TWM526111U - Data permission setting device - Google Patents

Description

Data authority setting device

The present invention relates to a data authority setting device, and more particularly to a data authority setting device for setting access rights of customer data.

With the development and advancement of information and network technology, more and more enterprises and individuals are processing and transmitting personal data through computers and the Internet. In view of the increasing importance of personal data protection issues, companies and individuals should adopt appropriate protection. And confidentiality measures to prevent personal data from being stolen or leaked.

Usually, when a customer entrusts a business person to help with the business of buying and selling a house, he or she will inform the business personnel of their basic information, such as their name and contact information. Based on personal data protection, usually only a small number of people, such as the business personnel and information management personnel within the company, have access to the basic data of the customer.

When the business person wants to refer the customer to other business personnel, how to refer the customer to the more appropriate business personnel, and how to open the access rights of the customer's basic information to other business personnel has been yet to be resolved. The problem.

Therefore, the object of the present invention is to provide a data authority setting device.

Therefore, the new data authority setting device connects a service device corresponding to a first service and a plurality of branch device devices corresponding to a plurality of service branches respectively via a communication network. The data authority setting device comprises a communication unit connected to the communication network, a memory unit and a processing unit.

The memory unit stores customer information related to a customer, access authority data corresponding to the customer data, and information about a service geographic range corresponding to each service branch. The access authority data indicates that the access authority of the corresponding customer profile is assigned to the service device. Each service geographic extent is a polygon on a geographic coordinate plane, and each side of the polygon corresponds to a road and the road corresponds to at least one side of the polygon such that the polygon is a geographical extent that is partitioned according to the road profile.

The processing unit receives, by the communication unit, a purchase demand including a fuzzy address related to the customer from the business end device, and generates a target corresponding to the fuzzy address on the geographic coordinate plane according to the fuzzy address of the purchase demand region.

Wherein, when the processing unit determines that the target area overlaps with any of the service geographic ranges, the processing unit transmits, by the communication unit, a notification message related to the service requirement of the fuzzy address to the geographical range corresponding to the service. A collection of branch-side devices corresponding to the service branch. Receiving, by the communication unit, a reply for replying to the notification message from one of the collections of the branch-side devices by the communication unit In the message, the processing unit modifies the access authority data of the customer profile, so that the access permission profile further indicates that the access authority of the client profile is assigned to the set of branch-end devices that transmit the reply message.

The effect of the present invention is that the notification message corresponding to the service requirement of the fuzzy address is transmitted by the processing unit to the set of branch-side devices corresponding to the service branch corresponding to the geographical scope of the service, when the processing unit uses the communication When the unit receives the reply message from one of the collections of the branch-side devices, the processing unit modifies the access rights data of the customer data to give the access rights of the customer data to the branch end transmitting the reply message. Device collection.

1‧‧‧ data authority setting device

11‧‧‧ memory unit

12‧‧‧Communication unit

13‧‧‧Processing unit

2‧‧‧Business equipment

3‧‧‧ Target area

4‧‧‧ axis

5~6‧‧‧Target area

A’~B’‧‧‧ service geographical side

Other features and effects of the present invention will be apparent from the following description of the drawings, wherein: FIG. 1 is a block diagram illustrating the novel data rights setting device connecting a service corresponding to a first service via a communication network. The end device and the plurality of branch device sets corresponding to the plurality of service branches respectively; FIG. 2 is a schematic diagram showing that the service geographic range corresponding to each service branch is a polygon on the geographic coordinate plane; FIG. 3 is a schematic diagram illustrating The first side and the second side of "Zhongzheng Road Section" are included in the service geographic range corresponding to service branch A and service branch B respectively; 4 is a schematic diagram showing a target area corresponding to the "Zhongzheng Road section"; and FIG. 5 is a schematic diagram showing the service geography corresponding to each of the target areas of the "Zhongzheng Road section" and each of the plurality of service branches. The scope overlaps, and the target area corresponding to "Zhongxing Street" overlaps only with the service geographic range corresponding to the service branch D.

Referring to FIG. 1 to FIG. 3, a first embodiment of the present data authority setting apparatus 1 connects a service device 2 corresponding to a first service and a plurality of branches corresponding to a plurality of service branches A to F via a communication network. The set of end devices A0~F0 (the branch to which the first service belongs is the service store AA, not the service store A~F), and the data rights setting device 1 includes a communication unit 12, a memory unit 11 and a connection to the communication network. Processing unit 13. The implementation of the data authority setting device 1 can be, for example, a smart phone, a tablet computer or a notebook computer. Furthermore, the processing unit 13 cooperates with an application that includes a plurality of instructions to implement the function of setting data permissions of the present invention. However, in other embodiments of the present invention, the processing unit 13 can also be implemented. The electronic chip of the present invention sets the effect of data authority, but is not limited thereto.

The business device 2 is, for example, a smart phone, a tablet computer, or a personal computer held by the first service. Each service branch A~F corresponds to a plurality of business personnel in which the employees are employed, that is, a plurality of second businesses, and each second service holds one, for example The branch-side device for the smart phone held by the second service, the branch-side devices A1~An, B1~Bn, C1~Cn, D1~Dn held by the second service of each service branch A~F E1~En and F1~Fn form a corresponding branch-side device set A0, B0, C0, D0, E0, F0. In the present embodiment, it is explained by six service branches A to F.

The memory unit 11 stores customer information related to a customer, access authority data corresponding to the customer data, and a service geographic range corresponding to each service branch A~F, and a plurality of residential communities respectively Geographical scope. The access authority data indicates that the access authority of the corresponding customer profile is assigned to the first service, and the first service is allowed to utilize the service device 2 of the logged-in system to access the customer profile. The access rights data includes a first account number of the first service and a read permission and a write permission corresponding to the first account, to indicate that the service device 2 can read and write the customer data. As shown in FIG. 2, each service geographic range is a polygon on a geographic coordinate plane, and each side of the polygon corresponds to a road and the road corresponds to at least one side of the polygon, so that the polygon is divided according to the road profile. Geographical range; in particular, because the road is not necessarily completely straight, the road corresponds to two or more adjacent sides of the polygon when the road is not completely straight. In addition, the geographic extent covered by each residential community is also represented by a polygon on the geographic coordinate plane. In addition, each service branch A~F is on the geographic coordinate plane. It should be in a standard location, and the geographic location of the service corresponding to the service branch A~F covers the coordinate location.

For each side of each service geographic range, one side of the two sides of the road corresponding to the side is included in the geographic scope of the service, and the other side is not included in the geographic scope of the service. In addition, for each side of each service geographic range, the road corresponding to the side satisfies one of the road width greater than one threshold and the traffic flow is greater than another threshold, that is, the road corresponding to the side is one A large road or a main road to reduce the extra waiting time for the branch's business personnel to cross the main road for service. For example, as shown in FIG. 3, "Zhongzheng Road Section" corresponds to two adjacent sides B' of the service geographic range corresponding to the two adjacent sides A' of the service geographic range corresponding to the service branch A and the service branch B. And the first side of the "Zhongzheng Road Section" is included in the service geographic area corresponding to the service branch A. The purchase and sale service of the house object on the first side is handled by the service branch A; and the second side is included in the service branch. Among the service geographic ranges corresponding to B, the buying and selling service of the house object located on the second side is handled by the service branch B. Although the house object located on the first side is geographically close to the house object located on the second side, the geographical range of service of the service branch mentioned above may be divided so that the business personnel of the service branch A do not need to cross the "Zhongzheng Road". A section of (Da Road) to the second side of the service, also allows the service staff of the service branch B to cross the "Zhongzheng Road section" to the first side for service.

In addition, for each service branch A~F, if the memory unit 11 has a plurality of coordinate positions on the geographic coordinate plane of the sold or unsold house objects corresponding to the service stores A~F, When pre-dividing the geographical scope of the services of the service branches A~F, reference may be made to the coordinate positions of the sold or unsold house objects, so that the service geographic range of the service branches A~F covers most of these services. The coordinate position of the house item that has been sold or not sold, and is the geographical range that is divided according to the road profile.

When the processing unit 13 receives a purchase demand from the service device 2 including the fuzzy address of the customer by the communication unit 12, the processing unit 13 generates a geographic coordinate according to the fuzzy address of the purchase demand. The target area corresponding to the fuzzy address on the plane, except that the target area does not fall within the service geographic range of the service branch AA of the first service, so that the purchase demand becomes a referral demand, triggering the access authority of the customer data to be additionally given to The second business, while the second business is near the service. The fuzzy address is one of the road name and its segment, lane, and value, and one of the names of a residential community; for example, "Zhongzheng Road Section" or "Xinyi Community". Underneath, we will further explain how to decide the second business.

When the fuzzy address is a road name and its segment, lane, and value, since it is impossible for the location of the house object to be located on the road of the section, lane, and road, but on both sides of the road, the target area An area obtained by centering the road on a geographic coordinate plane and extending outward a predetermined distance toward both sides of the road. See picture 4, then take "Zhongzheng Road section" as an example to illustrate. In the implementation, the memory unit 11 can pre-store a map database. When the fuzzy address is a "Zhongzheng Road section", the processing unit 13 first queries the location information of the "Zhongzheng Road section" according to the map database, and then Calculating, according to the geographical location information, an axis 4 separating the first side and the second side of the "Zhongzheng Road section" on the geographic coordinate plane, and then the axis 4 respectively toward the first side and the second side The target area 3 is obtained by extending the predetermined distance.

When the fuzzy address is a residential community name, the target area is the geographic extent covered by the residential community on the geographic coordinate plane. For example, as shown in FIG. 2, if the fuzzy address is "belief community", the target area is an area surrounded by a polygon to which the corresponding "meaningful community" of the memory unit 11 belongs.

After generating the target area, the processing unit 13 determines which of the service geographic ranges the target area overlaps. When the processing unit 13 determines that the target area overlaps with each of the plurality of service geographic ranges, the processing unit 13 transmits a notification message related to the service request of the fuzzy address by the communication unit 12. Each of the branch-end devices in the set of store-side devices corresponding to the service geographic range, respectively. Then, when the processing unit 13 receives a reply message for replying to the notification message from one of the branch-side devices by the communication unit 12, the processing unit 13 modifies the access right of the client profile. The data is such that the access rights data further indicates that the access rights of the customer data are assigned to the branch-side device transmitting the reply message. The processing unit 13 is provided by a new branch device that transmits the reply message. Corresponding to the second account of the second service and a read permission corresponding to the second account to the access permission data, to indicate that the store device transmitting the reply message can read the customer profile. The processing unit 13 also transmits a confirmation message to the branch-side devices by the communication unit 12. The confirmation message indicates that the service demand related to the fuzzy address has been allocated to the service branch corresponding to the branch device transmitting the reply message.

The following is an example of "Zhong Zheng Road", "Zhongxing Street" and "Xinyi Community". As shown in FIG. 5, since the target area 3 generated according to the "Zhongzheng Road section" overlaps with the service geographical range of the service branch A, the service branch B, the service branch C, and the service branch D, the processing unit 13 After receiving the purchase demand related to the fuzzy address of the "Zhongzheng Road Section", a notification message relating to the service demand of "Zhongzheng Road Section" is transmitted to each branch end corresponding to each of the service branches A~D. Each of the branch devices A1 to An, B1 to Bn, C1 to Cn, and D1 to Dn in the device set A0 to D0. When the processing unit 13 receives one of the above-mentioned branch-side devices A1~An, B1~Bn, C1~Cn, D1~Dn in the above-mentioned branch-side device sets A0-D0, it is sent for replying When the reply message of the notification message is sent, the processing unit 13 modifies the access authority data of the customer profile, so that the access permission profile further indicates that the access authority of the client profile is assigned to the store-side device that transmits the reply message, and The processing unit 13 also transmits a confirmation message to each of the branch-end devices A1 to An, B1 to Bn, C1 to Cn, and D1 of each of the branch-end device sets A0 to D0 corresponding to the respective service branches A to D. Dn. For example, the processing unit 13 first receiving a branch-side device in the branch-side device set A0 of the service branch A, such as a reply message transmitted by the branch-side device A1, after which the processing unit 13 modifies the access rights data of the customer data to The access authority data further indicates that the access authority of the customer profile is assigned to the store-side device A1 of the service branch A that transmits the reply message, and the processing unit 13 transmits the confirmation message to the branch of the service branch A~D. Each of the branch devices A1~An, B1~Bn, C1~Cn, D1~Dn in the end device set A0~D0, so that the second service of the service branch A~D can know that the service demand has been The second service corresponding to the branch-side device A1 of the service branch A can be further contacted with the customer to provide a house located within the service geographic range corresponding to the service branch A and adjacent to the "Zhongzheng Road section". The sale and purchase of objects. Thereafter, if the processing unit 13 further receives the reply message sent by the branch-side devices B1 to Bn, C1 to Cn, and D1 to Dn of any of the service branches B to D, the processing unit 13 does not further process.

In addition, the target area 5 corresponding to "Zhongxing Street" overlaps only with the service geographic range corresponding to the service branch D. Therefore, when the processing unit 13 receives the purchase demand related to the fuzzy address whose content is "Zhongxing Street", The processing unit 13 transmits only the notification message related to the service demand of "Zhongxing Street" to each of the branch-side devices D1 to Dn in the branch-side device set D0 of the service branch D, when the processing unit 13 receives the service first. When a branch-side device in the branch-side device set D0 of the branch D, such as the reply message transmitted by the branch-side device D1, the processing unit 13 modifies the customer data The access authority data is such that the access authority data further indicates that the access authority of the customer profile is assigned to the store-side device D1 of the service branch D transmitting the reply message, and the processing unit 13 transmits the confirmation message to the Each of the branch-side devices D1 to Dn in the branch-side device set D0 of the service branch D is located. Similarly, the target area 6 corresponding to the "Xinyi Community" only overlaps with the service geographic range corresponding to the service branch E, so when the processing unit 13 receives the purchase demand related to the fuzzy address whose content is "Xinyi Community" The processing unit 13 transmits only the notification message related to the service request of the "Xinyi Community" to each of the branch-side devices E1-En in the branch-side device set E0 of the service branch E, when the processing unit 13 receives the notification first. A branch-side device in the branch-side device set E0 of the service branch E, such as the reply message transmitted by the branch-side device E1, the processing unit 13 modifies the access rights data of the client data, so that the access rights data It is also indicated that the access authority of the customer profile is assigned to the branch-side device E1 of the service branch E transmitting the reply message, and the processing unit 13 transmits the confirmation message to each of the branch-end device sets E0 of the service branch E. Branch-side device E1~En.

In addition, it is worth mentioning that the memory unit 11 can also pre-store a house object database, such that when the processing unit 13 determines that the address from the service device 2 is a complete address instead of a fuzzy address, the processing unit 13 querying, according to the house object database, the mobile device contact information of the second service for developing the house object having the complete address, and directly transmitting the service demand related to the complete address to the first The branch-side device of the second service, so that the second service is responsible for providing the service related to the user.

The second embodiment of the new data authority setting device 1 is substantially the same as the first embodiment, and the same is not in the rumor, the difference is that the memory unit 11 still has each service branch A~F. A duty information, the duty information includes the store-side devices A1~An, B1~Bn, C1~Cn, D1~Dn, E1~En, F1~ related to the second services in each service store A~F Fn's contact information, and the multiple duty periods corresponding to the second business. In addition, the processing unit 13 does not transmit a notification message related to the service request of the fuzzy address to each of the branch-end devices in the set of branch-side devices corresponding to the service branch corresponding to the service geographic range. The processing unit 13 selects a target store-side device that wants to transmit the notification message according to the duty information of each service store A~F, and transmits the notification message to the target store-side device, wherein the processing unit 13 transmits the A notification time of the notification message is within the duty period of the second service corresponding to the target store device. Then, when the processing unit 13 receives the reply message for replying to the notification message from one of the target store devices by the communication unit 12, the processing unit 13 modifies the access rights data to The access authority data is further indicated to indicate that the access authority of the customer profile is assigned to the target store-side device that transmits the reply message. The processing unit 13 further transmits a confirmation message to the target branch device by the communication unit 12, wherein the confirmation message indicates that the service requirement related to the fuzzy address has been allocated to the transmission. The service branch corresponding to the target store device of the message. When the processing unit 13 determines that the target area only overlaps with a service geographic range, the processing unit 13 transmits only the notification message and does not transmit the confirmation message.

The following is an example of "Zhongzheng Road" and "Zhongxing Street" as shown in Figure 5, because the target area 3 and service branch A, service branch B, service branch C, and service are generated according to "Zhongzheng Road Section". The service geographic range of the branch D overlaps, so the processing unit 13 will notify the service demand related to the "Zhongzheng Road section" after receiving the purchase demand related to the fuzzy address whose content is "Zhongzheng Road". The message is transmitted to each of the branch-side devices corresponding to the service branches A to D, that is, the target store-side devices held by the second service of each of the service branches A to D, for example, the branch-side devices A1 and B1. C1, D1. When the processing unit 13 receives the reply message for replying to the notification message sent by the second service of the one of the service stores A~D, the processing unit 13 modifies the access of the customer profile. Privilege data, such that the access rights data further indicates that the access rights of the customer data are assigned to the target store-side device transmitting the reply message, and the processing unit 13 further transmits a confirmation message to the second service of each of the above-mentioned branches The target store-side device. For example, the processing unit 13 first receives the reply message transmitted by the second service of the service branch A, and then the processing unit 13 modifies the access authority data of the customer data, so that the access authority data further indicates The access rights of the customer information are given to the target branch device of the service branch A transmitting the reply message, That is, the branch-side device A1, and the processing unit 13 transmits the confirmation message to the target branch-side device held by the second service of the service branch A~D, that is, the branch-side devices A1, B1, C1, D1, In this way, the second service of the service branch A~D can know that the service demand has been allocated to the service branch A, and then the second service corresponding to the target branch device of the service branch A can further contact the fuzzy address. The customer provides a trading service for the house items located within the geographic scope of the service corresponding to the service branch A and adjacent to the "Zhongzheng Road Section". Thereafter, if the processing unit 13 further receives the reply message sent by the target branch device of any of the service branches B to D, the processing unit 13 does not further process.

In addition, the target area 5 corresponding to "Zhongxing Street" overlaps only with the service geographic range corresponding to the service branch D. Therefore, when the processing unit 13 receives the purchase demand related to the fuzzy address whose content is "Zhongxing Street", The processing unit 13 transmits only the notification message related to the service demand of "Zhongxing Street" to the target branch-side device of the second service of the service branch D, that is, the branch-side device D1, and modifies the deposit of the customer data. The permission information is obtained such that the access authority data further indicates that the access authority of the customer data is given to the target branch device of the service branch D transmitting the reply message, and the confirmation message is not required to be transmitted.

In summary, the new data authority setting device 1 transmits, by the processing unit 13, the notification message related to the service requirement of the fuzzy address to the branch device set corresponding to the service branch corresponding to the service geographic range. When the processing unit When the communication unit 12 receives the reply message from one of the collections of the branch-side devices, the processing unit 13 modifies the access authority data of the customer profile to assign the access authority of the client profile. The collection of the branch-side devices that transmit the reply message can indeed achieve the purpose of the present invention.

However, the above is only the embodiment of the present invention, and when it is not possible to limit the scope of the present invention, all the simple equivalent changes and modifications according to the scope of the patent application and the contents of the patent specification are still This new patent covers the scope.

1‧‧‧ data authority setting device

11‧‧‧ memory unit

12‧‧‧Communication unit

13‧‧‧Processing unit

2‧‧‧Business equipment

Claims (10)

A data authority setting device is connected to a service device corresponding to a first service and a plurality of branch device devices respectively corresponding to a plurality of service branches via a communication network, the data rights setting device comprising: a communication unit connected to the communication network a memory unit having customer information related to a customer, access authority information corresponding to the customer data, and information about a service geographic range corresponding to each service branch, wherein the access authority data indicates Corresponding access rights of the customer data are assigned to the first service, to allow the first service to access the customer data through the service device, and each service geographic range is a polygon on a geographic coordinate plane, and the Each side of the polygon corresponds to a road and the road corresponds to at least one side of the polygon such that the polygon is a geographical range defined according to the road profile; and a processing unit receives, by the communication unit, a one from the service device The purchase demand related to the fuzzy address of the customer, and generated according to the fuzzy address of the purchase demand a target area corresponding to the fuzzy address on the geographic coordinate plane, wherein when the processing unit determines that the target area overlaps with any of the service geographic ranges, the processing unit uses the communication unit to associate a fuzzy address with the The notification message of the service request is transmitted to the set of branch-side devices corresponding to the service branch corresponding to the geographical scope of the service, and the processing unit receives a reply for replying from one of the collections of the branch-side devices by the communication unit. When the reply message of the notification message is sent, the processing unit modifies the access permission data of the customer data, so that the access authority is It is also indicated that the access rights of the customer profile are assigned to the set of store-side devices that transmit the reply message. The data right setting device according to claim 1, each of the branch-side device sets includes a plurality of plurality of branch-end devices respectively corresponding to the plurality of second services, and the processing unit transmits the notification message to the plurality of store-side device sets. Each of the store-side devices, and when the processing unit receives the reply message for replying to the notification message from one of the branch-side devices by the communication unit, the processing unit modifies the access right The data is such that the access rights data further indicates that the access rights of the customer data are assigned to the branch-side device transmitting the reply message. The data authority setting device of claim 2, wherein the access authority data indicates that the service device can read and write the customer data, and the branch device that transmits the reply message can read the customer data. . The data authority setting device of claim 3, wherein the access authority data includes a first account number of the first service and a read permission and a write permission corresponding to the first account, the processing unit is Adding a second account of the second service corresponding to the branch-side device transmitting the reply message and a read permission corresponding to the second account to the access permission data, so that the access permission data is further indicated The access rights to the customer profile are assigned to the store-side device that transmitted the reply message. The data authority setting device of claim 1, each of the store-side device sets includes a plurality of store-side devices respectively corresponding to the plurality of second services, wherein the memory unit further stores a duty information of each service store, The duty information includes the store side of the second business in each service store. The contact information of the device and the plurality of duty periods corresponding to the second service, the processing unit selects a target branch device to transmit the notification message according to the duty information of each service branch and transmits the notification message to a target store-side device, wherein the notification unit transmits the notification message within a duty period of the second service corresponding to the target store-side device, when the processing unit is from the target by the communication unit When one of the branch-side devices receives the reply message for replying to the notification message, the processing unit modifies the access rights data, so that the access rights data further indicates that the access rights of the client data are assigned to the transfer. The destination of the reply message is the store-side device. The data authority setting device of claim 5, wherein the access authority data indicates that the service device can read and write the customer profile, and the target store device transmitting the reply message can read the client data. The data authority setting device of claim 6, wherein the access authority data includes a first account number of the first service and a read permission and a write permission corresponding to the first account, the processing unit is Adding a second account of the second service corresponding to the target store device transmitting the reply message and a read permission corresponding to the second account to the access permission data, so that the access permission data is further indicated The access rights to the customer profile are assigned to the target store-side device that transmits the reply message. The data authority setting device according to claim 1, wherein the fuzzy address is one of a road name and a segment, a lane, a value, and a residential community name. The data authority setting device according to claim 8, wherein when the fuzzy address is the road name and the segment, lane, and value of the road, the target area is two on the geographic coordinate plane centered on the road and facing the road The side is extended outward by a predetermined distance. The data authority setting device of claim 8, wherein when the fuzzy address is the residential community name, the target area is a geographical range covered by the residential community on a geographic coordinate plane, and the geographic range is also a polygon Coexist in the memory unit.