A permission control method and system for multi-terminal sharing

Abstract

The invention discloses a multi-terminal shared authority control method and system thereof, including four parts: a client, a unified access module, an authentication control module, and a business module. The control method includes initialization function points, and abstracts all control authority Become a function point, which represents a specific function or service; configure interface elements for corresponding function points, define the interface elements corresponding to specific function points, interface elements and display are related to the expression of specific interfaces, and are associated with specific display terminals , the display terminal is a carrier for displaying the interface; authorization, granting function points to users and roles, so that users and function points are associated; authority control, calling the authentication control module to determine whether the user has access rights. The present invention only assigns functional rights to roles by configuring the relationship between rights and interface elements, so that multiple terminals can share the same rights once authorized, without separate authorization for each terminal, and the operation mode is simple.

Description

technical field [0001] The invention relates to the technical field of software authority control, in particular to a multi-terminal sharing authority control method and system thereof. Background technique [0002] 1. With the popularization of the mobile Internet, more and more different types of clients (WeChat, mobile apps, PC browsers) appear, which makes the performance of the interface more and more diverse. The traditional authorization for each client, work Not only cumbersome, but error-prone. [0003] 2. Although the current traditional mis system has an RBAC-based authority control module, a role-based and resource-based control method. However, they are often not managed in a centralized manner, and permission data standards are different and difficult to share, and usually implemented by adding filters to the business system, which makes the permission design unable to cross languages, and has a certain degree of intrusiveness to the business. [0004] 3. The...

AI Technical Summary

Problems solved by technology

However, they are often not managed in a centralized manner, and permission data standards are different, so it is difficult to share, and it is usually implemented by adding filters in the business system, which makes the permission design unable to cross languages, and has certain intrusiveness to the business

[0004] 3. The traditional authorization method is often intercepted at the application layer. If there is a problem with program control

It is easy to have security risks, and it is not easy to understand the configuration rules of permissions globally

Images