CN105100050B - Method for managing user right and system - Google Patents
Method for managing user right and system Download PDFInfo
- Publication number
- CN105100050B CN105100050B CN201510282086.6A CN201510282086A CN105100050B CN 105100050 B CN105100050 B CN 105100050B CN 201510282086 A CN201510282086 A CN 201510282086A CN 105100050 B CN105100050 B CN 105100050B
- Authority
- CN
- China
- Prior art keywords
- user
- user right
- information
- authority
- database
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0892—Network architectures or network communication protocols for network security for authentication of entities by using authentication-authorization-accounting [AAA] servers or protocols
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L51/00—User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
- H04L51/21—Monitoring or handling of messages
- H04L51/224—Monitoring or handling of messages providing notification on incoming messages, e.g. pushed notifications of received messages
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0815—Network architectures or network communication protocols for network security for authentication of entities providing single-sign-on or federations
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Security & Cryptography (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Computer Hardware Design (AREA)
- Business, Economics & Management (AREA)
- Accounting & Taxation (AREA)
- Storage Device Security (AREA)
- Information Retrieval, Db Structures And Fs Structures Therefor (AREA)
- Management, Administration, Business Operations System, And Electronic Commerce (AREA)
- Information Transfer Between Computers (AREA)
Abstract
The invention discloses a kind of method for managing user right and system, wherein method includes：After determining that the user right relevant information in user rights database changes, determined to carry out the user list of authority calculating according to user activity attribute；According to the user list, the user right relevant information in user rights database is distributed to different application servers；Authority calculating is carried out according to user right relevant information on every application server, the user right information for calculating acquisition is stored to cache database.Server stress can be alleviated using the present invention and ensure the real-time of user right information, lift the search efficiency of user right information.
Description
Technical field
The present invention relates to database technical field, more particularly to method for managing user right and system.
Background technology
As bank size gradually increases, the field that bank is engaged in also is expanded constantly, and this is to employee's rights management
Accuracy and integrity propose strict requirements.Usual each bank has a set of Rights Management System to carry out the authority to employee
It is managed maintenance.Employee performs the function when being traded, it is necessary to inquire about oneself by Rights Management System and whether have
Authority.
The common methods for obtaining user right information at present are that the user right relevant information of each employee is stored in into DB2
In database.When user logs in, user right relevant information is inquired about from DB2 database by a WAS server, utilizes inquiry
The user right relevant information arrived carries out authority calculating, obtains user right information, and be supplied to user.However, this technology
The shortcomings that be that requirement to DB2 database performance is high, especially when customer volume is very big, query performance is difficult to be protected.Also,
Because authority calculates higher to CPU requirement, when having the multi-user to be calculated simultaneously, there is certain bottleneck in CPU.
Also there is system that all user right informations are preserved in the buffer, to lift search efficiency in the prior art.So
And the shortcomings that this technology is some information that will not be used in caching be present, and when user right changes, in caching
Information is difficult to upgrade in time.
The content of the invention
The embodiment of the present invention provides a kind of method for managing user right, to alleviate server stress and ensure user right
The real-time of information, lifts the search efficiency of user right information, and this method includes：
It is true according to user activity attribute after determining that the user right relevant information in user rights database changes
Surely the user list of authority calculating is carried out；
According to the user list, the user right relevant information in user rights database is distributed to different applications
On server；
Authority calculating is carried out according to user right relevant information on every application server, the user for calculating acquisition is weighed
Limit information is stored to cache database.
In one embodiment, the user right relevant information determined in user rights database changes, including：
Authority refresh operation is periodically called, determines the synchronization log table number in user rights database；In the synchronization
When log sheet number changes, determine that the user right relevant information in user rights database changes；
Or, the notification message that the user right relevant information in user rights database changes is received, according to described
Notification message determines that the user right relevant information in user rights database changes.
In one embodiment, before the user list for determining to carry out authority calculating according to user activity attribute,
Also include：
User activity attribute is determined according to user login information.
In one embodiment, the user right relevant information by user rights database is distributed to different applications
On server, including：
According to hashing algorithm, the user right relevant information in user rights database is distributed to different application services
On device.
In one embodiment, the user right relevant information in user rights database is distributed to not according to hashing algorithm
When on same application server, hashed according to Customs Assigned Number.
In one embodiment, the cache database is redis databases.
In one embodiment, described method for managing user right also includes：
Receive Client-initiated authority inquiry request；
According to the authority inquiry request, user right information is inquired about from the cache database；
The user right information inquired from the cache database is supplied to user.
In one embodiment, described method for managing user right also includes：
If not inquiring user right information in the cache database, from user rights database acquisition pair
The user right relevant information answered；
According to the user right associated information calculation user right information of acquisition, the user right information for calculating acquisition is carried
Supply user.
In one embodiment, described method for managing user right also includes：
The user right information for calculating acquisition is stored to the cache database；
Change calculates the liveness attribute that the user right information obtained corresponds to user.
The embodiment of the present invention also provides a kind of user authority management system, to alleviate server stress and ensure that user weighs
The real-time of limit information, the search efficiency of user right information is lifted, the system includes：
User rights database, for storing user right relevant information；
More application servers, wherein at least an application server are used for it is determined that the user in user rights database weighs
After limit relevant information changes, determined to carry out the user list of authority calculating according to user activity attribute；Different should
It is used to obtain different user right relevant informations from user rights database according to the user list with server；Every should
It is used to carry out authority calculating according to user right relevant information with server, the user right information for calculating acquisition is stored to slow
Deposit data storehouse；
Cache database, the user right information obtained is calculated for storing application server.
In one embodiment, application server is specifically used for：
Authority refresh operation is periodically called, determines the synchronization log table number in user rights database；In the synchronization
When log sheet number changes, determine that the user right relevant information in user rights database changes；
Or, the notification message that the user right relevant information in user rights database changes is received, according to described
Notification message determines that the user right relevant information in user rights database changes.
In one embodiment, application server is additionally operable to：
Receive Client-initiated authority inquiry request；
According to the authority inquiry request, user right information is inquired about from the cache database；
The user right information inquired from the cache database is supplied to user.
In one embodiment, application server is additionally operable to：
When not inquiring user right information in the cache database, obtained from the user rights database corresponding
User right relevant information；
According to the user right associated information calculation user right information of acquisition, the user right information for calculating acquisition is carried
Supply user.
In one embodiment, application server is additionally operable to：
The user right information for calculating acquisition is stored to the cache database；
Change calculates the liveness attribute that the user right information obtained corresponds to user.
In the embodiment of the present invention, user right information is stored to cache database, so can be in user's search access right
User right information is directly obtained during information from cache database, is needed relative to during user's search access right information in the prior art
To be inquired about from DB2 database user right relevant information, by WAS servers carry out authority calculating for, can solve DB2 numbers
According to storehouse performance bottleneck that may be present, search efficiency is lifted；Also, by the use in user rights database in the embodiment of the present invention
Family right related information is distributed to progress authority calculating on different application servers, relative to only one in the prior art
For WAS servers carry out authority calculating, the pressure of server when can disperse to calculate authority；In addition, carrying out authority calculating
When be that the as needed user list for carrying out authority calculating is carried out, and user list is determined according to user activity attribute, i.e.,
Authority calculating is not carried out to each user, but authority is carried out according to a part of any active ues of user activity Attributions selection
Calculate, be also the authority information for storing this part any active ues in cache database, can so avoid inactive to some
The information of user calculates and storage, and when user right relevant information changes, user right information can obtain in time more
Newly, the real-time of user right information is lifted.
Brief description of the drawings
In order to illustrate more clearly about the embodiment of the present invention or technical scheme of the prior art, below will be to embodiment or existing
There is the required accompanying drawing used in technology description to be briefly described, it should be apparent that, drawings in the following description are only this
Some embodiments of invention, for those of ordinary skill in the art, on the premise of not paying creative work, can be with
Other accompanying drawings are obtained according to these accompanying drawings.In the accompanying drawings：
Fig. 1 is the schematic diagram of method for managing user right in the embodiment of the present invention；
Fig. 2 is an instantiation figure of method for managing user right in the embodiment of the present invention；
Fig. 3 is the schematic diagram of user authority management system in the embodiment of the present invention.
Embodiment
For the purpose, technical scheme and advantage of the embodiment of the present invention are more clearly understood, below in conjunction with the accompanying drawings to this hair
Bright embodiment is described in further details.Here, the schematic description and description of the present invention is used to explain the present invention, but simultaneously
It is not as a limitation of the invention.
Fig. 1 is the schematic diagram of method for managing user right in the embodiment of the present invention.As shown in figure 1, in the embodiment of the present invention
Method for managing user right can include：
After step 101, the user right relevant information for determining in user rights database change, enlivened according to user
Degree attribute determines to carry out the user list of authority calculating；
Step 102, according to the user list, the user right relevant information in user rights database is distributed to not
On same application server；
Step 103, authority calculating is carried out according to user right relevant information on every application server, obtained calculating
User right information store to cache database.
Flow is it is known that in the embodiment of the present invention as shown in Figure 1, it is determined that user right in user rights database
After relevant information changes, determined to carry out the user list of authority calculating according to user activity attribute, subsequently according to
Family list carries out authority calculating and storage, i.e., authority calculating is not carried out to each user, but according to user activity category
A part of any active ues of Sexual behavior mode carry out authority calculating, are also the authority letter for storing this part any active ues in cache database
It breath, can so avoid that the information of some inactive users is calculated and stored, when user right relevant information changes,
User right information can be upgraded in time, lift the real-time of user right information.
In the embodiment of the present invention, the user right relevant information in user rights database is distributed to different applications and taken
It is engaged in carrying out authority calculating on device, for only having a WAS server to carry out authority calculating in the prior art, can disperses
The pressure of server when calculating authority；Also, authority meter is carried out according to user right relevant information on every application server
After calculation, the user right information for calculating acquisition is stored to cache database, so can be straight in user's search access right information
Connect and user right information is obtained from cache database, needed relative to during user's search access right information in the prior art from DB2
For user right relevant information is inquired about in database, carrying out authority calculating by WAS servers, can solve DB2 database can
Performance bottleneck existing for energy, lift search efficiency.
When it is implemented, user right relevant information in user rights database can be by sync client from authority
Obtained in system.Determine that the user right relevant information in user rights database changes, can include：Periodically power is adjusted
Refresh operation is limited, determines the synchronization log table number in user rights database；When synchronization log table number changes, really
The user right relevant information determined in user rights database changes.For example, an application server passes through Spring's
Quartz scheduled tasks have adjusted authority refresh operation, the synchronization log table number in user rights database whether change come
Judge whether user right relevant information occurred change.
Or determine that the user right relevant information in user rights database changes, it can include：Receive user
The notification message that user right relevant information in rights database changes, user right data are determined according to notification message
User right relevant information in storehouse changes.For example, an application server receives a notification message, table in the notification message
User right relevant information in bright user rights database changes, and application server is can be known according to the notification message
User right relevant information in user rights database changes.And for example in one embodiment, can be by application server
Timing has adjusted authority refresh operation to be changed to adjust authority refresh operation when each user right relevant information changes, but operates possible
It can accurately inform which change occurs for which user right relevant information dependent on source system such as user rights database, it is right
Source system requirements is higher.
After it is determined that the user right relevant information in user rights database changes, according to user activity attribute
It is determined that to carry out the user list of authority calculating.User activity attribute can be used for judging whether user is any active ues.With
Family liveness attribute for example can represent whether user is any active ues with a flag bit, for example, if be any active ues,
Then the flag bit is " true ", and if not any active ues, then the flag bit is " false ".Any active ues, which can for example refer to, steps on
The user that frequency exceedes certain number, or the user of last login time within the specific limits etc. are recorded, can be according to actual need
Ask to set the actual conditions of any active ues.According to user activity attribute determine to carry out authority calculating user list it
Before, user activity attribute can be determined according to user login information.Application server can be according to user activity attribute pair
User is once filtered, and removes some users that need not temporarily carry out refreshing authority information, is obtained a needs and is weighed
Limit the user list calculated.
According to user activity attribute determine to carry out the user list of authority calculating after, can according to user list,
User right relevant information in user rights database is distributed to different application servers.Specifically, can basis
Hashing algorithm, the user right relevant information in user rights database is distributed to different application servers.For example, will
User right relevant information is hashed according to user identity informations such as Customs Assigned Number, user names, is distributed to different application clothes
It is engaged in carrying out authority calculating on device.So, the right related information of a part of user of every application server processes, more application clothes
Device progress authority of being engaged in is calculated relative to only having single server to carry out authority calculating in the prior art, can be with distributing server CPU
Pressure, improve calculating speed and efficiency.
Authority calculating is carried out according to user right relevant information on every application server, every application server all can
The authority information of a part of user is obtained, every application server all stores the user right information for calculating acquisition to caching number
According to storehouse.Cache database can be redis databases, in addition, in addition to redis databases, can also use gemfire data
Other a variety of cache databases such as storehouse, it is contemplated that the popularity used, reliability, stability, community's activity, using valency
The many factors such as lattice, it is proposed that selection redis databases are as corresponding cache database.
As described above, storing the authority information of any active ues in cache database, user is in each search access right information
When, application server receives the authority inquiry request of user, then according to the authority inquiry request, is inquired about from cache database
The authority information of the user, and the authority information inquired is supplied to user.Certainly, this is stored in cache database
On the premise of the authority information for initiating the user of request, that is, the user for initiating request is any active ues.
When the user for initiating authority inquiry request is inactive user, the power of the user is not stored in cache database
Limit information, now application server receive the authority inquiry request of user, the power of the user is can not find out in cache database
Limit information, then initiate to ask to user rights database, the right related information of the user is obtained from user rights database, use
The user right relevant information got carries out authority calculating, and user is supplied to after obtaining the authority information of the user.Further
, in such cases, it is believed that the user is no longer belong to inactive user, and should belong to any active ues, then application server can
So that the authority information for the user being calculated is stored to cache database, and change the liveness attribute of the user.
Fig. 2 is an instantiation figure of method for managing user right in the embodiment of the present invention.In this example, user authority management
Process can include：
Step 201, application server have adjusted authority refresh operation by Spring quartz scheduled tasks；
Whether the synchronization log table number of step 202, application server in user rights database changes to judge
Whether user right relevant information occurred change, if then performing step 203, otherwise performed step 210；
Step 203, application server determine user login information；
If step 204, user's last login date and today differ by more than one week, step 205 is performed, is otherwise performed
Step 206；
Step 205, user activity attribute is labeled as " false ", performs step 207；
Step 206, user activity attribute is labeled as " true ", performs step 207；
Step 207, determined according to user activity attribute to carry out the user list of authority calculating, will according to user list
User right relevant information in user rights database is distributed to different application servers；
Step 208, authority calculating is carried out according to user right relevant information on every application server；
Step 209, every application server store the user right information for calculating acquisition to cache database；
When step 210, user log in, application server inquires about user right information from cache database and is supplied to use
Family.
Based on same inventive concept, a kind of user authority management system is additionally provided in the embodiment of the present invention, as following
Described in embodiment.It is similar to method for managing user right to solve the principle of problem due to user authority management system, therefore user
The implementation of Rights Management System may refer to the implementation of method for managing user right, repeats part and repeats no more.
Fig. 3 is the schematic diagram of user authority management system in the embodiment of the present invention.As shown in figure 3, in the embodiment of the present invention
User authority management system can include：
User rights database, for storing user right relevant information；
More application servers, wherein at least an application server are used for it is determined that the user in user rights database weighs
After limit relevant information changes, determined to carry out the user list of authority calculating according to user activity attribute；Different should
It is used to obtain different user right relevant informations from user rights database according to the user list with server；Every should
It is used to carry out authority calculating according to user right relevant information with server, the user right information for calculating acquisition is stored to slow
Deposit data storehouse；
Cache database, the user right information obtained is calculated for storing application server.
Permission system is also show in Fig. 3, with step client and user.User right in user rights database is related
Information is to be obtained by sync client from permission system.Client-initiated authority inquiry request can be by any application service
Device receives, and after application server receives authority inquiry request, user right information is first inquired about from cache database, is inquired
User is supplied to after user right information.If application server is inquired about in cache database less than user right information,
User right relevant information is obtained to carry out authority calculating from user rights database, and use is supplied to after obtaining user right information
Family.
When it is implemented, application service implement body can be used for：
Authority refresh operation periodically has been adjusted, has determined the synchronization log table number in user rights database；In the synchronization
When log sheet number changes, determine that the user right relevant information in user rights database changes；
Or, the notification message that the user right relevant information in user rights database changes is received, according to described
Notification message determines that the user right relevant information in user rights database changes.
When it is implemented, application server can be also used for：
Receive Client-initiated authority inquiry request；
According to the authority inquiry request, user right information is inquired about from the cache database；
The user right information inquired from the cache database is supplied to user.
When it is implemented, application server can be also used for：
When not inquiring user right information in the cache database, obtained from the user rights database corresponding
User right relevant information；
According to the user right associated information calculation user right information of acquisition, the user right information for calculating acquisition is carried
Supply user.
When it is implemented, application server can be also used for：
The user right information for calculating acquisition is stored to the cache database；
Change calculates the liveness attribute that the user right information obtained corresponds to user.
In summary, in the embodiment of the present invention, user right information is stored to cache database, so can be in user
User right information is directly obtained from cache database during search access right information, relative to user's search access right in the prior art
, can be with for needing to inquire about user right relevant information from DB2 database during information, carrying out authority calculating by WAS servers
Solve DB2 database performance bottleneck that may be present, lift search efficiency；Also, by user right number in the embodiment of the present invention
It is distributed according to the user right relevant information in storehouse to progress authority calculating on different application servers, relative in the prior art
For only a WAS server carries out authority calculating, the pressure of server when can disperse to calculate authority；In addition, carry out
Authority is that the user list as needed for carrying out authority calculating is carried out when calculating, and user list is according to user activity attribute
It is determined that authority calculating is not carried out to each user, but according to a part of any active ues of user activity Attributions selection
Authority calculating is carried out, is also the authority information for storing this part any active ues in cache database, can so avoid to one
The information of a little inactive users calculates and storage, and when user right relevant information changes, user right information can obtain
To upgrading in time, the real-time of user right information is lifted.In a word, the embodiment of the present invention in terms of existing technologies, has more
Feasibility and high efficiency.
It should be understood by those skilled in the art that, embodiments of the invention can be provided as method, system or computer program
Product.Therefore, the present invention can use the reality in terms of complete hardware embodiment, complete software embodiment or combination software and hardware
Apply the form of example.Moreover, the present invention can use the computer for wherein including computer usable program code in one or more
The computer program production that usable storage medium is implemented on (including but is not limited to magnetic disk storage, CD-ROM, optical memory etc.)
The form of product.
The present invention is the flow with reference to method according to embodiments of the present invention, equipment (system) and computer program product
Figure and/or block diagram describe.It should be understood that can be by every first-class in computer program instructions implementation process figure and/or block diagram
Journey and/or the flow in square frame and flow chart and/or block diagram and/or the combination of square frame.These computer programs can be provided
The processors of all-purpose computer, special-purpose computer, Embedded Processor or other programmable data processing devices is instructed to produce
A raw machine so that produced by the instruction of computer or the computing device of other programmable data processing devices for real
The device for the function of being specified in present one flow of flow chart or one square frame of multiple flows and/or block diagram or multiple square frames.
These computer program instructions, which may be alternatively stored in, can guide computer or other programmable data processing devices with spy
Determine in the computer-readable memory that mode works so that the instruction being stored in the computer-readable memory, which produces, to be included referring to
Make the manufacture of device, the command device realize in one flow of flow chart or multiple flows and/or one square frame of block diagram or
The function of being specified in multiple square frames.
These computer program instructions can be also loaded into computer or other programmable data processing devices so that counted
Series of operation steps is performed on calculation machine or other programmable devices to produce computer implemented processing, so as in computer or
The instruction performed on other programmable devices is provided for realizing in one flow of flow chart or multiple flows and/or block diagram one
The step of function of being specified in individual square frame or multiple square frames.
Particular embodiments described above, the purpose of the present invention, technical scheme and beneficial effect are carried out further in detail
Describe in detail it is bright, should be understood that the foregoing is only the present invention specific embodiment, the guarantor being not intended to limit the present invention
Scope is protected, within the spirit and principles of the invention, any modification, equivalent substitution and improvements done etc., should be included in this
Within the protection domain of invention.
Claims (14)
- A kind of 1. method for managing user right, it is characterised in that including：After determining that the user right relevant information in user rights database changes, being determined according to user activity attribute will Carry out the user list of authority calculating；According to the user list, the user right relevant information in user rights database is distributed to different application services On device；Authority calculating is carried out according to user right relevant information on every application server, the user right for calculating acquisition is believed Breath is stored to cache database.
- 2. method for managing user right as claimed in claim 1, it is characterised in that in the determination user rights database User right relevant information changes, including：Authority refresh operation is periodically called, determines the synchronization log table number in user rights database；In the synchronization log When table number changes, determine that the user right relevant information in user rights database changes；Or, the notification message that the user right relevant information in user rights database changes is received, according to the notice Message determines that the user right relevant information in user rights database changes.
- 3. method for managing user right as claimed in claim 1, it is characterised in that described to be determined according to user activity attribute Before the user list for carrying out authority calculating, in addition to：User activity attribute is determined according to user login information.
- 4. method for managing user right as claimed in claim 1, it is characterised in that the use by user rights database Family right related information is distributed to different application servers, including：According to hashing algorithm, the user right relevant information in user rights database is distributed to different application servers On.
- 5. method for managing user right as claimed in claim 1, it is characterised in that according to hashing algorithm by user right data When user right relevant information in storehouse is distributed to different application servers, hashed according to Customs Assigned Number.
- 6. the method as described in claim 1, it is characterised in that the cache database is redis databases.
- 7. the method for managing user right as described in any one of claim 1 to 6, it is characterised in that also include：Receive Client-initiated authority inquiry request；According to the authority inquiry request, user right information is inquired about from the cache database；The user right information inquired from the cache database is supplied to user.
- 8. method for managing user right as claimed in claim 7, it is characterised in that also include：If not inquiring user right information in the cache database, from corresponding to user rights database acquisition User right relevant information；According to the user right associated information calculation user right information of acquisition, the user right information for calculating acquisition is supplied to User.
- 9. method for managing user right as claimed in claim 8, it is characterised in that also include：The user right information for calculating acquisition is stored to the cache database；Change calculates the liveness attribute that the user right information obtained corresponds to user.
- A kind of 10. user authority management system, it is characterised in that including：User rights database, for storing user right relevant information；More application servers, wherein at least an application server are used for it is determined that user right phase in user rights database After pass information changes, determined to carry out the user list of authority calculating according to user activity attribute；Different application clothes Business device is used to obtain different user right relevant informations from user rights database according to the user list；Every application clothes Device be engaged in for carrying out authority calculating according to user right relevant information, the user right information for calculating acquisition is stored to caching number According to storehouse；Cache database, the user right information obtained is calculated for storing application server.
- 11. user authority management system as claimed in claim 10, it is characterised in that application server is specifically used for：Authority refresh operation is periodically called, determines the synchronization log table number in user rights database；In the synchronization log When table number changes, determine that the user right relevant information in user rights database changes；Or, the notification message that the user right relevant information in user rights database changes is received, according to the notice Message determines that the user right relevant information in user rights database changes.
- 12. user authority management system as claimed in claim 10, it is characterised in that application server is additionally operable to：Receive Client-initiated authority inquiry request；According to the authority inquiry request, user right information is inquired about from the cache database；The user right information inquired from the cache database is supplied to user.
- 13. user authority management system as claimed in claim 12, it is characterised in that application server is additionally operable to：When not inquiring user right information in the cache database, corresponding use is obtained from the user rights database Family right related information；According to the user right associated information calculation user right information of acquisition, the user right information for calculating acquisition is supplied to User.
- 14. user authority management system as claimed in claim 13, it is characterised in that application server is additionally operable to：The user right information for calculating acquisition is stored to the cache database；Change calculates the liveness category that the user right information obtained corresponds to user.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510282086.6A CN105100050B (en) | 2015-05-28 | 2015-05-28 | Method for managing user right and system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510282086.6A CN105100050B (en) | 2015-05-28 | 2015-05-28 | Method for managing user right and system |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN105100050A CN105100050A (en) | 2015-11-25 |
| CN105100050B true CN105100050B (en) | 2018-02-16 |
Family
ID=54579597
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201510282086.6A Active CN105100050B (en) | 2015-05-28 | 2015-05-28 | Method for managing user right and system |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN105100050B (en) |
Families Citing this family (12)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106301791B (en) * | 2016-08-23 | 2019-09-27 | 浪潮电子信息产业股份有限公司 | A kind of realization method and system of the unifying user authentication authorization based on big data platform |
| CN106161214A (en) * | 2016-08-31 | 2016-11-23 | 上海斐讯数据通信技术有限公司 | The user authority control method of a kind of strong point operation management system and system |
| CN106776706A (en) * | 2016-11-16 | 2017-05-31 | 航天恒星科技有限公司 | Method for managing user right and device based on caching |
| CN107147660A (en) * | 2017-06-01 | 2017-09-08 | 上海斐讯数据通信技术有限公司 | A kind of efficient login authentication method of mass users and system |
| CN107463807A (en) * | 2017-06-27 | 2017-12-12 | 深圳市元征科技股份有限公司 | Right management method, diagnostic device and server |
| CN107480537A (en) * | 2017-06-28 | 2017-12-15 | 北京小度信息科技有限公司 | Authority the Resources list automatic generation method and device |
| CN107943523B (en) * | 2017-11-15 | 2021-03-16 | 中国银行股份有限公司 | User permission judgment method and device for electronic bank |
| CN109522368A (en) * | 2018-09-28 | 2019-03-26 | 北京英视睿达科技有限公司 | A kind of method for managing user right and system |
| CN110990380B (en) * | 2019-11-27 | 2023-11-03 | 杭州安恒信息技术股份有限公司 | Account information monitoring method and system |
| CN113127923A (en) * | 2020-01-15 | 2021-07-16 | 北京沃东天骏信息技术有限公司 | Method and device for managing authority |
| CN113407530A (en) * | 2020-11-20 | 2021-09-17 | 广东美云智数科技有限公司 | Permission data recovery method, management device and storage medium |
| CN112835870B (en) * | 2021-01-28 | 2023-01-24 | 浪潮通用软件有限公司 | Content caching method and system based on user permission |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101217369A (en) * | 2008-01-17 | 2008-07-09 | 杭州华三通信技术有限公司 | A method and device to update the access rights of the users in network topology |
| CN101374079A (en) * | 2008-10-10 | 2009-02-25 | 中兴通讯股份有限公司 | Method for obtaining user authority of network management system |
| KR101345959B1 (en) * | 2012-06-22 | 2014-01-03 | 성균관대학교산학협력단 | Method for multi-user authority management for single-user mobile handset platform and mobile handset using the same |
-
2015
- 2015-05-28 CN CN201510282086.6A patent/CN105100050B/en active Active
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101217369A (en) * | 2008-01-17 | 2008-07-09 | 杭州华三通信技术有限公司 | A method and device to update the access rights of the users in network topology |
| CN101374079A (en) * | 2008-10-10 | 2009-02-25 | 中兴通讯股份有限公司 | Method for obtaining user authority of network management system |
| KR101345959B1 (en) * | 2012-06-22 | 2014-01-03 | 성균관대학교산학협력단 | Method for multi-user authority management for single-user mobile handset platform and mobile handset using the same |
Non-Patent Citations (2)
| Title |
|---|
| Permission Management System:Permission as a Service in Cloud Computing;Victor Echeverria等;《2010 IEEE 34th Annual Computer Software and Applications Conference Workshops(COMPSACW)》;20100723;第371-375页 * |
| 云环境下基于属性的用户权限管理研究;范乃英 等;《计算机科学》;20140915;第41卷(第9期);第146-177页 * |
Also Published As
| Publication number | Publication date |
|---|---|
| CN105100050A (en) | 2015-11-25 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN105100050B (en) | Method for managing user right and system | |
| CN108280365B (en) | Data access authority management method, device, terminal device and storage medium | |
| CN105069149B (en) | A kind of distributed parallel introduction method of structure-oriented column data | |
| CN109643312A (en) | Trustship query service | |
| CN107728941A (en) | A kind of block chain data compression method and system | |
| CN103853714B (en) | A kind of data processing method and device | |
| US20180343264A1 (en) | Reducing latency | |
| CN104536965B (en) | A kind of data query display systems under the conditions of big data and method | |
| US8799321B2 (en) | License management apparatus, license management method, and computer readable medium | |
| CN106547784A (en) | A kind of data split storage method and device | |
| CN107301091A (en) | Resource allocation methods and device | |
| US9292454B2 (en) | Data caching policy in multiple tenant enterprise resource planning system | |
| CN109150929B (en) | Data request processing method and device under high concurrency scene | |
| EP3188051A1 (en) | Systems and methods for search template generation | |
| US20220207180A1 (en) | Privacy preserving data collection and analysis | |
| CN107491463A (en) | The optimization method and system of data query | |
| US20140258216A1 (en) | Management of searches in a database system | |
| CN106547751A (en) | Data cached update method and device | |
| CN109947768B (en) | Local identifier for database object | |
| CN110858199A (en) | Document data distributed computing method and device | |
| CN110363515B (en) | Rights and interests card account information inquiry method, system, server and readable storage medium | |
| CN106845926A (en) | A kind of Third-party payment supervisory systems distributed data method for stream processing and system | |
| CN110427390A (en) | Data query method and device, storage medium, electronic device | |
| CN105243063A (en) | Information recommendation method and device | |
| CN114546984A (en) | Identification generation method and device, computer equipment and storage medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |