813 results about "User Privilege" patented technology

The invention provides a method for generating an SQL (Structured Query Language) by a natural language based on bidirectional mapping and semantic parsing, which relates to the technical field of database query and comprises the following steps of: extracting natural language query elements and packaging the natural language query elements into structured data, and establishing a mapping relationship from a query field to a service attribute and a physical data table by adopting a bidirectional Hash index technology; and automatically identifying multi-table association keys, performing semantic extension and compliance verification, generating an abstract syntax tree, performing processing according to user permission, and finally converting the abstract syntax tree into an SQL statement conforming to a target database syntax specification. According to the method, the accuracy and the efficiency of converting the natural language into the SQL are improved, and the flexibility and the safety of the system are enhanced.

A system and method for dynamically visualize and modify user authority and security resource edge based on access behaviors in a cloud computing environment. The method provides a new access control perspective to ensure the credibility of database object usage patterns, build clearer and explicit security data consumption mode for data usage requests, and guide tenants to have a more comprehensive understanding and concise use. Processing components and method are configured to gather data and analytics including collecting data resource and database object usage tagging both resources and users with security level by machine learning and building an access model for each role. The method uses graph modeling with created, trained access patterns for users protected resources and produces in-memory implicit sub-groups for users with similar access requirements and limits their resource accesses according to their history behaviors. Further provided are outlier activities prediction and in-real time access authorization modification.

A System for providing Interactive Transaction Frameworks, utilizing biometric authentication and semantic web technologies is disclosed. The system registers users with a unique biometric-based identifier, and employs ontologies, schemas, and knowledge graphs to create a semantic foundation. A Large Language Model integrated with the Knowledge Graph Module enables intelligent processing of Interactive Transaction data. The system composes Interactive Transactions with fields mapped to semantic triples, maintains them in an Interactive Transaction Library, and manages user permissions. A Transaction Publishing Platform facilitates Interactive Transaction distribution and submission-response cycles. The system refines inputs and responses, determining outcomes based on these interactions. The system offers a sophisticated, secure, and adaptable approach to Interactive Transaction management and processing across various domains.

Systems and methods are described for a connected AI agent for managed multidimensional search based on an electronic message and management policies. A messaging application at a client device can send a new electronic message, such as an email, to a connector service. An attachment can be ingested and stored in a vector database. Then one or more artificial intelligence (“AI”) agents can be selected for responding to the body of the email, such as a query in the body. The responses can be formatted and sent to multiple parties, such as a sending user of the electronic message and a recipient that was copied or also sent the new electronic message. The AI agents can use different AI models, prompts, and vector databases depending on user permissions. This allows for building up vector databases with relevant content items and answering user questions based on those vector databases.

The invention provides an online document processing method and system based on a document processing model, and the method comprises the steps: obtaining an editing request of a user for a target data unit, generating a temporary locking identifier according to a user authority identifier and a request timestamp, limiting the modification operation of other users for the target data unit, and obtaining a conflict isolation result; constructing a data consistency module according to a conflict isolation result, extracting editing state information of the current data unit from the temporary locking identifier, and performing sequential recording on concurrent operation by adopting a distributed transaction processing technology; if it is detected that version conflicts exist in the sequenced records, a rollback mechanism is triggered, operation priorities are redistributed, and data versions after consistency verification are determined; and designing a hierarchical cache structure according to the data version after consistency verification, storing the high-frequency access data into a memory cache region, and storing the low-frequency access data into a disk cache region to obtain a hierarchical storage structure. The data consistency and security are good, and the storage and access efficiency is improved.

The invention relates to the technical field of block chains, and discloses a data encryption system for evidence collection and storage based on a block chain technology. According to the data encryption system for evidence collection and storage based on the block chain technology, a hash value can be generated based on a timestamp of data chaining, so that integrity of storage data is regulated and controlled, data tampering detection is realized, a user permission access range can be regulated and controlled in combination with a key distribution mechanism, sensitive data leakage is effectively prevented, and user experience is improved. The consistency of the encryption step is verified according to the intelligent contract execution logic, the multi-node synchronization error is eliminated, the error of the encrypted data storage link is verified through the Hash verification algorithm, and the consistency of the block data is ensured.

The invention discloses an access control system and method applied to a cloud desktop, and belongs to the technical field of cloud computing, and the method comprises the steps: collecting user operation behaviors, a terminal environment and network state data at a cloud desktop client in real time, and constructing a time sequence feature matrix after preprocessing; a hybrid anomaly detection model is constructed through an LSTM network and an isolated forest model to perform anomaly detection, abnormal behaviors of user access are identified, and risk levels including low risk levels, medium risk levels and high risk levels are divided through dynamic thresholds; for a low risk level, dynamic port mapping and flow hierarchical transmission are realized through a security access gateway; for the medium risk level, file access, peripheral use, network access and application program use permission of the user permission are limited; and for the high-risk level, session freezing and secondary authentication are performed, and high-risk early warning notification is performed.

The invention provides a one-way isolation network intelligent data analysis method and device based on a large model and a medium, and belongs to the technical field of data processing and network security. Matching an accessible node area list according to a preset organization structure level; the system receives and analyzes the instruction to determine a query intention and an associated data range; the system converts a natural language query instruction into a cross-node SQL statement through a large model module, and verifies the legality of the SQL statement based on user permission; and the system unidirectionally transmits the encrypted SQL instruction to a target node area through a hardware optical shutter, triggers the node area to execute local statistical operation and returns a structured result. Dynamic data pulling in a one-way network environment is achieved through a hardware optical shutter and data pump technology, natural language query is converted into SQL in real time in combination with distributed query optimized by a large model, and the problems that data statistics is lagged and user operation intervention is needed in a traditional isolation network are solved.

The invention provides a multi-scene access control dynamic verification method and system based on a permission tree, and relates to the technical field of scene access, and the method comprises the steps: receiving a user resource access request, obtaining a user permission tree, obtaining a mapping rule according to a scene identifier, screening to generate a primary screening permission node set, carrying out the grouping processing through employing a consistent Hash algorithm, and obtaining a primary screening permission node set; and generating a scenarized permission tree through reachability analysis, merging and reconstruction, performing hierarchical verification on identity validity, scene legality and resource access permission on the request, and generating an access control strategy. The method can dynamically adapt to authority requirements of different scenes, and the accuracy and flexibility of resource access control are improved.

The invention relates to the technical field of information security, provides an intelligent warehouse login verification method and system based on dynamic living body detection, and is used for realizing accurate generation of an identity label vector, enhanced authentication of a dynamic password and automatic matching of warehouse authority while accurately performing living body detection. And the security and convenience of warehousing system login are comprehensively improved. The method comprises the following steps: collecting real-time interaction action data of a warehousing system login user, calling a preset living body detection algorithm to carry out dynamic biological characteristic analysis on the real-time interaction action data, and generating a living body verification confidence coefficient and a user identity identification vector; performing dynamic password enhanced authentication according to the living body verification confidence coefficient and a preset security authentication threshold value, and generating a dynamic access token containing multiple layers of encryption identifiers; and based on the user identity identification vector and the dynamic access token, executing storage permission automatic matching processing, and outputting a login verification result associated with the user permission level to the storage system according to the permission matching label.

The invention is suitable for the field of environment monitoring, and provides a sampling information management system for intelligent environment monitoring, which comprises a user authority management and control module for realizing multi-level authority management based on an RBAC (Role Based Access Control) model; the equipment full life cycle management module monitors the equipment state in real time through the Internet of Things and carries out early warning calibration; the standard dynamic adaptation module intelligently associates a standard with a sampling scene, and synchronously authorizes updating; the sampling closed-loop management module supports double-end cooperation, offline operation and block chain evidence storage; the data interaction and analysis module integrates the data and intelligently predicts the data; the auditing and tracing module records whole-process operation and gives an early warning for abnormity; and the multi-terminal collaborative interaction module is adapted to multiple systems. The monitoring efficiency and the data quality are improved, and support is provided for environmental protection decision making.

The invention relates to a multi-account security management method and system based on a mobile energy storage charging pile. According to the method, a multi-level user account system and a dynamic authority management mechanism are established, a dynamic token carrying authority attributes is generated through encryption verification to achieve access control, user operation is captured in real time to generate log data with an identity label, the log data are synchronized with a cloud end, and an equipment control instruction is generated in combination with Internet of Things data collection and authority verification. Meanwhile, authority rules are dynamically updated, whole-course tracing of operation behaviors of the charging pile system, real-time effectiveness of authority change and linkage management and control of equipment states and user authorities are achieved, and the problem that potential safety hazards are caused by extensive authority control, difficult operation tracing and authority strategy lagging of a traditional charging pile management system is effectively solved.

The invention relates to the field of new energy automobile power supply, and provides an electric automobile interconnection sharing charging operation method and device and a storage medium, the method comprises the following steps: realizing heterogeneous system interconnection of a multi-source charging platform and a supervision platform through a standardized interface protocol, and establishing a cross-platform data channel; a dynamic user authentication system is constructed based on a cross-platform data channel, user registration and authority distribution of the electric vehicle are completed in a multi-mode identity authentication mode to obtain a user authority level, and an authentication result is fed back to the supervision platform; performing intelligent charging pile matching based on the real-time multi-dimensional charging resource atlas according to the user permission level, and generating a dynamic service instruction containing a navigation path and charging parameters; and in a charging service execution process, a bidirectional supervision data flow is created through a cross-platform data channel, full-life-cycle supervision of the charging process is executed in real time, and a service strategy is dynamically adjusted based on a feedback instruction of a supervision platform. According to the technical scheme, the electric vehicle can be cooperatively charged.

The invention discloses a permission verification method and system applied to OA examination and approval, and relates to the technical field of permission verification, and the method comprises the steps: receiving an examination and approval request triggered by an OA system, carrying out the extraction according to the examination and approval request, and obtaining user identity information and an examination and approval content label set; triggering a multi-level permission verification mechanism based on the user identity information, and generating a dynamic verification rule set; performing permission verification on the approval content label according to the dynamic verification rule set, and formulating a target verification rule; and executing the target verification rule to perform multi-level cross verification on the user permission, generating a permission verification report according to a verification result, and feeding back the permission verification report to the OA system to trigger a subsequent approval process. The technical problems of low approval process efficiency and inaccurate authority control caused by fixed static rule configuration in the authority verification process in the prior art are solved, and the technical effects of improving the authority verification flexibility and accuracy and enhancing the approval process safety and intelligent level are achieved.

The invention relates to a method and system for encrypting and isolating storage data of a credential mobile terminal, and belongs to the technical field of information. The method comprises the following steps: encrypting and partitioning the whole storage area, and setting an access strategy according to user permission; when a user requests to access, executing multi-factor authentication containing a password and an external hardware certificate, and adding biological characteristic authentication; after the authentication is passed, an encryption key is taken from the domestic security chip; and encrypting and decrypting data by using the secret key, and opening corresponding partition access according to authority. The system comprises a storage partition module, an identity authentication module, a key management module, an encryption and decryption module and an authority control module and is used for executing the method. The method also comprises the steps of equipment startup trusted boot and firmware upgrade verification, is based on a custom curing system, and is compatible with Android 10 +. The problems of poor hardware controllability and positioning security risk of the creative mobile terminal are solved, and full-link data security protection is realized.

The embodiment of the invention provides a role-based authority management method and device, and the method comprises the steps: binding a basic authority to a preset basic role, and determining a basic role template library; constructing a user-defined role, endowing the user-defined role with a user-defined permission, and binding the user-defined role to the basic role template library according to a permission inheritance rule to determine a role permission template library; when a user is endowed with multiple roles and performs permission operation, constructing a directed acyclic graph based on the multiple roles and corresponding permissions, traversing the directed acyclic graph, executing permission union set operation according to a preset role weight value, and determining a corresponding user permission result; the method comprises the steps of collecting user operation behavior data flow in real time, inputting the operation behavior data flow into a pre-trained abnormal operation detection model for data processing, determining a corresponding abnormal probability value, correcting a permission result according to the abnormal probability value, and authorizing a user according to the corrected permission result. The team management efficiency can be improved through role permission optimization.

The invention relates to the technical field of data transmission, and particularly discloses a block chain-based data security storage and verification method, which comprises the following steps: collecting biological characteristics, generating a first dynamic key, the first dynamic key being used for encrypting first data, and updating during each access to ensure the key timeliness; dividing the first data into a plurality of segments according to logic, generating segmented hash values, and storing the segmented hash values on a chain; dynamically loading the corresponding fragment according to the user permission, and realizing anonymous verification through a homomorphic encryption technology; based on the Internet of Things technology, the first positioning parameter and the first state parameter are combined, the access permission is dynamically adjusted, and a self-destruction mark is set to avoid the overtime access risk; and in the storage process of the data fragments, dynamic security scoring and path adjustment are performed through distributed storage. According to the method, the static problem in data storage and access control is solved, and a more flexible and reliable security guarantee can be provided in a dynamic access scene.

The invention discloses a dynamic form generation and cross-database adaptation method based on metadata driving, and belongs to the technical field of data architectures. The method comprises the steps that an original metadata attribute graph is established; on the basis of the original metadata attribute graph and user roles and equipment parameters for calling the forms, generating an optimal equipment form interaction data graph corresponding to each user permission; verifying an interaction path between the forms and a cross-database demand of a target database type to carry out cross-database mapping adaptation analysis, and generating an optimal form data adaptation database of the corresponding equipment of each user permission; and performing rule compiling based on multi-source heterogeneous data input by a user in real time and execution logic in the original metadata attribute graph, marking an incremental propagation path in the optimal form interaction data graph of the corresponding equipment of each user permission, and updating the optimal form data adaptation database of the corresponding equipment of each user permission. The method has the advantages that the data interaction efficiency is improved, and the interaction round-trip times and redundant data transmission are reduced.

The invention discloses a user authority control system for a power system. The user authority control system comprises a multi-level organization and user management module, a data resource management module, a dynamic authority control module and a monitoring and auditing module, the multi-level organization and user management module is used for realizing organization maintenance, post management and employee management; the data resource management module realizes controlled resource management and business data management; the dynamic authority management and control module realizes authority distribution, role life cycle management, authority inheritance management, organization and authority transfer management and data authority management; and the monitoring and auditing module is used for realizing permission use recording, auditing log recording, abnormal behavior monitoring, data classification management, function permission management, dynamic permission control and logic extension. According to the invention, through organization and user management, data resource management, dynamic authority management and monitoring auditing, the control of the user authority of the power system is realized, the reliability is higher, the compatibility is better, and the expandability is better.

The invention discloses a database resource management system and method based on authority control, and belongs to the technical field of database resource management.The method comprises the steps that database resource information is collected and classified, and a resource category identification system is constructed; user access operation information is collected, and high-frequency access resources are screened out through statistical analysis; extracting features related to user permission access, and constructing a permission prediction model based on user behaviors; capturing a user operation request in real time, extracting real-time features related to the authority in combination with context information, inputting the real-time features into the trained authority prediction model, predicting whether the user will access the high-frequency resources, and verifying role authority; if it is predicted that the high-frequency resources are about to be accessed and the permission exists, the user access permission is hierarchically controlled according to the user role and the use condition of the current data resources; through the method, the security of database resource access is effectively improved, meanwhile, the risk of data leakage caused by permission abuse is reduced, and resource allocation is optimized.

The invention discloses a multi-platform cooperative intelligent office management system and a coordination method, and the method comprises the steps: a protocol unification module builds a standardized communication interface with a plurality of heterogeneous office platforms, and converts a document operation instruction of each platform into a unified intermediate protocol format; the multi-platform interactive interface module comprises a cross-platform identity verification unit and an asynchronous communication unit; the file synchronization and version control module adopts an operation conversion algorithm to realize multi-platform real-time collaborative editing; the modification content evaluation module performs agreement evaluation on the modification content of the office file by each platform to obtain an optimal modification scheme; the decision engine module is configured with a dynamic weight distribution algorithm, and an optimal version is generated by integrating user permission levels, historical behavior data and real-time evaluation results; and the feedback learning module optimizes evaluation model parameters by collecting final adoption decision data of the user. The method has the advantages that the problems of protocol isomerism, modification conflict and decision optimization in cross-platform cooperation are effectively solved.

The invention discloses a hyperspectral data fusion analysis system, belongs to the technical field of remote sensing data processing and artificial intelligence, and provides a multi-level data fusion technology by integrating data management, preprocessing, fusion, modeling and visual function modules through a modular architecture aiming at the problems of an existing system. Machine learning algorithms such as a support vector machine and a random forest are integrated to realize dynamic parameter optimization and model evaluation, spectrum curve dynamic display, classification map rendering and customized analysis report generation functions are provided through an interactive visualization module, and system security and expansibility are enhanced based on hierarchical architecture and database standard design. And multi-source equipment access, user permission grading and data encryption storage are supported. The hyperspectral data processing efficiency, the analysis precision and the system stability are remarkably improved, and the method can be widely applied to the fields of environment monitoring, agricultural remote sensing, target recognition and the like.

The invention relates to the field of computer software, in particular to an IPFS-based file control method and device, equipment and a medium, and the method comprises the steps: receiving a file uploading request initiated by a user through a front-end interface; basic information of the file is read, a file format is confirmed, and the file format and a preset type list are verified; performing security and integrity verification on the files passing the verification; if the verification is passed, uploading the file to an IPFS network, and obtaining a hash string returned by the IPFS as a file identifier; constructing an encrypted access URL of the file based on the server address and the hash string, and storing file metadata to a database; and receiving a file access request initiated by a user through the URL, decrypting the URL and verifying the user permission, retrieving the file from the IPFS network according to the hash string, and providing a preview or download service according to the file type. And uploading of file types which do not meet requirements is effectively avoided, and potential safety risks are reduced.

The invention relates to the technical field of computer information security, in particular to a method and a system for compliance check based on a windows operating system, comprising the following steps: a preparation stage: identifying applicable laws and regulations and industry / internal security standards, selecting check tools, and formulating project plans; in the data acquisition stage, an operating system version, a patch, a user permission, network configuration and log information are acquired through WMI or PowerShell; the beneficial effects are that through the automatic compliance inspection process, the manual inspection time is greatly reduced, and the working efficiency is improved; and monitoring a plurality of dimensions, such as configuration, application, permission, patches and the like, of the Windows operating system to ensure that various configurations of the operating system meet security standards.

The invention provides a data retrieval method, system and device, and relates to the technical field of big data processing, the method comprises the following steps: obtaining a search text of a user; performing data permission assembly according to the search text to obtain a user permission set of the user; according to the user permission set, generating a retrieval filtering condition of the search text; according to the retrieval filtering condition, performing multi-source data search in combination with the search text to obtain an initial retrieval result corresponding to the search text; and performing unauthorized rejection operation on the initial retrieval result to obtain a final retrieval result of the search text. According to the method, the range is defined through permission assembly, the condition focusing target is filtered, the efficiency is improved through pre-matching, and the precision is guaranteed through post-removing, so that the retrieval data volume is compressed to improve the efficiency, and the matching pertinence is enhanced to improve the precision.

A plateau oxygen production and health monitoring system management platform provided by the present invention comprises a data management module, an equipment management module, a user management module and a database, the data management module is used for storing, managing and analyzing system data, and the data management module carries out multi-source fusion on health data of a user and environmental data, real-time analysis is realized through big data analysis and an artificial intelligence algorithm to obtain a comprehensive index of the healthy environment, and whether a result is transmitted to the equipment management module or not is determined according to the index; the equipment management module is used for managing the operation state and parameter setting of the equipment, realizing data interaction and cooperative work between the oxygen generator and the health monitoring equipment according to the analysis result of the data management module, and automatically adjusting the operation parameters of the oxygen generator according to the real-time health state of the user; the user management module is used for managing user permission and login authentication of the system; the database comprises various information tables and alarm record tables.

The invention discloses a large model gateway security protection system and a security protection method, and relates to the field of large model information security protection, and the system comprises the following steps: a gateway input and output module carries out compliance verification on a user request, sends a non-compliance request to a blocking isolation module, and inputs a compliance request to a called large model; the filtering and cleaning module is used for screening the original response content generated by the large model in real time; the classification and grading module identifies and marks the cleaned response content and determines a classification and grading result; the authority control module is used for verifying the access authority of the requesting user; the data desensitization module is used for desensitizing the sensitive fields according to the classification and grading result of the classification and grading module and the user permission; the desensitization data is output to a target application system through the gateway input and output module; and the blocking and isolating module is used for blocking and isolating the non-compliance requests, the high-proportion non-compliance responses and the requests corresponding to the high-risk behaviors, and has a multi-dimensional safety protection capability.

The invention relates to the technical field of security monitoring for preventing confidential files from being leaked, and discloses a security monitoring method for preventing confidential files from being leaked. By setting the user permission matrix and the dynamic access condition set, the system finely manages user permissions, it is ensured that the user only accesses related files, and the risk of unauthorized access is reduced. The dynamic condition set includes access time, device identification, and geographic location, preventing access by unsecure devices or locations. And the system verifies the permission matching degree in real time and rejects access which does not conform to conditions in time, so that the risk of permission abuse and leakage is reduced. A detailed log is generated in each access, an operation result and rejection information are recorded, and an administrator is notified when an abnormal behavior occurs. In combination with file sensitivity evaluation and a multi-layer encryption strategy, the system takes different protection measures according to file sensitivity. Through real-time authority management and auditing, file operation compliance is monitored, and potential violation behaviors are found in time.

The invention relates to the technical field of artificial intelligence, in particular to a method and system for achieving large model access authentication and flow control based on an APISIX gateway, and the method comprises the following steps: a client generates an HTTPS request containing an APIKey, and sends the HTTPS request to an APISIX gateway cluster; the gateway extracts the APIKey and forwards the APIKey to an authentication service, and the validity of the key is verified; after the verification is passed, the authentication service returns a user permission matrix, and the gateway verifies whether the request is within a permission range; after the permission verification is passed, the flow control plug-in detects a flow index according to a preset strategy; when the flow index does not exceed the limit, the gateway forwards the request to the large model service and returns a result; when the flow index exceeds the limit, the gateway executes flow limiting / fusing processing and returns a corresponding error response; the method has the beneficial effects that the gateway executes request forwarding or flow limiting control based on the preset strategy, the problems of illegal access risk and resource allocation imbalance faced by the large model service are effectively solved, the service stability and the resource utilization efficiency are improved, and the method is suitable for security operation and maintenance of the large model service in multiple scenes.

The invention discloses a row-level data permission authorization method and device, equipment and a medium, and relates to the technical field of computers. Comprising the following steps: registering basic data into a preset database; configuring a corresponding field management user with a field management authority for the preset service field; creating or updating a record in a user data permission table based on the user permission application to determine a permission relationship between the user identifier and the entity data; registering a service data table and a mapping relation between an entity column and an entity type in the service data table in a preset service field based on a user instruction of a field management user; and dynamically generating a permission filtering condition based on the query SQL and the user identifier so as to generate an SQL statement with permission filtering, and querying corresponding service data from the service data table based on the mapping relationship so as to generate a corresponding query result based on the service data. Therefore, the efficiency and flexibility of line-level data permission authorization can be improved on the premise of ensuring data security.