in time when the data change; acquiring role permission information of the current user, matching the role permission information with the menu data, and dynamically generating an accessible menu tree; when routing jump is carried out, the type of a target address is intelligently judged, permission verification is carried out on an internal routing address, and it is ensured that a user can only access pages within the authorization range of the user. According to the application, the server request frequency is reduced, the response speed of the front-end application is improved, and meanwhile, the real-time performance of the menu data and the access security are ensured.

The invention relates to a multi-account security management method and system based on a mobile energy storage charging pile. According to the method, a multi-level user account system and a dynamic authority management mechanism are established, a dynamic token carrying authority attributes is generated through encryption verification to achieve access control, user operation is captured in real time to generate log data with an identity label, the log data are synchronized with a cloud end, and an equipment control instruction is generated in combination with Internet of Things data collection and authority verification. Meanwhile, authority rules are dynamically updated, whole-course tracing of operation behaviors of the charging pile system, real-time effectiveness of authority change and linkage management and control of equipment states and user authorities are achieved, and the problem that potential safety hazards are caused by extensive authority control, difficult operation tracing and authority strategy lagging of a traditional charging pile management system is effectively solved.

The invention relates to the technical field of authority control, in particular to a Bluetooth-based operation and maintenance authority control system, which comprises a Bluetooth link identification module, a task risk assessment module, an authority adaptation decision module, a task path verification module and an execution consistency verification module. By acquiring the Bluetooth communication address and the channel number and combining the hopping frequency and the stability, the link security state identification is realized, the communication legality judgment precision is improved, the task risk is evaluated by introducing the equipment performance and the communication parameters, the bearing capacity judgment precision is improved, the permission level, the execution frequency and the historical success rate are combined, and the reliability of the system is improved. The permission matching state is dynamically verified, and the task success rate is optimized. Relay node addresses are compared with declaration path structure consistency, accurate and reliable paths are ensured, execution environments are verified according to device roles and instruction contents, instruction execution feasibility judgment is enhanced, all links are compared based on real-time data and structures, task whole-process closed-loop control is formed, and operation safety and decision accuracy are improved.

The invention relates to a sensitive information identification and authority control method based on a large model, which utilizes a large language model and combines context analysis and prompt engineering to realize automatic identification and classification of sensitive information in a complex document. Combining the user behavior log and the multi-dimensional attribute data to construct a dynamic permission decision model; permission configuration with a file as the minimum unit is supported through a visual interface, and setting of access timeliness is supported; and constructing a self-learning mechanism, and continuously optimizing a sensitive information identification model and an authority strategy library. According to the scheme, the problems that when a traditional sensitive information recognition and authority control method faces increasingly complex service scenes and the continuously increasing data volume, sensitive information recognition and screening are difficult, and personnel authority is flexibly deployed are solved. The whole process from sensitive information identification to permission allocation is automatic and intelligent.

The invention discloses a user authority control system for a power system. The user authority control system comprises a multi-level organization and user management module, a data resource management module, a dynamic authority control module and a monitoring and auditing module, the multi-level organization and user management module is used for realizing organization maintenance, post management and employee management; the data resource management module realizes controlled resource management and business data management; the dynamic authority management and control module realizes authority distribution, role life cycle management, authority inheritance management, organization and authority transfer management and data authority management; and the monitoring and auditing module is used for realizing permission use recording, auditing log recording, abnormal behavior monitoring, data classification management, function permission management, dynamic permission control and logic extension. According to the invention, through organization and user management, data resource management, dynamic authority management and monitoring auditing, the control of the user authority of the power system is realized, the reliability is higher, the compatibility is better, and the expandability is better.

The invention relates to the related technical field of zero-trust networks, in particular to a network data security protection method and system based on multi-protection right control, and the method comprises the steps: connecting a terminal and a protection center, setting a primary authorization mechanism, starting hierarchical authorization of a right group, evaluating the risk in real time, interrupting the access if the risk does not accord with the threshold, and carrying out the threat sharing. The technical problems that the authority is allocated only according to a fixed role, the enterprise business scene change and the user actual demand change cannot be adapted, the access of the user to the isolated data area resource is lack of fine-grained control, the situation of excessive authority granting or insufficient authority granting is easy to occur, and the data leakage risk is increased are solved; according to the invention, dynamic hierarchical management of the authority is realized by constructing a primary authorization authentication mechanism and a hierarchical authorization authentication mechanism, the authority is minimized to a single service instance, and fine-grained partitioning is carried out on resources, so that data access control is more accurate, illegal data access and attack diffusion are effectively blocked, and data access efficiency is improved. And the safety of the isolated data area is ensured.

The invention discloses a Teamcenter-based model parameter and bill of materials (BOM) management method, relates to the field of product life cycle management system application, and aims to realize efficient management of model parameters and a bill of materials (BOM) through the steps of integrated data management, automatic process, authority control, version control, intelligent assistance and the like on the basis of a Teamcenter platform. The uniform storage and integration capability of Teamcenter is utilized to ensure the consistency and integrity of model parameters and BOM data; automatic processes such as automatic consistency checking and automatic PDF generation are designed, and manual intervention is reduced; the data security is guaranteed through an authority management function; a strict version control mechanism is implemented to ensure data traceability; and intelligent assistance is provided for the user by using functions of searching, querying and the like, so that the working efficiency is improved. According to the method, the problems of data updating lagging, high error rate and untimely information sharing in a traditional management mode are effectively solved, and powerful support is provided for intelligent manufacturing and digital transformation of enterprises.

The invention provides a fine-grained multi-dimensional configuration permission control method and system, electronic equipment and a storage medium, and aims to solve the problem that permission division cannot meet fine-grained permission control requirements, the method comprises the following steps: on the basis of an RBAC model, adding organization elements, and adding an organization structure hierarchical relationship, the relationship between the organization structure and the content of each part in the model is obtained; a dynamic role allocation and role inheritance mechanism is introduced, the inheritance relation between roles is specified when the roles are defined, so that the child-class roles can inherit the permission set of the parent-class roles, and permission expansion is carried out; performing permission configuration, performing cross organization on the function permission and the data permission, then distributing the function permission and the data permission to corresponding organization roles, ensuring that each organization role has the basic permission, and expanding private permissions for the organization roles according to different business requirements; the organization roles are distributed to the users, so that authority distribution of the users is realized. According to the invention, validity and timeliness of authority management can be ensured.

The invention discloses a hierarchical authority control method and platform for a network management platform oriented to cloud side-end collaboration. The method comprises the following steps: constructing a topological structure by collecting equipment resources, user identities and authority level information of all levels of platforms; based on a task scheduling and resource management algorithm and an edge-cloud collaboration model, factors such as task types and resource loads are comprehensively considered, and initial allocation and dynamic adjustment of tasks between cloud edge ends are achieved; verifying a user request by using the permission level information, recycling resources after a task is completed, and feeding back a result; and regularly collecting and analyzing data, and optimizing an algorithm, a model and an authority control strategy. The platform comprises a resource information acquisition unit, a task initial allocation unit, a task cooperative processing unit, an authority verification unit, a resource recovery feedback unit, a strategy optimization unit and the like, and the units are mutually connected and cooperated. According to the method, efficient task scheduling, accurate authority control and reasonable resource utilization of the cloud side-end collaborative network are realized, and stable operation of a network management platform is guaranteed.

The invention relates to a 4A account role permission management and control system based on business process authorization, and belongs to the technical field of information technology. The system comprises a data acquisition module, a post-role-business database, an importance degree weighting module, a to-be-authorized post input module, a data processing module, a role automatic authorization module, a role manual authorization module, a role auditing module, a business checking module, a role endowing module and the like. According to the invention, the role authority control of the 4A account can be realized, the role authorization can be automatically or manually performed on the post of the 4A account, the authorization accuracy is improved, the management efficiency is also improved, and the method is easy to popularize and apply.

The invention discloses a science and technology project archive digital management system and method, and belongs to the field of science and technology project archive management, and the system comprises an archive authority evaluation marking module, an analysis storage module, a registration login and authentication and encryption module; a right evaluation value is obtained by analyzing association complexity, updating frequency and the like of the archive, and an access right level is evaluated and stored in a hierarchical manner; an access key is generated and monitored during registration and login; performing three-level encryption on the file title, and displaying special characters when the file title is not decrypted; the method comprises the steps of authority level evaluation, file hierarchical storage, registration and login authentication and title encryption. The problems that in the prior art, file authority management is not fine, the encryption means is single, the login authentication process is tedious, and effective monitoring is lacked are solved, accurate authority management and control, title multi-level encryption and abnormal access monitoring are achieved, and the safety and efficiency of file management are improved.

The invention relates to the technical field of big data management, in particular to a big model metadata authority management method and system based on an RBAC-ABAC fusion model, and the method comprises metadata annotation, data product release, big model and user access, semantic perception, dynamic authority adjustment, row-level authority control and authority life cycle management. The method has the beneficial effects that by fusing the advantages of the RBAC model and the ABAC model, the defects of a single authority management model are overcome, the efficient, dynamic and fine-grained authority management of the large model metadata is realized, the security of the large model metadata is improved, and the authority management requirement of the large model for accessing the dynamic business data is met.

The invention provides an archive sharing authority control method and system applied to an archive hosting management system, and relates to the technical field of archive hosting management. The method comprises the following steps: firstly, calling a scene dependency relationship set (including upstream, downstream and parallel scene dependency sub-relationships) of an archive to be shared and behavior influence degree data (including influence records on each scene) of a sharing application user from a system, and then constructing a scene dependency chain and sorting according to association strength; analyzing the user behavior influence record and the scene dependency chain corresponding hierarchy to generate an influence degree conduction result, extracting the authority adaptation demand and scene influence weight of each hierarchy scene, and finally generating a dynamic sharing authority scheme through a multi-scene authority association algorithm of a dynamic authority derivation rule base. And a permission execution link is imported to realize user access permission configuration, so that the accuracy and flexibility of file sharing permission control are effectively improved.

The invention relates to an authority control system, method and device, computer equipment and a storage medium. The system comprises an SaaS platform and at least one sub-platform, the SaaS platform is used for distributing initial permission information to the sub-platform according to a permission template configured for the sub-platform in advance, the sub-platform is used for distributing corresponding permission to at least one user role according to the initial permission information, and the sub-platform is further used for receiving a data access request and sending the data access request to the SaaS platform. The sub-platform is used for acquiring a data access request and extracting role information in the data access request, the sub-platform is also used for acquiring a target permission corresponding to the role information, and when a permission corresponding to the data access request exists in the target permission, a corresponding data access operation is executed. By adopting the system, permission distribution and configuration of the SaaS platform to a plurality of SP platforms can be supported, and each SP platform can customize permissions according to requirements.

The invention discloses a data security protection system and method based on artificial intelligence, relates to the technical field of data security protection, and solves the technical problem that in the prior art, internal permission setting and outgoing management and control cannot be performed. The method specifically comprises the following steps: an internal authority control unit performs authority control on internal access of a storage data output department, sets an authority granting department and a temporary authority department, collects authorized access data and temporary access data, and deduces whether internal authority control is normal or not according to data analysis; the external sending management and control unit analyzes and controls external sending of the storage data, constructs an external sending mode, obtains external sending node information and external sending numerical value information, and analyzes and deduces whether the external sending mode is safe or not according to the information.

The embodiment of the invention relates to a dynamic permission control method and system based on user behavior characteristics, and the method comprises the steps: obtaining a basic access permission and a historical behavior baseline of a current user in response to a login operation; collecting current operation behavior characteristics of a current user, wherein the current operation behavior characteristics comprise a current access path and a current data query quantity; acquiring context environment information of the current user under the current operation; determining the current operation deviation degree of the current user by using a multi-dimensional scoring mechanism based on the historical behavior baseline, the current operation behavior characteristics and the context environment information; determining a risk level corresponding to the current operation based on the deviation degree of the current operation; and based on the determined risk level, performing risk control processing on the current user according to a preset risk control strategy. According to the embodiment of the invention, the abnormal behavior of the current user can be sensed in time and the response is made according to the preset risk control strategy to prevent data leakage.

The invention provides a public case library management method and system based on dynamic authority control, and the method comprises the steps: obtaining a department organization structure of an enterprise, setting the management authority of a public case library for each department, and associating a user with the department organization structure; the user selects the use case needing to be collected from the project, whether a collection permission exists or not is judged according to fuzzy matching of a department associated with the user and the use case library module, and if yes, the use case needing to be collected is written into the corresponding use case library module of the public use case library; selecting a reuse case from the public case library by a user, creating a new project case, and inheriting basic information of the case to be reused; the user selects the use case needing to be removed from the public use case library, whether the user has the collection permission or not is judged according to fuzzy matching of the department associated with the user and the use case library module, and if yes, the use case needing to be removed is removed from the corresponding use case library module of the public use case library. According to the method, a centralized public case library is constructed, and accurate classification and efficient maintenance of public cases are realized based on an authority control mechanism.

The embodiment of the invention provides an authority control method and device based on fine granularity, and the method comprises the steps: carrying out the node relation extraction of a mapping database, obtaining a role node and a product node, and introducing a user node and a context node; the method comprises the following steps: constructing a hyperedge structure, performing hyperedge linking on role nodes, product nodes, user nodes and service context nodes, determining a corresponding hyperedge relationship, performing dynamic weight endowing on the hyperedge relationship according to a time decay factor and a context risk coefficient, determining a dynamic graph structure, and constructing a directed acyclic graph based on the role inheritance relationship. Fusing the dynamic graph structure and the directed acyclic graph according to a graph algorithm, and determining a corresponding product permission layer graph database; the method comprises the steps of receiving a user operation instruction, performing context-aware query based on the operation instruction according to a graph traversal algorithm, determining a user permission, and performing permission control on a user according to the user permission. The method can improve the efficiency and the refinement degree of permission allocation.

The invention discloses an ABAC-based power enterprise intelligent office knowledge authority management method, which comprises the following steps of: designing user attributes, knowledge attributes and an access mechanism by adopting an ABAC authority control framework, and constructing authority control models of companies, departments, organizations and personal documents; obtaining the authority control model, constructing an access control strategy library, and performing authority control on large model question and answer content through a question and answer control technology in document vectorization; establishing an authority control performance optimization strategy according to the authority control, and reducing the occupation of authority control check resources; according to the scheme, the strict safety control requirement of a power enterprise can be met, the requirements of knowledge sharing and intelligentization in the enterprise can be met, the consistency and real-time performance of user attribute data are ensured, the effectiveness of authority management is ensured, authority management and control of knowledge ontology and large model questions and answers are realized, knowledge safety is ensured, occupation of authority control check resources is reduced, and the enterprise experience is improved. And the system response speed is improved.

The present application discloses a permission control method, apparatus and related equipment for a message management system. In response to a user requesting a permission operation, the method queries the user role and the corresponding permission of the user requesting the permission operation through a pre-designed hierarchical permission model and a role-based access control model, wherein the hierarchical permission model is determined by a role table, a permission table, a role permission table, a user role table and a dynamic rule table, and permissions are dynamically allocated to user roles through dynamic permission rules and the permissions, wherein the dynamic permission rules are determined by a permission policy set, and the permission policy set is a dynamic permission trigger policy set pre-defined by the message management system, and permission verification is performed on the allocated permissions.

The embodiment of the invention provides an adaptive permission control method and device, equipment and a storage medium, and relates to the technical field of information security. The method comprises the steps of generating an object permission vector and an object query vector corresponding to a query request, obtaining a dynamic attribute of a target object according to a current query rule, determining an authentication mode according to a rule attribute dependency relationship corresponding to the current query rule, obtaining a candidate data set corresponding to the dynamic attribute in a vector database, and sending the candidate data set to the target object. Calculating a comprehensive score corresponding to the joint vector according to the object query vector, the object permission vector, the data feature vector and the data permission vector, and determining target data corresponding to the query request from the initial data based on the comprehensive score. The query request of the target object is responded in real time in a mode of obtaining the dynamic attribute, so that the requirements of real-time access control and flexibility are met. The comprehensive score is used as fine-grained permission evaluation information, dynamic permission fuzzy processing is realized, the information leakage risk is reduced, and the security is improved.

The invention discloses a deep learning model-based knowledge learning agent training method, and relates to the technical field of auditing, and the method comprises the steps: carrying out the optimal disassembly task classification through a multi-model fusion knowledge classification method, and obtaining defined auditing knowledge and undefined auditing knowledge; optimal disassembly task classification is carried out by using a multi-model fusion knowledge classification method, and undefined audit knowledge is analyzed through an adaptive improved iteration mechanism, a fusion NLP algorithm and a deep learning audit agent to generate a question answer; the data security in the use process of the audit knowledge learning agent is controlled through a dynamic authority control and question and answer tracing mechanism; when facing large-scale and multi-level auditing tasks, the system can quickly position the core of a problem, redundant operation is reduced, and the response speed is increased.

The invention relates to the technical field of computers, and discloses a knowledge base-based authority control method, device and equipment and a medium, and the method comprises the steps: obtaining a to-be-accessed target knowledge base and a user identity information set, and carrying out the grading processing of the knowledge content in the target knowledge base through a natural language model, and obtaining a plurality of knowledge categories; determining an initial user identifier corresponding to each piece of initial user identity information in the user identity information set, and establishing a corresponding relationship between each initial user identifier and the knowledge category; receiving an access request of a target knowledge base, determining a target user identifier from the user token information in the access request, and determining an authorized target knowledge category from the corresponding relationship according to the target user identifier; and performing legality verification on the access request, and if the verification is passed, allowing the access request to access the knowledge content corresponding to the target knowledge category. The method can be applied to financial science and technology and medical care service program systems, and fine-grained permission allocation and access verification can be achieved.

The invention relates to the related technical field of permission control, in particular to a fine-grained account permission control method, device and equipment based on an access channel. The method comprises the following steps: registering a data service interface in an application; the application loads the data service interface, and the data service interface loads an original data access interface when being started; after the data service interface receives a data service request sent by an application, a user sending the data service request is obtained, the received data service request is analyzed, and a target data object to be accessed and a target operation type to be requested are obtained; querying a permission list of the user for the target data object through a permission service function in a data service interface, and checking whether the target operation type is authorized or not according to the permission list; and if so, responding to the data service request.

The invention discloses an authority management method and system based on user behaviors, and belongs to the field of artificial intelligence, and the method comprises the following steps: S1, obtaining behavior data of a power user, and carrying out the preliminary data cleaning of the data; s2, performing multi-dimensional feature extraction on the cleaned behavior data, and generating a user behavior portrait in combination with a user identity tag; s3, inputting the user behavior portrait into a behavior scoring model, and outputting a behavior score and a risk coefficient; and S4, dynamically configuring an authority level by an authority control engine according to a scoring risk mapping rule. By introducing a dynamic permission adjustment mechanism based on the user behavior score and risk assessment, the behavior mode of the user can be monitored and analyzed in real time, the permission level of the user can be dynamically adjusted according to the real-time demand and risk level of the user, the permission demand of the user can be judged according to the actual operation behavior of the user, and the user experience is improved. Excessive or insufficient authority authorization is avoided, and intelligence and dynamics of authority management are improved.

The invention relates to the technical field of software version control and code security management, in particular to an authority control method, system and device under front-end code monorepo warehouse management and a medium. The method supports file-level, directory-level and extended-name-level multi-dimensional authority rules, fills the blank of Git native capability, and realizes fine-grained control; the method is realized completely based on a Git hook, does not need additional services or middleware, is compatible with any Git hosting platform, and realizes zero external dependence; permission file modification is ensured to be authorized by an administrator through digital signature, so that a developer is prevented from relaying permission rules privately; the signature verification process is completed at the local hook, an external certificate server does not need to be connected, the security and the offline availability are both considered, and the tamper-resistant capability is enhanced.

The invention provides a cloud disk data access control and authority management method and system based on a zero-trust architecture, and relates to the technical field of cloud computing, and the method comprises the steps: generating a real-time risk score through calculating a user access behavior deviation degree, a geographic position and a device fingerprint; reading the distributed permission strategy library in parallel by adopting a consistent Hash algorithm, and obtaining dynamic permission configuration; based on an attribute access control strategy, constructing a multi-dimensional permission decision matrix in combination with a data sensitivity label and an access environment context; and finally executing fine-grained access control and recording a verification process. According to the method, dynamic and continuous identity verification and refined authority control are realized, and the cloud disk data access security is remarkably improved.

The invention discloses a workflow permission control method and system based on a quantum encryption mechanism. The method comprises the following steps: in response to a submitted application, obtaining a first quantum process key and a first quantum group key; performing encryption processing on the applied service data according to the first quantum process key; performing encryption processing on the applied permission data according to the first quantum group key; in response to an approval request for the application, decrypting the permission data according to the first quantum group key, and determining an approval permission of an approval request object; and decrypting the service data by using the first quantum process key according to the approval authority. Thus, during examination and approval, the authority data is decrypted through the first quantum group key to verify the authority, then the service data is decrypted by using the first quantum process key as required, and the preposed authority protection is constructed, so that the situation that a non-approver obtains information beyond the authority can be effectively intercepted, and the problem that the non-approver tends to be the approver to divulge is solved to a certain extent; and the confidentiality of the application information is ensured.