General data desensitization method, component, system, computer device and storage medium

Abstract

The invention provides a general data desensitization method, component, system, computer equipment and storage medium. The method includes: introducing the jar package of the desensitization component into a service server; starting the service server, and the desensitization component invokes DRS through an RSF interface Interface; the public service module receives the desensitization configuration request, reads the corresponding desensitization configuration from the public database according to the application number and returns it; after the desensitization configuration is loaded, the desensitization component applies the corresponding desensitization rules to the access data. Desensitization; after modifying the desensitization configuration in the public post-pipe module, write it into the public database, and call the DARS interface provided by the desensitization component; after receiving the reload notification, call the DRS interface to reload. The data desensitization access of the invention is simple and low in cost, supports remote centralized management and loading, desensitizes string data of any complex structure, and desensitizes logs without changing any existing code.

Description

technical field [0001] The present invention relates to the technical field of data processing, and in particular, to a general data desensitization method, component, system, computer device and storage medium. Background technique [0002] With the rapid development of computer technology, big data technology has emerged as the times require. In the era of big data, under the background of data sharing, the security of sensitive data such as personal information is also one of the important research directions. Sensitive information of customers (For example, mobile phone number, ID number, bank card number, etc.) need to be desensitized. [0003] At present, the following defects or deficiencies generally exist in the implementation of the data desensitization function in the industry: [0004] (1) The desensitization scheme in the prior art is easy to desensitize single-valued data of a known type, but cannot desensitize a string data of a complex and unknown structure....

AI Technical Summary

Problems solved by technology

[0013] Comparing the code before and after, it can be seen that the declaration of Logger needs to be changed in a large range. The range of code changes is very large, and some Logger declarations belong to a certain framework and exist in an independent jar. It is not realistic to modify it

[0014] (3) Existing desensitization schemes have deficiencies in features such as configurable desensitization rules and centralized management

For example, in some solutions, for simplicity, the desensitization rules are directly fixed in the code, and the configuration cannot be modified

Some solutions can provide a properties or yaml configuration file, and the desensitization rules can be modified in the configuration file, but because the modified properties|yaml configuration file needs to be repackaged and released, it is not possible to modify the configuration in real time and make the configuration take effect

If the configuration file is placed in the SCM (unified configuration center), the SCM configuration of each application needs to be modified, and there is no requirement for centralized management

Images