CN110516450B

CN110516450B - Data acquisition authority management and control method, electronic device and computer readable storage medium

Info

Publication number: CN110516450B
Application number: CN201910665262.2A
Authority: CN
Inventors: 王保军; 丁道建
Original assignee: Ping An Technology Shenzhen Co Ltd
Current assignee: Ping An Technology Shenzhen Co Ltd
Priority date: 2019-07-23
Filing date: 2019-07-23
Publication date: 2023-06-20
Anticipated expiration: 2039-07-23
Also published as: CN110516450A

Abstract

The invention relates to an information security technology, and discloses a data acquisition authority management and control method, which comprises the following steps: setting authority of acquiring order data, corresponding to the user role types and various role types; receiving a request of a user for acquiring order data; inquiring the role type of each user according to the information of each user recorded in a database in advance; judging the authority corresponding to the role type of the user according to the corresponding relation between the set role type of the user and the authority; and acquiring corresponding order data according to the authority for the user to check. The invention also provides an electronic device and a computer readable storage medium. The invention can judge which orders can be acquired by the user according to the corresponding relation between the role type of the user and the authority for acquiring the order data, ensures that the business flow is clearly controlled, and only the business personnel of each role can process respective business and can not cross the boundary so as not to cause business disorder.

Description

Data acquisition authority management and control method, electronic device and computer readable storage medium

Technical Field

The present invention relates to the field of information security technologies, and in particular, to a method for controlling data acquisition rights, an electronic device, and a computer readable storage medium.

Background

For industries such as insurance, a large number of orders may be generated for each customer's different business. When a salesman takes an order, the corresponding order is generally obtained by reading an identity card. If the authority mutual exclusion limit is not available among all the operators, then one operator can acquire all orders in all the stages, for example, the signing customer service can acquire orders in the rechecking stage, which is not beneficial to data security and is easy to cause business disorder.

Disclosure of Invention

In view of the above, the present invention provides a data acquisition authority management and control method, an electronic device and a computer readable storage medium, so as to solve at least one of the above-mentioned problems.

Firstly, in order to achieve the above objective, the present invention provides a data acquisition right management and control method, which includes the steps of:

setting authority of acquiring order data, corresponding to the user role types and various role types;

receiving a request of a user for acquiring order data;

inquiring the role type of each user according to the information of each user recorded in a database in advance;

judging the authority corresponding to the role type of the user according to the corresponding relation between the set role type of the user and the authority; and

And acquiring corresponding order data according to the authority for the user to check.

Optionally, the method further comprises the steps of:

judging whether the authority corresponding to the user comprises order data of a mortgage checking stage or a rechecking stage;

when the authority comprises checking order data of a mortgage stage or a review stage, acquiring office staff information of preset nodes in each order of the mortgage stage or the review stage;

comparing the acquired office information with the user information to determine whether the acquired office information is the same as the user information;

when the office information is the same as the user information, skipping over the order data, and not displaying the order data to the user for viewing;

and when the office information is different from the user information, acquiring the order data as a query result and providing the query result for the user to view.

Optionally, the user role type comprises a customer service specialist, a mortgage specialist and a review specialist, wherein the authority corresponding to the customer service specialist is order data which can be obtained in the steps of identity verification, order and contract main body confirmation, contract registration, reservation office work and contracted material uploading; the permission corresponding to the mortgage personnel is order data which can be obtained in the uploading stage of the RO receipt and the uploading stage of the RO his certificate; the authority corresponding to the review specialist is order data which can be obtained in the material review and RO his certificate review stage.

Optionally, the request for acquiring the order data includes identification card information corresponding to the order data to be acquired and a job number of the user, and in the step of querying the role type to which the user belongs, the role type corresponding to the user is obtained by querying the database through the job number of the user.

Optionally, the preset node comprises contract printing, material review and RO his certificate review.

In addition, in order to achieve the above object, the present invention further provides an electronic device, including a memory and a processor, where the memory stores a data acquisition right management system that can be executed on the processor, and the data acquisition right management system when executed by the processor implements the following steps:

receiving a request of a user for acquiring order data;

Optionally, the data acquisition right management and control system further implements the steps when executed by the processor:

Further, to achieve the above object, the present invention also provides a computer readable storage medium storing a data acquisition right management system, where the data acquisition right management system is executable by at least one processor, so that the at least one processor performs the steps of the data acquisition right management method as described above.

Compared with the prior art, the data acquisition permission management and control method, the electronic device and the computer readable storage medium provided by the invention can judge which orders can be acquired by a user according to the corresponding relation between the role type of the user and the permission for acquiring the order data, only the order data of the corresponding permission is displayed for the user to check, the clear management and control of the business flow is ensured, and the business staff of each role only processes respective business and cannot cross the boundary.

Drawings

FIG. 1 is a schematic diagram of an alternative hardware architecture of an electronic device according to the present invention;

FIG. 2 is a schematic diagram of a program module of a first embodiment of the data acquisition rights management system of the present invention;

FIG. 3 is a flowchart of a first embodiment of a method for managing and controlling data acquisition rights according to the present invention;

FIG. 4 is a flowchart of a second embodiment of the data acquisition rights management method of the present invention;

the achievement of the objects, functional features and advantages of the present invention will be further described with reference to the accompanying drawings, in conjunction with the embodiments.

Detailed Description

The present invention will be described in further detail with reference to the drawings and examples, in order to make the objects, technical solutions and advantages of the present invention more apparent. It should be understood that the specific embodiments described herein are for purposes of illustration only and are not intended to limit the scope of the invention. All other embodiments, which can be made by those skilled in the art based on the embodiments of the invention without making any inventive effort, are intended to be within the scope of the invention.

It should be noted that the description of "first", "second", etc. in this disclosure is for descriptive purposes only and is not to be construed as indicating or implying a relative importance or implying an indication of the number of technical features being indicated. Thus, a feature defining "a first" or "a second" may explicitly or implicitly include at least one such feature. In addition, the technical solutions of the embodiments may be combined with each other, but it is necessary to base that the technical solutions can be realized by those skilled in the art, and when the technical solutions are contradictory or cannot be realized, the combination of the technical solutions should be considered to be absent and not within the scope of protection claimed in the present invention.

Referring to fig. 1, a schematic diagram of an alternative hardware architecture of an electronic device 2 according to the present invention is shown.

In this embodiment, the electronic device 2 may include, but is not limited to, a memory 11, a processor 12, and a network interface 13 that may be communicatively connected to each other through a system bus. It should be noted that fig. 1 only shows an electronic device 2 having components 11-13, but it should be understood that not all of the illustrated components are required to be implemented, and that more or fewer components may alternatively be implemented.

The electronic device 2 may be a server, a PC (Personal Computer ), or a terminal device such as a smart phone, a tablet computer, a palm computer, a portable computer, or the like. The server may be a rack server, a blade server, a tower server, or a cabinet server, and may be an independent server or a server cluster formed by a plurality of servers.

The memory 11 includes at least one type of readable storage medium including flash memory, hard disk, multimedia card, card memory (e.g., SD or DX memory, etc.), random Access Memory (RAM), static Random Access Memory (SRAM), read Only Memory (ROM), electrically Erasable Programmable Read Only Memory (EEPROM), programmable Read Only Memory (PROM), magnetic memory, magnetic disk, optical disk, etc. In some embodiments, the storage 11 may be an internal storage unit of the electronic device 2, such as a hard disk or a memory of the electronic device 2. In other embodiments, the memory 11 may also be an external storage device of the electronic apparatus 2, for example, a plug-in hard disk, a Smart Media Card (SMC), a Secure Digital (SD) Card, a Flash memory Card (Flash Card) or the like, which are provided on the electronic apparatus 2. Of course, the memory 11 may also comprise both an internal memory unit and an external memory device of the electronic apparatus 2. In this embodiment, the memory 11 is generally used for storing an operating system and various application software installed in the electronic device 2, such as program codes of the data acquisition authority management system 200. Further, the memory 11 may be used to temporarily store various types of data that have been output or are to be output.

The processor 12 may be a central processing unit (Central Processing Unit, CPU), controller, microcontroller, microprocessor, or other data processing chip in some embodiments. The processor 12 is typically used to control the overall operation of the electronic device 2. In this embodiment, the processor 12 is configured to execute the program code stored in the memory 11 or process data, for example, execute the data acquisition authority management system 200.

The network interface 13 may comprise a wireless network interface or a wired network interface, which network interface 13 is typically used for establishing a communication connection between the electronic apparatus 2 and other electronic devices.

So far, the hardware structure and function of the related device of the present invention have been described in detail. In the following, various embodiments of the present invention will be presented based on the above description.

First, the present invention proposes a data acquisition authority management and control system 200.

Referring to FIG. 2, a block diagram of a first embodiment of a data acquisition rights management system 200 according to the present invention is shown.

In this embodiment, the data acquisition right management system 200 includes a series of computer program instructions stored on the memory 11, which when executed by the processor 12, implement the data acquisition right management operations of the embodiments of the present invention. In some embodiments, the data acquisition rights management system 200 may be divided into one or more modules based on the particular operations implemented by portions of the computer program instructions. For example, in fig. 2, the data acquisition right management system 200 may be divided into a setting module 201, a receiving module 202, a querying module 203, a judging module 204, and an acquiring module 205. Wherein:

the setting module 201 is configured to set a user role type and a corresponding authority.

In this embodiment, the user is mainly referred to as a salesman. For example, the business person role types for the insurance industry include customer service specialists, mortgage specialists, review specialists, and the like. The customer service specialist can acquire order data in the steps of identity verification, order and contract main body confirmation, contract registration, reservation office, and signed material uploading. The mortgage personnel can acquire order data at the stage of uploading the RO receipt and uploading the RO his certificate. The review specialist can acquire order data in the material review and RO his certificate review stage. In addition, for each salesman, it may also be involved whether the store to which the order belongs is in the store authority owned by the salesman.

The receiving module 202 is configured to receive a request from a user to obtain order data.

Specifically, the request includes customer identification card information (identification card number) corresponding to the order data to be acquired, and the customer identification card information is used for acquiring the corresponding order data by reading the identification card information. In addition, the request may include, in addition to the identification number, the name, job number (e.g., safe UM account number) of the salesman and other query conditions related to the order, such as region, stage, etc.

The query module 203 is configured to query the role type to which the user belongs.

Specifically, the name, the job number, the corresponding role type and other information of each salesman are recorded in a database in advance, and after a request for acquiring order data sent by a certain salesman is received, the database is inquired through the salesman job number, so that the role type corresponding to the salesman is obtained.

The judging module 204 is configured to judge the authority corresponding to the role type of the user.

Specifically, according to the corresponding relation between the set role type of the salesman and the authority for acquiring the order data and the role type of the salesman, the authority corresponding to the salesman can be judged.

The obtaining module 205 is configured to obtain corresponding order data according to the authority, so as to allow the user to view the order data.

Specifically, after judging the authority corresponding to the salesman, the salesman can know which stages of order data can be checked, all the order data of the stages are obtained, or part of the order data of the stages are obtained according to the query condition in the request and then displayed for the salesman to check.

Notably, the present solution does not provide a corresponding order for two cases:

(1) For the order of the mortgage stage (namely, when the authority of the salesman can check the order data of the mortgage stage), the salesman is also required to be checked to be the same as the office staff of three nodes of contract printing, material rechecking and RO (reverse osmosis) his certificate rechecking. If the salesman is the same as the office of a certain node, the salesman does not meet the authority of checking the order data, the order data is hidden from the salesman, and the order data is not displayed for the salesman to check.

(2) For the order of the review stage (i.e. when the authority of the salesman can check the order data of the review stage), it is also necessary to determine whether the salesman is the final handler of the contract printing, material review, RO his certification review or C, T task (sub-task of RO his certification review). If the salesman is the same as the final processor of a certain node, the salesman does not meet the authority of checking the order data, the order data is hidden from the salesman, and the order data is not displayed for the salesman to check.

Further, for the two cases, the determining module 204 is further configured to determine whether the authority corresponding to the salesman includes checking order data in the mortgage stage or the review stage.

The obtaining module 205 is further configured to obtain, when the authority includes the order data, information of a staff (or a final handler) of the corresponding node in each order of the mortgage stage or the review stage. Wherein the office (or final handler) information may be queried from the workflow instance table for the order.

The determining module 204 is further configured to compare the obtained information of the office staff (or final processor) with the user information that initiates the request to determine whether the obtained information of the office staff (or final processor) is the same.

The obtaining module 205 is further configured to skip the order data when the obtained information of the office staff (or the final processor) is the same as the user information; when the order data is not the same, the order data is acquired and provided for the user to view as a query result.

The data acquisition authority management and control system provided by the embodiment can set which stage of order data can be acquired according to the roles of the operators, so that the service flow is ensured to be clearly managed and controlled, and the operators of each role only process respective services and cannot cross the boundary. In addition, for the orders in the mortgage stage and the review stage, it is also necessary to verify whether the salesman is the relevant office or the final processor, if so, the data of the order cannot be obtained, so as to more strictly manage and control the orders in the two stages, so that the business disorder is avoided.

In addition, the invention also provides a data acquisition authority management and control method.

Referring to fig. 3, a flowchart of a first embodiment of a data acquisition right management and control method according to the present invention is shown. In this embodiment, the execution sequence of the steps in the flowchart shown in fig. 3 may be changed, and some steps may be omitted according to different requirements. The method comprises the following steps:

step S300, setting the user role type and the corresponding authority.

Step S302, a request of a user for acquiring order data is received.

Specifically, the request includes customer identification card information (identification card number) corresponding to the order data to be acquired, and the customer identification card information is used for acquiring the corresponding order data by reading the identification card information. In addition, the request may include, in addition to the identification number, the name, job number (e.g., safe UM account number) of the salesman, and other query conditions related to the order data, such as region, stage, etc.

Step S304, inquiring the role type of the user.

Step S306, judging the authority corresponding to the role type of the user.

Step S308, corresponding order data is acquired according to the authority for the user to check.

The data acquisition authority management and control method provided by the embodiment can set which stage of order data can be acquired according to the roles of the operators, so that the service flow is ensured to be clearly managed and controlled, and the operators of each role only process respective services and cannot cross the boundary, so that service disorder is avoided.

Fig. 4 is a schematic flow chart of a second embodiment of the data acquisition right management method of the present invention. In this embodiment, steps S400 to S408 of the data acquisition right management method are similar to steps S300 to S308 of the first embodiment, except that the method further includes steps S410 to S418.

The method comprises the following steps:

step S400, setting the user role type and the corresponding authority.

Step S402, a request of a user to acquire order data is received.

Step S404, inquiring the role type of the user.

Step S406, judging the authority corresponding to the role type of the user.

Step S408, corresponding order data is acquired according to the authority.

Specifically, after judging the authority corresponding to the salesman, the salesman can know which stages of order data can be checked, all the order data of the stages are obtained, or part of the order data of the stages are obtained according to the query condition in the request.

Step S410, judging whether the authority corresponding to the user comprises checking order data in a mortgage stage or a review stage.

Specifically, the present solution does not provide a corresponding order for the following two cases:

Therefore, after the order data corresponding to the authority of the salesman is obtained, it is further required to determine whether the authority includes the order data of the two stages.

In step S412, when the authority includes checking the order data of the mortgage stage or the review stage, the office information (or final processor) of the corresponding node in each order of the mortgage stage or the review stage is obtained.

Wherein the office (or final handler) information may be queried from the workflow instance table for the order.

Step S414, compares the obtained office information (or final handler) with the user information that originated the request to determine whether the user information is the same. When the acquired office information (or final processor) is identical to the user information, step S506 is performed. When the acquired office information (or final processor) is not identical to the user information, step S508 is performed.

Step S416, skipping the order data with the same office information as the user information, and not displaying the order data to the user for viewing.

In step S418, the order data is obtained and provided to the user for viewing as a query result.

In addition, the obtained order data which does not belong to the mortgage stage or the review stage is directly and normally displayed for the user to view.

The data acquisition authority management and control method provided by the embodiment can set which stage of order data can be acquired according to the roles of the operators, so that the service flow is ensured to be clearly managed and controlled, and the operators of each role only process respective services and cannot cross the boundary. In addition, for the order data of the mortgage stage and the review stage, it is also necessary to verify whether the salesman is a relevant office staff or a final processor, if so, the order data cannot be obtained, so as to more strictly manage and control the orders of the two stages, so that the business disorder is avoided.

The present invention also provides another embodiment, namely, a computer readable storage medium storing a data acquisition right management program, where the data acquisition right management program is executable by at least one processor, so that the at least one processor performs the steps of the data acquisition right management method as described above.

In the above embodiments, it may be implemented in whole or in part by software, hardware, firmware, or any combination thereof. When implemented in software, may be implemented in whole or in part in the form of a computer program product.

The computer program product includes one or more computer instructions. When loaded and executed on a computer, produces a flow or function in accordance with embodiments of the present invention, in whole or in part. The computer may be a general purpose computer, a special purpose computer, a computer network, or other programmable apparatus. The computer instructions may be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another computer-readable storage medium, for example, the computer instructions may be transmitted from one website, computer, server, or data center to another website, computer, server, or data center by a wired (e.g., coaxial cable, fiber optic, digital Subscriber Line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.). The computer readable storage medium may be any available medium that can be stored by a computer or a data storage device such as a server, data center, etc. that contains an integration of one or more available media. The usable medium may be a magnetic medium (e.g., floppy Disk, hard Disk, tape), an optical medium (e.g., DVD), or a semiconductor medium (e.g., solid State Disk (SSD)), etc

It will be clear to those skilled in the art that, for convenience and brevity of description, specific working procedures of the above-described systems, apparatuses and units may refer to corresponding procedures in the foregoing method embodiments, which are not repeated herein.

In the several embodiments provided in this application, it should be understood that the disclosed systems, apparatuses, and methods may be implemented in other ways. For example, the apparatus embodiments described above are merely illustrative, e.g., the division of the units is merely a logical function division, and there may be additional divisions when actually implemented, e.g., multiple units or components may be combined or integrated into another system, or some features may be omitted or not performed. Alternatively, the coupling or direct coupling or communication connection shown or discussed with each other may be an indirect coupling or communication connection via some interfaces, devices or units, which may be in electrical, mechanical or other form.

The units described as separate units may or may not be physically separate, and units shown as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

In addition, each functional unit in each embodiment of the present application may be integrated in one processing unit, or each unit may exist alone physically, or two or more units may be integrated in one unit. The integrated units may be implemented in hardware or in software functional units.

The integrated units, if implemented in the form of software functional units and sold or used as stand-alone products, may be stored in a computer readable storage medium. Based on such understanding, the technical solution of the present application may be embodied in essence or a part contributing to the prior art or all or part of the technical solution in the form of a software product stored in a storage medium, including several instructions to cause a computer device (which may be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the methods described in the embodiments of the present application. And the aforementioned storage medium includes: a U-disk, a removable hard disk, a Read-Only Memory (ROM), a random access Memory (RAM, random Access Memory), a magnetic disk, or an optical disk, or other various media capable of storing program codes.

It should be noted that, the foregoing reference numerals of the embodiments of the present invention are merely for describing the embodiments, and do not represent the advantages and disadvantages of the embodiments. And the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, apparatus, article, or method that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, apparatus, article, or method. Without further limitation, an element defined by the phrase "comprising one … …" does not exclude the presence of other like elements in a process, apparatus, article or method that comprises the element.

The foregoing description is only of the preferred embodiments of the present invention, and is not intended to limit the scope of the invention, but rather is intended to cover any equivalents of the structures or equivalent processes disclosed herein or in the alternative, which may be employed directly or indirectly in other related arts.

Claims

1. A method for managing and controlling data acquisition rights, the method comprising the steps of:

setting authority of a user role type corresponding to various role types in each stage of acquiring order data, wherein the user role type comprises a customer service specialist, a mortgage specialist and a review specialist;

receiving a request of a user for acquiring order data, wherein the request comprises a regional and stage query condition related to the order;

judging the authority corresponding to the role type of the user according to the corresponding relation between the set role type of the user and the authority, and judging whether the authority corresponding to the role of the user comprises order data of a mortgage checking stage or a rechecking stage; and

And acquiring order data of the corresponding stage of the query condition of the request according to the authority for the user to check.

2. The data acquisition right management method according to claim 1, characterized in that the method further comprises the steps of:

3. The method for controlling the data acquisition permission according to claim 1 or 2, wherein the permission corresponding to the customer service staff is order data capable of acquiring authentication, order and contract main body confirmation, contract registration, reservation office, and contracted material uploading; the permission corresponding to the mortgage personnel is order data which can be obtained in the uploading stage of the RO receipt and the uploading stage of the RO his certificate; the authority corresponding to the review specialist is order data which can be obtained in the material review and RO his certificate review stage.

4. The method for managing and controlling data acquisition authority according to claim 1 or 2, wherein the request for acquiring order data includes identification card information corresponding to the order data to be acquired and a job number of the user, and in the step of querying the character type to which the user belongs, the user's job number is queried from the database to obtain the character type corresponding to the user.

5. The method of claim 2, wherein the preset nodes include contract printing, material review, RO ticket review.

6. The electronic device is characterized by comprising a memory and a processor, wherein a data acquisition permission management and control system capable of running on the processor is stored in the memory, and the data acquisition permission management and control system realizes the following steps when being executed by the processor:

7. The electronic device of claim 6, wherein the data acquisition rights management system when executed by the processor further performs the steps of:

8. The electronic device of claim 6 or 7, wherein the authority corresponding to the customer service specialist is order data capable of acquiring authentication, order and contract subject confirmation, contract equity, reservation, subscription, and subscription material upload; the permission corresponding to the mortgage personnel is order data which can be obtained in the uploading stage of the RO receipt and the uploading stage of the RO his certificate; the authority corresponding to the review specialist is order data which can be obtained in the material review and RO his certificate review stage.

9. The electronic device of claim 7, wherein the preset nodes include contract printing, material review, RO his certificate review.

10. A computer-readable storage medium storing a data acquisition rights management system executable by at least one processor to cause the at least one processor to perform the steps of the data acquisition rights management method of any one of claims 1-5.