Credential-Based Component Data Filtering for Secure External Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing business data processing systems lack adequate security measures, allowing external teams to directly access sensitive internal data, leading to potential data leakage.
Innovation Solution
Implement a method that generates a login credential for external users, performs data filtering based on account permissions, and uses iframe controls to isolate sensitive data, ensuring secure access and preventing unauthorized data exposure.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If an application system interface without authentication and verification is directly provided to external cooperation team, then external teams can easily access internal data for business processing, but data security is compromised and data leakage risk increases
Solution Approach 1:
The patent introduces an intermediary authentication and verification mechanism between the application system and external cooperation teams. This intermediary layer validates access requests, manages permissions, and controls data exposure, thereby maintaining data security while enabling legitimate external access for business processing.
2Reliability
If authentication and verification mechanisms are implemented to protect sensitive internal data, then data security is improved, but system complexity and access difficulty increase
Solution Approach 1:
The patent segments the authentication and verification process into distinct modular components, including separate authentication modules, authorization modules, and data filtering mechanisms. This segmentation allows each security function to be independently managed and maintained, reducing overall system complexity while ensuring comprehensive data protection.
3Reliability
If authentication and verification mechanisms are implemented to protect sensitive internal data, then data security is improved, but external team access efficiency decreases
Solution Approach 1:
The patent implements preliminary authentication and verification actions before external teams access the application system. By pre-validating user identities, organizing permission sets in advance, and pre-configuring data access policies, the system reduces authentication overhead during actual business operations, thereby maintaining data security while minimizing impact on business processing efficiency.
Data Source
AI summary
This application discloses a business data processing method performed by an electronic device. The method includes: acquiring an application login request of a first object for a target application system, the application login request comprising a first account of the first object associated with a first account system; generating, according to the first account, a login credential of a terminal corresponding to the first object; triggering the terminal to log in the target application system based on the login credential; in response to receiving a call request of the terminal for a target component in the target application system, performing data filtering on component data corresponding to the target component according to the login credential to obtain target component data; and transmitting the target component data to the terminal, the target component data being used for the terminal to perform business processing based on the target component data.