Dynamic desensitization method and apparatus for storage process and function

Abstract

The invention relates to the field of data processing, and discloses a dynamic desensitization method and device for a storage process and a function. The method comprises the steps of obtaining statements in a storage process or function; scanning statements in the desensitization rule storage process or the desensitization rule function, and determining sensitive fields; analyzing the statement containing the desensitization rule sensitive field, and determining whether the value of the desensitization rule sensitive field is assigned to an outgoing parameter or not; and if the value of the desensitization rule sensitive field is assigned to the outgoing parameter, performing dynamic desensitization on the value of the desensitization rule outgoing parameter, thereby realizing dynamic desensitization on the desensitization rule storage process and the desensitization rule function.

Description

technical field [0001] The invention relates to the field of data processing, in particular to a dynamic desensitization method and device for stored procedures and functions. Background technique [0002] With the rapid development of emerging technologies such as the Internet and big data, centralized data storage has become a trend, and more and more applications use the method of connecting data centers or data sharing layers to conduct business, which makes the use of "first desensitization-later distribution" "Static data desensitization products of the "method" are often unable to meet the needs of users for "combining real-time and security", and dynamic data desensitization came into being. At present, the mainstream dynamic desensitization technology routes on the market include "result set parsing and rewriting" and "SQL statement rewriting". [0003] Based on the desensitization of the result set, it is necessary to obtain or save the table structure in advance ...

AI Technical Summary

Problems solved by technology

Since the SQL statements of the stored procedure or function are encapsulated in the data package, it is impossible to identify whether the result belongs to the value of a sensitive field by passing out the parameter output result. Currently, it is not possible to dynamically desensitize the stored procedure or function.

[0004] Desensitization based on statement rewriting, by using function operations on sensitive fields, let the database automatically return results that do not contain sensitive data after rewriting, but this method cannot rewrite stored procedure or function statements

Images