WO2019085470A1

WO2019085470A1 - Authorization configuration method for system, application server and computer-readable storage medium

Info

Publication number: WO2019085470A1
Application number: PCT/CN2018/089703
Authority: WO
Inventors: 张剑城
Original assignee: 平安科技（深圳）有限公司
Priority date: 2017-11-01
Filing date: 2018-06-03
Publication date: 2019-05-09
Also published as: CN107944254A

Abstract

Provided are an authorization configuration method for a system, an application server and a computer-readable storage medium. The method comprises: acquiring all system operation authorizations (S401); according to all the system operation authorizations, creating a system operation authorization library (S402); acquiring login information of a user (S403); according to the login information of the user, acquiring a user hierarchy of the user (S404); according to the user hierarchy of the user, matching all the system operation authorizations in the system operation authorization library (S405); and according to a matching result, allocating a corresponding system operation authorization to the user (S406). By means of directly associating a user hierarchy with a corresponding system operation authorization, user authorizations are flexibly configured, and the same user can obtain multiple system operation authorizations.

Description

System permission configuration method, application server, and computer readable storage medium

This application claims the priority of the Chinese Patent Application filed on November 1, 2017, the Chinese Patent Office, the application number is 201711059291.1, and the invention name is "the system's authority configuration method, the application server, and the computer readable storage medium". It is incorporated in the application by reference.

Technical field

The present application relates to the field of communications technologies, and in particular, to a method for configuring a rights of a system, an application server, and a computer readable storage medium.

Background technique

At present, the authority configuration management of the financial system mainly relies on the user level, and the corresponding hierarchical operation authority is granted to the affiliated organization through the user hierarchy association, so that the corresponding operation authority cannot be directly associated through the user hierarchy. In addition, since a large amount of logic relies on the user hierarchy for processing, once the user management level in the system is used for many years, and needs to be increased or decreased, the addition of hierarchical maintenance will bring a large number of program modifications, and the risk is extremely high. Moreover, due to the special requirements of certain financial systems in terms of permissions, a single agency authority cannot meet the current user needs. For example, some roles require the update operation authority of the affiliated organization, but require the query authority of other organizations. In this way, it causes inconvenience to the user.

Summary of the invention

In view of this, the present application provides a system privilege configuration method, an application server, and a computer readable storage medium. By directly connecting a user hierarchy with a corresponding system operation authority, a flexible configuration of user rights can be achieved, which can satisfy the same The user has access to multiple system operations.

First, in order to achieve the above object, the present application provides an application server, where the application server includes a memory and a processor, and the memory stores a rights configuration program of a system executable on the processor, where the system The rights configuration program is implemented by the processor to implement the following steps:

Get all system operation permissions;

Establishing a system operation permission library according to all the system operation rights;

Obtain the login information of the user;

Obtaining a user level of the user according to the login information of the user;

Matching all system operation rights in the system operation authority library according to the user level of the user; and

The user is assigned corresponding system operation authority according to the matching result.

In addition, to achieve the above object, the present application further provides a method for configuring a rights of a system, where the method is applied to an application server, and the method includes:

Get all system operation permissions;

Obtain the login information of the user;

Further, in order to achieve the above object, the present application further provides a computer readable storage medium storing a rights configuration program of a system, and the rights configuration program of the system may be executed by at least one processor. The step of causing the at least one processor to perform the rights configuration method of the system as described above.

Compared with the prior art, the application server, the system permission configuration method and the computer readable storage medium proposed by the present application first acquire all system operation rights and establish a system operation authority library; secondly, obtain the user login information; Obtaining a user level of the user according to the login information of the user; matching all system operation rights in the system operation authority library according to the user level of the user; and finally, assigning a corresponding system to the user according to the matching result. Operational authority. In this way, it is possible to avoid the disadvantages of the inconvenience of the user operation that the single mechanism authority in the prior art cannot meet the current user requirements. By directly connecting the user hierarchy with the corresponding system operation authority, the flexible configuration of the user rights can be realized, and the same user can obtain multiple system operation rights.

DRAWINGS

1 is a schematic diagram of an optional hardware architecture of an application server of the present application;

2 is a program block diagram of a first embodiment of a rights configuration procedure of the system of the present application;

3 is a program block diagram of a second embodiment of a rights configuration procedure of the system of the present application;

4 is a flowchart of a first embodiment of a method for configuring rights of a system according to the present application;

5 is a flowchart of a second embodiment of a method for configuring rights of a system according to the present application;

FIG. 6 is a flowchart of a third embodiment of a method for configuring rights of the system of the present application.

The implementation, functional features and advantages of the present application will be further described with reference to the accompanying drawings.

Detailed ways

In order to make the objects, technical solutions, and advantages of the present application more comprehensible, the present application will be further described in detail below with reference to the accompanying drawings and embodiments. It is understood that the specific embodiments described herein are merely illustrative of the application and are not intended to be limiting. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments of the present application without departing from the inventive scope are the scope of the present application.

It should be noted that the descriptions of "first", "second" and the like in the present application are for the purpose of description only, and are not to be construed as indicating or implying their relative importance or implicitly indicating the number of technical features indicated. . Thus, features defining "first" or "second" may include at least one of the features, either explicitly or implicitly. In addition, the technical solutions between the various embodiments may be combined with each other, but must be based on the realization of those skilled in the art, and when the combination of the technical solutions is contradictory or impossible to implement, it should be considered that the combination of the technical solutions does not exist. Nor is it within the scope of protection required by this application.

Referring to FIG. 1, it is a schematic diagram of an optional hardware architecture of the application server 1.

The application server 1 may be a computing device such as a rack server, a blade server, a tower server, or a rack server. The application server 1 may be a stand-alone server or a server cluster composed of multiple servers.

In this embodiment, the application server 1 may include, but is not limited to, the memory 11, the processor 12, and the network interface 13 being communicably connected to each other through a system bus.

The application server 1 connects to the network through the network interface 13 to obtain information. The network may be an intranet, an Internet, a Global System of Mobile communication (GSM), a Wideband Code Division Multiple Access (WCDMA), a 4G network, or a 5G network. Wireless or wired networks such as networks, Bluetooth, Wi-Fi, and call networks.

It is pointed out that Figure 1 only shows the application server 1 with components 11-13, but it should be understood that not all illustrated components may be implemented, and more or fewer components may be implemented instead.

The memory 11 includes at least one type of readable storage medium including a flash memory, a hard disk, a multimedia card, a card type memory (eg, SD or DX memory, etc.), and a random access memory (RAM). , static random access memory (SRAM), read only memory (ROM), electrically erasable programmable read only memory (EEPROM), programmable read only memory (PROM), magnetic memory, magnetic disk, optical disk, and the like. In some embodiments, the memory 11 may be an internal storage unit of the application server 1, such as a hard disk or memory of the application server 1. In other embodiments, the memory 11 may also be an external storage device of the application server 1, such as a plug-in hard disk equipped with the application server 1, a smart memory card (SMC), and a secure digital ( Secure Digital, SD) cards, flash cards, etc. Of course, the memory 11 can also include both the internal storage unit of the application server 1 and its external storage device. In this embodiment, the memory 11 is generally used to store an operating system installed in the application server 1 and various types of application software, such as program codes of the rights configuration program 200 of the system. Further, the memory 11 can also be used to temporarily store various types of data that have been output or are to be output.

The processor 12 may be a Central Processing Unit (CPU), controller, microcontroller, microprocessor, or other data processing chip in some embodiments. The processor 12 is typically used to control the overall operation of the application server 1, such as performing data interaction or communication related control and processing, and the like. In this embodiment, the processor 12 is configured to run program code or process data stored in the memory 11, such as the rights configuration program 200 that runs the system.

The network interface 13 may comprise a wireless network interface or a wired network interface, which is typically used to establish a communication connection between the application server 1 and other electronic devices.

In this embodiment, the system privilege configuration program 200 is installed and run in the application server 1. When the privilege configuration program 200 of the system is running, the application server 1 acquires all system operation rights and establishes a system operation authority library. Obtaining the login information of the user; obtaining the user level of the user according to the login information of the user; matching all system operation rights in the system operation authority library according to the user level of the user; and according to the matching result The user assigns the appropriate system operation rights. In this way, it is possible to avoid the disadvantages of the inconvenience of the user operation that the single mechanism authority in the prior art cannot meet the current user requirements. By directly connecting the user hierarchy with the corresponding system operation authority, the flexible configuration of the user rights can be realized, and the same user can obtain multiple system operation rights.

So far, the application environment of the various embodiments of the present application and the hardware structure and functions of related devices have been described in detail. Hereinafter, various embodiments of the present application will be proposed based on the above-described application environment and related devices.

First, the present application proposes a rights configurator 200 of the system.

Referring to FIG. 2, it is a program module diagram of the first embodiment of the rights configuration program 200 of the system of the present application.

In this embodiment, the rights configurator 200 of the system includes a series of computer program instructions stored on the memory 11, and when the computer program instructions are executed by the processor 12, the system of the embodiments of the present application can be implemented. Permission configuration operation. In some embodiments, the rights configurator 200 of the system can be divided into one or more modules based on the particular operations implemented by the various portions of the computer program instructions. For example, in FIG. 2, the rights configuration program 200 of the system may be divided into a first acquisition module 201, an establishment module 202, a second acquisition module 203, a matching module 204, and an allocation module 205. among them:

The first obtaining module 201 is configured to acquire all system operation rights. Further, the first obtaining module 201 receives the manual input of the system administrator through the human-machine interaction interface.

Specifically, in this embodiment, the system administrator can generate the system operation authority by editing the permission command through the web page window. Of course, the system administrator can also input the operating system authority according to the existing system operation authority information. Of course, the company administrator can also create the system operation authority by editing the permission command in the web page window of the terminal device. In this embodiment, the terminal device may be a mobile phone, a smart phone, a notebook computer, a digital broadcast receiver, a PDA (personal digital assistant), a PAD (tablet computer), a PMP (portable multimedia player), a navigation device, and a vehicle. A mobile device such as a device, and a fixed terminal such as a digital TV, a desktop computer, a notebook, a server, and the like.

The establishing module 202 is configured to establish a system operation authority library according to all the system operation rights. The system operation authority can be divided into multiple levels by the management personnel according to actual needs, and the operation authority corresponding to each system is set in the system operation authority library.

The second obtaining module 203 is configured to acquire login information of the user.

Specifically, the user can log in to the financial system through the client of the terminal device. The second obtaining module 203 obtains the login information of the user by at least the following forms:

First, the application server 1 provides a user login text input interface and receives an identity ID number entered by the user.

Second, the application server 1 provides a user face data scanning window, scans the user's face data, and converts the face data into characterized user identity information.

The second obtaining module 203 is further configured to acquire a user level of the user according to the login information of the user. In this embodiment, the user logs in to each financial system on the client of the terminal device.

The matching module 204 is configured to match all system operation rights in the system operation authority library according to the user level of the user.

Specifically, the matching module 204 performs user level identification on all system operation rights in the system operation authority library; then, traverses each system operation authority in the system operation authority library according to the user level, and finally And matching, according to the user level of the user, a user level identifier of each system operation authority in the system operation authority library. In this way, the matching module 204 can match all system operation rights in the system operation authority library according to the user level of the user.

The allocating module 205 is configured to allocate a corresponding system operation authority to the user according to the matching result. For example, when a normal user is matched and the system only has the right to view, the ordinary user can only view the system. When the matching is an advanced user (for example, an operator of a financial system), the advanced user is in addition to the system. View permissions, and some modify permissions. When the administrator is matched, the administrator has the right to view, delete, and modify all the systems.

Through the above-mentioned program modules 201-205, the rights configuration program 200 of the system proposed by the present application first acquires all system operation rights and establishes a system operation authority library; secondly, acquires user login information; and obtains according to the user's login information. User level of the user; again, matching all system operation rights in the system operation authority library according to the user level of the user; finally, assigning the corresponding system operation authority to the user according to the matching result. In this way, it is possible to avoid the disadvantages of the inconvenience of the user operation that the single mechanism authority in the prior art cannot meet the current user requirements. By directly connecting the user hierarchy with the corresponding system operation authority, the flexible configuration of the user rights can be realized, and the same user can obtain multiple system operation rights.

Further, based on the above-described first embodiment of the rights configuration program 200 of the system of the present application, a second embodiment of the present application (shown in FIG. 3) is proposed. In this embodiment, the rights configuration program 200 of the system further includes a dividing module 206. In this embodiment, the dividing module 206 is configured to:

Divide user information into different user hierarchies.

In this embodiment, the matching module 204 is further configured to parse user information in the login information, and match the corresponding user level according to the user information.

In this embodiment, how many user levels are divided according to the needs of the system, for example, three, and how many users are in each user level, which can be set according to actual conditions.

For example, for security, it is also possible to analyze the identification information of the user login information, or the MAC address information and the like. The application server 1 assigns the corresponding system operation authority to the user according to the matching result. For example, when a normal user is matched and the system only has the right to view, the ordinary user can only view the system. When the matching is an advanced user (for example, an operator of a financial system), the advanced user is in addition to the system. View permissions, and some modify permissions. When the administrator is matched, the administrator has the right to view, delete, and modify all the systems.

Through the above program modules 201-206, the rights configuration program 200 of the system proposed by the present application can acquire the user level of the user according to the login information of the user.

In addition, the present application also proposes a method for configuring rights of a system.

Referring to FIG. 4, it is a schematic flowchart of the implementation of the first embodiment of the rights configuration method of the system of the present application. In this embodiment, the order of execution of the steps in the flowchart shown in FIG. 4 may be changed according to different requirements, and some steps may be omitted.

In step S401, all system operation rights are acquired. Specifically, the system operation authority may also refer to an organization operation authority in the financial system.

Further, the application server 1 receives a manual input of a system administrator through a human-machine interaction interface.

Step S402, establishing a system operation authority library according to all the system operation rights. The system operation authority can be divided into multiple levels by the management personnel according to actual needs, and the operation authority corresponding to each system is set in the system operation authority library.

Step S403, obtaining login information of the user.

Specifically, the user can log in to the financial system through the terminal device. The application server 2 obtains the login information of the user by at least the following form:

Step S404: Acquire a user level of the user according to the login information of the user.

In this embodiment, the user logs in to each financial system on the client of the terminal device. The step of acquiring the user hierarchy of the user according to the login information of the user will be detailed in the second embodiment (FIG. 5).

Step S405: Match all system operation rights in the system operation authority library according to the user level of the user. The step of matching all system operation rights in the system operation authority library according to the user level of the user will be detailed in the third embodiment (FIG. 6) of the system authority configuration method.

Step S406, assigning the corresponding system operation authority to the user according to the matching result. For example, when a normal user is matched and the system only has the right to view, the ordinary user can only view the system. When the matching is an advanced user (for example, an operator of a financial system), the advanced user is in addition to the system. View permissions, and some modify permissions. When the administrator is matched, the administrator has the right to view, delete, and modify all the systems.

Through the above steps S401-406, the rights configuration method of the system proposed by the present application firstly acquires all system operation rights and establishes a system operation authority library; secondly, acquires the user's login information; and again, obtains according to the user's login information. User level of the user; matching all system operation rights in the system operation authority library according to the user level of the user; finally, assigning the corresponding system operation authority to the user according to the matching result. In this way, it is possible to avoid the disadvantages of the inconvenience of the user operation that the single mechanism authority in the prior art cannot meet the current user requirements. By directly connecting the user hierarchy with the corresponding system operation authority, the flexible configuration of the user rights can be realized, and the same user can obtain multiple system operation rights.

Based on the first embodiment of the rights configuration method of the system of the present application, a second embodiment of the rights configuration method of the system of the present application is proposed.

Referring to FIG. 5, it is a schematic flowchart of the implementation of the second embodiment of the rights configuration method of the system of the present application. In this embodiment, the order of execution of the steps in the flowchart shown in FIG. 5 may be changed according to different requirements, and some steps may be omitted.

In this embodiment, the step of acquiring the user level of the user according to the login information of the user includes:

In step S501, the user information is divided into different user levels. In this embodiment, how many user levels are divided according to the needs of the system, for example, three, and how many users are in each user level, which can be set according to actual conditions.

Step S502, parsing the user information in the login information. For example, for security, it is also possible to analyze the identification information of the user login information, or the MAC address information and the like.

Step S503, matching corresponding user levels according to the user information. Then, the application server 1 assigns the corresponding system operation authority to the user according to the matching result. For example, when a normal user is matched and the system only has the right to view, the ordinary user can only view the system. When the matching is an advanced user (for example, an operator of a financial system), the advanced user is in addition to the system. View permissions, and some modify permissions. When the administrator is matched, the administrator has the right to view, delete, and modify all the systems.

Through the above steps S501-503, the rights configuration method of the system proposed by the present application can acquire the user level of the user according to the login information of the user.

Based on the first to second embodiments of the rights configuration method of the system of the present application, a third embodiment of the rights configuration method of the system of the present application is proposed.

Referring to FIG. 6, it is a schematic flowchart of the implementation of the third embodiment of the rights configuration method of the system of the present application. In this embodiment, the order of execution of the steps in the flowchart shown in FIG. 6 may be changed according to different requirements, and some steps may be omitted.

In this embodiment, the step of matching all the system operation rights in the system operation authority library according to the user level of the user includes:

Step S601: Perform user level identification on all system operation rights in the system operation authority library.

Step S602, traversing each system operation authority in the system operation authority library according to the level of the user. Specifically, in this embodiment, the step of matching all system operation rights in the system operation authority library according to the user level of the user is specifically implemented by:

The application server 1 performs user level identification on all system operation rights in the system operation authority library, and then traverses each system operation authority in the system operation authority library according to the user level, and finally, according to the The user level of the user matches the user level identifier of each system operation authority in the system operation authority library.

In this way, all system operation rights in the system operation authority library can be matched according to the user level of the user. The user level is directly connected with the corresponding system operation authority, and the flexible configuration of the user authority is realized, which can satisfy the same user to obtain multiple system operation rights. Moreover, it is possible to support rights management through any fictitious management level in the absence of user management level.

Through the above steps S601-602, the rights configuration method of the system proposed by the present application can match all system operation rights in the system operation authority library according to the user level of the user. The user level is directly connected with the corresponding system operation authority, and the flexible configuration of the user authority is realized, which can satisfy the same user to obtain multiple system operation rights.

Further, in order to achieve the above object, the present application further provides a computer readable storage medium, where the computer readable storage medium stores a rights configuration program of a system, and the rights configuration program of the system can be executed by at least one processor. The step of causing the at least one processor to perform the rights configuration method of the system as described above.

The serial numbers of the embodiments of the present application are merely for the description, and do not represent the advantages and disadvantages of the embodiments.

Through the description of the above embodiments, those skilled in the art can clearly understand that the foregoing embodiment method can be implemented by means of software plus a necessary general hardware platform, and of course, can also be through hardware, but in many cases, the former is better. Implementation. Based on such understanding, the technical solution of the present application, which is essential or contributes to the prior art, may be embodied in the form of a software product stored in a storage medium (such as ROM/RAM, disk, The optical disc includes a number of instructions for causing a terminal device (which may be a mobile phone, a computer, a server, an air conditioner, or a network device, etc.) to perform the methods described in various embodiments of the present application.

The above is only a preferred embodiment of the present application, and is not intended to limit the scope of the patent application, and the equivalent structure or equivalent process transformations made by the specification and the drawings of the present application, or directly or indirectly applied to other related technical fields. The same is included in the scope of patent protection of this application.

Claims

A method for configuring a rights of a system is applied to an application server, and the method includes the steps of:

Obtain all system operation permissions and establish a library of system operation permissions;

Obtain the login information of the user;

Obtaining a user level of the user according to the login information of the user;

Matching all system operation rights in the system operation authority library according to the user level of the user; and

The user is assigned corresponding system operation authority according to the matching result.
The method for configuring a rights of a system according to claim 1, wherein the step of obtaining all system operation rights and establishing a system operation authority library comprises:

Receive manual input from the system administrator through the human-machine interface.
The method for configuring the rights of the system according to claim 1, wherein the step of acquiring the login information of the user comprises:

The user login text input interface is provided, and the ID number input by the user is received.
The method for configuring the rights of the system according to claim 3, wherein the step of acquiring the login information of the user further comprises:

A user face data scanning window is provided, the user's face data is scanned, and the face data is converted into characterized user identity information.
The method for configuring the rights of the user according to the login information of the user, according to the method of claim 1, wherein the step of acquiring the user level of the user according to the login information of the user comprises:

Divide user information into different user levels; and

The user information in the login information is parsed, and the corresponding user hierarchy is matched according to the user information.
The privilege configuration method of the system according to claim 1, wherein the step of matching all system operation rights in the system operation authority library according to the user level of the user includes:

Performing user level identification on all system operation rights in the system operation authority library; and

Each system operation authority in the system operation authority library is traversed according to the user's hierarchy.
The method for configuring the rights of the system according to claim 6, wherein the step of matching the user operation rights in the system operation authority library according to the user level of the user further comprises:

User level identification of each system operation authority in the system operation authority library is matched according to the user level of the user.
An application server, comprising: a memory, a processor, wherein the memory stores a rights configuration program of a system executable on the processor, and the rights configuration program of the system is The processor implements the following steps when it executes:

Obtain all system operation permissions and establish a library of system operation permissions;

Obtain the login information of the user;

Obtaining a user level of the user according to the login information of the user;

Matching all system operation rights in the system operation authority library according to the user level of the user; and

The user is assigned corresponding system operation authority according to the matching result.
The application server according to claim 8, wherein the step of acquiring all system operation rights and establishing a system operation authority library comprises:

Receive manual input from the system administrator through the human-machine interface.
The application server according to claim 8, wherein the step of acquiring login information of the user comprises:

The user login text input interface is provided, and the ID number input by the user is received.
The application server according to claim 10, wherein the step of acquiring the login information of the user further comprises:

A user face data scanning window is provided, the user's face data is scanned, and the face data is converted into characterized user identity information.
The application server according to claim 8, wherein the step of acquiring the user level of the user according to the login information of the user comprises:

Divide user information into different user levels; and

The user information in the login information is parsed, and the corresponding user hierarchy is matched according to the user information.
The application server according to claim 8, wherein the step of matching all system operation rights in the system operation authority library according to the user level of the user comprises:

Performing user level identification on all system operation rights in the system operation authority library; and

Each system operation authority in the system operation authority library is traversed according to the user's hierarchy.
The application server according to claim 13, wherein the step of matching all system operation rights in the system operation authority library according to the user level of the user further comprises:

User level identification of each system operation authority in the system operation authority library is matched according to the user level of the user.
A computer readable storage medium storing a rights configurator of a system, the rights configurator of the system being executable by at least one processor to cause the at least one processor to perform the following steps:

Obtain all system operation permissions and establish a library of system operation permissions;

Obtain the login information of the user;

Obtaining a user level of the user according to the login information of the user;

Matching all system operation rights in the system operation authority library according to the user level of the user; and

The user is assigned corresponding system operation authority according to the matching result.
The computer readable storage medium according to claim 15, wherein the step of acquiring login information of the user comprises:

The user login text input interface is provided, and the ID number input by the user is received.
The computer readable storage medium of claim 16, wherein the step of obtaining login information of the user further comprises:

A user face data scanning window is provided, the user's face data is scanned, and the face data is converted into characterized user identity information.
The computer readable storage medium according to claim 15, wherein the step of acquiring the user level of the user according to the login information of the user comprises:

Divide user information into different user levels; and

The user information in the login information is parsed, and the corresponding user hierarchy is matched according to the user information.
The computer readable storage medium according to claim 15, wherein the step of matching all system operation rights in the system operation authority library according to the user level of the user comprises:

Performing user level identification on all system operation rights in the system operation authority library; and

Each system operation authority in the system operation authority library is traversed according to the user's hierarchy.
The computer readable storage medium according to claim 19, wherein the step of matching all system operation rights in the system operation authority library according to the user level of the user further comprises:

User level identification of each system operation authority in the system operation authority library is matched according to the user level of the user.