290 results about "Authority control" patented technology

The invention relates to the technical field of data security, in particular to a data asset classification and grading and authority dynamic management system, which comprises an asset parameter acquisition module, a classification feature judgment module, a grading weight calculation module and an authority dynamic adaptation module. According to the method, metadata and path parameters are automatically collected through a distributed crawler in combination with a regular expression, naming parameters and content feature parameters are separated to generate a structured parameter set, field naming similarity is quantized through a Levenshtein distance, content character distribution features are verified through chi-square verification, and a naming similarity and distribution feature dual verification mechanism is constructed. According to the method, sensitivity, access frequency and data volume weight are dynamically distributed through an entropy weight method, grading parameters are generated through linear superposition, an RBAC model is combined with a Dijkstra algorithm to verify access path topology legality, unauthorized access is blocked, and the heterogeneous data classification grading and authority control dynamic adaptive capacity is improved.

The invention provides an agent collaborative question-answering method and system based on context awareness and authority control, and belongs to the technical field of artificial intelligence. The method comprises the following steps: acquiring user query, and triggering a user context manager to generate a session state user context object containing a permission label and preference; the central scheduler performs task decomposition based on the query intention and the context, dynamically selects an intelligent agent through a multi-dimensional scoring model and binds a knowledge source; the authority-aware agent execution engine executes triple authority verification and intermediate result desensitization processing in the whole process, and supports agent fault tolerance and audit log recording. The method realizes unification of knowledge security and access flexibility, supports multi-scene adaptive question and answer, and has good expandability and fault-tolerant capability.

The invention relates to the technical field of Web front-end development, and discloses a front-end intelligent menu caching and dynamic authority control method. The method comprises the following steps: firstly, checking whether menu cache data in a local storage of a browser exists and is valid, if so, directly using the cache data, otherwise, obtaining latest menu data from a server and caching according to a preset strategy; the menu data change state of the server side is monitored in a timed polling or WebSocket mode, and the local cache is updated in time when the data change; acquiring role permission information of the current user, matching the role permission information with the menu data, and dynamically generating an accessible menu tree; when routing jump is carried out, the type of a target address is intelligently judged, permission verification is carried out on an internal routing address, and it is ensured that a user can only access pages within the authorization range of the user. According to the application, the server request frequency is reduced, the response speed of the front-end application is improved, and meanwhile, the real-time performance of the menu data and the access security are ensured.

The invention relates to the technical field of database establishment, in particular to a book library establishment method and system based on multi-version annotation. Preprocessing the data; comparing and analyzing the book contents of different versions by using a text comparison algorithm to generate a version difference report; performing preliminary annotation association; annotations between versions are traced and associated, a multi-version annotation comparison function is provided, a user can check annotations in different versions at the same position at the same time, and comparison and analysis are facilitated; storing data; designing a user interface, and providing functions of book version selection, content browsing and annotation viewing; recommending and optimizing intelligent annotations; authority control; according to the method, through intelligent annotation recommendation and optimization functions, a user can efficiently manage annotation information, repeated labor is avoided, and the utilization rate and management efficiency of annotation are improved.

The invention relates to a multi-account security management method and system based on a mobile energy storage charging pile. According to the method, a multi-level user account system and a dynamic authority management mechanism are established, a dynamic token carrying authority attributes is generated through encryption verification to achieve access control, user operation is captured in real time to generate log data with an identity label, the log data are synchronized with a cloud end, and an equipment control instruction is generated in combination with Internet of Things data collection and authority verification. Meanwhile, authority rules are dynamically updated, whole-course tracing of operation behaviors of the charging pile system, real-time effectiveness of authority change and linkage management and control of equipment states and user authorities are achieved, and the problem that potential safety hazards are caused by extensive authority control, difficult operation tracing and authority strategy lagging of a traditional charging pile management system is effectively solved.

The invention relates to the technical field of authority control, in particular to a Bluetooth-based operation and maintenance authority control system, which comprises a Bluetooth link identification module, a task risk assessment module, an authority adaptation decision module, a task path verification module and an execution consistency verification module. By acquiring the Bluetooth communication address and the channel number and combining the hopping frequency and the stability, the link security state identification is realized, the communication legality judgment precision is improved, the task risk is evaluated by introducing the equipment performance and the communication parameters, the bearing capacity judgment precision is improved, the permission level, the execution frequency and the historical success rate are combined, and the reliability of the system is improved. The permission matching state is dynamically verified, and the task success rate is optimized. Relay node addresses are compared with declaration path structure consistency, accurate and reliable paths are ensured, execution environments are verified according to device roles and instruction contents, instruction execution feasibility judgment is enhanced, all links are compared based on real-time data and structures, task whole-process closed-loop control is formed, and operation safety and decision accuracy are improved.

The invention relates to a sensitive information identification and authority control method based on a large model, which utilizes a large language model and combines context analysis and prompt engineering to realize automatic identification and classification of sensitive information in a complex document. Combining the user behavior log and the multi-dimensional attribute data to construct a dynamic permission decision model; permission configuration with a file as the minimum unit is supported through a visual interface, and setting of access timeliness is supported; and constructing a self-learning mechanism, and continuously optimizing a sensitive information identification model and an authority strategy library. According to the scheme, the problems that when a traditional sensitive information recognition and authority control method faces increasingly complex service scenes and the continuously increasing data volume, sensitive information recognition and screening are difficult, and personnel authority is flexibly deployed are solved. The whole process from sensitive information identification to permission allocation is automatic and intelligent.

The invention discloses a user authority control system for a power system. The user authority control system comprises a multi-level organization and user management module, a data resource management module, a dynamic authority control module and a monitoring and auditing module, the multi-level organization and user management module is used for realizing organization maintenance, post management and employee management; the data resource management module realizes controlled resource management and business data management; the dynamic authority management and control module realizes authority distribution, role life cycle management, authority inheritance management, organization and authority transfer management and data authority management; and the monitoring and auditing module is used for realizing permission use recording, auditing log recording, abnormal behavior monitoring, data classification management, function permission management, dynamic permission control and logic extension. According to the invention, through organization and user management, data resource management, dynamic authority management and monitoring auditing, the control of the user authority of the power system is realized, the reliability is higher, the compatibility is better, and the expandability is better.

The invention discloses an administrative human resource management data platform system, which comprises at least two heterogeneous systems, wherein the heterogeneous systems relate to personnel information and personnel authority; the application management module ensures that a heterogeneous system registered and authorized in the system can access and synchronize employee data; only the registered and authorized heterogeneous system can access and synchronize employee data; the role management association setting module is used for uniformly maintaining and distributing roles and permissions of the heterogeneous system; the data synchronization module is used for automatically guaranteeing real-time updating and consistency of data through a standardized interface; the system not only can improve the management efficiency of enterprises, administrative functional departments, commercial institutions, financial institutions and other enterprises and realize refined authority control of new and old employees, but also can enhance the security and compliance of authority setting, so that the system is convenient to use and popularize. And the automatic process can effectively reduce human errors, and improve the satisfaction and productivity of employees at the same time.

The invention discloses an authority control method and device, computer equipment and a computer readable storage medium, relates to the technical field of information security management and control, performs authority management through an interface, realizes fine-grained management and control of authority, enhances the security protection capability of a system, ensures that different user roles can only access authorized data resources, and improves the user experience. The authority control requirement of an enterprise in a complex business scene is met, and a solid security guarantee is provided for enterprise informatization construction. The method comprises the following steps: in response to a system access request, determining that the system access request indicates a to-be-accessed target interface; acquiring role information of a target role initiating the system access request, determining a target platform associated with the role information, and matching interface permission information of the target role under the target platform; and when the interface permission information indicates that access to the target interface is allowed, generating a target menu based on the target interface, and controlling the target role to access the target menu.

The invention relates to the related technical field of zero-trust networks, in particular to a network data security protection method and system based on multi-protection right control, and the method comprises the steps: connecting a terminal and a protection center, setting a primary authorization mechanism, starting hierarchical authorization of a right group, evaluating the risk in real time, interrupting the access if the risk does not accord with the threshold, and carrying out the threat sharing. The technical problems that the authority is allocated only according to a fixed role, the enterprise business scene change and the user actual demand change cannot be adapted, the access of the user to the isolated data area resource is lack of fine-grained control, the situation of excessive authority granting or insufficient authority granting is easy to occur, and the data leakage risk is increased are solved; according to the invention, dynamic hierarchical management of the authority is realized by constructing a primary authorization authentication mechanism and a hierarchical authorization authentication mechanism, the authority is minimized to a single service instance, and fine-grained partitioning is carried out on resources, so that data access control is more accurate, illegal data access and attack diffusion are effectively blocked, and data access efficiency is improved. And the safety of the isolated data area is ensured.

The present application relates to the technical field of control, and provides an authority control method, an authority control apparatus, an electronic device, and a storage medium. The method comprises: performing identity authentication on an object identity of a target object; if the identity authentication is passed, acquiring a service platform bound to the target object, and determining a channel bound to the service platform, wherein a preset character of the preset object and data operation authority of the service platform associated with the preset character are allocated to the channel; and if the target object is the same as the preset object, allocating the data operation authority to the target object, so that the target object operates data of the service platform on the basis of the data operation authority. In this way, unified authority management can be performed on a plurality of service platforms, thereby facilitating maintenance of authority management, and improving the efficiency and security of authority management.

The embodiment of the invention discloses a user authority management method and device, electronic equipment and a medium. The user authority management method comprises the following steps: receiving a first user request; filtering the first user request to obtain a filtered first user request, the filtered first user request carrying a legal mark; acquiring a user name corresponding to the legal mark based on the second user request; determining a role of the user and a permission corresponding to the role according to the user name; custom annotation is carried out in methods needing to be called by different controllers of the MVC architecture, and a value is added into the custom annotation to identify a permission field; in the aspect of the aspect-oriented programming, acquiring authority information by searching an annotated method; and based on the authority corresponding to the role and the authority information, accessing the authority resource information required in different controllers through authority control. According to the embodiment of the invention, the user authority management efficiency is improved, and later maintenance is easy.

The invention discloses a Teamcenter-based model parameter and bill of materials (BOM) management method, relates to the field of product life cycle management system application, and aims to realize efficient management of model parameters and a bill of materials (BOM) through the steps of integrated data management, automatic process, authority control, version control, intelligent assistance and the like on the basis of a Teamcenter platform. The uniform storage and integration capability of Teamcenter is utilized to ensure the consistency and integrity of model parameters and BOM data; automatic processes such as automatic consistency checking and automatic PDF generation are designed, and manual intervention is reduced; the data security is guaranteed through an authority management function; a strict version control mechanism is implemented to ensure data traceability; and intelligent assistance is provided for the user by using functions of searching, querying and the like, so that the working efficiency is improved. According to the method, the problems of data updating lagging, high error rate and untimely information sharing in a traditional management mode are effectively solved, and powerful support is provided for intelligent manufacturing and digital transformation of enterprises.

The invention provides a fine-grained multi-dimensional configuration permission control method and system, electronic equipment and a storage medium, and aims to solve the problem that permission division cannot meet fine-grained permission control requirements, the method comprises the following steps: on the basis of an RBAC model, adding organization elements, and adding an organization structure hierarchical relationship, the relationship between the organization structure and the content of each part in the model is obtained; a dynamic role allocation and role inheritance mechanism is introduced, the inheritance relation between roles is specified when the roles are defined, so that the child-class roles can inherit the permission set of the parent-class roles, and permission expansion is carried out; performing permission configuration, performing cross organization on the function permission and the data permission, then distributing the function permission and the data permission to corresponding organization roles, ensuring that each organization role has the basic permission, and expanding private permissions for the organization roles according to different business requirements; the organization roles are distributed to the users, so that authority distribution of the users is realized. According to the invention, validity and timeliness of authority management can be ensured.

The invention relates to the technical field of information security, and discloses a refined authority control data management system, which comprises an authority control module used for setting refined data modification authority according to roles and responsibilities of users and ensuring that only authorized users can modify specific data; and the operation recording module is used for recording each data modification operation of the user, including modification time, modification content, data states before and after modification and the like, so as to facilitate subsequent auditing and tracing. Through refined authority control and real-time verification, unauthorized modification operation and wrong modification operation are effectively prevented, the accuracy and safety of data modification are improved, through centralized management of the data management platform, the consistency and integrity of data are ensured, meanwhile, the maintainability and expandability of the system are improved, and the system is suitable for popularization and application. And the data management platform adopts a modular design, so that subsequent function expansion and upgrading are facilitated.

The invention discloses a hierarchical authority control method and platform for a network management platform oriented to cloud side-end collaboration. The method comprises the following steps: constructing a topological structure by collecting equipment resources, user identities and authority level information of all levels of platforms; based on a task scheduling and resource management algorithm and an edge-cloud collaboration model, factors such as task types and resource loads are comprehensively considered, and initial allocation and dynamic adjustment of tasks between cloud edge ends are achieved; verifying a user request by using the permission level information, recycling resources after a task is completed, and feeding back a result; and regularly collecting and analyzing data, and optimizing an algorithm, a model and an authority control strategy. The platform comprises a resource information acquisition unit, a task initial allocation unit, a task cooperative processing unit, an authority verification unit, a resource recovery feedback unit, a strategy optimization unit and the like, and the units are mutually connected and cooperated. According to the method, efficient task scheduling, accurate authority control and reasonable resource utilization of the cloud side-end collaborative network are realized, and stable operation of a network management platform is guaranteed.

The invention relates to a 4A account role permission management and control system based on business process authorization, and belongs to the technical field of information technology. The system comprises a data acquisition module, a post-role-business database, an importance degree weighting module, a to-be-authorized post input module, a data processing module, a role automatic authorization module, a role manual authorization module, a role auditing module, a business checking module, a role endowing module and the like. According to the invention, the role authority control of the 4A account can be realized, the role authorization can be automatically or manually performed on the post of the 4A account, the authorization accuracy is improved, the management efficiency is also improved, and the method is easy to popularize and apply.

The invention discloses a science and technology project archive digital management system and method, and belongs to the field of science and technology project archive management, and the system comprises an archive authority evaluation marking module, an analysis storage module, a registration login and authentication and encryption module; a right evaluation value is obtained by analyzing association complexity, updating frequency and the like of the archive, and an access right level is evaluated and stored in a hierarchical manner; an access key is generated and monitored during registration and login; performing three-level encryption on the file title, and displaying special characters when the file title is not decrypted; the method comprises the steps of authority level evaluation, file hierarchical storage, registration and login authentication and title encryption. The problems that in the prior art, file authority management is not fine, the encryption means is single, the login authentication process is tedious, and effective monitoring is lacked are solved, accurate authority management and control, title multi-level encryption and abnormal access monitoring are achieved, and the safety and efficiency of file management are improved.

The invention relates to the technical field of big data management, in particular to a big model metadata authority management method and system based on an RBAC-ABAC fusion model, and the method comprises metadata annotation, data product release, big model and user access, semantic perception, dynamic authority adjustment, row-level authority control and authority life cycle management. The method has the beneficial effects that by fusing the advantages of the RBAC model and the ABAC model, the defects of a single authority management model are overcome, the efficient, dynamic and fine-grained authority management of the large model metadata is realized, the security of the large model metadata is improved, and the authority management requirement of the large model for accessing the dynamic business data is met.

The invention provides an archive sharing authority control method and system applied to an archive hosting management system, and relates to the technical field of archive hosting management. The method comprises the following steps: firstly, calling a scene dependency relationship set (including upstream, downstream and parallel scene dependency sub-relationships) of an archive to be shared and behavior influence degree data (including influence records on each scene) of a sharing application user from a system, and then constructing a scene dependency chain and sorting according to association strength; analyzing the user behavior influence record and the scene dependency chain corresponding hierarchy to generate an influence degree conduction result, extracting the authority adaptation demand and scene influence weight of each hierarchy scene, and finally generating a dynamic sharing authority scheme through a multi-scene authority association algorithm of a dynamic authority derivation rule base. And a permission execution link is imported to realize user access permission configuration, so that the accuracy and flexibility of file sharing permission control are effectively improved.

The invention relates to an authority control system, method and device, computer equipment and a storage medium. The system comprises an SaaS platform and at least one sub-platform, the SaaS platform is used for distributing initial permission information to the sub-platform according to a permission template configured for the sub-platform in advance, the sub-platform is used for distributing corresponding permission to at least one user role according to the initial permission information, and the sub-platform is further used for receiving a data access request and sending the data access request to the SaaS platform. The sub-platform is used for acquiring a data access request and extracting role information in the data access request, the sub-platform is also used for acquiring a target permission corresponding to the role information, and when a permission corresponding to the data access request exists in the target permission, a corresponding data access operation is executed. By adopting the system, permission distribution and configuration of the SaaS platform to a plurality of SP platforms can be supported, and each SP platform can customize permissions according to requirements.

The invention discloses a data security protection system and method based on artificial intelligence, relates to the technical field of data security protection, and solves the technical problem that in the prior art, internal permission setting and outgoing management and control cannot be performed. The method specifically comprises the following steps: an internal authority control unit performs authority control on internal access of a storage data output department, sets an authority granting department and a temporary authority department, collects authorized access data and temporary access data, and deduces whether internal authority control is normal or not according to data analysis; the external sending management and control unit analyzes and controls external sending of the storage data, constructs an external sending mode, obtains external sending node information and external sending numerical value information, and analyzes and deduces whether the external sending mode is safe or not according to the information.

The embodiment of the invention relates to a dynamic permission control method and system based on user behavior characteristics, and the method comprises the steps: obtaining a basic access permission and a historical behavior baseline of a current user in response to a login operation; collecting current operation behavior characteristics of a current user, wherein the current operation behavior characteristics comprise a current access path and a current data query quantity; acquiring context environment information of the current user under the current operation; determining the current operation deviation degree of the current user by using a multi-dimensional scoring mechanism based on the historical behavior baseline, the current operation behavior characteristics and the context environment information; determining a risk level corresponding to the current operation based on the deviation degree of the current operation; and based on the determined risk level, performing risk control processing on the current user according to a preset risk control strategy. According to the embodiment of the invention, the abnormal behavior of the current user can be sensed in time and the response is made according to the preset risk control strategy to prevent data leakage.

The invention relates to the technical field of authority management, in particular to an authority control method and system for a school-enterprise information exchange platform, and the method comprises the steps: firstly, determining recent access attention reflecting the attention of a user to school-enterprise information; determining the platform access frequency similarity among the users according to the similarity of recent access attention among the users; further determining an initial clustering distance between the users according to the overall value centralized distribution condition of the recent access attention of all the marked page types corresponding to the users in combination with the previously calculated platform access frequency similarity; on this basis, the initial clustering is adjusted in combination with the platform access time period overlapping condition between the users, and after clustering is carried out according to the adjusted final clustering distance, the users with similar browsing habits are divided into a platform user clustering cluster; therefore, authority adjustment is carried out according to the overall characteristics of the user authority in the platform user cluster, so that the authority control effect of the school-enterprise information exchange platform is better.

The invention provides a public case library management method and system based on dynamic authority control, and the method comprises the steps: obtaining a department organization structure of an enterprise, setting the management authority of a public case library for each department, and associating a user with the department organization structure; the user selects the use case needing to be collected from the project, whether a collection permission exists or not is judged according to fuzzy matching of a department associated with the user and the use case library module, and if yes, the use case needing to be collected is written into the corresponding use case library module of the public use case library; selecting a reuse case from the public case library by a user, creating a new project case, and inheriting basic information of the case to be reused; the user selects the use case needing to be removed from the public use case library, whether the user has the collection permission or not is judged according to fuzzy matching of the department associated with the user and the use case library module, and if yes, the use case needing to be removed is removed from the corresponding use case library module of the public use case library. According to the method, a centralized public case library is constructed, and accurate classification and efficient maintenance of public cases are realized based on an authority control mechanism.

The embodiment of the invention provides an authority control method and device based on fine granularity, and the method comprises the steps: carrying out the node relation extraction of a mapping database, obtaining a role node and a product node, and introducing a user node and a context node; the method comprises the following steps: constructing a hyperedge structure, performing hyperedge linking on role nodes, product nodes, user nodes and service context nodes, determining a corresponding hyperedge relationship, performing dynamic weight endowing on the hyperedge relationship according to a time decay factor and a context risk coefficient, determining a dynamic graph structure, and constructing a directed acyclic graph based on the role inheritance relationship. Fusing the dynamic graph structure and the directed acyclic graph according to a graph algorithm, and determining a corresponding product permission layer graph database; the method comprises the steps of receiving a user operation instruction, performing context-aware query based on the operation instruction according to a graph traversal algorithm, determining a user permission, and performing permission control on a user according to the user permission. The method can improve the efficiency and the refinement degree of permission allocation.

The invention provides a network authority control method and device based on an IPv6 technology, equipment and a medium, and the method comprises the steps: obtaining an IPv6 address of a user in response to an access request of the user for an authority network; identifying identity information of the user based on the IPv6 address; distributing corresponding role information to the user based on the identity information, and obtaining permission information of the user according to the role information; and performing dynamic verification on the identity information and the role information of the user through a pre-trained zero-trust model, and performing permission control on the user passing the verification according to the permission information.

The invention discloses an ABAC-based power enterprise intelligent office knowledge authority management method, which comprises the following steps of: designing user attributes, knowledge attributes and an access mechanism by adopting an ABAC authority control framework, and constructing authority control models of companies, departments, organizations and personal documents; obtaining the authority control model, constructing an access control strategy library, and performing authority control on large model question and answer content through a question and answer control technology in document vectorization; establishing an authority control performance optimization strategy according to the authority control, and reducing the occupation of authority control check resources; according to the scheme, the strict safety control requirement of a power enterprise can be met, the requirements of knowledge sharing and intelligentization in the enterprise can be met, the consistency and real-time performance of user attribute data are ensured, the effectiveness of authority management is ensured, authority management and control of knowledge ontology and large model questions and answers are realized, knowledge safety is ensured, occupation of authority control check resources is reduced, and the enterprise experience is improved. And the system response speed is improved.

The invention provides a capability abstraction method for an industrial Internet of Things ubiquitous operating system, and belongs to the field of operating systems. According to the method, industrial Internet of Things resources are abstracted into capabilities, abstraction of resource access and authority control of the industrial Internet of Things resources is provided for applications, ubiquitous resources are abstracted through the most basic resource virtualization technology, and core functions which must be supported by different industrial Internet of Things ubiquitous operating systems are constructed. The method can solve the management problem of massive, heterogeneous, heterogeneous, autonomous and other ubiquitous resources of the industrial internet of things, is adaptive to dynamic and changeable upper-layer application scenes, meets the frequently changing application requirements, can support a flexible and diversified resource virtualization mechanism and a heterogeneous resource management function, focuses on application development and management support in a novel application mode, and has a wide application prospect. The method has a wide application prospect.