CN101901271A - Permission management system - Google Patents

Permission management system Download PDF

Info

Publication number
CN101901271A
CN101901271A CN2010102505784A CN201010250578A CN101901271A CN 101901271 A CN101901271 A CN 101901271A CN 2010102505784 A CN2010102505784 A CN 2010102505784A CN 201010250578 A CN201010250578 A CN 201010250578A CN 101901271 A CN101901271 A CN 101901271A
Authority
CN
China
Prior art keywords
data
user
database
external
internal
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN2010102505784A
Other languages
Chinese (zh)
Inventor
曹志刚
张春前
王磊
张东
陆宇峰
郭俊锐
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
ORIENT IRON ELECTRIC COMMERCE CO Ltd
Original Assignee
ORIENT IRON ELECTRIC COMMERCE CO Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by ORIENT IRON ELECTRIC COMMERCE CO Ltd filed Critical ORIENT IRON ELECTRIC COMMERCE CO Ltd
Priority to CN2010102505784A priority Critical patent/CN101901271A/en
Publication of CN101901271A publication Critical patent/CN101901271A/en
Pending legal-status Critical Current

Links

Images

Landscapes

  • Storage Device Security (AREA)

Abstract

The invention provides a permission management system, which manages the permission of a user to access a database and comprises a database data sorter, a user sorter, a user authentication device and a data access device, wherein the database data sorter divides the database data into three categories, i.e. core data, inner data, outer data; the user sorter divides users into three categories, i.e. senior users, inner users and outer users; the senior users are permitted to edit the core data and can check the inner data and the outer data; the inner users are permitted to edit the inner data and the outer data; the outer users are permitted to check the inner data and the outer data and can edit the outer data; the user authentication device is connected to the user sorter to carry out user authentication, and provides an interface; and the data access device is connected to the user authentication device and the database so as to enable the user passing through the authentication to access to the database according to the permission of the user categories.

Description

Rights Management System
Technical field
The present invention relates to data access technology, relate in particular to a kind of Rights Management System.
Background technology
Electronic trade has obtained development fast along with networks development, the both sides of transaction can be by finishing transaction for network.Electronic trade makes convenience that trade becomes, efficient.But also there are some defectives in traditional electronic trade: in-company data are often externally not open, therefore for the customer, are merely able to recognize a part of information relevant with trade.For the client, this is not enough, and the client wishes to understand the process of trade.And concerning serving the provider, the open related data safety inadequately that seems on network.So, just have gap aspect demand and the practical application.
Summary of the invention
The present invention proposes a kind of Rights Management System, and leading subscriber is visited the authority of a database, and this Rights Management System comprises:
The database data sorter is connected to database, and database data is divided into three classes: core data, internal data, external data;
User's sorter is divided into three classes with the user: advanced level user, internal user, external user; Advanced level user is authorized to edit core data, and can look into internal data and external data; Internal user is authorized to edit internal data and external data; External user is authorized to check internal data and external data, and can edit external data;
The subscriber authentication device, be connected to user's sorter, the user is carried out authentication, the subscriber authentication device provides an interactive interface, wherein, the subscriber authentication device is undertaken by LAN (Local Area Network) or internet the authentication of advanced level user and internal user, and the subscriber authentication device is undertaken by the internet the authentication of external user;
DAA is connected to subscriber authentication device and database, and to the user by authentication, the mandate of classifying according to the user conducts interviews to database.
Advanced level user can comprise that system manager, internal user can comprise that business personnel, external user can comprise the client.
Internal data can comprise that business datum, external data can comprise the data that exchange with the client.
Adopt technical scheme of the present invention, utilize the opening of the partial data in the Rights Management System fulfillment database, Rights Management System is classified to the data in the database, only some data can be browsed or edit by the internet, and the data of core can't be by internet access.By this Rights Management System, just realized data and user's Classification Management, solved client's actual demand.
Description of drawings
Fig. 1 has disclosed the structural drawing according to Rights Management System of the present invention.
Embodiment
With reference to shown in Figure 1, the present invention has disclosed a kind of Rights Management System.This Rights Management System leading subscriber is visited the authority of a database 11, comprising: database data sorter 10, user's sorter 20, subscriber authentication device 30 and DAA 40.
Database data sorter 10 is connected to database 11, and the data in the database 11 are divided into three classes: core data, internal data, external data.In one embodiment, internal data comprises business datum; External data comprises the data that exchange with the client.
User's sorter 20 is divided into three classes with the user: advanced level user, internal user, external user; Advanced level user is authorized to edit core data, and can look into internal data and external data; Internal user is authorized to edit internal data and external data; External user is authorized to check internal data and external data, and can edit external data.Advanced level user comprises that system manager, internal user comprise the business personnel.Therefore advanced level user and internal user are by the LAN (Local Area Network) visit data usually from intra-company basically, and (for example going out) under a few cases can be by internet VPN accessing database.External user comprises the client, and the client conducts interviews by the internet.
Subscriber authentication device 30 is connected to user's sorter 20, and the user is carried out authentication, and subscriber authentication device 30 provides an interactive interface, and the user can login this interactive interface, carries out the checking of identity on interactive interface.The authentication of 30 pairs of advanced level users of subscriber authentication device and internal user is undertaken by LAN (Local Area Network) or internet, and the subscriber authentication device is undertaken by the internet the authentication of external user.
DAA 40 is connected to subscriber authentication device 30 and database 10, and to the user by authentication, the mandate of classifying according to the user conducts interviews to database.DAA 40 is built up between database 11 and the user, and user's visit is limited, and can guarantee the data security in the database.
Adopt technical scheme of the present invention, utilize the opening of the partial data in the Rights Management System fulfillment database, Rights Management System is classified to the data in the database, only some data can be browsed or edit by the internet, and the data of core can't be by internet access.By this Rights Management System, just realized data and user's Classification Management, solved client's actual demand.

Claims (3)

1. Rights Management System, leading subscriber is visited the authority of a database, it is characterized in that, comprising:
The database data sorter is connected to described database, and database data is divided into three classes: core data, internal data, external data;
User's sorter is divided into three classes with the user: advanced level user, internal user, external user; Advanced level user is authorized to edit core data, and can look into internal data and external data; Internal user is authorized to edit internal data and external data; External user is authorized to check internal data and external data, and can edit external data;
The subscriber authentication device, be connected to described user's sorter, the user is carried out authentication, the subscriber authentication device provides an interactive interface, wherein, the subscriber authentication device is undertaken by LAN (Local Area Network) or internet the authentication of advanced level user and internal user, and the subscriber authentication device is undertaken by the internet the authentication of external user;
DAA is connected to subscriber authentication device and database, and to the user by authentication, the mandate of classifying according to the user conducts interviews to database.
2. Rights Management System as claimed in claim 1 is characterized in that,
Described advanced level user comprises the system manager;
Described internal user comprises the business personnel;
Described external user comprises the client.
3. Rights Management System as claimed in claim 1 is characterized in that,
Described internal data comprises business datum;
Described external data comprises the data that exchange with the client.
CN2010102505784A 2010-08-11 2010-08-11 Permission management system Pending CN101901271A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN2010102505784A CN101901271A (en) 2010-08-11 2010-08-11 Permission management system

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN2010102505784A CN101901271A (en) 2010-08-11 2010-08-11 Permission management system

Publications (1)

Publication Number Publication Date
CN101901271A true CN101901271A (en) 2010-12-01

Family

ID=43226805

Family Applications (1)

Application Number Title Priority Date Filing Date
CN2010102505784A Pending CN101901271A (en) 2010-08-11 2010-08-11 Permission management system

Country Status (1)

Country Link
CN (1) CN101901271A (en)

Cited By (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102571380A (en) * 2010-12-16 2012-07-11 北京博阳世通信息技术有限公司 Multi-instance GIS platform unified user management method and system
CN103440140A (en) * 2013-09-11 2013-12-11 昆山富泰科电脑有限公司 System for classifying applications of intelligent device and setting use permission
CN106778215A (en) * 2016-11-18 2017-05-31 广州普惠创新金融信息服务有限公司 A kind of account management method of transaction system, apparatus and system
CN107682376A (en) * 2017-11-21 2018-02-09 北京顶象技术有限公司 Air control data interactive method and device
CN109064117A (en) * 2018-07-03 2018-12-21 合肥蓝果树科技发展有限公司 A kind of enterprise management system

Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1845032A (en) * 2005-04-06 2006-10-11 杭州波导软件有限公司 Method for realizing classification management of use right of mobile terminal user

Patent Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1845032A (en) * 2005-04-06 2006-10-11 杭州波导软件有限公司 Method for realizing classification management of use right of mobile terminal user

Cited By (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102571380A (en) * 2010-12-16 2012-07-11 北京博阳世通信息技术有限公司 Multi-instance GIS platform unified user management method and system
CN103440140A (en) * 2013-09-11 2013-12-11 昆山富泰科电脑有限公司 System for classifying applications of intelligent device and setting use permission
CN106778215A (en) * 2016-11-18 2017-05-31 广州普惠创新金融信息服务有限公司 A kind of account management method of transaction system, apparatus and system
CN107682376A (en) * 2017-11-21 2018-02-09 北京顶象技术有限公司 Air control data interactive method and device
CN107682376B (en) * 2017-11-21 2021-03-23 北京顶象技术有限公司 Wind control data interaction method and device
CN109064117A (en) * 2018-07-03 2018-12-21 合肥蓝果树科技发展有限公司 A kind of enterprise management system

Similar Documents

Publication Publication Date Title
US20230076019A1 (en) Smart pest trap as iot in policy fabric and sharing system for enabling multi-party data processing in an iot environment
US11520922B2 (en) Method for personal data administration in a multi-actor environment
US9489503B2 (en) Behavioral stochastic authentication (BSA)
US20120215809A1 (en) Search mediation system
Bunke et al. Organizing security patterns related to security and pattern recognition requirements
US10559150B1 (en) Secured electronic communication system
CN101901271A (en) Permission management system
CN108881218B (en) Data security enhancement method and system based on cloud storage management platform
US10567380B2 (en) Document orchestration system for processing digital consent information
CN102299802A (en) Cross-domain single sign-on realization method
Edu et al. Digital security vulnerabilities and threats implications for financial institutions deploying digital technology platforms and application: FMEA and FTOPSIS analysis
WO2021137753A1 (en) Electronic authentication system and process using the same
Chiu et al. Privacy and access control issues in financial enterprise content management
Salmony Rethinking digital identity
Kim Efficiency of paid authentication methods for mobile devices
MXPA04012119A (en) System and method for supplying and managing rights expressions.
Simmonds The digital identity issue
JP2007004610A (en) Complex access approval method and device
CN102546636A (en) Protected resource monitoring method and device
CN111209552A (en) Identity authentication method and device based on user behaviors
KR20090129260A (en) Method and system for protecting individual information based on public key infrastructure and privilege management infrastructure
DiSipio Global Positioning Systems and Social Media-Anathemas to Privacy
Vemou et al. GUIDELINES AND TOOLS FOR INCORPORATING PRIVACY IN SOCIAL NETWORKING PLATFORMS.
EP4336398A1 (en) Smart pest trap as iot in policy fabric and sharing system for enabling multi-party data processing in an iot environment
Ann Kosa et al. Privacy representation in VANET

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C12 Rejection of a patent application after its publication
RJ01 Rejection of invention patent application after publication

Application publication date: 20101201