Data file can be customized desensitization method and system

Abstract

The invention belongs to the field of information security and provides a data file customizable desensitization method and system. The system comprises a sensitive information setting unit used for a system operator to set sub-nodes needed to be protected in a data file and a desensitization method name under a default condition, a format converter used for converting a file format, a data processing unit used for protecting a desensitization function, verifying the integrity of a default configuration file and modifying an XML file according to a desensitization rule stored in a temporary desensitization configuration file, an analyzer used for analyzing the XML file, and a desensitization rule customization unit used for setting the temporary desensitization configuration file. Meanwhile, the invention discloses the method. The data processing unit obtains a document object of the XML document and the temporary desensitization configuration file, and modifies the document object according to DOM characteristics and a node path. According to the method and the system, the protection of sensitive data in the data file is realized and the demand of performing customized desensitization on the sensitive data when a data user shares the data to different third parties is met.

Description

technical field [0001] The invention belongs to the field of information security, and relates to a desensitization protection technology for sensitive information in data files, in particular to a customizable desensitization method and system for data files. Background technique [0002] In recent years, with the rapid development of the Internet, the connection between the Internet and personal life has become increasingly close. This not only brings users a traversal of life, enabling people to browse the web, query questions, and purchase products anytime and anywhere, but also enables users to generate a large amount of behavioral data related to personal privacy. These data are due to government supervision. , commercial purposes or research needs will be released or made available to third parties. These released or shared data include users' sensitive information. If the data owner directly publishes or shares these data, it will cause a large amount of personal pr...

AI Technical Summary

Problems solved by technology

[0008] In the above invention, the data operated by the data user is the source data, and the processed data is directly released or shared to a third party, which cannot meet the data protection requirements when the attacker is the internal data user of the system, and cannot meet the data usage requirements at the same time. Personnel need different levels of protection for data shared with different levels of third parties

Images