CN115310108A - Electronic document sharing control method and system based on data extraction - Google Patents

Abstract

The invention relates to an electronic document sharing control method and system based on data extraction, which are characterized in that a source document is independently processed to generate content data only retaining specific information of the document, and a feedback mode corresponding to an authentication tag judgment request is used, and the content data of a specified electronic document can be shared to a specified resource user in multiple display modes by controlling service scenes that the use permission of the content data of the electronic document and an original electronic document meets different requirements, so that the electronic document used for sharing is prevented from being abused maliciously by the resource user, the safe and convenient sharing and exchange utilization of electronic document resources are realized, and the supervision capability of a resource supervisor is enhanced.

Description

A method and system for electronic document sharing control based on data extraction

technical field

The invention relates to the technical field of electronic document data sharing security processing, in particular to a data extraction-based electronic document sharing control method and system.

Background technique

As a data resource, the rational and efficient sharing and rapid exchange of electronic documents has become an indispensable part of effectively supporting the operation of cross-department, cross-unit, and cross-system business operations. In most cases, specific electronic document resources usually belong to different departments or units and are stored in different application service nodes. When users need to call electronic document resources, they become users of each application service node, and then they can modify the resources according to business operations. Access and use electronic documents.

In actual operation, in order to ensure that electronic documents are shared and exchanged as data resources, the resource provider defines the sharing scope for the electronic document resources in this node through the application service system, and shares them with resource users. In this way of use, resource users can obtain the original electronic documents after obtaining the sharing authorization, which leads to the potential risk of electronic documents being misused. Under normal circumstances, resource users only need to use the content data of electronic documents. On the one hand, the original electronic documents contain all the characteristics of the original documents beyond the business needs of general resource users. On the other hand, the original electronic documents usually have the attribute of credentialing. The original electronic document itself can be used repeatedly as an official electronic document. Therefore, the conventional method of sharing original electronic documents greatly increases the risk of electronic document resources being abused by resource users, and at the same time brings difficulties to resource supervisors in the supervision of utilization behaviors such as sharing and exchange.

Some security mechanism solutions for data sharing have been proposed in the prior art, but mainly from the perspective of encrypted data, using symmetric encryption or asymmetric encryption algorithm to encrypt and share the shared data, corresponding to decryption use. This method is often implemented at the cost of losing the convenience of sharing and utilization in the process of data sharing. On the other hand, this method cannot specifically solve the needs of most application scenarios that only require content data and do not require original electronic documents.

Therefore, how to share and exchange electronic document resources between resource providers and resource users safely and conveniently, and facilitate resource supervisors to monitor utilization behavior is an urgent problem to be solved.

Contents of the invention

In order to solve the shortcomings of the existing technology, the present invention proposes a method and system for electronic document sharing control based on data extraction. By controlling the content data of electronic documents and the use rights of original electronic documents to meet different business scenarios, the designated electronic documents can be The content data of the document is shared with designated resource users in various ways, so as to prevent the shared electronic document from being maliciously abused by the resource user, realize safe and convenient sharing and exchange of electronic document resources, and strengthen the supervision of resource supervisors. regulatory capacity. Data users only need content data to meet the application scenarios of utilization requirements. At this time, data providers only need to share the content data of electronic documents; 2) Data users need original electronic documents to meet the application scenarios of utilization requirements. At this time Resource users need to apply for usage rights according to the original electronic document usage method, and resource users can only obtain original electronic documents after the resource provider conducts automatic or manual review of the usage requirements.

For realizing the above object, the technical scheme adopted in the present invention comprises:

A method for controlling electronic document sharing based on data extraction, characterized in that it includes:

S1. Obtain the source document to be processed, and make a processed copy of the corresponding source document;

S2. Using the processed copy to perform a data extraction operation to obtain content data corresponding to the source document;

S3. Establishing an authentication label corresponding to the source document and matching content data, the authentication label including document access control items, source document feedback control items, and document access record items;

S4. Match the authentication label according to the sharing request, judge whether the sharing request satisfies the document access control item, and when it is judged that the sharing request does not meet the document access control item, refuse to feed back the sharing request and record the sharing request information in the document access record item;

S5. When it is judged that the sharing request satisfies the document access control item, further judge whether the sharing request satisfies the source document feedback control item, and when it is judged that the sharing request does not satisfy the source document feedback control item, use the content data to feed back the sharing request, and send the sharing request The information is recorded in the document access record item;

S6. When it is determined that the sharing request satisfies the source document feedback control item, use the source document to feed back the sharing request, and record the sharing request information in the document access record item.

Further, the method also includes:

S7. The document access record item is retrieved, and the document access authority control item and the source document feedback control item are correspondingly adjusted.

Further, the step S2 includes:

S21. Perform data cleaning on the processing copy according to preset cleaning rules;

S22. Convert the processed copy into a standard copy according to the preset format;

S23. Extract content data in the standard copy, where the content data includes text data, semantic tree and attribute information;

S24. Use the semantic tree to correct the text data, and collect and store the corrected content data into the database.

Further, the source document and the processed copy are respectively stored in different databases independent of each other.

Further, the document access authority control item includes user identity authentication, document level and document access authorization mechanism.

Further, the source document feedback control items include document sharing mode, document sharing scope and document data ownership.

The present invention also relates to an electronic document sharing control system based on data extraction, which is characterized in that it includes:

A copy processing module, configured to make a processed copy of the corresponding source document and perform a data extraction operation to obtain content data of the corresponding source document;

A tag management module, configured to establish and modify authentication tags corresponding to source documents and matching content data;

A first judging module, configured to judge whether the sharing request satisfies the document access control item;

The second judging module is used to judge whether the sharing request satisfies the source document feedback control item;

The feedback execution module is used to feed back the sharing request, and record the sharing request information in the document access record item.

The present invention also relates to a computer-readable storage medium, which is characterized in that a computer program is stored on the storage medium, and the above-mentioned method is realized when the computer program is executed by a processor.

The present invention also relates to an electronic device, which is characterized in that it includes a processor and a memory;

The memory is used to store source documents, content data and authentication labels;

The processor is configured to execute the above method by invoking the source document, the content data and the authentication label.

The present invention also relates to a computer program product, including computer programs and/or instructions, characterized in that, when the computer programs and/or instructions are executed by a processor, the steps of the above method are implemented.

The beneficial effects of the present invention are:

By adopting the electronic document sharing control method and system based on data extraction described in the present invention, the content data of the specified electronic document can be displayed in various forms by controlling the content data of the electronic document and the original version of the electronic document to meet different business scenarios. Shared to designated resource users in a way, so as to prevent the electronic documents used for sharing from being maliciously abused by resource users, realize safe and convenient sharing and exchange of electronic document resources, and strengthen the supervision ability of resource supervisors, especially suitable for data use The application scenario where the user only needs the content data to meet the utilization requirements, and at the same time, the application scenario where the data user needs to use the original electronic document can also be satisfied by applying for additional usage permissions.

Description of drawings

FIG. 1 is a schematic flow chart of the electronic document sharing control method based on data extraction in the present invention.

FIG. 2 is a schematic structural diagram of the electronic document sharing control system based on data extraction in the present invention.

Detailed ways

In order to understand the content of the present invention more clearly, it will be described in detail with reference to the drawings and embodiments.

The first aspect of the present invention relates to a method for controlling electronic document sharing based on data extraction as shown in FIG. 1 , including:

S1. Obtain a source document to be processed, and make a processed copy of the corresponding source document.

Preferably, the source document and the processed copy are respectively stored in different databases independent of each other.

During execution, according to different data sources, the original electronic documents to be stored and their attribute information can be obtained through manual collection or interface push, and the relevant data to be stored is preferably reviewed for data review and successful storage. to the original library. For manual collection, the electronic documents stored on the local disk and the electronic documents after paper documents are electronically uploaded to the original library of the data layer by manual entry; when using the interface to push, the third party The electronic documents generated by the business system are pushed to the original library of the data layer in the form of interface services.

S2. Execute a data extraction operation using the processed copy to obtain content data corresponding to the source document. Specifically, it includes performing the following sub-steps: S21. Perform data cleaning on the processing copy according to the preset cleaning rules;

S22, convert the processed copy into a standard copy according to the preset format; S23, extract the content data in the standard copy, the content data includes text data, semantic tree and attribute information; S24, use the semantic tree to modify the text data, and modify The final content data is collected and stored in the database.

S3. Establish an authentication tag corresponding to the source document and the matching content data, where the authentication tag includes a document access authority control item, a source document feedback control item, and a document access record item. Among them, the document access authority control items include user identity authentication, document level and document access authorization mechanism; the source document feedback control items include document sharing method, document sharing scope and document data ownership.

According to the characteristics of electronic documents, such as data ownership, confidentiality requirements and other attributes, set the document sharing method, sharing scope, sharing authorization, etc. The sharing method defaults to sharing the content data instead of the original electronic document. At this time, when the data user consults the content data, he can copy the required part of the content, or copy the full text, or download it. The sharing method can also be conditional sharing, which further specifies the scope of the shared content data, and can further set the sharing authorization for the content data, such as segmenting or paging the content data according to the data template.

S4. Match the authentication label according to the sharing request, judge whether the sharing request satisfies the document access control item, and when it is judged that the sharing request does not meet the document access control item, refuse to feed back the sharing request and record the sharing request information in the document access record item.

Preferably, resource users need to submit an application for using the original document if they need to use the original electronic document when using the shared data. As the approver, the electronic document ownership department (that is, the resource provider) approves the application for the use of the original electronic document. After the approval, the original electronic document is exchanged to the resource user, who can browse or download the original electronic document. At the same time, these usage and application behavior data will be recorded by the data supervision system.

The specific matching judgment process can be realized by using any applicable existing technology, for example, a system based on digital certificates and public keys can be used to realize identity authentication between resource users and resource providers.

S5. When it is judged that the sharing request satisfies the document access control item, further judge whether the sharing request satisfies the source document feedback control item, and when it is judged that the sharing request does not satisfy the source document feedback control item, use the content data to feed back the sharing request, and send the sharing request The information is recorded in the document access record entry.

The data sharing and sharing method of electronic documents provides a hierarchical sharing authorization mechanism for electronic document data resources, that is, determines the document level, scope of use, etc. according to the content of the electronic document; when the resource provider enters the electronic document into the warehouse, it simultaneously provides the sharing of the electronic document Authorization-related content; the resource management and control service maintains the identity authentication information of resource users and resource providers, and the scope or level of authorization that can be shared.

S6. When it is determined that the sharing request satisfies the source document feedback control item, use the source document to feed back the sharing request, and record the sharing request information in the document access record item.

Specifically, when a resource user needs to apply for a sharing authorization to use an electronic document, the identity authentication information of the resource user is automatically sent to the service node where the resource provider is located; the service node where the resource provider is located receives the sharing authorization application, and calls the resource management and control service Shared authorization verification service, the verification content includes the authenticity of the identity of the resource provider, the application time period, the matching of the electronic document resource authorization scope and the resource provider, etc., and returns the verification result; if the verification is successful, the resource provider's service The node pushes the requested electronic document resource to the service node where the resource user is located, and automatically recycles the electronic document after the requested usage time period is exceeded; if the verification fails, the failure reason is returned and the sharing is terminated.

S7. The document access record item is retrieved, and the document access authority control item and the source document feedback control item are correspondingly adjusted.

In the process of sharing electronic documents by applying the above method, ordinary document users cannot obtain the original electronic documents, but only attach the content data to the given data template for sharing and browsing; if the document users need to browse or download the original electronic documents , need to meet strict identity authentication and other conditions, and the electronic document resource user can obtain the original electronic document only after the electronic document owner reviews the application information.

The original electronic document uses the automatic review mechanism of the application. Traditionally, the application needs to be manually reviewed and approved. This article combines digital certificates and encryption technology for automatic review. Specifically: node A where the owner of the electronic document is located, and node B where the user of the electronic document is located. The two nodes need to connect with each other through identity trust. Subsequent applications for a certain document will be automatically approved by the system according to the identity trust relationship. The trust relationship mechanism is the key mechanism to complete the automatic review of application requirements. It incorporates the applicant's identity trust into the document sharing trust group for dynamic unified management, and implements maintenance (addition, removal, suspension, blocking, etc.) according to management requirements.

Another aspect of the present invention also relates to an electronic document sharing control system based on data extraction, its structure is shown in Figure 2, including:

A copy processing module, configured to make a processed copy of the corresponding source document and perform a data extraction operation to obtain content data of the corresponding source document;

A tag management module, configured to establish and modify authentication tags corresponding to source documents and matching content data;

A first judging module, configured to judge whether the sharing request satisfies the document access control item;

The second judging module is used to judge whether the sharing request satisfies the source document feedback control item;

The feedback execution module is used to feed back the sharing request, and record the sharing request information in the document access record item.

By using the system, it is possible to execute the above-mentioned arithmetic processing method and achieve corresponding technical effects.

Embodiments of the present invention also provide a computer-readable storage medium capable of implementing all the steps in the methods in the above-mentioned embodiments, where a computer program is stored on the computer-readable storage medium, and when the computer program is executed by a processor, the above-mentioned All steps of the method in the embodiment.

An embodiment of the present invention also provides an electronic device for performing the above method. As an implementation device of the method, the electronic device is at least equipped with a processor and a memory, and in particular, the memory stores data required for executing the method. and related computer programs, such as source documents, content data and authentication labels, etc., and all the steps of the method are realized by the processor calling the data in the memory, and the program is executed, and corresponding technical effects are obtained.

Preferably, the electronic device may include a bus architecture, and the bus may include any number of interconnected buses and bridges, and the bus may link together various circuits including one or more processors and memories. The bus may also link together various other circuits such as peripherals, voltage regulators, and power management circuits, all of which are well known in the art and therefore will not be further described herein. The bus interface provides the interface between the bus and the receiver and transmitter. The receiver and transmitter can be the same element, a transceiver, providing means for communicating with various other systems over a transmission medium. The processor is responsible for managing the bus and general processing, while memory may be used to store data that the processor uses when performing operations.

Additionally, the electronic device may further include components such as a communication module, an input unit, an audio processor, a display, and a power supply. The processor (or called controller, operation control) adopted by it may include a microprocessor or other processor devices and/or logic devices, which receive input and control the operation of various components of the electronic equipment; the memory may be One or more of buffer memory, flash memory, hard drive, removable media, volatile memory, non-volatile memory or other suitable devices, which can store the above-mentioned relevant data information, and can also store execution-related information program, and the processor can execute the program stored in the memory to realize information storage or processing, etc.; the input unit is used to provide input to the processor, such as a button or a touch input device; the power supply is used to provide power to electronic equipment ; The display is used for displaying display objects such as images and text, for example, it may be an LCD display. A communication module is a transmitter/receiver that sends and receives signals via an antenna. A communication module (transmitter/receiver) is coupled to the processor to provide input signals and receive output signals, which may be the same as in conventional mobile communication terminals. Based on different communication technologies, multiple communication modules, such as a cellular network module, a bluetooth module and/or a wireless local area network module, may be provided in the same electronic device. The communication module (transmitter/receiver) is also coupled to a speaker and a microphone via an audio processor to provide audio output via the speaker and receive audio input from the microphone for usual telecommunication functions. Audio processors may include any suitable buffers, decoders, amplifiers, etc. In addition, the audio processor is also coupled to the central processing unit, so that the recording on the machine can be made through the microphone, and the sound stored on the machine can be played through the speaker.

Those skilled in the art should understand that the embodiments of the present invention may be provided as methods, systems, or computer program products. Accordingly, the present invention can take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present invention may take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) having computer-usable program code embodied therein.

The present invention is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It should be understood that each procedure and/or block in the flowchart and/or block diagram, and a combination of procedures and/or blocks in the flowchart and/or block diagram can be realized by computer program instructions. These computer program instructions may be provided to a general purpose computer, special purpose computer, embedded processor, or processor of other programmable data processing equipment to produce a machine such that the instructions executed by the processor of the computer or other programmable data processing equipment produce a A system for realizing the functions specified in one or more procedures of the flowchart and/or one or more blocks of the block diagram.

These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, such that the instructions stored in the computer-readable memory produce an article of manufacture comprising a system of instructions, the The system implements the functions specified in one or more procedures of the flowchart and/or one or more blocks of the block diagram.

These computer program instructions can also be loaded onto a computer or other programmable data processing device, causing a series of operational steps to be performed on the computer or other programmable device to produce a computer-implemented process, thereby The instructions provide steps for implementing the functions specified in the flow chart or blocks of the flowchart and/or the block or blocks of the block diagrams. While preferred embodiments of the present invention have been described, additional changes and modifications can be made to these embodiments by those skilled in the art once the basic inventive concept is appreciated. Therefore, it is intended that the appended claims be construed to cover the preferred embodiment as well as all changes and modifications which fall within the scope of the invention.

The above description is only a preferred embodiment of the present invention, but the scope of protection of the present invention is not limited thereto, any changes or substitutions that can be easily conceived by those skilled in the art within the technical scope disclosed in the present invention etc. should be covered within the protection scope of the present invention. Therefore, the protection scope of the present invention should be determined by the protection scope of the claims.

Claims (10)

1. An electronic document sharing control method based on data extraction, characterized in that, comprising: S1. Obtain the source document to be processed, and make a processed copy of the corresponding source document; S2. Using the processed copy to perform a data extraction operation to obtain content data corresponding to the source document; S3. Establishing an authentication label corresponding to the source document and matching content data, the authentication label including document access control items, source document feedback control items, and document access record items; S4. Match the authentication label according to the sharing request, judge whether the sharing request satisfies the document access control item, and when it is judged that the sharing request does not meet the document access control item, refuse to feed back the sharing request and record the sharing request information in the document access record item; S5. When it is judged that the sharing request satisfies the document access control item, further judge whether the sharing request satisfies the source document feedback control item, and when it is judged that the sharing request does not satisfy the source document feedback control item, use the content data to feed back the sharing request, and send the sharing request The information is recorded in the document access record item; S6. When it is determined that the sharing request satisfies the source document feedback control item, use the source document to feed back the sharing request, and record the sharing request information in the document access record item. 2. The method of claim 1, further comprising: S7. The document access record item is retrieved, and the document access authority control item and the source document feedback control item are correspondingly adjusted. 3. The method according to claim 1, wherein said step S2 comprises: S21. Perform data cleaning on the processing copy according to preset cleaning rules; S22. Convert the processed copy into a standard copy according to the preset format; S23. Extract content data in the standard copy, where the content data includes text data, semantic tree and attribute information; S24. Use the semantic tree to correct the text data, and collect and store the corrected content data into the database. 4. The method according to claim 1, wherein the source document and the processed copy are respectively stored in different databases independent of each other. 5. The method according to claim 1, wherein the document access authority control items include user identity authentication, document level and document access authorization mechanism. 6. The method according to claim 1, wherein the source document feedback control items include document sharing mode, document sharing scope and document data ownership. 7. An electronic document sharing control system based on data extraction, characterized in that it comprises: A copy processing module, configured to make a processed copy of the corresponding source document and perform a data extraction operation to obtain content data of the corresponding source document; A tag management module, configured to establish and modify authentication tags corresponding to source documents and matching content data; A first judging module, configured to judge whether the sharing request satisfies the document access control item; The second judging module is used to judge whether the sharing request satisfies the source document feedback control item; The feedback execution module is used to feed back the sharing request, and record the sharing request information in the document access record item. 8. A computer-readable storage medium, wherein a computer program is stored on the storage medium, and when the computer program is executed by a processor, the method according to any one of claims 1 to 6 is implemented. 9. An electronic device, comprising a processor and a memory; The memory is used to store source documents, content data and authentication labels; The processor is configured to execute the method according to any one of claims 1 to 6 by invoking source documents, content data and authentication tags. 10. A computer program product, comprising computer programs and/or instructions, characterized in that, when the computer programs and/or instructions are executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

Images