330 results about "User Privilege" patented technology

The invention relates to a method and system for encrypting and isolating storage data of a credential mobile terminal, and belongs to the technical field of information. The method comprises the following steps: encrypting and partitioning the whole storage area, and setting an access strategy according to user permission; when a user requests to access, executing multi-factor authentication containing a password and an external hardware certificate, and adding biological characteristic authentication; after the authentication is passed, an encryption key is taken from the domestic security chip; and encrypting and decrypting data by using the secret key, and opening corresponding partition access according to authority. The system comprises a storage partition module, an identity authentication module, a key management module, an encryption and decryption module and an authority control module and is used for executing the method. The method also comprises the steps of equipment startup trusted boot and firmware upgrade verification, is based on a custom curing system, and is compatible with Android 10 +. The problems of poor hardware controllability and positioning security risk of the creative mobile terminal are solved, and full-link data security protection is realized.

The invention provides a data retrieval method, system and device, and relates to the technical field of big data processing, the method comprises the following steps: obtaining a search text of a user; performing data permission assembly according to the search text to obtain a user permission set of the user; according to the user permission set, generating a retrieval filtering condition of the search text; according to the retrieval filtering condition, performing multi-source data search in combination with the search text to obtain an initial retrieval result corresponding to the search text; and performing unauthorized rejection operation on the initial retrieval result to obtain a final retrieval result of the search text. According to the method, the range is defined through permission assembly, the condition focusing target is filtered, the efficiency is improved through pre-matching, and the precision is guaranteed through post-removing, so that the retrieval data volume is compressed to improve the efficiency, and the matching pertinence is enhanced to improve the precision.

The invention relates to the technical field of artificial intelligence, in particular to a method and system for achieving large model access authentication and flow control based on an APISIX gateway, and the method comprises the following steps: a client generates an HTTPS request containing an APIKey, and sends the HTTPS request to an APISIX gateway cluster; the gateway extracts the APIKey and forwards the APIKey to an authentication service, and the validity of the key is verified; after the verification is passed, the authentication service returns a user permission matrix, and the gateway verifies whether the request is within a permission range; after the permission verification is passed, the flow control plug-in detects a flow index according to a preset strategy; when the flow index does not exceed the limit, the gateway forwards the request to the large model service and returns a result; when the flow index exceeds the limit, the gateway executes flow limiting / fusing processing and returns a corresponding error response; the method has the beneficial effects that the gateway executes request forwarding or flow limiting control based on the preset strategy, the problems of illegal access risk and resource allocation imbalance faced by the large model service are effectively solved, the service stability and the resource utilization efficiency are improved, and the method is suitable for security operation and maintenance of the large model service in multiple scenes.

The invention discloses a row-level data permission authorization method and device, equipment and a medium, and relates to the technical field of computers. Comprising the following steps: registering basic data into a preset database; configuring a corresponding field management user with a field management authority for the preset service field; creating or updating a record in a user data permission table based on the user permission application to determine a permission relationship between the user identifier and the entity data; registering a service data table and a mapping relation between an entity column and an entity type in the service data table in a preset service field based on a user instruction of a field management user; and dynamically generating a permission filtering condition based on the query SQL and the user identifier so as to generate an SQL statement with permission filtering, and querying corresponding service data from the service data table based on the mapping relationship so as to generate a corresponding query result based on the service data. Therefore, the efficiency and flexibility of line-level data permission authorization can be improved on the premise of ensuring data security.

The invention discloses an Internet of Things process engine automatic arrangement method and system based on a large model. The method comprises the steps of obtaining a process demand described by a natural language of a user; the method comprises the following steps: analyzing a natural language of a user through a first-layer large model, and identifying related equipment, variables, conditions and action information; information identified by the first-layer large model serves as input of a second-layer large model, and the second-layer large model matches actual corresponding equipment and variable information under the user permission based on the user token, the equipment and the variable information; transmitting actual corresponding equipment, variables, conditions and action information under the user permission to a third-layer large model; and the third-layer large model matches the corresponding flow nodes according to the received information, the matched flow nodes are connected in series through a connecting line, and a structured flow JSON is generated. According to the method, the fuzzy natural language intention is gradually converted into an accurate and executable structured process through the three-layer large model, and the accuracy of an output result of each link is improved.

The invention relates to the technical field of computer networks, in particular to a webpage project construction and access control method, which comprises the following steps: acquiring a Web project source code file, packaging the Web project source code file, configuring a root directory to correspond to the action of a rendering page, and generating a packaged resource file; uploading the packaged resource file to a code warehouse for code hosting, triggering an assembly line execution process, and storing the packaged resource file in a workpiece generated in the assembly line execution process; receiving an access request of a user, and determining item positioning information through a unique identifier in the access request; verifying the user access authority; if the user permission state indicates that the user permission verification is passed, requesting a corresponding resource file from a workpiece, and generating rendering page information containing API basic address information; and sending the rendering page information to a browser for page rendering.

The invention provides a data dynamic exporting method and system based on template configuration. The method comprises the steps that a data exporting request for exporting data in a data source in a report form is obtained; verifying the user permission data in the request to generate a verification result; when the verification result is that the verification is passed, generating a dynamic SQL statement according to template metadata corresponding to the template classification data; executing paging query according to the dynamic SQL statement, and performing data processing and streaming writing on data acquired from a data source to which data to be exported belongs in batches; and when the paging query is finished and data processing and streaming writing of the data obtained in the last batch are completed, generating a temporary file, and returning a downloading link to the client for triggering downloading of the data in the temporary file and generating a report corresponding to the data export request. According to the method and the system, the template adjustment efficiency is improved, the memory consumption is reduced, and the big data export success rate is greatly improved.

Systems and methods for end user elevation and anonymous administrative login are disclosed. An agent executing on a client device can provide a graphical element within a user interface presented by the client device upon detection of a request for elevated user privileges. Upon an interaction with the graphical element, the agent transmits, to a server, data corresponding to the request for elevated user privileges, and receives, from the server, a message indicating approval of the request for elevated user privileges. The agent provides, to the operating system of the client device, an indication that the request for elevated user privileges is approved.

The invention belongs to the technical field of geo-fences and real-time social contact, and discloses a real-time coexistence user social contact system and method based on geo-fences, and the method comprises the steps: collecting the multi-dimensional multi-modal original data of a user through a dynamic sampling strategy and an energy efficiency balance mechanism, and generating an information-desensitized four-dimensional data set; constructing four layers of fences, evaluating the value attribute of each fence, carrying out life cycle management, dynamically adjusting the fence state, and forming a four-dimensional fence value network; identifying a basic event, a composite event and a cooperative event in a grading manner, constructing a real-time value flow through event value quantification, and generating a dynamic rule set adaptive to a scene; user permissions are distributed through the three-dimensional value permission matrix, the multi-dimensional value point system is linked to complete point generation and transaction, and a value circulation record including permission states, point changes and transaction records is formed; the value health degree is analyzed through a real-time, short-term and long-term three-level optimization mechanism, optimization parameters are generated, and the optimization parameters are reversely iterated to corresponding preorder links.

The invention discloses a security cooperative processing method based on a chip technology, a medium and a product, and relates to the field of data security, and the method comprises the steps: embedding a security chip in chip equipment, and presetting a chip-level security suite corresponding to the security chip; when a user starts the chip-level security suite through the chip equipment, a handshake request is initiated to the equipment management platform through an HTTP protocol; before data is written into the storage medium, plaintext data is encrypted into a ciphertext by using an SM4 encryption algorithm engine in the security chip, and data writing is carried out according to different types of storage protocols; during data transmission, a legal receiver list is generated based on user permission by using an equipment management platform, and after a user authorizes a receiver, a public key corresponding to the receiver is distributed by using the equipment management platform. According to the application, the security chip, the U-Key, the tablet / all-in-one machine and the equipment management platform can be organically fused to form a security protection entirety, so that a user is assisted, and the data security is improved.

The invention discloses an anti-leakage encryption system and method based on power grid data, and relates to the technical field of power grid data security encryption, and the method comprises the steps: dividing encryption levels according to power grid data sensitivity levels, and matching algorithms; during service operation, generating a dynamic key seed based on a real-time scene, and binding the dynamic key seed with data transfer node information to generate an initial dynamic key; user permission change is monitored, and the secret key is automatically updated according to the newest role and node information when conditions are met; encrypting each level of data by adopting a corresponding algorithm and a dynamic key to form a ciphertext; and performing permission verification during access, and decrypting the ciphertext by using the corresponding key and algorithm according to the authorized decryption hierarchy. According to the method, the real-time linkage of encryption protection, the data flow state and the user permission change is realized, so that a security mechanism can dynamically adapt to the service scene change, and the active defense capability of power grid data leakage prevention and the immediate effectiveness of permission control are enhanced.

The invention discloses a wireless network security management method and system. In the method, a system initialization module completes initialization, calls a key management module to generate signatures of a platform end and wireless equipment and encrypts asymmetric key pairs, and a wireless equipment management module records basic information of storage equipment. Before wireless equipment accesses, an authentication request containing first encryption information and first signature information is initiated through a request gateway module, after a platform end decrypts and verifies the signature to complete equipment authentication, second encryption information and second signature information are returned, and an equipment end decrypts and verifies the signature to complete bidirectional authentication. And network access is allowed in combination with the white list and the equipment registration state, and an administrator completes identity authentication and authority verification through the user authority management module and the request gateway module. After the equipment accesses the network, heartbeat communication and bidirectional authentication are carried out at regular intervals, equipment communication is controlled through a network communication strategy, and operation monitoring, situation analysis and log auditing are synchronously carried out. According to the invention, the problems of high access and operation and maintenance management security risk and the like in the prior art are solved.

The invention discloses a self-adaptive scheduling industrial internet data acquisition control system and strategy, and relates to the technical field of industrial internet data acquisition and self-adaptive scheduling control, and the system comprises a data sensing layer, a deployment multi-type intelligent sensor group, an edge gateway and a hybrid communication module. The sensor supports multi-protocol adaptive access and dynamically switches sampling frequency, the edge gateway preprocesses original data, and the communication module guarantees stable transmission through wired and wireless hybrid networking; the self-adaptive scheduling layer comprises a task grading unit, a load monitoring unit and a dynamic scheduling unit; the edge calculation layer is used for processing tasks with high real-time performance; the cloud collaboration layer stores data and mines, analyzes and constructs an equipment model; the security protection layer realizes identity verification, data encryption and intrusion detection; and the system management layer manages the full life cycle of the equipment and divides user permissions. According to the system, the problem of traditional industrial internet data acquisition scheduling pain points is solved, and the overall operation efficiency and safety of the system are effectively improved.

The invention discloses a user authority management method, system and device and a storage medium, and the method comprises the steps: constructing a four-layer access control architecture of a monitoring layer, and configuring an authority mechanism of the monitoring layer; constructing a three-dimensional authority management framework of the controller layer, and configuring an authority mechanism of the controller layer; and mapping the authority level of the monitoring layer and the authority level of the controller layer. According to the method, decoupling of the authority of the monitoring layer and the authority of the controller layer is achieved, and complexity of classified management of the authority of the controller layer by the monitoring layer is avoided.

The invention relates to the technical field of augmented reality, in particular to an AI-based Unity engine AR scene persistence and sharing editing method. According to the method, a real scene is perceived and understood in real time through an integrated AI module, and scene semantic information is generated; an AR scene is constructed in a Unity engine, and accurate registration of a virtual object and a real environment is realized based on semantic information; performing structured coding and versioning persistent storage on the scene data; establishing a multi-user shared editing network architecture, and transmitting an editing instruction by adopting an event-driven protocol; and coordinating operation of each client through a synchronization engine, and implementing a conflict detection and solution mechanism to maintain data consistency. According to the system, user authority management, a space anchoring system and a self-adaptive optimization module are integrated at the same time, a visual editing interface and an extensible plug-in architecture are supported, high-precision construction, reliable persistence and efficient multi-user collaborative editing of an AR scene are achieved, and the stability, compatibility and user experience of the system are improved.

The embodiment of the invention provides a trusted Internet of Things data acquisition and access control method based on TEE and a block chain. The method is applied to the field of network security and Internet of Things data protection, and comprises the following steps: encrypting, signing and binding credible timestamps of collected original data by using a credible execution environment, constructing a credible data packet and generating a block chain transaction; when a user initiates an access request, a trusted execution environment initiates an acquisition request to a block chain network actively, and acquires a preset access control strategy from an intelligent contract deployed on a block chain; the trusted execution environment verifies the access authority of the user according to the obtained access control strategy and request information carried when the user initiates the access request; and if the user permission verification is passed, the trusted execution environment performs decryption operation on the encrypted data requested to be accessed by the user by using the pre-stored decryption key corresponding to data encryption, and provides the decrypted data for the user, so that the security and reliability of data access are improved.

The invention provides a financial question and answer method and device based on intelligent retrieval and a large language model. The method comprises the steps that firstly, a multi-dimensional financial knowledge base is built based on permission dimensions and knowledge dimensions; then knowledge in the knowledge base is converted into semantic vectors, and a vector index database is constructed to support accurate retrieval; when a user query is responded, identifying a user permission level and a knowledge category related to the query, decomposing the query into at least one sub-task, distributing the sub-task to the sub-Agents corresponding to the permission and the knowledge category for retrieval, and obtaining a sub-task retrieval result; and finally, the result is input into a large language model to generate an answer, and the large language model can maintain dialogue context and support multi-round questions to generate a new answer. Accurate retrieval of financial knowledge, efficient processing of complex questions and multi-round interactive question answering are achieved, the question answering accuracy, the intelligent level and the user experience are improved, and the method is suitable for policies and regulations query, business rule interpretation and other scenes in the financial field.

The invention discloses an unmanned aerial vehicle data sharing method and device based on privacy protection, and the method comprises the steps: collecting flight data, environment perception information and task state data through an unmanned aerial vehicle, combining an operation instruction, scheduling information and user authority data of a ground control end, and intelligently recognizing to-be-shared privacy data. According to the data type and the sensitivity level, the system performs protection processing on the sensitive data by adopting a privacy computing technology such as homomorphic encryption or differential privacy, generates protected data and uploads the protected data to a sharing platform through a secure channel. The platform directly executes cooperative calculation and analysis on the protected data without decryption, generates an intermediate result, and feeds back the intermediate result to a related terminal after inverse processing. The risk of data leakage caused by calculation after decryption in a traditional encryption scheme is solved, the high-efficiency multi-party cooperative calculation capability is maintained while absolute security of sensitive information is guaranteed, and a solution which gives consideration to privacy protection and data value mining is provided for an unmanned aerial vehicle system.

The invention relates to the technical field of artificial intelligence, and discloses a user permission verification method and system based on a generative AI session mode, and the method comprises the steps: receiving permission request information and a dynamic access environment fingerprint generated by a permission request user through a generative AI session interface, analyzing the current operation sensitivity based on a request resource and an operation intention, and carrying out the verification of the current operation sensitivity; based on the user identity, performing authorizable level verification on the permission demand level to obtain an initial authorization level; evaluating an environment risk level of a permission request environment corresponding to the permission request user by using the dynamic access environment fingerprint; and querying a historical request behavior of the limited request user, and based on the historical request behavior, the current operation sensitivity and the environmental risk level, calculating an authority granting risk value so as to perform secondary authorizable level verification on the initial authorization level to obtain a target authority level. According to the invention, the user access authority can be dynamically adjusted.

The embodiment of the invention discloses a risk monitoring method and device for authority information, electronic equipment, a medium and a program, and the method comprises the steps: responding to an authority change event of a target user, and generating authority change information of the target user; determining a behavior risk level of a current detection behavior of the target user according to the user permission portrait information of the target user; and generating a permission processing strategy of the target user according to the behavior risk level of the current detection behavior of the target user and the permission change information. According to the technical scheme of the embodiment of the invention, the authority configuration time delay can be reduced, and the authority information risk management and control precision and efficiency are improved.

The invention provides a user permission dynamic adjustment method and device, equipment and a medium, and the method predicts a target permission required by a target service based on a permission prediction model and a target service context vector when a service change instruction is detected. And on the basis of the permission prediction model and the target user behavior sequence, the real-time permission demand of the user and the confidence coefficient corresponding to the user behavior risk are predicted, so that the permission prediction accuracy is improved, and the data leakage risk is reduced. Based on the current permission of the target user and the target permission set, the user does not need to perform manual application and approval, and the approval of the incremental permission is automatically generated, so that the permission adjustment operation is simplified, and the permission adjustment efficiency and the adjustment accuracy are improved. The method can be applied to authority approval nodes in the financial business field or the medical pension field, so that the authority approval efficiency and accuracy are improved.

The invention discloses a knowledge base and knowledge graph dynamic access control method and system based on AI classification and grading, and relates to the technical field of data security and access control. Automatically classifying and grading text segments or knowledge graph entities by using an AI model through a data preprocessing module, generating structured tags, and binding the structured tags with original data; after the data are associated and stored to the database through the structured storage module, the authority management module maintains the accessible classification and grade range of the user; and the query filtering module calls the user permission and dynamically filters the retrieval result when the user retrieves, and only returns the authorized content. According to the method, automatic and fine-grained dynamic access control based on data content semantics is realized, the problems of dependence on manual labeling, coarse access control granularity and insufficient flexibility in the prior art are solved, data security and retrieval efficiency are considered, and the method is adaptive to multiple coincidence rules and standards.

The invention provides a large model routing method and device combined with a reward model, and relates to the technical field of artificial intelligence model dynamic routing, and the method comprises the steps: obtaining a question inputted by a user, and determining a candidate model set according to the user authority and a preset priority rule; performing sensitive information judgment on the question through a sensitive detection model, directly returning a preset answer if sensitive information is detected, and otherwise, entering the next step; carrying out reward evaluation on each model in the candidate model set based on a routing function, training the routing function through a knowledge distillation technology, and optimizing a model selection strategy by taking KL divergence as a loss function; and according to an evaluation result of the routing function, dynamically distributing the problem to a target model with the highest reward value for reasoning, and outputting a processing result of the target model. According to the method, the calculation overhead of large model integration can be effectively reduced, the intelligent level of routing decision is improved, and the system resource utilization rate and the response efficiency are remarkably improved.

The application discloses a work order list self-defined view management system and method for nuclear power plant group reactor group. The system comprises a front-end interaction layer, a business logic layer, a data access layer and a plant group reactor group adaptation layer. The front-end interaction layer is used for realizing the interaction between a user and the system, and comprises a view configuration panel, a list display module and a permission verification component. The business logic layer comprises a view self-defined engine and a configuration persistence module. The data access layer comprises a view configuration library and a work order business library. The view configuration library is used for storing view configuration information and associating user and organizational structure information. The work order business library is used for storing nuclear power work order full-field data. The plant group reactor group adaptation layer is used for adapting the nuclear power plant group reactor group management mode, and comprises a reactor type identification component, a unit attribution component, a power plant isolation component and a user permission identification component. The application solves the problems of field redundancy and repeated configuration, realizes fine data isolation and permission control and realizes fine management.

The invention provides a hospital information system user authority management method, electronic equipment and a program product, and relates to the technical field of computers. The method disclosed by the invention comprises the following steps: in response to a user login event, acquiring permission information of a user from an RBAC module of a hospital information system; based on the permission information, generating a permission description in a natural language description form; adding the permission description into a system cue word, and inputting the system cue word into a large language model; receiving an input request of a user; calling a large language model to process the input request, and generating a tool calling request; according to the permission information of the user, performing permission verification on the tool calling request to obtain a permission verification result; and managing the user permission according to the permission verification result.

The application discloses a blockchain on-chain and off-chain trusted interaction method for highway-railway combined transport cross-border commodity trade, which comprises the following steps: storing large-scale data in a blockchain system into an off-chain storage system IPFS, returning a unique hash value of the data after storage uploading, storing only the hash value and metadata in the blockchain system, and realizing user permission management, efficient access and control of data through a smart contract. Through the application, the storage burden and storage cost of the blockchain system can be significantly reduced, the system performance is improved, and on-chain and off-chain collaborative storage is realized.

This application provides a process monitoring method, electronic device, storage medium, and computer program product. The method includes: acquiring file access events of a target directory; responding to the file access events, reading a process file system to obtain first runtime information of multiple Linux processes, wherein the process file system is used to provide runtime information of all Linux processes under non-privileged user privileges, and the non-privileged user privileges do not have control permissions in the Linux kernel mode; and generating a process activity log based on the first runtime information of the multiple Linux processes. This application's solution allows for more comprehensive monitoring of process activities in a Linux system.

The invention discloses a route filtering method based on a Udesk platform and a related device, relates to the technical field of software, is applied to a front end, and comprises the steps that a route configuration file is acquired, a global front hook function is registered in the route configuration file, and the route configuration file comprises access permissions of different routes; responding to the login operation of the target user, obtaining the actual authority of the target user, triggering the global preposed hook function to read the actual authority, and filtering the route without authority by matching the actual authority with the access authority of each route to obtain an accessible routing table; and loading the accessible routing table into the routing instance, so that the Udesktop Menu routing component generates a menu option in the sidebar based on the routing instance. According to the method and the device, the problem that a Udesk platform lacks routing permission control is solved, and the display and the hiding of the menu options in the sidebar can be controlled according to different permissions, so that the menu options of the sidebar are matched with the user permission level.

The invention provides a user permission configuration control system, a user permission configuration control method and a server, and relates to the technical field of permission control, the scheme can fully utilize organization information, post information and permission information of a user to automatically generate personalized permission configuration suggestions, and can utilize a related language large model to carry out auxiliary configuration, so that the user permission configuration control efficiency is improved. And the accuracy and the applicability of authority distribution are greatly improved.

This invention relates to the field of image forming apparatus technology, and more particularly to a task processing method, an image forming apparatus, and a storage medium. The method includes: determining user permissions corresponding to a first task based on user identification information of the first task; determining whether to prioritize the execution of the first task based on the workload of the first task, the user permissions, and the workloads and corresponding user permissions of each task in a task queue; wherein the task queue includes currently executing tasks and tasks awaiting execution. In this embodiment of the invention, resource allocation is performed based on the user permissions and workload of the task to determine whether to prioritize the execution of the first task, increasing the flexibility of the image forming apparatus in processing tasks and improving the user experience.