43 results about "Permission system" patented technology

The invention provides a visualization system capable of synchronously displaying multiple types of data according to time. Comprising a distributed service cluster composed of a micro-service, a user management micro-service, a data transmission micro-service, a data storage management micro-service, a data extraction micro-service, a data visualization display micro-service, a data visualization template management micro-service and a resource monitoring micro-service; the micro-services are packaged in a containerized manner and interact by adopting a lightweight communication protocol, and automatic deployment and dynamic expansion are realized through a container arrangement tool; the system is provided with a basic parameter set with customizable micro-service configuration and a graphical configuration interface which are used for cooperatively generating a system operation environment configuration strategy. The user management micro-service establishes a multi-dimensional authority system based on a role access control model, and records an operation log to realize audit tracking; the data transmission micro-service integrates a plurality of heterogeneous data access modes, carries out transmission process verification and carries out secure channel transmission through the service gateway.

The invention discloses a dynamic authority and data boundary control system and method based on behavior credit, and belongs to the technical field of computer security and access control. The method comprises the steps of collecting behavior data of a user in real time and constructing a time sequence feature vector, wherein the behavior data comprises user native data and system interaction data; dynamically calculating a behavior credit score of the user based on a time sequence model; mapping the behavior credit score to a fine-grained dynamic permission level through a nonlinear mapping function; and performing real-time authentication and control on data access, function calling and resource operation requests of the user according to the dynamic permission level. By establishing a dynamic credit evaluation and authority adaptive adjustment mechanism driven by behavior data, the technical problem that a traditional authority system is static and rigid and is difficult to adapt to the real-time trust state change of a user is solved, and the security and adaptive capability of a digital system are improved.

The embodiment of the invention provides a to-do task processing system and method, and relates to the field of information management. The system comprises a user side, a to-do system, a service system and an authority system, and the user side is configured to respond to access operation of a target user to a to-do task and send a to-do ID of the to-do task to the to-do system so as to acquire to-do template information associated with the to-do ID from the to-do system; in response to a processing operation of the target user on the to-be-handled task, sending the to-be-handled ID and the first page ID to a service system, so as to obtain page information of a first service page associated with the to-be-handled ID and the first page ID from the service system; associating the to-be-handled template ID with the first page ID, and sending the to-be-handled template ID, the first page ID, the to-be-handled ID and target user information of the target user to a permission system, so as to obtain first permission information of the target user for the first business page from the permission system; and rendering the page content based on the first permission information to present the page content to the target user.

The invention relates to an authority control method and device, a data management system, equipment and a storage medium. The method comprises the following steps: collecting fingerprint data corresponding to each touch operation from the first detection of the touch operation for a main operation interface of a system; according to the fingerprint data collected this time and fingerprint data collected before this time, determining a user state corresponding to the touch operation this time; under the condition of determining that the user state corresponding to the touch operation is a user change state, determining an authority level corresponding to the fingerprint data collected at the time; according to the permission level corresponding to the fingerprint data collected this time and the permission level corresponding to the fingerprint data collected before this time, a permission system corresponding to the touch operation this time is regulated and controlled. In the operation process, the user is dynamically identified, the permission level of the user is dynamically matched, and the permission system is adjusted, so that the purpose of adjusting the operation permission along with the change of the identity of the user in the operation process is achieved, and the data security is improved.

The application discloses a search platform object-level data permission management method for a non-uniform permission system and multi-source data, which sequentially comprises classification of multi-source data collectable by a search platform, establishment of search platform permission data standard specification, multi-source data permission requirement analysis, data source permission data processing, search platform target permission data processing, search platform target permission data collection, search platform knowledge production, search platform user permission configuration and personnel authentication in a search request; the method solves the problem that a permission model based on RBAC in the prior art cannot adapt to object-level data permission management requirements in a non-uniform permission system and a multi-data-source enterprise search platform, realizes compatibility of data permission management of different data sources, different permission systems and differentiated organization mechanisms, and the granularity of search platform data permission management reaches the object level.

The application discloses an information technology consultation terminal based on big data analysis, which comprises a search instruction input module, a search instruction analysis module, a search instruction output module and a permission system module; the search instruction input module comprises an instruction input unit; the search instruction analysis module comprises a user unit and a server unit; the user unit comprises a user registration subunit, an identity verification subunit and a login subunit; user information collected by the user unit comprises user name, user certificate information and user face information; the application realizes the function of verifying whether the user is consistent with the registerer through the cooperation among the search instruction analysis unit, the user end, user registration and face recognition, the audit of the user face by face recognition, effectively solves the problem of stealing other people's account search, and avoids the problem of the leakage of personal privacy and enterprise internal server information, which causes great loss of enterprises.

Methods, systems, and apparatus, including computer programs encoded on computer storage media for data security protection are provided. One of the methods includes: receiving a job associated with a project, wherein the project is associated with one or more data sources; identifying a plurality of inputs and a plurality of outputs associated with the job; determining a plurality of required permissions associated with the job, wherein each of the required permissions comprises an operation on a required data source, the operation corresponding to at least one of the inputs or the outputs; verifying that the one or more data sources associated with the project comprise the required data source associated with each of the required permissions; and generating a token associated with the job, the token encoding the required permissions associated with the job, wherein the token is required for execution of the job.

The application provides a system internal dynamic dimension linkage jump method and device, electronic equipment and storage medium, relates to the field of computer software, and in particular to the system internal dynamic dimension linkage jump technology, which comprises the following steps: after a user logs in a system through an account, rendering the data of an initial page; when the user operates the page, recording the real-time data dimension of the page; when jumping to a new page, rendering the data of the new page according to the recorded real-time data dimension of the page before jumping. The application can avoid the data dimension level fault caused by page jumping in a multi-permission system, and has strong practicability.

The present application discloses a permission management method, device and computer-readable storage medium, the method comprising: based on a first association relationship among users, positions, resource groups and interfaces, determining a target resource group corresponding to the current user's position information in the resource group; based on the target resource group, determining a menu to be rendered and a button to be rendered corresponding to the current user; rendering the menu to be rendered and the button to be rendered based on the target resource group to obtain a front-end operation interface; sending the front-end operation interface to the front-end terminal corresponding to the current user to display the front-end operation interface on the front-end terminal. The present application introduces a permission system of "users, positions, resource groups and interfaces", and uses resource groups as the core to control permissions at the interface level for front-end and back-end permission control, thereby improving the security and flexibility of permission management.

Systems and methods to provide control of notification permissions are disclosed. Exemplary implementations may receive user-specific instructions to modify notification permissions for users; encrypt the user-specific instructions into user-specific sets of information; create a multi-user set of information by encrypting a combination of multiple user-specific sets of information; record the multi-user set of information on a permanent registry; receive a notification instruction to verify whether notifying a particular user on behalf of a particular organization is permitted; retrieve user-specific information for the particular user; determine whether notifying the particular user is permitted; and / or recommend or take action based on the determination.

The invention relates to the technical field of industrial asset management, and particularly discloses a cable intelligent management method and system based on rule verification and cooperative control, and the method comprises the steps: constructing a multi-dimensional basic configuration system which comprises ship environment parameters, cable basic material attributes, process specifications and user authority; setting a rule verification reference library containing design compliance rules, production process constraints and operation and maintenance health thresholds; a cross-role collaborative authority system is implemented and is used in the whole life cycle of design, production, laying and operation and maintenance of the cable. According to the method, the multi-dimensional basic configuration system covering the ship environment, the material attributes, the process specifications and the user permissions is constructed, and the verification reference library containing the full-process rules is combined, so that the information barriers of the links of design, production, laying and operation and maintenance are broken, mistakes and omissions of artificial data transcription are avoided, and the efficiency is improved. And unified management and compliance control of cable full life cycle data are realized.

The invention relates to the technical field of data permission, and provides a micro-service architecture-oriented user permission system building method and management system.The method comprises a permission initialization stage and a permission verification stage, in the initialization stage, each micro-service declarates the data permission through annotation, and in the permission verification stage, the data permission is verified; during starting, a permission list is generated through scanning, a mapping relation between interfaces and permissions is established, a unified permission module collects, synchronizes and constructs a global permission list, in a runtime stage, after a user logs in, a permission set of the user is inquired and cached to a session, and when a user request arrives, the permission list is stored. And whether access is allowed or not is determined by matching the permission required by the interface with the user cache permission. According to the method, centralized management and distributed authentication of the authority are realized through annotation, responsive and non-responsive technology stacks are supported, refined authority control is carried out based on the improved RBAC model, and the efficiency and safety of authority management of the micro-service system are improved.

This invention provides a method, system, and medium for controlling data access permissions in a full-text search system, comprising: a business system permission system access step, in which the business system dynamically configures permission dimension information and user permission acquisition interface information to a permission control component, and assembles data within the permission control component; a data synchronization step, in which the permission control component merges the assembled data, and the data synchronization component finally writes it to a storage center; a data query step, in which user permissions are matched with data permissions, combined with the user's input conditions, to generate a query statement for querying; and an output step, in which the content within the user's permission scope that meets the user's query conditions is output. This invention solves the problem of which data users can view in a full-text search system, ensures data security during searches, meets the data search permission control needs of different business systems, and has significant potential for widespread application.

The invention provides a data resource authority management method and system, an authentication method and a change method.The management method comprises the steps that after an authority application of a data resource is received, a data resource ID and a data resource type ID corresponding to the data resource are searched for in an authority system, whether an authority subject corresponding to the authority application exists or not is determined, and if yes, the authority subject corresponding to the authority application does not exist; judging whether the data resource type is registered in the permission system or not; determining a corresponding data resource operation attribute, a data resource operation rule and an authorization decision rule according to the data resource ID and the data resource type ID; judging whether an authorization record which belongs to the same as the permission application exists or not, and performing permission approval on the permission application according to a judgment result and the data resource operation rule; granting a corresponding authority to the authority subject according to the authorization decision rule; according to the method, the security in the data resource authority management process is improved.

According to the data permission control strategy verification system and the control method thereof, the rule combination processing module is arranged, and on the premise that an existing permission system does not need to be reconstructed or modified, dynamic superposition of operation permissions of a data source level is supported; by arranging a rule number judgment module, a rule priority sorting module, a rule weight calculation module, a rule conflict judgment module and a rule combination processing module, permission rule combination and conflict resolution can be realized for different dimensions of permission rules which have different numbers, different priorities and possibly have conflict conditions; multiple control strategies can be dynamically superposed during operation; an authority rule template is defined in an authority rule management center, and a cache optimization technology adopting an LRU elimination strategy and a hierarchical cache strategy is adopted, so that the time consumption of authority verification is further reduced.

The invention provides a multi-user system authority management method and system applied to a micro-service architecture, a medium and a computer program product, belongs to the field of authority management, and solves the problem of how to perform multi-user system authority management under the condition of not modifying an authority system. The method comprises the following steps: receiving a micro-service login request sent by at least one user system through an account password for the first time after registering a login interface as a micro-service by modifying configuration file information; annotating role information generated by the user system in the micro-service through the configuration file information; after the account password is verified to be correct, marking the annotated role information as legal information, and allocating role permission; generating and returning a token for requesting resource data to the user system; and when the user system requests to access the resource data through the token, the user system can only request the resource data corresponding to the role permission carried by the token. The authority system of the user system does not need to be modified during authority management of the multi-user system.

The application discloses a resource permission data processing method and device, electronic equipment and storage medium, including responding to a data change request of a target resource, updating a resource tree structure in which the target resource is located in a cache based on a content addressing strategy; in response to a permission change request for a target role, updating a compressed bitmap associated with the target role in the cache, the compressed bitmap containing resource identifiers of resources authorized by the target role; in response to a permission judgment request of a target user on a target resource, reading cache role data associated with the target user and obtaining current role data based on a lazy loading mode; comparing the current role data and the cache role data to determine the validity of the permission. The application can avoid write amplification and cascading update storm caused by permission changes, and improve the overall performance of the permission system.

The invention discloses a satellite API (Application Program Interface) service access control and data service system, which relates to the field of satellite data processing, and comprises a Web interface presentation layer, a back-end service engine layer and a basic storage component layer, and the back-end service engine layer is integrated with a gateway system, an API spatial data service, an API model data service and an authority system. The gateway system carries out unified routing, identity authentication, access authority verification and calling frequency statistics on API access requests from a Web end or a third party, and forwards the requests passing verification to corresponding data services. The authority system is used for managing API authorization information and user identity certificates in a centralized mode, and the basic storage component layer supports efficient storage and access of API management data, authority data and satellite data through a relational database, object storage and cache storage. According to the invention, unified access control of multi-star-source satellite data is realized, and the security, controllability and expansibility of data service are improved.

The invention provides a system internal dynamic dimension linkage skipping method and device, electronic equipment and a storage medium, and relates to the field of computer software, in particular to a system internal dynamic dimension linkage skipping technology.The method comprises the steps that after a user logs in a system through an account, data of an initial page is rendered; when a user operates the page, recording the real-time data dimension of the page; and when jumping to a new page, rendering data of the new page according to the page real-time data dimension recorded before jumping. According to the method, data dimension hierarchy fault caused by page jump of a multi-permission system can be avoided, and the method has relatively high practicability.

The invention provides a role authority management method for a service platform, which belongs to the technical field of role authority management, and comprises the following steps of: 1, acquiring functional modules and business processes in the service platform, and determining business characteristics and security requirements of the platform; 2, configuring roles and authority systems according to business characteristics and in combination with the function range of each function module; 3, defining responsibilities and accessible resources of different roles, formulating a detailed permission list, and obtaining a role permission control strategy at a server side in combination with the roles and a permission system; and step 4, according to the role permission control strategy and in combination with behaviors and identities of the users, performing elastic adjustment on the user permissions, and realizing permission management of the service platform roles according to an adjustment result. The problem that the service platform role permission management method adopts static permission setting, the permission setting of the role cannot be changed, the permission management efficiency of the service platform is greatly reduced, and meanwhile, the management flexibility and adaptability are reduced is solved.

The present application relates to the technical field of system information security, and in particular to a permission management method based on dynamic multi-role and multi-classification, which constructs a three-level linkage permission model of personnel classification, project classification and file classification, stipulates the constraint relationship of the classification, and combines the automatic processes such as the classification audit at the project creation, the real-time verification of the access request, the linkage control of the member invitation and the file creation, to realize a dynamic, scalable and refined permission management system. An intelligent classification evaluation mechanism based on the BERT model and the industry knowledge graph is also introduced to support the automatic suggestion and dynamic adjustment of the file classification. The present application overcomes the problem of static rigidity of the classification division in the traditional permission system, which cannot adapt to the dynamic changes of the business; significantly reduces the operation complexity and the manual intervention cost, and improves the management efficiency; effectively solves the problem of insufficient permission control granularity and high security risk in the prior art.

The invention discloses a productization method of a Flowable workflow engine. The productization method comprises the following steps: carrying out multi-data source configuration based on a Springboot framework; determining an authority system introduction mechanism; and uniformly opening interfaces. The isolation of the double data sources ensures the data independence of the engine service and the business service, avoids mutual interference, and improves the security and processing efficiency of the data. According to the method, a clear permission introduction path is established, generation of permission vulnerabilities is avoided, only authorized users can perform corresponding operation on the workflow, and the security and reliability of the system are improved.

The application provides a message encryption authentication method based on a Wayland protocol and belongs to the technical field of message encryption authentication. The method comprises the following steps: based on a Wayland library, extending a connection module, and according to an advanced encryption standard encryption and decryption process, overloading communication write data and read data function interfaces to obtain overloaded communication write and read data function interfaces; through adding judgment logic of a key and judgment logic of an encryption algorithm, obtaining an overloaded client connection request function interface and an overloaded server communication channel creation function interface; defining a working mode and judging, and communicating through a Unix Socket channel to complete message encryption authentication. The application solves the problem that in the case that an existing message transmission is destroyed in a permission system, an attacker can hijack and monitor transmission data, and simultaneously realizes a client whitelist function, so that an illegal application not in the whitelist cannot initiate a connection request.

A system and method for enabling augmented reality effects in a web browser without requiring additional software installation are disclosed. A web server provides a range of selectable effects to a website. When an effect is selected, the website loads a page specific to that effect, including a live preview of the effect applied to a video feed from the user's webcam. This allows the user to see themselves with the effect applied in real time. The website requests access to the webcam and microphone via the browser's built-in permissions system. Captured photos and videos with the effect applied can be saved locally or shared via native operating system tools. This system provides an engaging augmented reality experience that is directly accessible via a standard web browser without the need for a dedicated app.

The invention discloses a permission system implementation method and system based on interface detection, and relates to the technical field of computer software security, and the method comprises the following steps: full-interface forced permission verification: all service interfaces are covered by a permission verification layer; centralized dynamic authority management and unified maintenance of authority configuration are realized, updating during operation and business customization expansion are supported, and authority rules are associated to an interface through annotations; front and back end authority processing is simplified, and the server side directly configures the authority through interface layer annotation. According to the method, all service interfaces are ensured to be verified by a unified permission verification layer without exception, security vulnerabilities caused by verification omission are thoroughly eliminated, the maintainability and the flexibility of a system are remarkably improved, permission rules are directly bound to the interfaces in an annotation-driven mode, and the permission rules are intercepted by a section to automatically execute verification, so that the verification efficiency is improved. Therefore, the server does not need to write redundant permission codes, the development complexity is greatly reduced, the development efficiency is improved, and meanwhile the consistency, integrity and safety of permission control are guaranteed.

The application discloses a natural disaster early warning and tourism safety emergency response system, comprising: a data layer constructs a space-time disaster causal network, a root node is configured with a disaster characteristic matrix containing an influence radius and a disaster-causing intensity, nodes and edges have geographic coordinates and time delay attributes, each edge has a time lag coefficient, an intermediate node is activated and needs an upstream weighted summation value to be greater than 0.7, a decision layer establishes disaster interaction edges and coupling operators when multiple root nodes are concurrent, forms a dynamic composite causal graph, outputs a nonlinear superposition effect of facility preservation and evacuation efficiency by a graph neural network, calls a real-time crowd simulation engine to generate a pareto optimal response scheme set, and an edge layer deploys the engine and a decision tree model obtained by knowledge distillation. An interaction layer converts the scheme into differentiated instructions and forcibly pushes the differentiated instructions to a guide and a tourist terminal through a three-level permission system, and the instructions are attached with digital signatures.

The embodiment of the invention provides a permission processing method and device, a storage medium and a program product. In the permission processing method, the authorization decision object is associated with the operation permission and is not associated with the resource, so that when the permission of the target object to the first operation type of the first resource is configured, a new authorization decision object does not need to be created according to the first resource and the first operation type; however, the created first authorization decision-making object corresponding to the first operation type can be reused, and the corresponding relation between the first authorization decision-making object and the first resource is dynamically established. Based on the implementation mode, the created authorization decision-making object can be repeatedly used according to the operation type of the requested operation authority, so that the probability that a large number of authorization decision-making objects are newly added due to the fact that the types of resources applicable to the operation authority are increased is reduced; the number of authorization decision-making objects in the authority system can be maintained in a stable range, the definition and maintainability of the authority system are improved, and therefore the management cost of the authority system is reduced.

Systems and methods provide for inherited access permissions, thereby facilitating read and write access by called contexts. Hardware logic may enforce access permissions in the system. When a processor core executes code associated with a first context, the processor core generates a first hardware signal identifying the first context. The processor core may then switch from the first context to the second context due to the first context calling the second context. The processor core may then generate a second hardware signal identifying the calling (first) context, and then the first hardware signal identifies the called (second) context. The hardware logic that enforces the access permissions may then determine that the second context is being called and that the second context includes either direct access permissions or inherited access permissions associated with the calling (first) context.

A system 100 for managing user permissions for accessing a data store comprises a central permissions database 115 storing user permissions for accessing one or more documents stored in a data store,

The invention discloses a model-driven code-free configuration development method and system, relates to the technical field of platform development, and aims to construct a visual configuration system based on a metadata model and realize cross-platform data interaction and real-time dynamic updating through a directional data association and multi-modal view rendering technology. A lightweight metadata-driven architecture is adopted as the core, a standardized interface, hierarchical authority control and a dynamic routing strategy are integrated, and the double requirements of high concurrency and high availability are considered. Multi-source data access and efficient scheduling are realized through a unified abstraction layer, and an intelligent cache mechanism and a dynamic load balancing algorithm are combined to ensure that the system is quick in overall response and stable in operation. The overall design gives consideration to expansibility and safety, is compatible with a multi-terminal access scene, realizes deep collaboration and refined management and control of a model, a view and an authority system, and effectively improves the system operation efficiency and the user experience.