59 results about "Permission system" patented technology

The invention provides a visualization system capable of synchronously displaying multiple types of data according to time. Comprising a distributed service cluster composed of a micro-service, a user management micro-service, a data transmission micro-service, a data storage management micro-service, a data extraction micro-service, a data visualization display micro-service, a data visualization template management micro-service and a resource monitoring micro-service; the micro-services are packaged in a containerized manner and interact by adopting a lightweight communication protocol, and automatic deployment and dynamic expansion are realized through a container arrangement tool; the system is provided with a basic parameter set with customizable micro-service configuration and a graphical configuration interface which are used for cooperatively generating a system operation environment configuration strategy. The user management micro-service establishes a multi-dimensional authority system based on a role access control model, and records an operation log to realize audit tracking; the data transmission micro-service integrates a plurality of heterogeneous data access modes, carries out transmission process verification and carries out secure channel transmission through the service gateway.

Systems and methods provide for inherited access permissions, thereby facilitating read and write access by called contexts. Hardware logic may enforce access permissions in the system. When a processor core executes code associated with a first context, the processor core generates a first hardware signal identifying the first context. The processor core may then switch from the first context to the second context due to the first context calling the second context. The processor core may then generate a second hardware signal identifying the calling (first) context, and then the first hardware signal identifies the called (second) context. The hardware logic that enforces the access permissions may then determine that the second context is being called and that the second context includes either direct access permissions or inherited access permissions associated with the calling (first) context.

Systems and methods for managing resource access permissions for users with unknown credentials are disclosed herein. A resource access request may be received. A measure of risk may be determined. In response to determining that a first access level is permitted, the first user identifier may be inserted in a first access control list. Based on information regarding resources accessed by the first user, an updated measure of risk may be determined. In response to determining that a second access level is permitted, the first user identifier may be inserted in a second access control list.

The invention relates to a business system authority management method and device, computer equipment and a storage medium. The method comprises the following steps: distributing system permissions corresponding to business systems of a target mechanism on a system layer; in the multi-system role permission control layer, role permission systems corresponding to all the service systems are configured according to system permissions corresponding to all the service systems, and an online approval unit is constructed and used for distributing role data of a user in a corresponding target service system according to a role application request of the user; and in the multi-system role permission control layer, role permissions corresponding to the role data are allocated to the user according to a role permission system corresponding to the target service system. By adopting the method, unified authority management can be carried out on a plurality of systems, and automatic authority configuration is realized.

The invention relates to the technical field of data management and authority control, in particular to a basic-level data authority management method and system, and the method comprises the following steps: introducing four roles: a super administrator, a regional administrator, a data leader and a worker; the super administrator has global setting and supervision authority, including checking all ledgers and establishing department structures and roles; a region administrator manages data in a specified region and has a checking permission of a standing book in the region; the data leader is responsible for creating a machine account, distributing authority and monitoring data use conditions, and can authorize and adjust operation authority and field authority across departments; the base-level data authority management method and system have the beneficial effects that by introducing a role authority system and a large language model technology, the security, the high efficiency and the normalization of base-level data management are remarkably improved. The method not only ensures the integrity and accuracy of the data, but also improves the working efficiency through a flexible authorization mechanism.

The invention discloses a dynamic authority and data boundary control system and method based on behavior credit, and belongs to the technical field of computer security and access control. The method comprises the steps of collecting behavior data of a user in real time and constructing a time sequence feature vector, wherein the behavior data comprises user native data and system interaction data; dynamically calculating a behavior credit score of the user based on a time sequence model; mapping the behavior credit score to a fine-grained dynamic permission level through a nonlinear mapping function; and performing real-time authentication and control on data access, function calling and resource operation requests of the user according to the dynamic permission level. By establishing a dynamic credit evaluation and authority adaptive adjustment mechanism driven by behavior data, the technical problem that a traditional authority system is static and rigid and is difficult to adapt to the real-time trust state change of a user is solved, and the security and adaptive capability of a digital system are improved.

The embodiment of the invention provides a to-do task processing system and method, and relates to the field of information management. The system comprises a user side, a to-do system, a service system and an authority system, and the user side is configured to respond to access operation of a target user to a to-do task and send a to-do ID of the to-do task to the to-do system so as to acquire to-do template information associated with the to-do ID from the to-do system; in response to a processing operation of the target user on the to-be-handled task, sending the to-be-handled ID and the first page ID to a service system, so as to obtain page information of a first service page associated with the to-be-handled ID and the first page ID from the service system; associating the to-be-handled template ID with the first page ID, and sending the to-be-handled template ID, the first page ID, the to-be-handled ID and target user information of the target user to a permission system, so as to obtain first permission information of the target user for the first business page from the permission system; and rendering the page content based on the first permission information to present the page content to the target user.

The invention relates to an authority control method and device, a data management system, equipment and a storage medium. The method comprises the following steps: collecting fingerprint data corresponding to each touch operation from the first detection of the touch operation for a main operation interface of a system; according to the fingerprint data collected this time and fingerprint data collected before this time, determining a user state corresponding to the touch operation this time; under the condition of determining that the user state corresponding to the touch operation is a user change state, determining an authority level corresponding to the fingerprint data collected at the time; according to the permission level corresponding to the fingerprint data collected this time and the permission level corresponding to the fingerprint data collected before this time, a permission system corresponding to the touch operation this time is regulated and controlled. In the operation process, the user is dynamically identified, the permission level of the user is dynamically matched, and the permission system is adjusted, so that the purpose of adjusting the operation permission along with the change of the identity of the user in the operation process is achieved, and the data security is improved.

The application discloses a search platform object-level data permission management method for a non-uniform permission system and multi-source data, which sequentially comprises classification of multi-source data collectable by a search platform, establishment of search platform permission data standard specification, multi-source data permission requirement analysis, data source permission data processing, search platform target permission data processing, search platform target permission data collection, search platform knowledge production, search platform user permission configuration and personnel authentication in a search request; the method solves the problem that a permission model based on RBAC in the prior art cannot adapt to object-level data permission management requirements in a non-uniform permission system and a multi-data-source enterprise search platform, realizes compatibility of data permission management of different data sources, different permission systems and differentiated organization mechanisms, and the granularity of search platform data permission management reaches the object level.

The invention relates to the technical field of electric digital data processing, in particular to data protection. According to the technical scheme, hardware comprises a permission management and control platform and a three-member module, the three-member module comprises a system processing unit, a security secrecy unit and a security auditing unit, the three-member module is connected with the permission management and control platform, the permission management and control platform is connected with an application module, and the application module is connected with the system processing unit. The authority management and control platform comprises a user module and an audit log module, the security audit unit is unidirectionally connected with the system processing unit and the security secrecy unit through the audit log module, and the system processing unit is connected with the application module through the user module. The invention solves the problems of poor security, inconvenient management and low processing efficiency in the prior art, provides the authority system and the access method of the industrial software, and achieves the purposes of high security, flexibility, high efficiency, traceability of audit, data desensitization and dynamic management.

The application discloses an information technology consultation terminal based on big data analysis, which comprises a search instruction input module, a search instruction analysis module, a search instruction output module and a permission system module; the search instruction input module comprises an instruction input unit; the search instruction analysis module comprises a user unit and a server unit; the user unit comprises a user registration subunit, an identity verification subunit and a login subunit; user information collected by the user unit comprises user name, user certificate information and user face information; the application realizes the function of verifying whether the user is consistent with the registerer through the cooperation among the search instruction analysis unit, the user end, user registration and face recognition, the audit of the user face by face recognition, effectively solves the problem of stealing other people's account search, and avoids the problem of the leakage of personal privacy and enterprise internal server information, which causes great loss of enterprises.

Methods, systems, and apparatus, including computer programs encoded on computer storage media for data security protection are provided. One of the methods includes: receiving a job associated with a project, wherein the project is associated with one or more data sources; identifying a plurality of inputs and a plurality of outputs associated with the job; determining a plurality of required permissions associated with the job, wherein each of the required permissions comprises an operation on a required data source, the operation corresponding to at least one of the inputs or the outputs; verifying that the one or more data sources associated with the project comprise the required data source associated with each of the required permissions; and generating a token associated with the job, the token encoding the required permissions associated with the job, wherein the token is required for execution of the job.

The application provides a system internal dynamic dimension linkage jump method and device, electronic equipment and storage medium, relates to the field of computer software, and in particular to the system internal dynamic dimension linkage jump technology, which comprises the following steps: after a user logs in a system through an account, rendering the data of an initial page; when the user operates the page, recording the real-time data dimension of the page; when jumping to a new page, rendering the data of the new page according to the recorded real-time data dimension of the page before jumping. The application can avoid the data dimension level fault caused by page jumping in a multi-permission system, and has strong practicability.

The present application discloses a permission management method, device and computer-readable storage medium, the method comprising: based on a first association relationship among users, positions, resource groups and interfaces, determining a target resource group corresponding to the current user's position information in the resource group; based on the target resource group, determining a menu to be rendered and a button to be rendered corresponding to the current user; rendering the menu to be rendered and the button to be rendered based on the target resource group to obtain a front-end operation interface; sending the front-end operation interface to the front-end terminal corresponding to the current user to display the front-end operation interface on the front-end terminal. The present application introduces a permission system of "users, positions, resource groups and interfaces", and uses resource groups as the core to control permissions at the interface level for front-end and back-end permission control, thereby improving the security and flexibility of permission management.

Systems and methods to provide control of notification permissions are disclosed. Exemplary implementations may receive user-specific instructions to modify notification permissions for users; encrypt the user-specific instructions into user-specific sets of information; create a multi-user set of information by encrypting a combination of multiple user-specific sets of information; record the multi-user set of information on a permanent registry; receive a notification instruction to verify whether notifying a particular user on behalf of a particular organization is permitted; retrieve user-specific information for the particular user; determine whether notifying the particular user is permitted; and / or recommend or take action based on the determination.

The invention relates to the technical field of industrial asset management, and particularly discloses a cable intelligent management method and system based on rule verification and cooperative control, and the method comprises the steps: constructing a multi-dimensional basic configuration system which comprises ship environment parameters, cable basic material attributes, process specifications and user authority; setting a rule verification reference library containing design compliance rules, production process constraints and operation and maintenance health thresholds; a cross-role collaborative authority system is implemented and is used in the whole life cycle of design, production, laying and operation and maintenance of the cable. According to the method, the multi-dimensional basic configuration system covering the ship environment, the material attributes, the process specifications and the user permissions is constructed, and the verification reference library containing the full-process rules is combined, so that the information barriers of the links of design, production, laying and operation and maintenance are broken, mistakes and omissions of artificial data transcription are avoided, and the efficiency is improved. And unified management and compliance control of cable full life cycle data are realized.

Methods, systems, and apparatus, including computer programs encoded on computer storage media for data security protection are provided. One of the methods includes: receiving a job associated with a project, wherein the project is associated with one or more data sources; identifying a plurality of inputs and a plurality of outputs associated with the job; determining a plurality of required permissions associated with the job, wherein each of the required permissions comprises an operation on a required data source, the operation corresponding to at least one of the inputs or the outputs; verifying that the one or more data sources associated with the project comprise the required data source associated with each of the required permissions; and generating a token associated with the job, the token encoding the required permissions associated with the job, wherein the token is required for execution of the job.

The invention relates to the technical field of data permission, and provides a micro-service architecture-oriented user permission system building method and management system.The method comprises a permission initialization stage and a permission verification stage, in the initialization stage, each micro-service declarates the data permission through annotation, and in the permission verification stage, the data permission is verified; during starting, a permission list is generated through scanning, a mapping relation between interfaces and permissions is established, a unified permission module collects, synchronizes and constructs a global permission list, in a runtime stage, after a user logs in, a permission set of the user is inquired and cached to a session, and when a user request arrives, the permission list is stored. And whether access is allowed or not is determined by matching the permission required by the interface with the user cache permission. According to the method, centralized management and distributed authentication of the authority are realized through annotation, responsive and non-responsive technology stacks are supported, refined authority control is carried out based on the improved RBAC model, and the efficiency and safety of authority management of the micro-service system are improved.

An authentication-permission system includes devices, and a server to generate a private key for each device, and to deliver an extension identifier including an identifier to identify the device and permission information on the device. The server holds the identifier and the permission information on the device; generates the private key for the device from the extension identifier that includes the identifier to identify the device and the permission information; and delivers the generated private key, and the extension identifier to the device. The device executes mutual authentication with another device, by using the extension identifier and the private key of the device, and permits the other device a request to the device, in accordance with the permission information included in the extension identifier of the other device, in response to successful execution of the mutual authentication with the other device.

This invention provides a method, system, and medium for controlling data access permissions in a full-text search system, comprising: a business system permission system access step, in which the business system dynamically configures permission dimension information and user permission acquisition interface information to a permission control component, and assembles data within the permission control component; a data synchronization step, in which the permission control component merges the assembled data, and the data synchronization component finally writes it to a storage center; a data query step, in which user permissions are matched with data permissions, combined with the user's input conditions, to generate a query statement for querying; and an output step, in which the content within the user's permission scope that meets the user's query conditions is output. This invention solves the problem of which data users can view in a full-text search system, ensures data security during searches, meets the data search permission control needs of different business systems, and has significant potential for widespread application.

The invention provides a data resource authority management method and system, an authentication method and a change method.The management method comprises the steps that after an authority application of a data resource is received, a data resource ID and a data resource type ID corresponding to the data resource are searched for in an authority system, whether an authority subject corresponding to the authority application exists or not is determined, and if yes, the authority subject corresponding to the authority application does not exist; judging whether the data resource type is registered in the permission system or not; determining a corresponding data resource operation attribute, a data resource operation rule and an authorization decision rule according to the data resource ID and the data resource type ID; judging whether an authorization record which belongs to the same as the permission application exists or not, and performing permission approval on the permission application according to a judgment result and the data resource operation rule; granting a corresponding authority to the authority subject according to the authorization decision rule; according to the method, the security in the data resource authority management process is improved.

According to the data permission control strategy verification system and the control method thereof, the rule combination processing module is arranged, and on the premise that an existing permission system does not need to be reconstructed or modified, dynamic superposition of operation permissions of a data source level is supported; by arranging a rule number judgment module, a rule priority sorting module, a rule weight calculation module, a rule conflict judgment module and a rule combination processing module, permission rule combination and conflict resolution can be realized for different dimensions of permission rules which have different numbers, different priorities and possibly have conflict conditions; multiple control strategies can be dynamically superposed during operation; an authority rule template is defined in an authority rule management center, and a cache optimization technology adopting an LRU elimination strategy and a hierarchical cache strategy is adopted, so that the time consumption of authority verification is further reduced.

The invention provides a multi-user system authority management method and system applied to a micro-service architecture, a medium and a computer program product, belongs to the field of authority management, and solves the problem of how to perform multi-user system authority management under the condition of not modifying an authority system. The method comprises the following steps: receiving a micro-service login request sent by at least one user system through an account password for the first time after registering a login interface as a micro-service by modifying configuration file information; annotating role information generated by the user system in the micro-service through the configuration file information; after the account password is verified to be correct, marking the annotated role information as legal information, and allocating role permission; generating and returning a token for requesting resource data to the user system; and when the user system requests to access the resource data through the token, the user system can only request the resource data corresponding to the role permission carried by the token. The authority system of the user system does not need to be modified during authority management of the multi-user system.

The application discloses a resource permission data processing method and device, electronic equipment and storage medium, including responding to a data change request of a target resource, updating a resource tree structure in which the target resource is located in a cache based on a content addressing strategy; in response to a permission change request for a target role, updating a compressed bitmap associated with the target role in the cache, the compressed bitmap containing resource identifiers of resources authorized by the target role; in response to a permission judgment request of a target user on a target resource, reading cache role data associated with the target user and obtaining current role data based on a lazy loading mode; comparing the current role data and the cache role data to determine the validity of the permission. The application can avoid write amplification and cascading update storm caused by permission changes, and improve the overall performance of the permission system.

The invention discloses a satellite API (Application Program Interface) service access control and data service system, which relates to the field of satellite data processing, and comprises a Web interface presentation layer, a back-end service engine layer and a basic storage component layer, and the back-end service engine layer is integrated with a gateway system, an API spatial data service, an API model data service and an authority system. The gateway system carries out unified routing, identity authentication, access authority verification and calling frequency statistics on API access requests from a Web end or a third party, and forwards the requests passing verification to corresponding data services. The authority system is used for managing API authorization information and user identity certificates in a centralized mode, and the basic storage component layer supports efficient storage and access of API management data, authority data and satellite data through a relational database, object storage and cache storage. According to the invention, unified access control of multi-star-source satellite data is realized, and the security, controllability and expansibility of data service are improved.

The invention provides a system internal dynamic dimension linkage skipping method and device, electronic equipment and a storage medium, and relates to the field of computer software, in particular to a system internal dynamic dimension linkage skipping technology.The method comprises the steps that after a user logs in a system through an account, data of an initial page is rendered; when a user operates the page, recording the real-time data dimension of the page; and when jumping to a new page, rendering data of the new page according to the page real-time data dimension recorded before jumping. According to the method, data dimension hierarchy fault caused by page jump of a multi-permission system can be avoided, and the method has relatively high practicability.

The invention provides a role authority management method for a service platform, which belongs to the technical field of role authority management, and comprises the following steps of: 1, acquiring functional modules and business processes in the service platform, and determining business characteristics and security requirements of the platform; 2, configuring roles and authority systems according to business characteristics and in combination with the function range of each function module; 3, defining responsibilities and accessible resources of different roles, formulating a detailed permission list, and obtaining a role permission control strategy at a server side in combination with the roles and a permission system; and step 4, according to the role permission control strategy and in combination with behaviors and identities of the users, performing elastic adjustment on the user permissions, and realizing permission management of the service platform roles according to an adjustment result. The problem that the service platform role permission management method adopts static permission setting, the permission setting of the role cannot be changed, the permission management efficiency of the service platform is greatly reduced, and meanwhile, the management flexibility and adaptability are reduced is solved.

The present application relates to the technical field of system information security, and in particular to a permission management method based on dynamic multi-role and multi-classification, which constructs a three-level linkage permission model of personnel classification, project classification and file classification, stipulates the constraint relationship of the classification, and combines the automatic processes such as the classification audit at the project creation, the real-time verification of the access request, the linkage control of the member invitation and the file creation, to realize a dynamic, scalable and refined permission management system. An intelligent classification evaluation mechanism based on the BERT model and the industry knowledge graph is also introduced to support the automatic suggestion and dynamic adjustment of the file classification. The present application overcomes the problem of static rigidity of the classification division in the traditional permission system, which cannot adapt to the dynamic changes of the business; significantly reduces the operation complexity and the manual intervention cost, and improves the management efficiency; effectively solves the problem of insufficient permission control granularity and high security risk in the prior art.

The invention discloses a productization method of a Flowable workflow engine. The productization method comprises the following steps: carrying out multi-data source configuration based on a Springboot framework; determining an authority system introduction mechanism; and uniformly opening interfaces. The isolation of the double data sources ensures the data independence of the engine service and the business service, avoids mutual interference, and improves the security and processing efficiency of the data. According to the method, a clear permission introduction path is established, generation of permission vulnerabilities is avoided, only authorized users can perform corresponding operation on the workflow, and the security and reliability of the system are improved.

The application provides a message encryption authentication method based on a Wayland protocol and belongs to the technical field of message encryption authentication. The method comprises the following steps: based on a Wayland library, extending a connection module, and according to an advanced encryption standard encryption and decryption process, overloading communication write data and read data function interfaces to obtain overloaded communication write and read data function interfaces; through adding judgment logic of a key and judgment logic of an encryption algorithm, obtaining an overloaded client connection request function interface and an overloaded server communication channel creation function interface; defining a working mode and judging, and communicating through a Unix Socket channel to complete message encryption authentication. The application solves the problem that in the case that an existing message transmission is destroyed in a permission system, an attacker can hijack and monitor transmission data, and simultaneously realizes a client whitelist function, so that an illegal application not in the whitelist cannot initiate a connection request.