Sensitive information processing method and device, storage medium and equipment

Abstract

The embodiment of the invention provides a sensitive information processing method and device, a storage medium and equipment, belongs to the technical field of computers, and solves the problems thatmultiple service parties need to upgrade encryption rules with a data provider at the same time, the maintenance cost is high, and a sensitive information leakage source cannot be tracked. The methodcomprises the following steps: receiving a data request comprising a service party identifier and requested sensitive data identifier information; extracting sensitive data from a database; encrypting the sensitive data by using a random key corresponding to the service party identifier in the current life cycle, and returning the ciphertext to the service party; when a decryption request containing the service party identifier and the ciphertext is received, extracting a random key corresponding to the service party identifier in the current life cycle; decrypting the ciphertext by using therandom key to obtain sensitive data, and associatively storing the service party identifier and the sensitive data in a behavior database; and returning the sensitive data to the business party. Theembodiment of the invention is suitable for the sensitive data processing process.

Description

technical field [0001] The present invention relates to the field of computer technology, in particular to a sensitive information processing method, device, storage medium and equipment. Background technique [0002] In the era of big data, more and more attention is paid to personal privacy to prevent information leakage. Companies will also take a series of measures to track data usage and protect sensitive information. In the prior art, the company usually adopts the following technical solution for processing sensitive information: using symmetric encryption technology to encrypt and decrypt the sensitive information. The data service provider uses a key to encrypt, and the business party that calls sensitive information uses the key to decrypt. However, this technical solution has the following deficiencies: (1) The business party needs to obtain the corresponding decryption algorithm. If there are multiple sets of encryption rules, it needs to be connected multiple ...

AI Technical Summary

Problems solved by technology

[0003] The purpose of the embodiments of the present invention is to provide a processing method, device, storage medium and equipment for sensitive information, which solves the problem that in the prior art, multiple business parties need to upgrade encryption rules with the data provider at the same time, the maintenance cost is high, and it cannot be tracked The problem of the source of sensitive information leakage, by using the random key corresponding to the business party’s identity to encrypt and decrypt sensitive data, is completely transparent to the business party, and the encryption rules can be regularly updated without the business party’s awareness, saving time and manpower , in addition, store the business party requesting decryption of sensitive data and sensitive data, so as to locate the source of sensitive information leakage

Images