CN113760990A

CN113760990A - Content rights management method and device

Info

Publication number: CN113760990A
Application number: CN202110181985.2A
Authority: CN
Inventors: 梁义国; 殷昭; 邓彦华
Original assignee: Beijing Jingdong Century Trading Co Ltd; Beijing Wodong Tianjun Information Technology Co Ltd
Current assignee: Beijing Jingdong Century Trading Co Ltd; Beijing Wodong Tianjun Information Technology Co Ltd
Priority date: 2021-02-09
Filing date: 2021-02-09
Publication date: 2021-12-07
Anticipated expiration: 2041-02-09

Abstract

The invention discloses a content rights management method and device, and relates to the technical field of computers. A specific implementation of the method includes: analyzing content publishing requirements, determining a content type, acquiring a content model corresponding to the content type and an authority dimension corresponding to the content model; The content filled in the model and the permission item selected in at least one permission dimension, construct the association relationship between the content and the permission item and store it in the ES index; receive the query command, and obtain the user permission feature in the query command , find and display the content corresponding to the user permission feature in the ES index. This embodiment can select and combine multiple different rights dimensions and rights items, and utilize ES technology to efficiently retrieve and access content that conforms to the user's rights characteristics, thereby realizing the personalization and diversification of content retrieval.

Description

Content authority management method and device

Technical Field

The present invention relates to the field of computer technologies, and in particular, to a content right management method and apparatus.

Background

In a cms (content Management system) content Management system, content is an important data asset of the system, and fine-grained access control to content has been a difficulty of the system. When content is released, the content can be an article, a file or a video, and sometimes a publisher wants to control the access to the content, not only to individuals, but also to organizations, departments, groups, job levels and posts.

At present, there are 2 methods, one is to add a release department and a viewable department field in a database table, dynamically splice a conditional statement after a where condition during subsequent query, add a condition for query according to the department, and another supports a combination of different permission options, store a permission part in a single or a plurality of sub-tables, and when querying contents conforming to user permissions, need to associate and query the contents and the permission tables.

In the process of implementing the invention, the inventor finds that the prior art has at least the following problems: the first mode can only realize simple department-level authority control, has single function and is only suitable for simple scenes; in the second mode, when the setting of the right is complex, multiple tables are needed for associated query, and sometimes multiple times or multiple sentences are needed to return the query result, so that the query sentence is complex and takes long time. The authority control of the scheme is closely coupled with the system, so that the expansion is difficult, the query efficiency is low, and the performance of the scheme cannot meet the requirement when the data volume is too large or the access frequency of a user is too high.

Disclosure of Invention

In view of this, embodiments of the present invention provide a content right management method and apparatus, which can at least solve the problem of right control of content distribution in the existing content management system.

To achieve the above object, according to an aspect of an embodiment of the present invention, there is provided a content rights management method including:

analyzing content release requirements, determining content types, and acquiring content models corresponding to the content types and authority dimensions corresponding to the content models;

in response to the operation of issuing the content, receiving the content filled in the content model and the authority item selected in at least one authority dimension, and constructing and storing the association relation between the content and the authority item to an ES index;

receiving a query instruction, acquiring user authority characteristics in the query instruction, searching and displaying contents corresponding to the user authority characteristics in an ES index; wherein the user right characteristics comprise at least one right item.

Optionally, the obtaining a content model corresponding to the content type and a permission dimension corresponding to the content model includes:

when the number of the content models is multiple, receiving one content model selected by a user from the content models;

and determining a permission dimension corresponding to the content model, and receiving a selection operation of a user on at least one permission dimension.

Optionally, the constructing an association relationship between the content and the rights item and storing the association relationship in an ES index includes:

constructing an authority pair based on the selected authority item and the authority dimension of each authority item;

and combining the permission pairs of the at least one permission dimension to generate a permission scheme, and further constructing the association relationship between the content and the permission scheme and storing the association relationship to an ES index.

Optionally, the permission scheme is stored as an attribute of the content using a Nested type.

Optionally, the receiving a query instruction, obtaining a user right feature in the query instruction, searching for and displaying content corresponding to the user right feature in an ES index includes:

after monitoring user access operation, acquiring user basic information based on a user identifier; wherein, the user basic information comprises at least one authority item;

and generating user authority characteristics based on the at least one authority item, and searching and displaying the content corresponding to the user authority characteristics in the ES index by using a Nested query mode.

To achieve the above object, according to another aspect of an embodiment of the present invention, there is provided a content right management apparatus including:

the analysis module is used for analyzing content release requirements, determining content types, and acquiring content models corresponding to the content types and authority dimensions corresponding to the content models;

the publishing module is used for responding to the operation of publishing the content, receiving the content filled in the content model and the authority item selected in at least one authority dimension, constructing the association relationship between the content and the authority item and storing the association relationship to the ES index;

the search module is used for receiving a query instruction, acquiring the user authority characteristics in the query instruction, searching and displaying the content corresponding to the user authority characteristics in the ES index; wherein the user right characteristics comprise at least one right item.

Optionally, the analysis module is configured to: when the number of the content models is multiple, receiving one content model selected by a user from the content models;

Optionally, the publishing module is configured to:

Optionally, the search module is configured to:

To achieve the above object, according to still another aspect of embodiments of the present invention, there is provided a content rights management electronic device.

The electronic device of the embodiment of the invention comprises: one or more processors; a storage device, configured to store one or more programs, which when executed by the one or more processors, cause the one or more processors to implement any of the above-described content rights management methods.

To achieve the above object, according to still another aspect of embodiments of the present invention, there is provided a computer-readable medium having stored thereon a computer program which, when executed by a processor, implements any of the above-described content rights management methods.

According to the scheme provided by the invention, one embodiment of the invention has the following advantages or beneficial effects: a plurality of authority dimensions can be set according to individuals, departments, job levels, posts, job places and the like, flexible setting is carried out according to the content authority requirements when contents are issued, override access of the contents is avoided, and good expansibility and flexibility are achieved.

Further effects of the above-mentioned non-conventional alternatives will be described below in connection with the embodiments.

Drawings

The drawings are included to provide a better understanding of the invention and are not to be construed as unduly limiting the invention. Wherein:

fig. 1 is a schematic main flow chart of a content rights management method according to an embodiment of the present invention;

FIG. 2 is an interface diagram of a content model and rights dimension;

FIG. 3 is a diagram of the association of content and rights schemes;

FIG. 4 is a diagram of a content index structure;

FIG. 5 is a schematic diagram of a content query;

fig. 6 is a schematic diagram of main blocks of a content rights management apparatus according to an embodiment of the present invention;

FIG. 7 is an exemplary system architecture diagram in which embodiments of the present invention may be employed;

FIG. 8 is a schematic block diagram of a computer system suitable for use with a mobile device or server implementing an embodiment of the invention.

Detailed Description

Exemplary embodiments of the present invention are described below with reference to the accompanying drawings, in which various details of embodiments of the invention are included to assist understanding, and which are to be considered as merely exemplary. Accordingly, those of ordinary skill in the art will recognize that various changes and modifications of the embodiments described herein can be made without departing from the scope and spirit of the invention. Also, descriptions of well-known functions and constructions are omitted in the following description for clarity and conciseness.

Referring to fig. 1, a main flowchart of a content rights management method according to an embodiment of the present invention is shown, including the following steps:

s101: analyzing content release requirements, determining content types, and acquiring content models corresponding to the content types and authority dimensions corresponding to the content models;

s102: in response to the operation of issuing the content, receiving the content filled in the content model and the authority item selected in at least one authority dimension, and constructing and storing the association relation between the content and the authority item to an ES index;

s103: receiving a query instruction, acquiring user authority characteristics in the query instruction, searching and displaying contents corresponding to the user authority characteristics in an ES index; wherein the user right characteristics comprise at least one right item.

In the above embodiment, for step S101, the CMS content management system is a software system located between the Web front end (Web server) and the back end office system or process (content creation, editing). Content creators, editors, publishers use the content management system to submit, modify, approve, publish content, including but not limited to files, tables, pictures, data in databases, even video, all information that can be published to Internet, Intranet, and Extranet sites.

Analyzing the content publishing requirement, determining the content type, and acquiring a corresponding content model for publishing the content. In practice, a product manager typically analyzes the requirements set by a business department/personnel, such as issuing a news bulletin, and can issue different content according to different departments.

Usually, one content type corresponds to only one content model, but if there are a plurality of content models, which is equivalent to a plurality of contents that can be distributed, different menu or button identifications can be set for different content models. For example, the content management interface is provided with company headline issuing, notification announcement issuing, and personnel assignment issuing, a user can select a content model to be issued by clicking a menu, the number of content fields in the skipped issuing interface is different, and requirements on the authority may also be different.

Different contents have different permission requirements, and permission dimensionality corresponding to each content model can be set. Depending on the content distribution system, either the rights dimension that matches the content model completely, or a general rights dimension is set. On the basis of determining the content model, acquiring corresponding authority dimensions, such as department-by-department, personnel-by-staff, job-by-job-level, system-by-system and the like.

Examples are as follows:

for step S102, a content rights management block is established in the existing CMS, and the above steps are only to analyze the corresponding relationship between the content distribution requirement-content model-rights dimension, but the relationship needs to be configured in the content rights management block for distribution.

A 'content publishing' button/option is arranged in the interface, and different content filling interfaces and authority display interfaces are displayed according to a content model and authority dimensions in response to the selection operation of a user on the button/option. Referring to fig. 2, a publisher fills service content in a content filling interface according to actual needs, and selects one or more rights items from a rights display interface to construct and store an association relationship between the content and the rights items, where the relationship may be described as a content-rights scheme-rights pair { rights dimension-rights item }.

Although the permission schemes corresponding to different contents may be the same, in order to avoid confusion of the permission schemes, the contents and the permission schemes are selected to be stored together, and even if the same permission schemes are stored in multiple copies, the one-to-one correspondence relationship between the contents and the permission schemes is realized. One content corresponds to one authority scheme, one authority scheme corresponds to one or more authority pairs, each authority pair consists of an authority dimension and an authority item, and thus, the association relationship between the content and the authority scheme is constructed, a hierarchical structure is presented, and the extension and the structural maintenance are facilitated, as shown in fig. 3.

And establishing a data storage system, and storing the content issued by the user, the selected authority scheme and the generated association relationship into an Elastic Search (ES for short) index table. Since one content corresponds to one rights scheme, and one rights scheme includes different rights pairs, a typical one-to-many data relationship structure, there are 2 types of association relationships that are currently stored and indexed in the ES: nested and Parent/Child, as follows:

according to the characteristics of the scheme, the incidence relation between the content and the authority scheme is not changed greatly, and more scenes are inquired, so that the scheme is more suitable for using Nested type storage in an ES (electronic storage), namely the content and the authority scheme are stored together, and the authority scheme is integrally stored as an attribute of the content by using the Nested type storage. One right scheme can contain a plurality of right pairs, each right pair is a numerical value pair and comprises 2 attributes of right dimension and right option, a Nested query mode is used during query, query conditions are generated according to the right dimension and the right item to accurately match corresponding contents, and therefore the 2 attributes use a keyword type in an ES index, namely accurate matching is needed.

For step S103, a user content access system is established, and an administrator sets which content the user can view according to the security rules or security policies set by the system, so as to implement content rights management. The user logs in the system and can access and only access the content which is authorized to be viewed.

When the user accesses, the system can construct user authority characteristics according to the basic information of the user, including a department, a system, a workplace, a job level, an account number and the like of the user. In the subsequent query, a query condition (e.g., a DSL statement) may be generated according to the user right feature, and content meeting the query condition is retrieved from the ES index in a Nested query manner, so as to implement fine-grained access to the content, specifically refer to a content index structure shown in fig. 4 and a query schematic diagram shown in fig. 5.

In addition, the ES can ensure the efficiency of retrieval. The efficiency of the existing database is reduced after a certain amount of levels are retrieved, and when the contents are more, a plurality of table association queries are needed. The ES data stores the content, the authority scheme and the association relationship of the content and the authority scheme together, and the index can be used for efficient retrieval.

The embodiment of the invention provides an ES-based fine-grained content authority control method, which can set a plurality of authority dimensions according to individuals, departments, job levels, posts, workplaces and the like, can flexibly set according to content authority requirements when releasing content, avoids content override access and has good expansibility and flexibility.

Referring to fig. 6, a schematic diagram illustrating main modules of a content right management apparatus 600 according to an embodiment of the present invention is shown, including:

the analysis module 601 is configured to analyze content publishing requirements, determine a content type, and obtain a content model corresponding to the content type and an authority dimension corresponding to the content model;

the publishing module 602 is configured to receive, in response to a content publishing operation, content filled in the content model and a right item selected in at least one right dimension, construct an association relationship between the content and the right item, and store the association relationship in an ES index;

the search module 603 is configured to receive a query instruction, obtain a user permission feature in the query instruction, search for and display content corresponding to the user permission feature in the ES index; wherein the user right characteristics comprise at least one right item.

In the device for implementing the present invention, the analysis module 601 is configured to:

In the implementation apparatus of the present invention, the issuing module 602 is configured to:

In the implementation device of the invention, the permission scheme is stored as an attribute of the content by using a Nested type.

In the device implemented by the present invention, the searching module 603 is configured to:

In addition, the detailed implementation of the device in the embodiment of the present invention has been described in detail in the above method, so that the repeated description is not repeated here.

FIG. 7 illustrates an exemplary system architecture 700 to which embodiments of the invention may be applied.

As shown in fig. 7, the system architecture 700 may include

terminal devices

701, 702, 703, a network 704 and a server 705 (by way of example only). The network 704 serves to provide a medium for communication links between the

terminal devices

701, 702, 703 and the server 705. Network 704 may include various connection types, such as wired, wireless communication links, or fiber optic cables, to name a few.

A user may use the

terminal devices

701, 702, 703 to interact with a server 705 over a network 704, to receive or send messages or the like. Various communication client applications may be installed on the

terminal devices

701, 702, 703.

The

terminal devices

701, 702, 703 may be various electronic devices having display screens and supporting web browsing, and the server 705 may be a server providing various services.

It should be noted that the method provided by the embodiment of the present invention is generally executed by the server 705, and accordingly, the apparatus is generally disposed in the server 705.

It should be understood that the number of terminal devices, networks, and servers in fig. 7 is merely illustrative. There may be any number of terminal devices, networks, and servers, as desired for implementation.

Referring now to FIG. 8, shown is a block diagram of a computer system 800 suitable for use with a terminal device implementing an embodiment of the present invention. The terminal device shown in fig. 8 is only an example, and should not bring any limitation to the functions and the scope of use of the embodiments of the present invention.

As shown in fig. 8, the computer system 800 includes a Central Processing Unit (CPU)801 that can perform various appropriate actions and processes in accordance with a program stored in a Read Only Memory (ROM)802 or a program loaded from a storage section 808 into a Random Access Memory (RAM) 803. In the RAM 803, various programs and data necessary for the operation of the system 800 are also stored. The CPU 801, ROM 802, and RAM 803 are connected to each other via a bus 804. An input/output (I/O) interface 805 is also connected to bus 804.

The following components are connected to the I/O interface 805: an input portion 806 including a keyboard, a mouse, and the like; an output section 807 including a signal such as a Cathode Ray Tube (CRT), a Liquid Crystal Display (LCD), and the like, and a speaker; a storage portion 808 including a hard disk and the like; and a communication section 809 including a network interface card such as a LAN card, a modem, or the like. The communication section 809 performs communication processing via a network such as the internet. A drive 810 is also connected to the I/O interface 805 as necessary. A removable medium 811 such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, or the like is mounted on the drive 810 as necessary, so that a computer program read out therefrom is mounted on the storage section 808 as necessary.

In particular, according to the embodiments of the present disclosure, the processes described above with reference to the flowcharts may be implemented as computer software programs. For example, embodiments of the present disclosure include a computer program product comprising a computer program embodied on a computer readable medium, the computer program comprising program code for performing the method illustrated in the flow chart. In such an embodiment, the computer program can be downloaded and installed from a network through the communication section 809 and/or installed from the removable medium 811. The computer program executes the above-described functions defined in the system of the present invention when executed by the Central Processing Unit (CPU) 801.

It should be noted that the computer readable medium shown in the present invention can be a computer readable signal medium or a computer readable storage medium or any combination of the two. A computer readable storage medium may be, for example, but not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination of the foregoing. More specific examples of the computer readable storage medium may include, but are not limited to: an electrical connection having one or more wires, a portable computer diskette, a hard disk, a Random Access Memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing. In the present invention, a computer readable storage medium may be any tangible medium that can contain, or store a program for use by or in connection with an instruction execution system, apparatus, or device. In the present invention, however, a computer readable signal medium may include a propagated data signal with computer readable program code embodied therein, for example, in baseband or as part of a carrier wave. Such a propagated data signal may take many forms, including, but not limited to, electro-magnetic, optical, or any suitable combination thereof. A computer readable signal medium may also be any computer readable medium that is not a computer readable storage medium and that can communicate, propagate, or transport a program for use by or in connection with an instruction execution system, apparatus, or device. Program code embodied on a computer readable medium may be transmitted using any appropriate medium, including but not limited to: wireless, wire, fiber optic cable, RF, etc., or any suitable combination of the foregoing.

The flowchart and block diagrams in the figures illustrate the architecture, functionality, and operation of possible implementations of systems, methods and computer program products according to various embodiments of the present invention. In this regard, each block in the flowchart or block diagrams may represent a module, segment, or portion of code, which comprises one or more executable instructions for implementing the specified logical function(s). It should also be noted that, in some alternative implementations, the functions noted in the block may occur out of the order noted in the figures. For example, two blocks shown in succession may, in fact, be executed substantially concurrently, or the blocks may sometimes be executed in the reverse order, depending upon the functionality involved. It will also be noted that each block of the block diagrams or flowchart illustration, and combinations of blocks in the block diagrams or flowchart illustration, can be implemented by special purpose hardware-based systems which perform the specified functions or acts, or combinations of special purpose hardware and computer instructions.

The modules described in the embodiments of the present invention may be implemented by software or hardware. The described modules may also be provided in a processor, which may be described as: a processor comprises an analysis module, a release module and a search module. Where the names of these modules do not in some cases constitute a limitation on the module itself, for example, the lookup module may also be described as a "content lookup module".

As another aspect, the present invention also provides a computer-readable medium that may be contained in the apparatus described in the above embodiments; or may be separate and not incorporated into the device. The computer readable medium carries one or more programs which, when executed by a device, cause the device to comprise:

According to the technical scheme of the embodiment of the invention, a plurality of different authority dimensions and authority items can be selected and combined, and the ES technology is utilized to realize efficient retrieval and access of the content conforming to the authority characteristics of the user, thereby realizing individuation and diversification of content retrieval.

The above-described embodiments should not be construed as limiting the scope of the invention. Those skilled in the art will appreciate that various modifications, combinations, sub-combinations, and substitutions can occur, depending on design requirements and other factors. Any modification, equivalent replacement, and improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. a content rights management method, is characterized in that, comprises:

Analyzing the content publishing requirements, determining the content type, and acquiring the content model corresponding to the content type and the authority dimension corresponding to the content model;

In response to an operation of publishing content, receiving the content filled in the content model and the permission item selected in at least one permission dimension, constructing an association relationship between the content and the permission item, and storing it in the ES index;

A query instruction is received, the user permission feature in the query instruction is acquired, and the content corresponding to the user permission feature is searched in the ES index and displayed; wherein the user permission feature includes at least one permission item.

2. The method according to claim 1, wherein the acquiring a content model corresponding to the content type and an authority dimension corresponding to the content model comprises:

When the number of the content models is multiple, receiving a content model selected by the user from the content models;

An authority dimension corresponding to the one content model is determined, and a user's selection operation on at least one authority dimension is received.

3. The method according to claim 1, wherein the building an association relationship between the content and the permission item and storing it in an ES index, comprising:

Build permission pairs based on the selected permission items and the permission dimension of each permission item;

The permission pairs of the at least one permission dimension are combined to generate a permission scheme, and then an association relationship between the content and the permission scheme is constructed and stored in the ES index.

4 . The method according to claim 3 , wherein the rights scheme is stored as an attribute of the content using a Nested type. 5 .

5. The method according to claim 3, characterized in that, said receiving a query instruction, acquiring a user authority feature in the query instruction, searching and displaying the content corresponding to the user authority feature in an ES index, comprising: :

After monitoring the user's access operation, obtain basic user information based on the user ID; wherein, the basic user information includes at least one permission item;

A user permission feature is generated based on the at least one permission item, and a Nested query method is used to search and display the content corresponding to the user permission feature in the ES index.

6. A content rights management device, comprising:

an analysis module, configured to analyze content publishing requirements, determine a content type, and obtain a content model corresponding to the content type and an authority dimension corresponding to the content model;

A publishing module, configured to receive the content filled in the content model and the permission item selected in at least one permission dimension in response to an operation of publishing content, build an association relationship between the content and the permission item, and store it in the ES index;

The search module is configured to receive a query instruction, obtain the user permission feature in the query instruction, search and display the content corresponding to the user permission feature in the ES index; wherein the user permission feature includes at least one permission item.

7. The apparatus according to claim 6, wherein the publishing module is used for:

8. The device according to claim 7, wherein the search module is used for:

9. An electronic device, characterized in that, comprising:

one or more processors;

storage means for storing one or more programs,

The one or more programs, when executed by the one or more processors, cause the one or more processors to implement the method of any one of claims 1-5.

10. A computer-readable medium on which a computer program is stored, characterized in that, when the program is executed by a processor, the method according to any one of claims 1-5 is implemented.