Data access control method and device

Abstract

The invention provides a data access control method and device. The method comprises the steps: receiving a database access request of a target user, the database access request comprising user information and a target SQL statement list; sequentially obtaining statement types of all SQL statements which are in an unprocessed state currently in the target SQL statement list, and judging whether the target user has the access permission of the target data or not according to the user information, preset permission information for the user to access the database and a statement type, If so, sending the SQL statement to the target database. According to the invention, the reliability and flexibility of data access control can be improved, and the universality of an application scene can be improved.

Description

technical field [0001] The present application relates to the technical field of information security, in particular to a data access control method and device. Background technique [0002] In the context of the data-oriented era, a large amount of data is stored centrally in the database. In various application scenarios, such as customer marketing, business analysis, and enterprise management, the data in the database can be processed and processed in a variety of ways through SQL statements. Therefore, how to quickly share data among different business departments on the premise of ensuring data information security is of great significance for improving data utilization and processing timeliness. [0003] At present, most enterprises use database users to control data access, that is, assign database accounts to perform addition, deletion, modification, and query operations on designated database instances. This method, on the one hand, relies too much on the database'...

AI Technical Summary

Problems solved by technology

This method, on the one hand, relies too much on the database's own authority management mechanism. The number of database accounts is limited and cannot meet the growth of the number of users. The authority of the database granularity needs to create a view to achieve data table level, specific scope access control and sensitive information shielding, maintenance costs High and difficult to manage and audit; on the other hand, the permission information of the database is only valid in a single database cluster, and each cluster needs to be configured separately and released through the application version. The approval process is complicated and the implementation cycle is long, which seriously affects the overall data processing efficiency

Images