1146 results about "User Privilege" patented technology

A dynamic generative-AI enhanced leadership coaching platform includes an agent, an authentication module, an event processor, a user interface module, a router, a generative AI module having a prompt compiler module, a post-conversation analysis module, a prompt template library, an API interface module, a memory management module having a vector-search module, a vectorized database module configured to store vectorized data records and be accessible to the memory management module, a vectorization module configured to vectorize data, a knowledge base database module configured to catalogue vectorized data, and a user profile stored in the user database including a dynamic data point, a personalized conversation starter, and a user permission set.

The invention provides a method for generating an SQL (Structured Query Language) by a natural language based on bidirectional mapping and semantic parsing, which relates to the technical field of database query and comprises the following steps of: extracting natural language query elements and packaging the natural language query elements into structured data, and establishing a mapping relationship from a query field to a service attribute and a physical data table by adopting a bidirectional Hash index technology; and automatically identifying multi-table association keys, performing semantic extension and compliance verification, generating an abstract syntax tree, performing processing according to user permission, and finally converting the abstract syntax tree into an SQL statement conforming to a target database syntax specification. According to the method, the accuracy and the efficiency of converting the natural language into the SQL are improved, and the flexibility and the safety of the system are enhanced.

A system and method for dynamically visualize and modify user authority and security resource edge based on access behaviors in a cloud computing environment. The method provides a new access control perspective to ensure the credibility of database object usage patterns, build clearer and explicit security data consumption mode for data usage requests, and guide tenants to have a more comprehensive understanding and concise use. Processing components and method are configured to gather data and analytics including collecting data resource and database object usage tagging both resources and users with security level by machine learning and building an access model for each role. The method uses graph modeling with created, trained access patterns for users protected resources and produces in-memory implicit sub-groups for users with similar access requirements and limits their resource accesses according to their history behaviors. Further provided are outlier activities prediction and in-real time access authorization modification.

The invention discloses an archive management system, method and device for an intelligent miniature archive room, and the system comprises a storage positioning unit which is used for recognizing the content of an archive to be stored through OCR, and calculating the similarity between the archive to be stored and a plurality of target clustering centers, so as to determine the storage position of the archive; the archive encoding unit is used for constructing a multi-dimensional code of a target archive according to archive attribute information including an archive type, a storage position, a security level and a date number; the archive retrieval unit is used for calculating the similarity between retrieval keywords and the content of all archives and outputting information of one or more to-be-selected archives based on the user permission and the multi-dimensional codes of the archives; and the archive recommendation unit is used for recommending associated archives of the selected archives by adopting an improved collaborative filtering algorithm. Through the scheme of the invention, the problems of an existing system in the aspects of intelligence, space utilization, usability, safety and the like can be effectively solved.

A System for providing Interactive Transaction Frameworks, utilizing biometric authentication and semantic web technologies is disclosed. The system registers users with a unique biometric-based identifier, and employs ontologies, schemas, and knowledge graphs to create a semantic foundation. A Large Language Model integrated with the Knowledge Graph Module enables intelligent processing of Interactive Transaction data. The system composes Interactive Transactions with fields mapped to semantic triples, maintains them in an Interactive Transaction Library, and manages user permissions. A Transaction Publishing Platform facilitates Interactive Transaction distribution and submission-response cycles. The system refines inputs and responses, determining outcomes based on these interactions. The system offers a sophisticated, secure, and adaptable approach to Interactive Transaction management and processing across various domains.

Systems and methods are described for a connected AI agent for managed multidimensional search based on an electronic message and management policies. A messaging application at a client device can send a new electronic message, such as an email, to a connector service. An attachment can be ingested and stored in a vector database. Then one or more artificial intelligence (“AI”) agents can be selected for responding to the body of the email, such as a query in the body. The responses can be formatted and sent to multiple parties, such as a sending user of the electronic message and a recipient that was copied or also sent the new electronic message. The AI agents can use different AI models, prompts, and vector databases depending on user permissions. This allows for building up vector databases with relevant content items and answering user questions based on those vector databases.

The invention provides an online document processing method and system based on a document processing model, and the method comprises the steps: obtaining an editing request of a user for a target data unit, generating a temporary locking identifier according to a user authority identifier and a request timestamp, limiting the modification operation of other users for the target data unit, and obtaining a conflict isolation result; constructing a data consistency module according to a conflict isolation result, extracting editing state information of the current data unit from the temporary locking identifier, and performing sequential recording on concurrent operation by adopting a distributed transaction processing technology; if it is detected that version conflicts exist in the sequenced records, a rollback mechanism is triggered, operation priorities are redistributed, and data versions after consistency verification are determined; and designing a hierarchical cache structure according to the data version after consistency verification, storing the high-frequency access data into a memory cache region, and storing the low-frequency access data into a disk cache region to obtain a hierarchical storage structure. The data consistency and security are good, and the storage and access efficiency is improved.

The invention discloses a thermal power plant powder manufacturing equipment state remote diagnosis system, and relates to the technical field of powder manufacturing equipment state diagnosis, and the system comprises a data collection module which obtains the real-time state information of equipment; the edge calculation module is used for carrying out edge real-time analysis and detecting abnormal conditions; the data processing and analyzing module is used for identifying a fault mode and trend and dynamically adjusting a self-adaptive threshold value; the remote monitoring and diagnosis module is used for displaying equipment state, alarm and fault information; the maintenance and decision support module is used for providing maintenance and repair suggestions; and the security and authority management module is used for setting different levels of user authorities and carrying out data encryption. Through data acquisition and edge calculation, the system can monitor the equipment state in real time, identify and alarm abnormity in time, improve the safety and reliability of equipment operation, and utilize deep learning and time sequence analysis, the system can identify potential fault modes, optimize maintenance decisions, and reduce downtime and maintenance cost.

The invention relates to the technical field of block chains, and discloses a data encryption system for evidence collection and storage based on a block chain technology. According to the data encryption system for evidence collection and storage based on the block chain technology, a hash value can be generated based on a timestamp of data chaining, so that integrity of storage data is regulated and controlled, data tampering detection is realized, a user permission access range can be regulated and controlled in combination with a key distribution mechanism, sensitive data leakage is effectively prevented, and user experience is improved. The consistency of the encryption step is verified according to the intelligent contract execution logic, the multi-node synchronization error is eliminated, the error of the encrypted data storage link is verified through the Hash verification algorithm, and the consistency of the block data is ensured.

The invention discloses an access control system and method applied to a cloud desktop, and belongs to the technical field of cloud computing, and the method comprises the steps: collecting user operation behaviors, a terminal environment and network state data at a cloud desktop client in real time, and constructing a time sequence feature matrix after preprocessing; a hybrid anomaly detection model is constructed through an LSTM network and an isolated forest model to perform anomaly detection, abnormal behaviors of user access are identified, and risk levels including low risk levels, medium risk levels and high risk levels are divided through dynamic thresholds; for a low risk level, dynamic port mapping and flow hierarchical transmission are realized through a security access gateway; for the medium risk level, file access, peripheral use, network access and application program use permission of the user permission are limited; and for the high-risk level, session freezing and secondary authentication are performed, and high-risk early warning notification is performed.

The invention discloses an intelligent user permission conflict detection method and system, and relates to the field of electrical digital data process.The method comprises the steps that a service flow diagram is constructed based on historical records; extracting a service flow direction sequence of the permission roles from the service flow direction graph, and calculating service association degrees among the permission roles according to the service flow direction sequence; grouping and clustering the authority roles according to the business association degree to obtain a plurality of authority role clusters; calculating a service boundary value of each permission role cluster; determining a target permission role cluster to which the target permission role belongs from a plurality of permission role clusters; calculating the business association strength between the permission role currently owned by the target user and the target permission role; when the business association strength exceeds a business boundary value, generating a first permission allocation control instruction; and when the business association strength does not exceed the business boundary value, generating a second permission allocation control instruction. The method and the device are used for solving the problem of authority conflict in a newly-added business scene, so that the security of the system is improved.

The invention provides a one-way isolation network intelligent data analysis method and device based on a large model and a medium, and belongs to the technical field of data processing and network security. Matching an accessible node area list according to a preset organization structure level; the system receives and analyzes the instruction to determine a query intention and an associated data range; the system converts a natural language query instruction into a cross-node SQL statement through a large model module, and verifies the legality of the SQL statement based on user permission; and the system unidirectionally transmits the encrypted SQL instruction to a target node area through a hardware optical shutter, triggers the node area to execute local statistical operation and returns a structured result. Dynamic data pulling in a one-way network environment is achieved through a hardware optical shutter and data pump technology, natural language query is converted into SQL in real time in combination with distributed query optimized by a large model, and the problems that data statistics is lagged and user operation intervention is needed in a traditional isolation network are solved.

The invention provides a multi-scene access control dynamic verification method and system based on a permission tree, and relates to the technical field of scene access, and the method comprises the steps: receiving a user resource access request, obtaining a user permission tree, obtaining a mapping rule according to a scene identifier, screening to generate a primary screening permission node set, carrying out the grouping processing through employing a consistent Hash algorithm, and obtaining a primary screening permission node set; and generating a scenarized permission tree through reachability analysis, merging and reconstruction, performing hierarchical verification on identity validity, scene legality and resource access permission on the request, and generating an access control strategy. The method can dynamically adapt to authority requirements of different scenes, and the accuracy and flexibility of resource access control are improved.

The invention relates to the technical field of information security, provides an intelligent warehouse login verification method and system based on dynamic living body detection, and is used for realizing accurate generation of an identity label vector, enhanced authentication of a dynamic password and automatic matching of warehouse authority while accurately performing living body detection. And the security and convenience of warehousing system login are comprehensively improved. The method comprises the following steps: collecting real-time interaction action data of a warehousing system login user, calling a preset living body detection algorithm to carry out dynamic biological characteristic analysis on the real-time interaction action data, and generating a living body verification confidence coefficient and a user identity identification vector; performing dynamic password enhanced authentication according to the living body verification confidence coefficient and a preset security authentication threshold value, and generating a dynamic access token containing multiple layers of encryption identifiers; and based on the user identity identification vector and the dynamic access token, executing storage permission automatic matching processing, and outputting a login verification result associated with the user permission level to the storage system according to the permission matching label.

The invention provides an intelligent dialogue method based on user permission separation and a related device, and the method comprises the steps: analyzing a reply content output request from terminal equipment, and obtaining an initial question description and basic identity information of a target user; determining permission description according to the basic identity information of the target user; updating the initial problem description according to the permission description to obtain a target problem description; querying according to the target problem description to obtain a target data set; and inputting the target question description, the permission description, the target data set and the cue word template into the vertical field large model, and outputting target reply content. Therefore, the intelligent dialogue system is endowed with user permission recognition and separation capabilities, so that the actual questioning content of the user can be accurately speculated, the correct answer can be output, and the data security and the reply accuracy are improved.

Provided herein is a process that converts unprotected data into protected data based on permissions defined using logical operators. As such, user permissions can be managed with a simple string of data. In one example, the method may include receiving a request for data from a user device, identifying a permission object corresponding to the user device, retrieving a string comprising a logical expression with a logical operator and one or more values from the permission object, wherein the logical expression defines access permissions of the user device with respect to a database, executing a database query on the database based on the request to generate results, and filtering the results from the database query based on the logical expression to generate filtered results and outputting the filtered results to the user device.

The invention discloses a software query information management method and system, and belongs to the technical field of software information security, and the method specifically comprises the following steps: after a query request of a user is received, creating a dynamic topology network architecture according to semantic features of query contents; creating a virtual query container corresponding to the dynamic topological network in the isolated memory space, wherein the virtual query container generates a dynamic encryption channel bound with the current topological structure; dynamically embedding user permission labels into topological network nodes through an attribute-based encryption algorithm, and establishing a mapping relation between permission characteristics and network paths; when distributed query is executed in the virtual query container, the topological node connection weight is dynamically adjusted according to the real-time network load; before a query result is fed back to a user, data elements are recombined based on a reverse entropy value of an original topology network architecture; and when an abnormal access feature is detected, triggering a topological network structure dynamic failure mechanism.

The invention relates to the technical field of data storage, in particular to a security data storage system based on cloud computing, which comprises a data importance evaluation module, a data encryption storage module, a user permission dynamic adjustment module and a data access management module. According to the method, by combining the data type, quantity and size and comprehensively evaluating the data importance, the adjustment of the data access permission threshold is optimized, so that the data storage security is more accurate, the backup quantity of the distributed nodes is dynamically adjusted according to the data importance, the security and reliability of the data are improved, and the reliability of the distributed nodes is improved. Based on risk index assessment and permission adjustment of user behavior data, control over user access is enhanced, user permission is finely managed, the safety risk caused by improper user behaviors is effectively reduced, a data access key is adjusted through permission deviation assessment, stricter real-time control over data access is achieved, and user experience is improved. And the accuracy and timeliness of data storage access management are ensured.

The invention is suitable for the field of environment monitoring, and provides a sampling information management system for intelligent environment monitoring, which comprises a user authority management and control module for realizing multi-level authority management based on an RBAC (Role Based Access Control) model; the equipment full life cycle management module monitors the equipment state in real time through the Internet of Things and carries out early warning calibration; the standard dynamic adaptation module intelligently associates a standard with a sampling scene, and synchronously authorizes updating; the sampling closed-loop management module supports double-end cooperation, offline operation and block chain evidence storage; the data interaction and analysis module integrates the data and intelligently predicts the data; the auditing and tracing module records whole-process operation and gives an early warning for abnormity; and the multi-terminal collaborative interaction module is adapted to multiple systems. The monitoring efficiency and the data quality are improved, and support is provided for environmental protection decision making.

The invention relates to a multi-account security management method and system based on a mobile energy storage charging pile. According to the method, a multi-level user account system and a dynamic authority management mechanism are established, a dynamic token carrying authority attributes is generated through encryption verification to achieve access control, user operation is captured in real time to generate log data with an identity label, the log data are synchronized with a cloud end, and an equipment control instruction is generated in combination with Internet of Things data collection and authority verification. Meanwhile, authority rules are dynamically updated, whole-course tracing of operation behaviors of the charging pile system, real-time effectiveness of authority change and linkage management and control of equipment states and user authorities are achieved, and the problem that potential safety hazards are caused by extensive authority control, difficult operation tracing and authority strategy lagging of a traditional charging pile management system is effectively solved.

The invention relates to the field of new energy automobile power supply, and provides an electric automobile interconnection sharing charging operation method and device and a storage medium, the method comprises the following steps: realizing heterogeneous system interconnection of a multi-source charging platform and a supervision platform through a standardized interface protocol, and establishing a cross-platform data channel; a dynamic user authentication system is constructed based on a cross-platform data channel, user registration and authority distribution of the electric vehicle are completed in a multi-mode identity authentication mode to obtain a user authority level, and an authentication result is fed back to the supervision platform; performing intelligent charging pile matching based on the real-time multi-dimensional charging resource atlas according to the user permission level, and generating a dynamic service instruction containing a navigation path and charging parameters; and in a charging service execution process, a bidirectional supervision data flow is created through a cross-platform data channel, full-life-cycle supervision of the charging process is executed in real time, and a service strategy is dynamically adjusted based on a feedback instruction of a supervision platform. According to the technical scheme, the electric vehicle can be cooperatively charged.

The invention discloses a standard electronic archive management method and system based on artificial intelligence, and the method comprises the steps: carrying out the inspection of four properties of electronic archives, dividing the electronic archives into high-quality, qualified and problematic archives, learning the file features of the archives, distributing data streams, analyzing the access behaviors of a user to the data streams of various archives, predicting the next archive, and dynamically adjusting the authority according to the predicted next archive. The method comprises the following steps: constructing a knowledge graph according to electronic archive semantic feature association and user permission, predicting a risk propagation range based on graph node information, temporarily isolating and backing up an affected archive, chaining and storing the electronic archive based on a block chain technology, and recording each access and modification operation on the electronic archive to form a complete operation auditing chain. According to the method, archive resources can be efficiently integrated, the security and credibility of archive management are enhanced, a comprehensive, reliable and intelligent solution is provided for electronic archive management, and meanwhile the method has good interpretability.

According to the data access method and device based on the software-defined boundary, the software-defined boundary controller and the micro-service gateway are combined and independently run outside the gateway, safety protection of continuous evolution can be achieved in an infinite extension mode, and the safety of the micro-service gateway is improved. And more security support is provided for the system under the micro-service architecture. Through establishment of black and white list verification, device authentication, user identity authentication and user authority authentication, only legal devices and users can access resources in a multi-level manner. And after the verification is passed, the access request is subjected to flow limiting control, so that network congestion and resource abuse caused by excessive requests are prevented. And comparing the access feature data with the behavior feature data by using a comparison engine, and detecting and preventing potential attack behaviors and risk operations in time. The risk level of the access request is calculated through the pre-trained risk assessment model, the high-risk access flow is intercepted and recorded, and potential threats are effectively controlled.

The invention discloses a permission verification method and system applied to OA examination and approval, and relates to the technical field of permission verification, and the method comprises the steps: receiving an examination and approval request triggered by an OA system, carrying out the extraction according to the examination and approval request, and obtaining user identity information and an examination and approval content label set; triggering a multi-level permission verification mechanism based on the user identity information, and generating a dynamic verification rule set; performing permission verification on the approval content label according to the dynamic verification rule set, and formulating a target verification rule; and executing the target verification rule to perform multi-level cross verification on the user permission, generating a permission verification report according to a verification result, and feeding back the permission verification report to the OA system to trigger a subsequent approval process. The technical problems of low approval process efficiency and inaccurate authority control caused by fixed static rule configuration in the authority verification process in the prior art are solved, and the technical effects of improving the authority verification flexibility and accuracy and enhancing the approval process safety and intelligent level are achieved.

The invention discloses an intelligent logistics platform electronic signature automatic management method and system, and relates to the logistics management technology field, and a contract signing module of the system integrates a signature request unit, a first processing unit, a second processing unit, an electronic signature obtaining unit and a contract signing unit. Through the units, the effective verification of the user identity is realized, the dynamically encrypted and stored electronic signature is quickly obtained, and the security guarantee is provided for the contract signing process. In addition, the system also comprises a contract template management module, a signature management module, a contract generation module, a log and audit module, a user authority management module and the like, which jointly provide a comprehensive, efficient and safe intelligent logistics platform electronic signature automatic management scheme.

The invention relates to a method and system for encrypting and isolating storage data of a credential mobile terminal, and belongs to the technical field of information. The method comprises the following steps: encrypting and partitioning the whole storage area, and setting an access strategy according to user permission; when a user requests to access, executing multi-factor authentication containing a password and an external hardware certificate, and adding biological characteristic authentication; after the authentication is passed, an encryption key is taken from the domestic security chip; and encrypting and decrypting data by using the secret key, and opening corresponding partition access according to authority. The system comprises a storage partition module, an identity authentication module, a key management module, an encryption and decryption module and an authority control module and is used for executing the method. The method also comprises the steps of equipment startup trusted boot and firmware upgrade verification, is based on a custom curing system, and is compatible with Android 10 +. The problems of poor hardware controllability and positioning security risk of the creative mobile terminal are solved, and full-link data security protection is realized.

The invention discloses a navigation switching method and device for a product module, and relates to the technical field of modular navigation switching, and the method comprises the following steps: generating a user permission model according to user information, and generating a navigation bar according to the user permission model; capturing a click event of a user, and initiating a module switching request according to a module corresponding to the navigation item; querying the dependency relationship of the modules after receiving a module switching request, loading the resources of the dependent modules according to the dependency relationship, loading the core resources of the target module after the loading of the resources of the dependent modules is completed, and displaying the basic layout; when the basic layout is displayed, the dynamic data and the secondary resources are loaded in parallel, the page is filled with the core data, and module display is completed. According to the invention, the problems of low module switching efficiency and redundant resource loading in the prior art are effectively solved, and the user experience and resource management are optimized.

The embodiment of the invention provides a role-based authority management method and device, and the method comprises the steps: binding a basic authority to a preset basic role, and determining a basic role template library; constructing a user-defined role, endowing the user-defined role with a user-defined permission, and binding the user-defined role to the basic role template library according to a permission inheritance rule to determine a role permission template library; when a user is endowed with multiple roles and performs permission operation, constructing a directed acyclic graph based on the multiple roles and corresponding permissions, traversing the directed acyclic graph, executing permission union set operation according to a preset role weight value, and determining a corresponding user permission result; the method comprises the steps of collecting user operation behavior data flow in real time, inputting the operation behavior data flow into a pre-trained abnormal operation detection model for data processing, determining a corresponding abnormal probability value, correcting a permission result according to the abnormal probability value, and authorizing a user according to the corrected permission result. The team management efficiency can be improved through role permission optimization.

The invention relates to the technical field of data transmission, and particularly discloses a block chain-based data security storage and verification method, which comprises the following steps: collecting biological characteristics, generating a first dynamic key, the first dynamic key being used for encrypting first data, and updating during each access to ensure the key timeliness; dividing the first data into a plurality of segments according to logic, generating segmented hash values, and storing the segmented hash values on a chain; dynamically loading the corresponding fragment according to the user permission, and realizing anonymous verification through a homomorphic encryption technology; based on the Internet of Things technology, the first positioning parameter and the first state parameter are combined, the access permission is dynamically adjusted, and a self-destruction mark is set to avoid the overtime access risk; and in the storage process of the data fragments, dynamic security scoring and path adjustment are performed through distributed storage. According to the method, the static problem in data storage and access control is solved, and a more flexible and reliable security guarantee can be provided in a dynamic access scene.

The invention discloses a dynamic form generation and cross-database adaptation method based on metadata driving, and belongs to the technical field of data architectures. The method comprises the steps that an original metadata attribute graph is established; on the basis of the original metadata attribute graph and user roles and equipment parameters for calling the forms, generating an optimal equipment form interaction data graph corresponding to each user permission; verifying an interaction path between the forms and a cross-database demand of a target database type to carry out cross-database mapping adaptation analysis, and generating an optimal form data adaptation database of the corresponding equipment of each user permission; and performing rule compiling based on multi-source heterogeneous data input by a user in real time and execution logic in the original metadata attribute graph, marking an incremental propagation path in the optimal form interaction data graph of the corresponding equipment of each user permission, and updating the optimal form data adaptation database of the corresponding equipment of each user permission. The method has the advantages that the data interaction efficiency is improved, and the interaction round-trip times and redundant data transmission are reduced.