CN116431646A - Modeling and hierarchical control device and method for data model - Google Patents
Modeling and hierarchical control device and method for data model Download PDFInfo
- Publication number
- CN116431646A CN116431646A CN202310427566.1A CN202310427566A CN116431646A CN 116431646 A CN116431646 A CN 116431646A CN 202310427566 A CN202310427566 A CN 202310427566A CN 116431646 A CN116431646 A CN 116431646A
- Authority
- CN
- China
- Prior art keywords
- data
- model
- instance
- data model
- modeling
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000013499 data model Methods 0.000 title claims abstract description 216
- 238000000034 method Methods 0.000 title claims abstract description 32
- 238000007726 management method Methods 0.000 claims abstract description 68
- 238000012986 modification Methods 0.000 claims abstract description 34
- 230000004048 modification Effects 0.000 claims abstract description 34
- 238000012550 audit Methods 0.000 claims description 11
- 238000012544 monitoring process Methods 0.000 claims description 6
- 238000010586 diagram Methods 0.000 description 23
- 230000008901 benefit Effects 0.000 description 6
- 238000013523 data management Methods 0.000 description 6
- 230000008520 organization Effects 0.000 description 4
- 230000008569 process Effects 0.000 description 3
- 238000007792 addition Methods 0.000 description 2
- 238000013475 authorization Methods 0.000 description 2
- 230000000694 effects Effects 0.000 description 2
- 230000000007 visual effect Effects 0.000 description 2
- 230000004075 alteration Effects 0.000 description 1
- 238000004458 analytical method Methods 0.000 description 1
- 238000000354 decomposition reaction Methods 0.000 description 1
- 238000012217 deletion Methods 0.000 description 1
- 230000037430 deletion Effects 0.000 description 1
- 238000013461 design Methods 0.000 description 1
- 238000012938 design process Methods 0.000 description 1
- 238000011161 development Methods 0.000 description 1
- 238000005516 engineering process Methods 0.000 description 1
- 238000001914 filtration Methods 0.000 description 1
- 230000014509 gene expression Effects 0.000 description 1
- 238000012423 maintenance Methods 0.000 description 1
- 230000007246 mechanism Effects 0.000 description 1
- 239000002245 particle Substances 0.000 description 1
- 238000013439 planning Methods 0.000 description 1
- 238000012545 processing Methods 0.000 description 1
- 230000000750 progressive effect Effects 0.000 description 1
- 238000005215 recombination Methods 0.000 description 1
- 230000006798 recombination Effects 0.000 description 1
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
- G06F16/20—Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
- G06F16/22—Indexing; Data structures therefor; Storage structures
- G06F16/2282—Tablespace storage structures; Management thereof
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
- G06F21/31—User authentication
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/64—Protecting data integrity, e.g. using checksums, certificates or signatures
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Software Systems (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Computer Hardware Design (AREA)
- Databases & Information Systems (AREA)
- Data Mining & Analysis (AREA)
- Health & Medical Sciences (AREA)
- Bioethics (AREA)
- General Health & Medical Sciences (AREA)
- Storage Device Security (AREA)
Abstract
The invention discloses a data model modeling and hierarchical control device and method, wherein the device comprises the following components: the system comprises a data source management module, a data modeling module, a permission control module, a model data service model and a report module; the data source management module is used for connecting and managing various data sources; the data modeling module is used for carrying out data modeling on the connected data sources in the data source management module, generating a corresponding data model and instance data, and carrying out hierarchical management and control on the generated data model and instance data; the permission control module is used for controlling the access and modification permission of the user to the data model and the instance data; the model data service model provides a function of operating on the data instance based on the data model; the report module is used for inquiring the established data model and the instance data and generating a corresponding report.
Description
Technical Field
The present invention relates to the field of data modeling and access control technology, and more particularly, to a data model modeling and hierarchical management and control apparatus and method.
Background
As the amount of data increases, various types of data become more and more complex, and thus efficient management of data becomes more and more important. Particularly in enterprises, the management and maintenance of data models is critical to the development and stability of the enterprise. However, the existing data model management schemes have some disadvantages, such as inflexible rights management, difficulty in meeting the requirements of different business departments, and the like.
The most relevant prior art to the present invention is the existing data modeling software and database access control scheme. Existing data modeling software can help users quickly build data models for describing and planning data structures, data elements, data streams, and data processing logic. Only on the modeling level, there is no specific implementation. However, the existing database access control scheme can realize more flexible authority control, but only performs authority control on users in the database system instead of service system users.
In an information system of an enterprise or organization, data is an indispensable and important component. In order to effectively manage and utilize such data, it is often necessary to model and hierarchically manage it to ensure the integrity, security, and correctness of the data.
Conventional data modeling and hierarchical management methods typically require the use of multiple independent tools and systems, and suffer from the problems of complexity, inefficiency, and susceptibility to errors. Therefore, an integrated data model modeling and hierarchical management and control device is needed to improve the efficiency and accuracy of data management.
In the field of data management, conventional data management systems have some problems. First, conventional data management systems generally use relational databases to store data, and complex SQL statements need to be written in an application program to implement data manipulation and management. Secondly, the conventional data management system generally does not well realize hierarchical management and authority management of data, and security and privacy of the data are difficult to ensure. Therefore, a new data model modeling and hierarchical management apparatus is needed to address these issues.
Prior art solutions design databases from two levels, a conceptual data model (ConceptualDataModel) and a physical data model (PhysicalDataModel), respectively. Here, the conceptual data model describes entity definitions and entity relationship definitions that are independent of a database management system (DBMS); the physical data model is a materialization for the target database management system based on the conceptual data model. However, data modeling tools are mainly software for designing, building and maintaining database models. These tools provide a visual interface and tools that allow a user to create and modify database models, including tables, columns, keys, relationships, and the like. Neither data is stored nor business logic is implemented.
Limitations of databases for data access control mainly include the following: particle size limitation: databases typically have access control over only an entire table or column, but not fine-grained access control over individual data lines, which may result in some sensitive data not being adequately protected. Rule restriction: databases can only implement rule-based access control, e.g., role-based access control, and cannot fine-grained control of complex access policies, e.g., context-based access control. It is difficult to process unstructured data: relational databases are based on structured data and therefore difficult to process unstructured data (e.g., text, images, audio, etc.), which can lead to limitations in data access control.
Therefore, the prior art lacks a device capable of modeling and hierarchical control of the data model, which causes great hidden trouble to enterprises in aspects of data safety, data reliability and the like.
Disclosure of Invention
In order to solve the above-mentioned problems in the background art, the present invention provides a device and a method for modeling and hierarchical management and control of a data model.
According to one aspect of the present invention, there is provided a data model modeling and hierarchical management and control apparatus, including: the system comprises a data source management module, a data modeling module, a permission control module, a model data service model and a report module; wherein the method comprises the steps of
The data source management module is used for connecting and managing various data sources;
the data modeling module is used for carrying out data modeling on the connected data sources in the data source management module, generating a corresponding data model, and carrying out hierarchical management and control on the generated data model;
the permission control module is used for controlling the access and modification permission of the user to the data model and the instance data;
the model data service model provides a function of operating on the data instance based on the data model;
the report module is used for inquiring the established data model and the instance data and generating a corresponding report.
Optionally, the data modeling module includes a data modeling component and a data ranking component, wherein
The data modeling component is used for carrying out data modeling on the connected data sources to generate a corresponding data model and instance data;
the data grading component is used for carrying out grading management according to the importance degree of the data model to obtain the data models and the instance data with different grades.
Optionally, the data classification component is specifically configured to:
dividing the data model generated by the data modeling component into data models with different levels according to confidentiality of the data model;
dividing the data model generated by the data modeling component into data models with different levels according to the integrity of the data model;
the data model generated by the data modeling component is divided into different levels of data models according to the availability of the data models.
Optionally, the permission control module is specifically configured to:
controlling access and modification rights of a user to a data model according to client information of the user;
controlling access and modification authority of a user to a data model according to a service line where the user is located;
and controlling the access and modification authority of the user to the data model according to the personal information of the user.
Optionally, the report module includes an audit log component for recording all operations and access records of the data model, and monitoring and auditing the usage of the data model.
According to yet another aspect of the present invention, there is provided a data model modeling and hierarchical management and control method, including:
accessing various data sources;
carrying out data modeling on the accessed data source, generating a corresponding data model and instance data, and carrying out hierarchical management and control on the generated data model and instance data;
controlling access and modification rights of a user to the data model and the instance data;
operating the data instance based on the data model;
and inquiring the established data model and the instance data and generating a corresponding report.
Optionally, the modeling the accessed data source to generate a corresponding data model, and performing hierarchical management and control on the generated data model and the instance data, includes:
carrying out data modeling on the accessed data source to generate a corresponding data model;
and carrying out hierarchical management according to the importance degree of the data model to obtain data models and instance data of different levels.
Optionally, the step of performing hierarchical management according to the importance degree of the data model to obtain data models with different levels includes:
dividing the data model generated by the data modeling component into data models with different levels according to confidentiality of the data model;
dividing the data model generated by the data modeling component into data models with different levels according to the integrity of the data model;
the data model generated by the data modeling component is divided into different levels of data models according to the availability of the data models.
Optionally, the controlling the access and modification rights of the user to the data model and the instance data includes:
controlling access and modification rights of a user to the data model and the instance data according to client information of the user;
controlling access and modification authority of a user to the data model and the instance data according to a service line where the user is located;
and controlling the access and modification rights of the user to the data model and the instance data according to the personal information of the user.
Optionally, the data model modeling and hierarchical control method further comprises: and recording all operation and access records of the data model and the instance data, and monitoring and auditing the use condition of the data model and the instance data.
According to the invention, data hierarchical management and control are realized through the data modeling module, so that the data security is ensured. And the access and modification of the user to the data are limited by the permission control module, so that the data security is further enhanced. Through the data source management module, a user can conveniently connect and manage various data sources, and the data reliability is improved. Through the model data service model and the report module, a user can conveniently inquire and report the modeled data, and the data use efficiency is improved. Therefore, the technical scheme of the invention has higher practicability and economic benefit, and can be widely applied to the fields of data model modeling and hierarchical management and control.
Drawings
Exemplary embodiments of the present invention may be more completely understood in consideration of the following drawings:
FIG. 1 is a schematic diagram of a data model modeling and hierarchical management and control apparatus according to an exemplary embodiment of the present invention;
FIG. 2 is a schematic diagram of an RDBM data source provided by an exemplary embodiment of the present invention;
FIG. 3 is a schematic diagram of a DFS data source provided in an exemplary embodiment of the present invention;
FIG. 4 is a diagram of data elements provided by an exemplary embodiment of the present invention;
FIG. 5 is a diagram of file elements provided by an exemplary embodiment of the present invention;
FIG. 6 is a schematic diagram of a third party authorized to access a data model provided in an exemplary embodiment of the present invention;
FIG. 7 is a schematic diagram of an authorization department and personnel access data model provided by an exemplary embodiment of the present invention;
FIG. 8 is a schematic diagram of an authorized role access data model provided in accordance with an exemplary embodiment of the present invention;
FIG. 9 is a diagram of authorization accessible model and instance data provided by an exemplary embodiment of the present invention;
FIG. 10 is a diagram of a report provided by an exemplary embodiment of the present invention;
FIG. 11 is an exemplary diagram of creating application elements provided by an exemplary embodiment of the present invention;
FIG. 12 is a schematic diagram of an operational data flow of a data model provided in an exemplary embodiment of the present invention;
FIG. 13 is a flow chart of a method for modeling and hierarchical management of data models according to an exemplary embodiment of the present invention.
Detailed Description
Hereinafter, exemplary embodiments according to the present invention will be described in detail with reference to the accompanying drawings. It should be apparent that the described embodiments are only some embodiments of the present invention and not all embodiments of the present invention, and it should be understood that the present invention is not limited by the example embodiments described herein.
It should be noted that: the relative arrangement of the components and steps, numerical expressions and numerical values set forth in these embodiments do not limit the scope of the present invention unless it is specifically stated otherwise.
Term interpretation:
data model: in the database design process, conceptual models are constructed to describe the abstract data patterns of the real world.
And (3) hierarchical control: an access control mode based on authority can control the access authority of different users to data models and instance data.
Service line: refers to different business departments of a company or organization.
Roles: refers to the role played by the user in the system, and the operation authority of the user on the system can be determined.
Fig. 1 shows a schematic diagram of the architecture of the data model modeling and hierarchical management and control device provided by the invention. As shown in fig. 1, the data model modeling and hierarchical control device includes: the system comprises a data source management module, a data modeling module, a permission control module, a model data service model and a report module; the data source management module is used for connecting and managing various data sources; the data modeling module is used for carrying out data modeling on the connected data sources in the data source management module, generating a corresponding data model and instance data, and carrying out hierarchical management and control on the generated data model and instance data; the permission control module is used for controlling the access and modification permission of the user to the data model and the instance data; the model data service model provides a function of operating on the data instance based on the data model; the report module is used for inquiring the established data model and the instance data and generating a corresponding report.
In the embodiment of the invention, through the data source management module, a user can connect and manage various data sources, including databases, distributed file systems and the like, and the databases include, but are not limited to: RDBM data sources and DFS data sources. Wherein fig. 2 shows a data detail schematic of a connected RDBM data source and fig. 3 shows a schematic of a connected DFS data source. The management of various data sources comprises management operations such as creating, editing, deleting, sharing, exporting various data sources and the like.
In the embodiment of the invention, through the data modeling module, a user can model the connected data sources, including tables, fields and the like, and conduct hierarchical management and control to ensure the data security. In addition, a visual interface is provided that allows a user to create and modify data models, including tables, columns, keys, relationships, and the like. Fig. 4 shows a data element diagram for creating elements, each element describing an object (person or item) and establishing a relationship between them. The main purpose is to describe business relationships. FIG. 5 shows a file element diagram, which may also be referred to as a file model, which is mainly used for analyzing file contents by itself according to file elements of a relation when uploading a file, so that the file contents are stored in a database in a structured manner, thereby facilitating subsequent analysis and use.
In the embodiment of the invention, the file of the file element type can be automatically analyzed and built by establishing connection between the data element and the file element and using the file attribute in the data element in the uploading process.
Optionally, the permission control module is specifically configured to: controlling access and modification rights of a user to the data model and the instance data according to client information of the user; controlling access and modification authority of a user to the data model and the instance data according to a service line where the user is located; and controlling the access and modification rights of the user to the data model and the instance data according to the personal information of the user.
In the embodiment of the invention, the rights for managing the data model comprise roles, service lines, users and the like. The authority is allocated through the roles, so that the data model and the instance data are finely managed and controlled; rights are distributed through service lines, so that rights of different service departments are controlled; and the authority control of individuals is realized through the authority allocation of users. Meanwhile, the invention also provides a permission approval mechanism, so that the rationality and the safety of the permission are ensured. Authority control is carried out according to multiple dimensions of roles, service lines, individuals and the like, so that the fine authority control of a data model and instance data is realized.
Wherein fig. 6 shows a schematic diagram of an authorized third party accessing the data model, fig. 7 shows a schematic diagram of an authorized department and person accessing the data model, and fig. 8 shows a schematic diagram of an authorized character accessing the data model.
In the embodiment of the invention, the authority control module is used for controlling the authority of the user and limiting the access and modification of the user to the data. FIG. 9 shows a schematic diagram of a model and instance data that is authorized to be accessed.
In the embodiment of the invention, the function of operating the data instance based on the data model is provided for the user through the model data service model, and the user can inquire and report the modeled data through the report module so as to meet the service requirement. FIG. 10 shows a schematic diagram of a generated report.
In the embodiment of the invention, as shown in fig. 11, when an element is created, the newly created element is used to have the capability of hierarchically filtering data by inheriting a basic element, a secret element and an audit element. The application element has basic element capabilities by inheriting the element-based use, e.g., the application element automatically has audit properties after inheriting the audit element.
In the embodiment of the invention, the data model modeling and hierarchical control device can be realized on a computer or a server in a mode of installing software. The specific implementation mode is that software comprising a data source management module, a data modeling module, a right control module, a model data service model and a report module is installed on a computer or a server, then configuration and customization are carried out according to the needs, and finally the software is started for use.
Therefore, the invention realizes data hierarchical management and control through the data modeling module, and can ensure the data security. And the access and modification of the user to the data are limited by the permission control module, so that the data security is further enhanced. Through the data source management module, a user can conveniently connect and manage various data sources, and the data reliability is improved. Through the model data service model and the report module, a user can conveniently inquire and report the modeled data, and the data use efficiency is improved. The technical scheme of the invention has higher practicability and economic benefit, and can be widely applied to the fields of data model modeling and hierarchical management and control. The problems of complex data modeling and difficult hierarchical management and control in the prior art can be effectively solved, and the efficiency and the safety of data management are improved. Meanwhile, the implementation mode of the invention is simple and flexible, and is easy to popularize and apply.
Optionally, the data modeling module comprises a data modeling component and a data grading component, wherein the data modeling component is used for performing data modeling on the connected data sources to generate corresponding data models and instance data; the data grading component is used for carrying out grading management according to the importance degree of the data model to obtain the data models and the instance data with different grades.
Optionally, the data classification component is specifically configured to: dividing the data model generated by the data modeling component into data models with different levels according to confidentiality of the data model; dividing the data model generated by the data modeling component into data models with different levels according to the integrity of the data model; the data model generated by the data modeling component is divided into different levels of data models according to the availability of the data models.
In the embodiment of the invention, the data grading component is used for carrying out grading management on the data model and the instance data according to the importance degree, and carrying out different access control on the data model and the instance data with different grades. The invention provides various hierarchical management schemes, including various schemes based on confidentiality, integrity, availability and the like, and can carry out hierarchical management on the data model according to the importance degree and carry out different access control on the data model and the instance data of different levels.
Optionally, the report module includes an audit log component for recording all operation and access records of the data model and the instance data, and monitoring and auditing the usage of the data model and the instance data.
In the embodiment of the invention, the audit log component is used for recording all operations and access records of the data model and the instance data, including operations such as addition, modification, deletion and the like, and access records of the data model and the instance data. Through the audit log, an administrator can monitor and audit the use condition of the data model and the instance data, and ensure legal use of the data model and the instance data. FIG. 12 shows a schematic diagram of an operational data flow of a data model.
The invention aims at providing a data model established by a sub-module, and a hierarchical management model is established by the data model, wherein the organization structure is divided into different layers, and each layer has different functions and responsibilities, so that the effective coordination and management inside the organization are realized.
In summary, the invention realizes the fine authority control of the data model and the instance data, including authority control of multiple dimensions such as roles, service lines, individuals and the like, and provides various hierarchical management schemes, so that the data model and the instance data can be managed in a hierarchical manner according to the importance degree, and different access control can be performed on the data model and the instance data of different levels. Meanwhile, the invention also provides an audit log component which can monitor and audit the use condition of the data model and the instance data and ensure the legal use of the data model and the instance data.
Exemplary method
Fig. 13 is a schematic flow chart of a data model modeling and hierarchical management and control method provided by the invention. As shown in fig. 13, the data model modeling and hierarchical control method includes:
step S1301: accessing various data sources;
step S1302: carrying out data modeling on the accessed data source, generating a corresponding data model and instance data, and carrying out hierarchical management and control on the generated data model and instance data;
step S1303: controlling access and modification rights of a user to the data model and the instance data;
step S1304: operating the data instance based on the data model;
step S1305: and inquiring the established data model and the instance data and generating a corresponding report.
Optionally, the modeling the accessed data source to generate a corresponding data model, and performing hierarchical management and control on the generated data model and the instance data, includes:
carrying out data modeling on the accessed data source to generate a corresponding data model;
and carrying out hierarchical management according to the importance degree of the data model to obtain data models and instance data of different levels.
Optionally, the step of performing hierarchical management according to the importance degree of the data model to obtain data models with different levels includes:
dividing the data model generated by the data modeling component into data models with different levels according to confidentiality of the data model;
dividing the data model generated by the data modeling component into data models with different levels according to the integrity of the data model;
the data model generated by the data modeling component is divided into different levels of data models according to the availability of the data models.
Optionally, the controlling the access and modification rights of the user to the data model and the instance data includes:
controlling access and modification rights of a user to the data model and the instance data according to client information of the user;
controlling access and modification authority of a user to the data model and the instance data according to a service line where the user is located;
and controlling the access and modification rights of the user to the data model and the instance data according to the personal information of the user.
Optionally, the data model modeling and hierarchical control method further comprises: and recording all operation and access records of the data model and the instance data, and monitoring and auditing the use condition of the data model and the instance data.
The data model modeling and hierarchical control method of the embodiment of the present invention corresponds to the data model modeling and hierarchical control device of another embodiment of the present invention, and is not described herein.
The basic principles of the present invention have been described above in connection with specific embodiments, however, it should be noted that the advantages, benefits, effects, etc. mentioned in the present invention are merely examples and not intended to be limiting, and these advantages, benefits, effects, etc. are not to be considered as essential to the various embodiments of the present invention. Furthermore, the specific details disclosed herein are for purposes of illustration and understanding only, and are not intended to be limiting, as the invention is not necessarily limited to practice with the above described specific details.
In this specification, each embodiment is described in a progressive manner, and each embodiment is mainly described in a different manner from other embodiments, so that the same or similar parts between the embodiments are mutually referred to. For system embodiments, the description is relatively simple as it essentially corresponds to method embodiments, and reference should be made to the description of method embodiments for relevant points.
The block diagrams of the devices, systems, apparatuses, systems according to the present invention are merely illustrative examples and are not intended to require or imply that the connections, arrangements, configurations must be made in the manner shown in the block diagrams. As will be appreciated by one of skill in the art, the devices, systems, apparatuses, systems may be connected, arranged, configured in any manner. Words such as "including," "comprising," "having," and the like are words of openness and mean "including but not limited to," and are used interchangeably therewith. The terms "or" and "as used herein refer to and are used interchangeably with the term" and/or "unless the context clearly indicates otherwise. The term "such as" as used herein refers to, and is used interchangeably with, the phrase "such as, but not limited to.
The apparatus and method of the present invention may be implemented in a number of ways. For example, the apparatus and methods of the present invention may be implemented by software, hardware, firmware, or any combination of software, hardware, firmware. The above-described sequence of steps for the method is for illustration only, and the steps of the method of the present invention are not limited to the sequence specifically described above unless specifically stated otherwise. Furthermore, in some embodiments, the present invention may also be embodied as programs recorded in a recording medium, the programs including machine-readable instructions for implementing the methods according to the present invention. Thus, the present invention also covers a recording medium storing a program for executing the method according to the present invention.
It is also noted that in the systems, devices and methods of the present invention, components or steps may be disassembled and/or assembled. Such decomposition and/or recombination should be considered as equivalent aspects of the present invention. The previous description of the disclosed aspects is provided to enable any person skilled in the art to make or use the present invention. Various modifications to these aspects will be readily apparent to those skilled in the art, and the generic principles defined herein may be applied to other aspects without departing from the scope of the invention. Thus, the present invention is not intended to be limited to the aspects shown herein but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.
The foregoing description has been presented for purposes of illustration and description. Furthermore, this description is not intended to limit embodiments of the invention to the form disclosed herein. Although a number of example aspects and embodiments have been discussed above, a person of ordinary skill in the art will recognize certain variations, modifications, alterations, additions, and subcombinations thereof.
Claims (10)
1. A data model modeling and hierarchical management and control device, comprising: the system comprises a data source management module, a data modeling module, a permission control module, a model data service model and a report module; wherein the method comprises the steps of
The data source management module is used for connecting and managing various data sources;
the data modeling module is used for carrying out data modeling on the connected data sources in the data source management module, generating a corresponding data model and instance data, and carrying out hierarchical management and control on the generated data model and instance data;
the permission control module is used for controlling the access and modification permission of the user to the data model and the instance data;
the model data service model provides a function of operating on the data instance based on the data model;
the report module is used for inquiring the established data model and the instance data and generating a corresponding report.
2. The apparatus of claim 1, wherein the data modeling module comprises a data modeling component and a data ranking component, wherein
The data modeling component is used for carrying out data modeling on the connected data sources to generate a corresponding data model and instance data;
the data grading component is used for carrying out grading management according to the importance degree of the data model to obtain the data models and the instance data with different grades.
3. The apparatus of claim 2, wherein the data ranking component is specifically configured to:
dividing the data model generated by the data modeling component into data models with different levels according to confidentiality of the data model;
dividing the data model generated by the data modeling component into data models with different levels according to the integrity of the data model;
the data model generated by the data modeling component is divided into different levels of data models according to the availability of the data models.
4. The apparatus of claim 1, wherein the entitlement control module is specifically configured to:
controlling access and modification rights of a user to the data model and the instance data according to client information of the user;
controlling access and modification authority of a user to the data model and the instance data according to a service line where the user is located;
and controlling the access and modification rights of the user to the data model and the instance data according to the personal information of the user.
5. The apparatus of claim 1, wherein the reporting module includes an audit log component for recording all operations and access records of the data model and instance data and monitoring and auditing usage of the data model and instance data.
6. The modeling and hierarchical control method for the data model is characterized by comprising the following steps of:
accessing various data sources;
carrying out data modeling on the accessed data source, generating a corresponding data model and instance data, and carrying out hierarchical management and control on the generated data model and instance data;
controlling access and modification rights of a user to the data model and the instance data;
operating the data instance based on the data model;
and inquiring the established data model and the instance data and generating a corresponding report.
7. The method of claim 6, wherein modeling the accessed data sources, generating corresponding data models, and hierarchically managing the generated data models and instance data comprises:
carrying out data modeling on the accessed data source to generate a corresponding data model;
and carrying out hierarchical management according to the importance degree of the data model to obtain data models and instance data of different levels.
8. The method of claim 7, wherein the step of hierarchically managing the data model according to the importance level of the data model to obtain the data model of different levels comprises:
dividing the data model generated by the data modeling component into data models with different levels according to confidentiality of the data model;
dividing the data model generated by the data modeling component into data models with different levels according to the integrity of the data model;
the data model generated by the data modeling component is divided into different levels of data models according to the availability of the data models.
9. The method of claim 6, wherein controlling user access and modification rights to the data model and instance data comprises:
controlling access and modification rights of a user to the data model and the instance data according to client information of the user;
controlling access and modification authority of a user to the data model and the instance data according to a service line where the user is located;
and controlling the access and modification rights of the user to the data model and the instance data according to the personal information of the user.
10. The method as recited in claim 6, further comprising: and recording all operation and access records of the data model and the instance data, and monitoring and auditing the use condition of the data model and the instance data.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202310427566.1A CN116431646A (en) | 2023-04-20 | 2023-04-20 | Modeling and hierarchical control device and method for data model |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202310427566.1A CN116431646A (en) | 2023-04-20 | 2023-04-20 | Modeling and hierarchical control device and method for data model |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN116431646A true CN116431646A (en) | 2023-07-14 |
Family
ID=87094173
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202310427566.1A Pending CN116431646A (en) | 2023-04-20 | 2023-04-20 | Modeling and hierarchical control device and method for data model |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN116431646A (en) |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20060064428A1 (en) * | 2004-09-17 | 2006-03-23 | Actuate Corporation | Methods and apparatus for mapping a hierarchical data structure to a flat data structure for use in generating a report |
| CN109658061A (en) * | 2018-12-13 | 2019-04-19 | 安徽天勤盛创信息科技股份有限公司 | A kind of audit comprehensive analysis platform |
| CN110019176A (en) * | 2019-04-11 | 2019-07-16 | 普元信息技术股份有限公司 | Improve the data improvement control system that data administer service success rate |
| CN110674163A (en) * | 2019-08-26 | 2020-01-10 | 天津浪淘科技股份有限公司 | Heterogeneous data query system and method based on BS framework |
| CN115455008A (en) * | 2022-10-11 | 2022-12-09 | 广域铭岛数字科技有限公司 | Database processing method, device, equipment and medium |
-
2023
- 2023-04-20 CN CN202310427566.1A patent/CN116431646A/en active Pending
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20060064428A1 (en) * | 2004-09-17 | 2006-03-23 | Actuate Corporation | Methods and apparatus for mapping a hierarchical data structure to a flat data structure for use in generating a report |
| CN109658061A (en) * | 2018-12-13 | 2019-04-19 | 安徽天勤盛创信息科技股份有限公司 | A kind of audit comprehensive analysis platform |
| CN110019176A (en) * | 2019-04-11 | 2019-07-16 | 普元信息技术股份有限公司 | Improve the data improvement control system that data administer service success rate |
| CN110674163A (en) * | 2019-08-26 | 2020-01-10 | 天津浪淘科技股份有限公司 | Heterogeneous data query system and method based on BS framework |
| CN115455008A (en) * | 2022-10-11 | 2022-12-09 | 广域铭岛数字科技有限公司 | Database processing method, device, equipment and medium |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US10789204B2 (en) | Enterprise-level data protection with variable data granularity and data disclosure control with hierarchical summarization, topical structuring, and traversal audit | |
| US10491633B2 (en) | Access requests at IAM system implementing IAM data model | |
| US9734230B2 (en) | Cross system analytics for in memory data warehouse | |
| US9734221B2 (en) | In memory database warehouse | |
| Priebe et al. | Towards OLAP security design—survey and research issues | |
| CN109522707B (en) | Role and resource-based user data read-write security authority control method and system | |
| Ubale Swapnaja et al. | Analysis of dac mac rbac access control based models for security | |
| US20140373105A1 (en) | Enterprise security management system using hierarchical organization and multiple ownership structure | |
| US9773048B2 (en) | Historical data for in memory data warehouse | |
| CN111552953B (en) | Security policy as a service | |
| Al-Fedaghi | Beyond purpose-based privacy access control | |
| EP3400563A1 (en) | Computer-implemented method for complex dynamic case management | |
| Bokhari et al. | A Comparative study of software requirements tools for secure software Development | |
| EP2570943A1 (en) | Protection of data privacy in an enterprise system | |
| KR20080026243A (en) | System for evaluating data quality management maturity | |
| US6751509B2 (en) | Method for access control of aggregated data | |
| CN116431646A (en) | Modeling and hierarchical control device and method for data model | |
| Li et al. | Optimal Design of an Information Management System for Government: A Bridge between Government and Citizens | |
| Kerschberg et al. | Information System Integrati on: A Metadata Management Approach | |
| JP2007004610A (en) | Complex access approval method and device | |
| Harnoš et al. | Analysis of current trends in the development of DSLs and the possibility of using them in the field of information security | |
| Blanco et al. | Automatic generation of secure multidimensional code for data warehouses: An MDA approach | |
| US20230140122A1 (en) | Data plane authorization | |
| Lad | Data Architecture Process | |
| Yuan et al. | Designing Data Permissions in the Enterprise Application Environment |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| CB03 | Change of inventor or designer information | ||
| CB03 | Change of inventor or designer information |
Inventor after: Shi Fujie Inventor after: Qin Jiashen Inventor after: Hong Xuechao Inventor after: Chen Chunlin Inventor after: Nan Fuchun Inventor before: Hong Xuechao Inventor before: Shi Fujie Inventor before: Qin Jiashen Inventor before: Chen Chunlin Inventor before: Nan Fuchun |