Safe access method of sensitive data

Abstract

The invention discloses a safe access method for sensitive data, which belongs to the technical field of sensitive data protection and comprises the following steps: S1, encrypting sensitive data of amobile medium; S2, detecting an insertion state of a moving medium; S3, decrypting the sensitive data of the mobile medium; and S4, dynamically accessing the sensitive data as required. According tothe invention, the sensitive data required by the system is encrypted and stored in the mobile medium instead of a system database or a file, so that the physical isolation of the sensitive data is realized; only a mobile medium manager or a specific person can contact the sensitive data stored in the mobile medium, so that the leakage risk of the sensitive data is greatly reduced; the system compiles a corresponding program according to service requirements to realize decryption, dynamic on-demand reading, analysis and the like of the sensitive data of the mobile medium instead of persistently storing the sensitive data in a system database or a system file; and when the mobile medium is pulled out, all the sensitive data are traceless in the system, and traceless access of the sensitivedata is ensured.

Description

technical field [0001] The invention relates to the technical field of sensitive data protection, in particular to a method for safely accessing sensitive data. Background technique [0002] With the advent of the Internet and the era of big data, the amount of data on the Internet is increasing, and there are more and more sensitive data in the data, such as personal ID cards, bank card numbers, personal home addresses, phone numbers, mobile geographic trajectories, etc. This kind of data often needs to be applied by certain software systems to achieve certain functions, such as personnel portraits, suspicious personnel research and judgment, and case research and judgment. In traditional methods, such sensitive data is generally stored in system databases or files (local or network). When the specific functional modules of the system are running, such data will be read from the database or files for specific data analysis or application display. [0003] At the storage l...

AI Technical Summary

Problems solved by technology

[0005] The above method realizes the protection of sensitive data to a certain extent, but there are still loopholes in the security of sensitive data, because sensitive data resides in the system, on the one hand, the database may be breached and cause data leakage; on the other hand, for For systems with B / S or C / S architecture, data may be transmitted through the network to increase the risk of leakage

Images