CN111427972A - Method and device for searching service data, service searching system and storage medium - Google Patents

Method and device for searching service data, service searching system and storage medium Download PDF

Info

Publication number
CN111427972A
CN111427972A CN202010216546.6A CN202010216546A CN111427972A CN 111427972 A CN111427972 A CN 111427972A CN 202010216546 A CN202010216546 A CN 202010216546A CN 111427972 A CN111427972 A CN 111427972A
Authority
CN
China
Prior art keywords
information
user
data object
search
service
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN202010216546.6A
Other languages
Chinese (zh)
Other versions
CN111427972B (en
Inventor
乡立
王伟超
吴琼
洪海生
林海
林园敏
刘琦
龙庆麟
岳首志
陆颢文
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Guangzhou Power Supply Bureau of Guangdong Power Grid Co Ltd
Original Assignee
Guangzhou Suinengtong Energy Technology Co ltd
Guangzhou Power Supply Bureau of Guangdong Power Grid Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Guangzhou Suinengtong Energy Technology Co ltd, Guangzhou Power Supply Bureau of Guangdong Power Grid Co Ltd filed Critical Guangzhou Suinengtong Energy Technology Co ltd
Priority to CN202010216546.6A priority Critical patent/CN111427972B/en
Publication of CN111427972A publication Critical patent/CN111427972A/en
Application granted granted Critical
Publication of CN111427972B publication Critical patent/CN111427972B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/20Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
    • G06F16/28Databases characterised by their database models, e.g. relational or object models
    • G06F16/284Relational databases
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/20Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
    • G06F16/24Querying
    • G06F16/245Query processing
    • YGENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y02TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
    • Y02DCLIMATE CHANGE MITIGATION TECHNOLOGIES IN INFORMATION AND COMMUNICATION TECHNOLOGIES [ICT], I.E. INFORMATION AND COMMUNICATION TECHNOLOGIES AIMING AT THE REDUCTION OF THEIR OWN ENERGY USE
    • Y02D10/00Energy efficient computing, e.g. low power processors, power management or thermal management

Abstract

The present application relates to a method, an apparatus, a service search system, and a storage medium for searching service data. The method comprises the following steps: collecting user information stored by a plurality of service systems and user operation authority information corresponding to the user information; acquiring a corresponding relation between preset user operation authority information and data object information; constructing a search authority library based on the user information, the user operation authority information corresponding to the user information and the corresponding relation between the user operation authority information and the data object information; acquiring a search request of a target user for service data; the search request carries user information of a target user; acquiring data object information corresponding to user information of a target user as target data object information; and searching the service data according to the target data object information. The business searching system constructed by the method does not need to pay attention to different authorities of each business system to design different searching modes, thereby improving the expandability of business data searching.

Description

Method and device for searching service data, service searching system and storage medium
Technical Field
The present application relates to the field of data processing technologies, and in particular, to a method and an apparatus for searching service data, a service search system, and a storage medium.
Background
With the development of data processing technology, more and more enterprises realize data storage and information transmission in the form of business systems, and great convenience is brought to enterprise managers for managing enterprise resources and users for accessing and using the resources. In order to solve the problem that the enterprise business system has more and more data and facilitate the access of users, enterprises usually add a search system for data retrieval in the business system, and in order to ensure the confidentiality of the data, the search system for the enterprises usually sets related viewing rights for the users so as to prevent the leakage of the confidential data.
However, the existing search system for searching enterprise business data usually needs to be constructed correspondingly according to different authorities of different business systems, and the method for searching business data has poor expandability.
Disclosure of Invention
In view of the above, it is necessary to provide a method, an apparatus, a service search system and a storage medium for searching service data in order to solve the above technical problems.
A method of searching for traffic data, the method comprising:
acquiring user information stored by a plurality of service systems and user operation authority information corresponding to the user information;
acquiring a corresponding relation between preset user operation authority information and data object information;
constructing a search authority library based on the user information, the user operation authority information corresponding to the user information and the corresponding relationship between the user operation authority information and the data object information; the search authority library stores a first corresponding relation table; the first corresponding relation table is used for storing the corresponding relation between the user information and the data object information;
acquiring a search request of a target user for service data; the search request carries user information of the target user;
acquiring data object information corresponding to the user information of the target user from the first corresponding relation table as target data object information;
and searching the service data according to the target data object information.
In one embodiment, the searching the service data according to the target data object information includes: extracting search word information from the search request; performing data indexing on the search word information to obtain a relevancy sorting result set; and filtering the relevancy sorting result set by using the target data object information to obtain a search result set corresponding to the business data.
In one embodiment, the search permission library further stores a second corresponding relation table; the second corresponding relation table is used for storing the corresponding relation between the user information and the desensitization rule; the filtering the relevancy ranking result set by using the target data object information to obtain a search result set corresponding to the service data includes: determining a desensitization rule corresponding to the target user information according to the second corresponding relation table; and filtering the relevancy sorting result set by using the target data object information, desensitizing the filtered relevancy sorting result set according to the desensitization rule corresponding to the target user information, and acquiring the search result set.
In one embodiment, the constructing a search permission library based on the user information, the user operation permission information corresponding to the user information, and the correspondence between the user operation permission information and the data object information includes: acquiring a corresponding relation between user information and data object information based on the user information, the user operation authority information corresponding to the user information and the corresponding relation between the user operation authority information and the data object information; and if the first corresponding relation table does not store the corresponding relation between the user information and the data object information, storing the corresponding relation between the user information and the data object information into the first corresponding relation table.
In one embodiment, the data object information further carries a main service system identifier; the main service system identification is used for identifying a service system of the data object information source; the storing the corresponding relationship between the user information and the data object information into the first corresponding relationship table includes: and storing the corresponding relation between the user information and the data object information carrying the main service system identification into the first corresponding relation table.
In one embodiment, the searching the service data according to the target data object information includes: acquiring a main service system identifier of the target data object information; searching the service data according to the target data object information; and selecting the service data stored in the service system corresponding to the main service system identification from the search result set corresponding to the service data for preferential display.
In one embodiment, the method for searching service data further includes: acquiring user operation authority information corresponding to the user information after updating of the plurality of service systems; and updating the search permission library based on the user information, the updated user operation permission information corresponding to the user information and the corresponding relationship between the user operation permission information and the data object information.
An apparatus for searching for service data, the apparatus comprising:
the operation authority acquisition module is used for acquiring user information stored by a plurality of service systems and user operation authority information corresponding to the user information;
the data object acquisition module is used for acquiring the corresponding relation between the preset user operation authority information and the data object information;
the search authority database construction module is used for constructing a search authority database based on the user information, the user operation authority information corresponding to the user information and the corresponding relation between the user operation authority information and the data object information; the search authority library stores a first corresponding relation table; the first corresponding relation table is used for storing the corresponding relation between the user information and the data object information;
the search request acquisition module is used for acquiring a search request of a target user for service data; the search request carries user information of the target user;
a target information obtaining module, configured to obtain, from the first correspondence table, data object information corresponding to the user information of the target user as target data object information;
and the service data searching module is used for searching the service data according to the target data object information.
A traffic search system comprising a memory and a processor, the memory storing a computer program, the processor when executing the computer program implementing the steps of: collecting user information stored by a plurality of service systems and user operation authority information corresponding to the user information; acquiring a corresponding relation between preset user operation authority information and data object information; constructing a search authority library based on the user information, the user operation authority information corresponding to the user information and the corresponding relation between the user operation authority information and the data object information; a first corresponding relation table is stored in the search authority database; the first corresponding relation table is used for storing the corresponding relation between the user information and the data object information; acquiring a search request of a target user for service data; the search request carries user information of a target user; acquiring data object information corresponding to the user information of the target user from the first corresponding relation table as target data object information; and searching the service data according to the target data object information.
A computer-readable storage medium, on which a computer program is stored which, when executed by a processor, carries out the steps of: collecting user information stored by a plurality of service systems and user operation authority information corresponding to the user information; acquiring a corresponding relation between preset user operation authority information and data object information; constructing a search authority library based on the user information, the user operation authority information corresponding to the user information and the corresponding relation between the user operation authority information and the data object information; a first corresponding relation table is stored in the search authority database; the first corresponding relation table is used for storing the corresponding relation between the user information and the data object information; acquiring a search request of a target user for service data; the search request carries user information of a target user; acquiring data object information corresponding to the user information of the target user from the first corresponding relation table as target data object information; and searching the service data according to the target data object information.
The method, the device, the service searching system and the storage medium for searching the service data collect the user information stored by a plurality of service systems and the user operation authority information corresponding to the user information; acquiring a corresponding relation between preset user operation authority information and data object information; constructing a search authority library based on the user information, the user operation authority information corresponding to the user information and the corresponding relation between the user operation authority information and the data object information; a first corresponding relation table is stored in the search authority database; the first corresponding relation table is used for storing the corresponding relation between the user information and the data object information; acquiring a search request of a target user for service data; the search request carries user information of a target user; acquiring data object information corresponding to the user information of the target user from the first corresponding relation table as target data object information; and searching the service data according to the target data object information. According to the method and the device, the corresponding relation between the user information and the user operation authority is acquired, the corresponding relation between the operation authority and the data object is set, the direct corresponding relation between the user information and the data object can be obtained, and the constructed service searching system does not need to pay attention to different authorities of each service system to design different searching modes, so that the expandability of service data searching is improved.
Drawings
FIG. 1 is a diagram of an application environment of a method for searching business data in one embodiment;
FIG. 2 is a flow diagram illustrating a method for searching business data in one embodiment;
FIG. 3 is a flow diagram illustrating a process for searching business data according to target data object information in one embodiment;
FIG. 4 is a flowchart illustrating a process of constructing a search permission library based on user information, user operation permission information corresponding to the user information, and a correspondence between the user operation permission information and data object information in one embodiment;
FIG. 5 is a flow diagram illustrating a method for searching business data in one embodiment;
FIG. 6 is a schematic diagram of an enterprise search adaptive data authority control system according to an exemplary application;
FIG. 7 is a flow diagram illustrating a process for establishing standard search permissions in an exemplary application;
FIG. 8 is a flow diagram illustrating a search process in an exemplary application;
FIG. 9 is a block diagram showing the construction of an apparatus for searching service data according to an embodiment;
fig. 10 is an internal structural diagram of a service search system in one embodiment.
Detailed Description
In order to make the objects, technical solutions and advantages of the present application more apparent, the present application is described in further detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative of the present application and are not intended to limit the present application.
The method for searching business data provided by the application can be applied to the application environment shown in fig. 1. The user can input related search information such as search keywords and the like to the service search system, and the service search system can search a plurality of service systems according to the input search information and finally output a search result of service data for the user to display. The service search system and the service system may be implemented by independent servers or a server cluster composed of a plurality of servers.
In one embodiment, as shown in fig. 2, a method for searching service data is provided, which is described by taking the application of the method to the service search system in fig. 1 as an example, and includes the following steps:
step S201, the service search system collects user information stored in a plurality of service systems and user operation authority information corresponding to the user information.
The user information may be employee numbers of enterprise employees for identifying different users, and the operation authority information of the users is operation authority of different users, and is determined by the roles of the users themselves. For example: user a may be an employee of a certain enterprise, who only has the authority to view the business data stored in business system 1 and business system 2, while user B may be a supervisor of the enterprise, who may also have the authority to view business system 3 in addition to the data stored in business system 1 and business system 2, and at this time, user a and user B have different roles, and therefore, the obtained user operation authority is also different. The service search system can collect user information of the user and user operation authority information corresponding to the user from a plurality of service systems.
Step S202, the business searching system obtains the corresponding relation between the preset user operation authority information and the data object information.
The data object information refers to various service data stored in the service system, and the application can set the relationship between different user operation authorities and different data objects according to different enterprise data models in the service search system.
Step S203, based on the user information, the user operation authority information corresponding to the user information and the corresponding relationship between the user operation authority information and the data object information, the service search system constructs a search authority library; a first corresponding relation table is stored in the search authority database; the first corresponding relation table is used for storing the corresponding relation between the user information and the data object information.
After the corresponding relationship between the user information of the user and the operation authority of the user is obtained in step S201, and the corresponding relationship between the user operation authority and the data object is obtained in step S202, the service search system may construct the corresponding relationship between the user information and the data object information according to the two corresponding relationships, and store the corresponding relationship in the first corresponding relationship table, and use the first corresponding relationship table to construct the search authority library of the service search system. For example: the user A has the operation authority for checking the production date of the product and the manufacturer, at the moment, the corresponding relation between the user A and the production date of the product and the corresponding relation between the user A and the manufacturer of the product can be established, the corresponding relation is stored into the first corresponding relation table, and then the search authority library is established. When the user a queries the related information of the product a through the search system, the search system can directly display the production date and the manufacturer of the product a according to the corresponding relationship provided by the search permission library in a related manner, without paying attention to the operation permission provided by which service system the production date and the production date of the product a are specifically.
Step S204, the service search system acquires a search request of a target user for service data; the search request carries user information of the target user.
The target user refers to a user needing to search service data by using the service search system, when the target user needs to search data by using the service search system, a search request is sent to the service search system firstly, the search request can be initiated in a mode of inputting a search keyword, and meanwhile, the search request also carries user information of the target user, such as a user account input by the target user logging in the search system.
Step S205, the service searching system obtains data object information corresponding to the user information of the target user from the first corresponding relation table as target data object information;
step S206, the service searching system searches the service data according to the target data object information.
Specifically, after receiving the user information of the target user, the service search system may query the first correspondence table stored in the search permission library according to the information, obtain data object information corresponding to the user information of the target user from the correspondence between the user information and the data object information stored in the first correspondence table, use the data object information as the target data object information, and search the service data according to the obtained target data object information.
For example: the first corresponding relation table stores the corresponding relation between the user A and the production date of the product and the corresponding relation between the user A and the manufacturer of the product, but does not have the corresponding relation between the user A and the manufacturing cost of the product, so that when the user A searches for the product a through the service searching system, the target data object information is the production date of the product and the manufacturer of the product, and the searched result is the production date data of the product a and the manufacturer data of the product a.
In the method for searching the service data, user information stored by a plurality of service systems and user operation authority information corresponding to the user information are collected; acquiring a corresponding relation between preset user operation authority information and data object information; constructing a search authority library based on the user information, the user operation authority information corresponding to the user information and the corresponding relation between the user operation authority information and the data object information; a first corresponding relation table is stored in the search authority database; the first corresponding relation table is used for storing the corresponding relation between the user information and the data object information; acquiring a search request of a target user for service data; the search request carries user information of a target user; acquiring data object information corresponding to the user information of the target user from the first corresponding relation table as target data object information; and searching the service data according to the target data object information. According to the method and the device, the corresponding relation between the user information and the user operation authority is acquired, the corresponding relation between the operation authority and the data object is set, the direct corresponding relation between the user information and the data object can be obtained, and the constructed service searching system does not need to pay attention to different authorities of each service system to design different searching modes, so that the expandability of service data searching is improved.
In one embodiment, as shown in fig. 3, step S206 may include:
step S301, the service search system extracts the search word information from the search request.
In step S204, the search request sent by the user to the service search system further includes search term information, and the user can obtain a search result by inputting a related keyword to be searched into the service search system. For example: when a user A wants to search a product a through the service search system, the user A can input a product number of the product a to the service search system as search word information, and then obtain a related search result of the product a.
Step S302, a service search system carries out data indexing on search word information to obtain a relevancy sorting result set;
step S303, the business searching system filters the relevancy ranking result set by using the target data object information to obtain the searching result set corresponding to the business data.
After the service search system obtains the search word information, the service search system can utilize the search word information to perform data indexing on a plurality of service systems, so as to obtain a relevancy sorting result set adapted to the search word information, and then utilize data object information corresponding to the user information of the user to filter the relevancy sorting result set, so as to finally obtain a search result set of service data.
For example: the first corresponding relation table stores the corresponding relation between the user A and the production date of the product and between the user A and the manufacturer of the product, so when the user A wants to search the relevant information of a certain product a through the service search system, the product number of the product a can be input into the service search system as a search key, the service search system can be indexed as data according to the product number of the product a, data indexing is carried out on a plurality of service systems, so that a result set which comprises the production date, the manufacturer, the cost and the like of the product a and is related to the product a is obtained, and according to the data object corresponding to the user A, namely, the production date and the manufacturer of the product filter the relevancy ranking result set, the cost information of the product a is eliminated, and the finally obtained search result set only comprises the production date and the manufacturer of the product a.
Further, in order to ensure the privacy of the service data search result, the search permission library may further store a second corresponding relationship table, where the second corresponding relationship table is used to store a corresponding relationship between the user information and the desensitization rule, and step S303 may further include: the service searching system determines a desensitization rule corresponding to the target user information according to the second corresponding relation table; and filtering the relevancy sorting result set by using the target data object information, desensitizing the filtered relevancy sorting result set according to a desensitization rule corresponding to the target user information, and acquiring the search result set.
Desensitization refers to deformation of data of some sensitive information through desensitization rules, and reliable protection of sensitive private data is achieved. Under the condition of client security data or some business sensitive data, such as personal information of an identity card number, a mobile phone number, a card number, a client number and the like, the real data can be modified and provided for testing and use under the condition of not violating system rules. Specifically, desensitization rules can be set in a correlation manner according to different users, the corresponding relationship between user information and desensitization rules is stored in a second corresponding relationship table and used for constructing a search permission library, when a user needs to search data through a service search system, the service search system can extract the desensitization rules corresponding to the user from the second corresponding relationship table in the search permission library, and after a relevancy sorting result set is filtered by using target data object information, data desensitization is performed on the filtered relevancy sorting result set through the desensitization rules corresponding to the user.
In the embodiment, the relevance search result set is filtered by using the target data object information, so that the search result displayed by the service search system can be ensured to be in accordance with the data authority of the search user, and the security of sensitive data information is further ensured and the privacy and the security of service data are improved by defining the corresponding relation between the user and the desensitization rule.
In one embodiment, as shown in fig. 4, step S203 may include:
step S401, based on the user information, the user operation authority information corresponding to the user information and the corresponding relationship between the user operation authority information and the data object information, the service searching system obtains the corresponding relationship between the user information and the data object information;
specifically, the corresponding relationship between the user information and the user operation authority information may be obtained from a plurality of business systems, and the corresponding relationship between the user operation authority information and the data object information may be preset in a business search system according to different enterprise models, and the business search system may select the corresponding relationship between the user information and the user operation authority information from the plurality of business systems, and may establish the corresponding relationship between the user information and the data object information by querying the corresponding relationship between the user operation authority information and the data object information.
Step S402, if the first mapping table does not store the mapping between the user information and the data object information, the service search system stores the mapping between the user information and the data object information in the first mapping table.
After the step S401 obtains the corresponding relationship between the user information and the data object, the service search system may query whether the corresponding relationship between the user information and the data object is already stored in the first corresponding relationship table stored in the search permission library, if the corresponding relationship is not already stored in the first corresponding relationship table, the service search system may store the corresponding relationship in the first corresponding relationship table, and if the corresponding relationship is already stored in the first corresponding relationship table, the step S401 is returned to, and the next corresponding relationship between the user information and the data object information is obtained.
Further, the data object information may also carry a main service system identifier; the main service system identification is used for identifying the service system of the data object information source; step S402 further includes: and storing the corresponding relation between the user information and the data object information carrying the main service system identification into a first corresponding relation table.
Specifically, the main service system identifier is a service system for identifying the source of the data object information, for example, the related information of the product may be stored in the product database and the inventory database in a distributed manner, but the main source of the related information of the product is from the product database, so the related information of the product also carries the main service system identifier of the product database, and in the process of storing the corresponding relationship between the user information and the data object information into the first corresponding relationship table in step S402, the main service system identifier is also stored into the first corresponding relationship table.
In addition, in order to improve the readability of the search data to improve the user search time, step S206 may further include: acquiring a main service system identifier of target data object information; searching service data according to the target data object information; and selecting the service data stored in the service system corresponding to the main service system identification from the search result set corresponding to the service data for preferential display.
For example: the production date information and the manufacturer information of the product a are stored in a product database, the inventory information of the product a is stored in an inventory database, if a user A needs to search the production date information of the product a through a service search system, the service search system can inquire a main service system identifier carried by the production date information of the product a, namely the product database identifier, at the moment, a search result set obtained by the service search system after search and filtering can comprise the production date information, the manufacturer information and the inventory information of the product a, and the production date information and the manufacturer information of the product a can be preferentially displayed when the service search system displays the search result because the production date information of the product a and the main service system of the manufacturer information source are the same.
In this embodiment, by storing the data object information containing the main service system identifier in the first corresponding relationship table, and preferentially displaying the service data stored in the service system corresponding to the main service system identifier in the search result, the readability of the service data can be effectively improved, the time for a user to check the service data is saved, and the efficiency of searching the service data is further improved.
In an embodiment, since the user operation authority information of the user may change frequently, for example, certain employees of an enterprise are up-going, and therefore have more user operation authorities, in order to adapt to the updated user operation authority information, the method for searching the service data may further include: the service searching system acquires user operation authority information corresponding to the user information after updating of a plurality of service systems; and updating the search permission library based on the user information, the updated user operation permission information corresponding to the user information and the corresponding relation between the user operation permission information and the data object information.
Specifically, the service search system may track and obtain a correspondence between user information and user operation authority information in the plurality of service systems in real time, and when the correspondence is updated, the service search system may update the first correspondence table stored in the search authority library according to the updated correspondence between the user information and the user operation authority information, thereby updating the search authority library.
According to the embodiment, the corresponding relation between the user information and the user operation authority information is obtained and updated in real time, so that the real-time updating of the search authority library is realized, the search engine does not need to re-index data, and the effect of self-adaptive authority control is achieved.
In an embodiment, as shown in fig. 5, there is further provided a method for searching service data, which is described by taking the application of the method to the service search system in fig. 1 as an example, and includes the following steps:
step S501, a service searching system collects user information stored by a plurality of service systems and user operation authority information corresponding to the user information;
step S502, the business searching system obtains the corresponding relation between the preset user operation authority information and the data object information;
step S503, based on the user information, the user operation authority information corresponding to the user information and the corresponding relationship between the user operation authority information and the data object information, the service searching system obtains the corresponding relationship between the user information and the data object information;
step S504, if the first corresponding relation table does not store the corresponding relation between the user information and the data object information, the business searching system stores the corresponding relation between the user information and the data object information into the first corresponding relation table; the data object information also carries a service system main service system identification used for identifying the source of the data object information;
step S505, the service search system constructs a search authority library based on the first corresponding relation table and the second corresponding relation table; the second corresponding relation table is used for storing the corresponding relation between the user information and the desensitization rule;
step S506, the service searching system obtains a searching request of a target user for service data; the search request carries user information of a target user;
step S507, the service searching system obtains data object information corresponding to the user information of the target user from the first corresponding relation table as target data object information;
step S508, the service search system extracts the search word information from the search request; performing data indexing on the search word information to obtain a relevancy sorting result set;
step S509, according to the second corresponding relation table, the service searching system determines a desensitization rule corresponding to the target user information;
step S510, the business search system filters the relevance ranking result set by using the target data object information, desensitizes the filtered relevance ranking result set according to a desensitization rule corresponding to the target user information, and obtains a search result set;
step S511, the service searching system selects the service data stored in the service system corresponding to the main service system identification from the searching result set corresponding to the service data to preferentially display.
In the method for searching business data provided by the embodiment, the constructed business searching system does not need to design different searching modes according to different authorities of each business system, so that the expandability of business data searching can be improved, the searching result displayed by the business searching system can be ensured to be in accordance with the data authority of a searching user, the sensitive data information safety is ensured, the privacy and the safety of the business data are improved, in addition, the business data stored by the business system corresponding to the main business system identifier is preferentially displayed in the searching result, the readability of the business data can be effectively improved, the time for the user to check the business data is saved, and further, the efficiency of business data searching is improved.
The following describes a method for searching business data by using an application example, which can be implemented by an enterprise search adaptive data authority control system as shown in fig. 6, wherein the system includes:
1) data index s 01:
and constructing a full-text index for the database data of the service system to support the subsequent data search of the user.
The contents of the index include:
[ data content, data object ]
2) Service system authority collection and synchronization s 02:
and directly acquiring the service operation authority of the user, the user role and the role in the service system database.
The business system in the enterprise can extract the above 3 kinds of data, and the business operation authority of the role is a page or a function menu.
And simultaneously monitoring whether the authority data of the service system changes, automatically acquiring the authority data of the service system when the authority data of the service system changes, and pushing the authority data to s 04.
3) Business operations and data mapping management s 03:
and the data object list is responsible for defining the data object list related to the business operation in the business system. Data objects herein refer to data objects in an enterprise-level data model, an enterprise unified data model such as the electricity cim model, the telecom edm model, the financial FSDM model. The module configures and maintains the contrast relationship between the business operation and the data object:
4) authority conversion s04, generating data search authority, and sending to the search authority library s 05; the service system permission data collected in s02 is converted into standard search permission according to the mapping relationship of s03, which is substantially to convert the service system role operation permission into the data permission of the user, as shown in fig. 7, the module can implement the following functions:
(1) according to the service system authority collected in s02, expanding the service system authority (user-user role-role service operation authority) into (user-service operation authority);
(2) substituting the mapping relation between the service operation and the data object of s03 into the (user-service operation authority) obtained in the last step to obtain the data object authority of the user, namely the standard search authority;
(3) monitoring s02 changes of the authority list of the source service system, and updating the data search authority data when the authority list of the service system changes;
(4) desensitization field rules are configured.
5) Search rights library s 05:
the data object rights of the user are saved.
6) Search and result assembly s06, as shown in fig. 8, the search process of the module specifically includes the following steps:
1) the data index (s01) obtains a relevance ranking result set from the data index based on the search terms,
2) and the search result assembling module (s06) queries the search permission library (s05) for the user data permission and acquires the visible data objects, the fields and the desensitization rules.
3) The search result assembly module (s06) filters the relevance ranking result set of the data index (s01) and desensitizes according to desensitization rules to form a final search result set.
It should be understood that although the various steps in the flow charts of fig. 2-8 are shown in order as indicated by the arrows, the steps are not necessarily performed in order as indicated by the arrows. The steps are not performed in the exact order shown and described, and may be performed in other orders, unless explicitly stated otherwise. Moreover, at least some of the steps in fig. 2-8 may include multiple steps or multiple stages, which are not necessarily performed at the same time, but may be performed at different times, which are not necessarily performed in sequence, but may be performed in turn or alternately with other steps or at least some of the other steps.
In one embodiment, as shown in fig. 9, there is provided an apparatus for searching service data, including: an operation authority acquisition module 901, a data object acquisition module 902, a search authority library construction module 903, a search request acquisition module 904, a target information acquisition module 905 and a service data search module 906, wherein:
an operation authority acquisition module 901, configured to acquire user information stored in multiple service systems and user operation authority information corresponding to the user information;
a data object obtaining module 902, configured to obtain a corresponding relationship between preset user operation permission information and data object information;
a search right library construction module 903, configured to construct a search right library based on the user information, the user operation right information corresponding to the user information, and a correspondence between the user operation right information and the data object information; a first corresponding relation table is stored in the search authority database; the first corresponding relation table is used for storing the corresponding relation between the user information and the data object information;
a search request obtaining module 904, configured to obtain a search request of a target user for service data; the search request carries user information of a target user;
a target information obtaining module 905, configured to obtain, from the first correspondence table, data object information corresponding to user information of a target user as target data object information;
and a service data searching module 906, configured to search service data according to the target data object information.
In one embodiment, the service data search module 906 is further configured to extract search term information from the search request; performing data indexing on the search word information to obtain a relevancy sorting result set; and filtering the relevancy sorting result set by using the target data object information to obtain a search result set corresponding to the service data.
In one embodiment, the search permission library further stores a second corresponding relation table; the second corresponding relation table is used for storing the corresponding relation between the user information and the desensitization rule; the service data searching module 906 is further configured to determine a desensitization rule corresponding to the target user information according to the second correspondence table; and filtering the relevancy sorting result set by using the target data object information, desensitizing the filtered relevancy sorting result set according to a desensitization rule corresponding to the target user information, and acquiring the search result set.
In an embodiment, the search permission library constructing module 903 is further configured to obtain a corresponding relationship between the user information and the data object information based on the user information, the user operation permission information corresponding to the user information, and the corresponding relationship between the user operation permission information and the data object information; and if the first corresponding relation table does not store the corresponding relation between the user information and the data object information, storing the corresponding relation between the user information and the data object information into the first corresponding relation table.
In one embodiment, the data object information also carries a main service system identifier; the main service system identification is used for identifying a service system of a data object information source; the search right library constructing module 903 is further configured to store the corresponding relationship between the user information and the data object information carrying the main service system identifier in the first corresponding relationship table.
In one embodiment, the service data searching module 906 is further configured to obtain a main service system identifier of the target data object information; searching service data according to the target data object information; and selecting the service data stored in the service system corresponding to the main service system identification from the search result set corresponding to the service data for preferential display.
In one embodiment, the apparatus for searching service data further includes: the searching authority base updating module is used for acquiring user operation authority information corresponding to the user information after updating of the plurality of service systems; and updating the search permission library based on the user information, the updated user operation permission information corresponding to the user information and the corresponding relation between the user operation permission information and the data object information.
For specific limitations of the apparatus for searching for service data, reference may be made to the above limitations of the method for searching for service data, which are not described herein again. The respective modules in the apparatus for searching service data may be wholly or partially implemented by software, hardware, or a combination thereof. The modules can be embedded in a hardware form or independent of a processor in the service search system, and can also be stored in a memory in the service search system in a software form, so that the processor can call and execute the corresponding operations of the modules.
In one embodiment, a service search system is provided, which may be a server, and its internal structure diagram may be as shown in fig. 10. The service search system includes a processor, a memory, and a network interface connected by a system bus. Wherein the processor of the traffic search system is configured to provide computational and control capabilities. The memory of the business search system comprises a nonvolatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program, and a database. The internal memory provides an environment for the operation of an operating system and computer programs in the non-volatile storage medium. The database of the service search system is used for storing search permission data. The network interface of the service search system is used for communicating with an external terminal through network connection. The computer program is executed by a processor to implement a method of searching business data.
It will be understood by those skilled in the art that the architecture shown in fig. 10 is a block diagram of only a portion of the architecture associated with the subject application, and does not constitute a limitation on the business search system to which the subject application applies, as a particular business search system may include more or less components than shown, or combine certain components, or have a different arrangement of components.
In one embodiment, a service search system is provided, comprising a memory and a processor, the memory having a computer program stored therein, the processor implementing the following steps when executing the computer program: collecting user information stored by a plurality of service systems and user operation authority information corresponding to the user information; acquiring a corresponding relation between preset user operation authority information and data object information; constructing a search authority library based on the user information, the user operation authority information corresponding to the user information and the corresponding relation between the user operation authority information and the data object information; a first corresponding relation table is stored in the search authority database; the first corresponding relation table is used for storing the corresponding relation between the user information and the data object information; acquiring a search request of a target user for service data; the search request carries user information of a target user; acquiring data object information corresponding to the user information of the target user from the first corresponding relation table as target data object information; and searching the service data according to the target data object information.
In one embodiment, the processor, when executing the computer program, further performs the steps of: extracting search word information from the search request; performing data indexing on the search word information to obtain a relevancy sorting result set; and filtering the relevancy sorting result set by using the target data object information to obtain a search result set corresponding to the service data.
In one embodiment, the search permission library further stores a second corresponding relation table; the second corresponding relation table is used for storing the corresponding relation between the user information and the desensitization rule; the processor, when executing the computer program, further performs the steps of: determining a desensitization rule corresponding to the target user information according to the second corresponding relation table; and filtering the relevancy sorting result set by using the target data object information, desensitizing the filtered relevancy sorting result set according to a desensitization rule corresponding to the target user information, and acquiring the search result set.
In one embodiment, the processor, when executing the computer program, further performs the steps of: acquiring a corresponding relation between the user information and the data object information based on the user information, the user operation authority information corresponding to the user information and the corresponding relation between the user operation authority information and the data object information; and if the first corresponding relation table does not store the corresponding relation between the user information and the data object information, storing the corresponding relation between the user information and the data object information into the first corresponding relation table.
In one embodiment, the data object information also carries a main service system identifier; the main service system identification is used for identifying a service system of a data object information source; the processor, when executing the computer program, further performs the steps of: and storing the corresponding relation between the user information and the data object information carrying the main service system identification into a first corresponding relation table.
In one embodiment, the processor, when executing the computer program, further performs the steps of: acquiring a main service system identifier of target data object information; searching service data according to the target data object information; and selecting the service data stored in the service system corresponding to the main service system identification from the search result set corresponding to the service data for preferential display.
In one embodiment, the processor, when executing the computer program, further performs the steps of: acquiring user operation authority information corresponding to the user information after updating of a plurality of service systems; and updating the search permission library based on the user information, the updated user operation permission information corresponding to the user information and the corresponding relation between the user operation permission information and the data object information.
In one embodiment, a computer-readable storage medium is provided, having a computer program stored thereon, which when executed by a processor, performs the steps of: collecting user information stored by a plurality of service systems and user operation authority information corresponding to the user information; acquiring a corresponding relation between preset user operation authority information and data object information; constructing a search authority library based on the user information, the user operation authority information corresponding to the user information and the corresponding relation between the user operation authority information and the data object information; a first corresponding relation table is stored in the search authority database; the first corresponding relation table is used for storing the corresponding relation between the user information and the data object information; acquiring a search request of a target user for service data; the search request carries user information of a target user; acquiring data object information corresponding to the user information of the target user from the first corresponding relation table as target data object information; and searching the service data according to the target data object information.
In one embodiment, the computer program when executed by the processor further performs the steps of: extracting search word information from the search request; performing data indexing on the search word information to obtain a relevancy sorting result set; and filtering the relevancy sorting result set by using the target data object information to obtain a search result set corresponding to the service data.
In one embodiment, the search permission library further stores a second corresponding relation table; the second corresponding relation table is used for storing the corresponding relation between the user information and the desensitization rule; the computer program when executed by the processor further realizes the steps of: determining a desensitization rule corresponding to the target user information according to the second corresponding relation table; and filtering the relevancy sorting result set by using the target data object information, desensitizing the filtered relevancy sorting result set according to a desensitization rule corresponding to the target user information, and acquiring the search result set.
In one embodiment, the computer program when executed by the processor further performs the steps of: acquiring a corresponding relation between the user information and the data object information based on the user information, the user operation authority information corresponding to the user information and the corresponding relation between the user operation authority information and the data object information; and if the first corresponding relation table does not store the corresponding relation between the user information and the data object information, storing the corresponding relation between the user information and the data object information into the first corresponding relation table.
In one embodiment, the data object information also carries a main service system identifier; the main service system identification is used for identifying a service system of a data object information source; the computer program when executed by the processor further realizes the steps of: and storing the corresponding relation between the user information and the data object information carrying the main service system identification into a first corresponding relation table.
In one embodiment, the computer program when executed by the processor further performs the steps of: acquiring a main service system identifier of target data object information; searching service data according to the target data object information; and selecting the service data stored in the service system corresponding to the main service system identification from the search result set corresponding to the service data for preferential display.
In one embodiment, the computer program when executed by the processor further performs the steps of: acquiring user operation authority information corresponding to the user information after updating of a plurality of service systems; and updating the search permission library based on the user information, the updated user operation permission information corresponding to the user information and the corresponding relation between the user operation permission information and the data object information.
It will be understood by those skilled in the art that all or part of the processes of the methods of the embodiments described above can be implemented by hardware instructions of a computer program, which can be stored in a non-volatile computer-readable storage medium, and when executed, can include the processes of the embodiments of the methods described above. Any reference to memory, storage, database or other medium used in the embodiments provided herein can include at least one of non-volatile and volatile memory. Non-volatile Memory may include Read-Only Memory (ROM), magnetic tape, floppy disk, flash Memory, optical storage, or the like. Volatile Memory can include Random Access Memory (RAM) or external cache Memory. By way of illustration and not limitation, RAM can take many forms, such as Static Random Access Memory (SRAM) or Dynamic Random Access Memory (DRAM), among others.
The technical features of the above embodiments can be arbitrarily combined, and for the sake of brevity, all possible combinations of the technical features in the above embodiments are not described, but should be considered as the scope of the present specification as long as there is no contradiction between the combinations of the technical features.
The above-mentioned embodiments only express several embodiments of the present application, and the description thereof is more specific and detailed, but not construed as limiting the scope of the invention. It should be noted that, for a person skilled in the art, several variations and modifications can be made without departing from the concept of the present application, which falls within the scope of protection of the present application. Therefore, the protection scope of the present patent shall be subject to the appended claims.

Claims (10)

1. A method for searching service data, the method comprising:
acquiring user information stored by a plurality of service systems and user operation authority information corresponding to the user information;
acquiring a corresponding relation between preset user operation authority information and data object information;
constructing a search authority library based on the user information, the user operation authority information corresponding to the user information and the corresponding relationship between the user operation authority information and the data object information; the search authority library stores a first corresponding relation table; the first corresponding relation table is used for storing the corresponding relation between the user information and the data object information;
acquiring a search request of a target user for service data; the search request carries user information of the target user;
acquiring data object information corresponding to the user information of the target user from the first corresponding relation table as target data object information;
and searching the service data according to the target data object information.
2. The method of claim 1, wherein the searching the service data according to the target data object information comprises:
extracting search word information from the search request;
performing data indexing on the search word information to obtain a relevancy sorting result set;
and filtering the relevancy sorting result set by using the target data object information to obtain a search result set corresponding to the business data.
3. The method according to claim 2, wherein the search permission library further stores a second correspondence table; the second corresponding relation table is used for storing the corresponding relation between the user information and the desensitization rule;
the filtering the relevancy ranking result set by using the target data object information to obtain a search result set corresponding to the service data includes:
determining a desensitization rule corresponding to the target user information according to the second corresponding relation table;
and filtering the relevancy sorting result set by using the target data object information, desensitizing the filtered relevancy sorting result set according to the desensitization rule corresponding to the target user information, and acquiring the search result set.
4. The method according to claim 1, wherein the constructing a search permission library based on the user information, the user operation permission information corresponding to the user information, and the correspondence between the user operation permission information and the data object information comprises:
acquiring a corresponding relation between user information and data object information based on the user information, the user operation authority information corresponding to the user information and the corresponding relation between the user operation authority information and the data object information;
and if the first corresponding relation table does not store the corresponding relation between the user information and the data object information, storing the corresponding relation between the user information and the data object information into the first corresponding relation table.
5. The method of claim 4, wherein the data object information further carries a main service system identifier; the main service system identification is used for identifying a service system of the data object information source;
the storing the corresponding relationship between the user information and the data object information into the first corresponding relationship table includes:
and storing the corresponding relation between the user information and the data object information carrying the main service system identification into the first corresponding relation table.
6. The method of claim 5, wherein the searching the service data according to the target data object information comprises:
acquiring a main service system identifier of the target data object information;
searching the service data according to the target data object information;
and selecting the service data stored in the service system corresponding to the main service system identification from the search result set corresponding to the service data for preferential display.
7. The method of claim 1, further comprising:
acquiring user operation authority information corresponding to the user information after updating of the plurality of service systems;
and updating the search permission library based on the user information, the updated user operation permission information corresponding to the user information and the corresponding relationship between the user operation permission information and the data object information.
8. An apparatus for searching service data, the apparatus comprising:
the operation authority acquisition module is used for acquiring user information stored by a plurality of service systems and user operation authority information corresponding to the user information;
the data object acquisition module is used for acquiring the corresponding relation between the preset user operation authority information and the data object information;
the search authority database construction module is used for constructing a search authority database based on the user information, the user operation authority information corresponding to the user information and the corresponding relation between the user operation authority information and the data object information; the search authority library stores a first corresponding relation table; the first corresponding relation table is used for storing the corresponding relation between the user information and the data object information;
the search request acquisition module is used for acquiring a search request of a target user for service data; the search request carries user information of the target user;
a target information obtaining module, configured to obtain, from the first correspondence table, data object information corresponding to the user information of the target user as target data object information;
and the service data searching module is used for searching the service data according to the target data object information.
9. A traffic search system comprising a memory and a processor, the memory storing a computer program, characterized in that the processor realizes the steps of the method according to any of claims 1 to 7 when executing the computer program.
10. A computer-readable storage medium, on which a computer program is stored, which, when being executed by a processor, carries out the steps of the method of any one of claims 1 to 7.
CN202010216546.6A 2020-03-25 2020-03-25 Method, device, service searching system and storage medium for searching service data Active CN111427972B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202010216546.6A CN111427972B (en) 2020-03-25 2020-03-25 Method, device, service searching system and storage medium for searching service data

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202010216546.6A CN111427972B (en) 2020-03-25 2020-03-25 Method, device, service searching system and storage medium for searching service data

Publications (2)

Publication Number Publication Date
CN111427972A true CN111427972A (en) 2020-07-17
CN111427972B CN111427972B (en) 2024-03-01

Family

ID=71550004

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202010216546.6A Active CN111427972B (en) 2020-03-25 2020-03-25 Method, device, service searching system and storage medium for searching service data

Country Status (1)

Country Link
CN (1) CN111427972B (en)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113537921A (en) * 2021-05-29 2021-10-22 中国南方电网有限责任公司 Intelligent safety anti-error check system and anti-error check system thereof
CN113535677A (en) * 2021-06-29 2021-10-22 平安国际融资租赁有限公司 Data analysis query management method and device, computer equipment and storage medium

Citations (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2012063896A (en) * 2010-09-15 2012-03-29 Hitachi Information Systems Ltd Data access control system, data access control method and data access control program
US20120158747A1 (en) * 2010-12-16 2012-06-21 Michael Satow System and method for performing authority based content searching
CN103914489A (en) * 2013-01-07 2014-07-09 杭州新世纪电子科技有限公司 Control method and control device for enterprise search permission supporting multi-system access
JP2016167145A (en) * 2015-03-09 2016-09-15 エヌ・ティ・ティ・コミュニケーションズ株式会社 Search system, search method, and computer program
CN107301354A (en) * 2017-06-27 2017-10-27 北京微影时代科技有限公司 A kind of System right management method and device
CN109409119A (en) * 2017-08-17 2019-03-01 北京京东尚科信息技术有限公司 Data manipulation method and device
CN109960944A (en) * 2017-12-14 2019-07-02 中兴通讯股份有限公司 A kind of data desensitization method, server, terminal and computer readable storage medium
CN110008234A (en) * 2019-04-11 2019-07-12 北京百度网讯科技有限公司 A kind of business datum searching method, device and electronic equipment

Patent Citations (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2012063896A (en) * 2010-09-15 2012-03-29 Hitachi Information Systems Ltd Data access control system, data access control method and data access control program
US20120158747A1 (en) * 2010-12-16 2012-06-21 Michael Satow System and method for performing authority based content searching
CN103914489A (en) * 2013-01-07 2014-07-09 杭州新世纪电子科技有限公司 Control method and control device for enterprise search permission supporting multi-system access
JP2016167145A (en) * 2015-03-09 2016-09-15 エヌ・ティ・ティ・コミュニケーションズ株式会社 Search system, search method, and computer program
CN107301354A (en) * 2017-06-27 2017-10-27 北京微影时代科技有限公司 A kind of System right management method and device
CN109409119A (en) * 2017-08-17 2019-03-01 北京京东尚科信息技术有限公司 Data manipulation method and device
CN109960944A (en) * 2017-12-14 2019-07-02 中兴通讯股份有限公司 A kind of data desensitization method, server, terminal and computer readable storage medium
CN110008234A (en) * 2019-04-11 2019-07-12 北京百度网讯科技有限公司 A kind of business datum searching method, device and electronic equipment

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113537921A (en) * 2021-05-29 2021-10-22 中国南方电网有限责任公司 Intelligent safety anti-error check system and anti-error check system thereof
CN113535677A (en) * 2021-06-29 2021-10-22 平安国际融资租赁有限公司 Data analysis query management method and device, computer equipment and storage medium
CN113535677B (en) * 2021-06-29 2024-04-02 平安国际融资租赁有限公司 Data analysis query management method, device, computer equipment and storage medium

Also Published As

Publication number Publication date
CN111427972B (en) 2024-03-01

Similar Documents

Publication Publication Date Title
CN107798038B (en) Data response method and data response equipment
CN110688348A (en) File management system
US20120290565A1 (en) Automatic social graph calculation
CN109936571B (en) Mass data sharing method, open sharing platform and electronic equipment
CN111756621A (en) Method and device for managing data of group users and maintaining instant messaging group
US20200302081A1 (en) Method and system for managing personal digital identifiers of a user in a plurality of data elements
CN112235253B (en) Data asset carding method, device, computer equipment and storage medium
CN109241384B (en) Scientific research information visualization method and device
US9355270B2 (en) Security configuration systems and methods for portal users in a multi-tenant database environment
CN111966866A (en) Data asset management method and device
CN111934899A (en) Configuration method and device of user information of Internet of things and computer equipment
CN111427972B (en) Method, device, service searching system and storage medium for searching service data
CN111488594A (en) Authority checking method and device based on cloud server, storage medium and terminal
US11151088B2 (en) Systems and methods for verifying performance of a modification request in a database system
CN114416733A (en) Data retrieval processing method and device, electronic equipment and storage medium
US11216894B2 (en) Image-based semantic accommodation search
US10348665B2 (en) Email-initiated report service
US9542457B1 (en) Methods for displaying object history information
CN109087053B (en) Collaborative office processing method, device, equipment and medium based on association topological graph
US20160092481A1 (en) Information integration and assessment
CN112685572B (en) Heterogeneous data fusion method and device
WO2018200284A1 (en) Media sharing based on identified physical objects
CN115185973A (en) Data resource sharing method, platform, device and storage medium
CN115168652A (en) Visual display method, device, medium and equipment for information assets
US11301482B2 (en) Assist system and assist method

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
TA01 Transfer of patent application right

Effective date of registration: 20210513

Address after: 510620, No. two, No. 2, Tianhe South Road, Guangzhou, Guangdong, Tianhe District

Applicant after: Guangzhou Power Supply Bureau of Guangdong Power Grid Co.,Ltd.

Address before: 510620, No. two, No. 2, Tianhe South Road, Guangzhou, Guangdong, Tianhe District

Applicant before: Guangzhou Power Supply Bureau of Guangdong Power Grid Co.,Ltd.

Applicant before: Guangzhou suinengtong Energy Technology Co.,Ltd.

TA01 Transfer of patent application right
GR01 Patent grant
GR01 Patent grant