Data display method and device, electronic equipment and computer storage medium

Abstract

The invention relates to a data display method and device, electronic equipment and a computer storage medium, and belongs to the technical field of data security. The data display method comprises the steps that when to-be-displayed data is received, hierarchical encryption data of the to-be-displayed data is acquired; determining a first security level of the to-be-displayed data based on the hierarchical encrypted data, and obtaining a second security level of a data display node for displaying the to-be-displayed data; and determining target display data, which can be displayed at the data display node, in the to-be-displayed data based on the first security level and the second security level, and displaying the target display data at the data display node. According to the method, independent display logic does not need to be set for all data, data display logic does not need to be synchronized in the whole system, time delay does not exist in data display, it is guaranteed that the data display nodes can only display the target display data, data confidentiality is good, and data leakage is prevented.

Description

Technical Field

[0001] The present invention relates to the field of data security technology, and in particular to a data display method, device, electronic equipment and computer storage medium. Background Art

[0002] With the widespread application of distributed decentralized technologies, especially in blockchain and decentralized storage systems, data management and storage face new challenges.

[0003] Distributed decentralized systems emphasize that there is no central control point, and data is managed through the collaboration of multiple nodes in the network. However, this architecture also brings complexity to data management. Especially when dealing with large amounts of data, how to effectively classify and control data access rights becomes a key issue. The same data corresponds to different nodes to display different parts, and some data can be displayed. This can be set in the center in a centralized system, but it is impossible to set the data display logic in real time in a distributed decentralized system. There is a certain delay in the synchronization of the entire network. If the data is synchronized before the setting, there will be a risk of data leakage.

[0004] This shows that there is a risk of delay or leakage in data display in the existing distributed decentralized system. Summary of the invention

[0005] In view of this, it is necessary to provide a data display method, device, electronic device and computer storage medium to solve the problem of delay or leakage risk in data display in existing distributed decentralized systems.

[0006] In order to solve the above problems, the present invention provides a data display method, comprising: When receiving the data to be displayed, obtaining the hierarchical encrypted data of the data to be displayed; Determining a first security level of the data to be displayed based on the hierarchical encrypted data, and acquiring a second security level of a data display node for displaying the data to be displayed; Target display data that can be displayed at the data display node is determined among the data to be displayed based on the first security level and the second security level, and the target display data is displayed at the data display node.

[0007] In a possible implementation manner, determining the first security level of the to-be-displayed data based on the hierarchical encrypted data includes: A data classification label corresponding to each data field and data strip in the hierarchical encrypted data is obtained, wherein the data classification label is used to indicate a first security level of the data field and the data strip.

[0008] In a possible implementation manner, obtaining the second security level of the data display node used to display the data to be displayed includes: A node classification label of a data display node for displaying the data to be displayed is obtained, wherein the node classification label is used to display the second security level of the data display node.

[0009] In a possible implementation manner, determining the target display data that can be displayed at the data display node in the to-be-displayed data based on the first security level and the second security level includes: The data segments and / or data strips corresponding to the data hierarchical labels matching the node hierarchical labels are determined as target display data.

[0010] In a possible implementation, the data display node may be marked with a plurality of node classification labels, and determining the target display data that can be displayed at the data display node in the data to be displayed based on the first security level and the second security level includes: The data segment and / or data strip corresponding to the data hierarchical label matching any node hierarchical label of the data display node is determined as the target display data.

[0011] In a possible implementation, the method further includes: The data classification label is used as a key to encrypt the data to be displayed.

[0012] In a possible implementation manner, determining the target display data that can be displayed at the data display node in the to-be-displayed data based on the first security level and the second security level includes: Decrypting the data to be displayed based on the data classification label and the node classification label to determine target display data; The data to be displayed is unpacked to obtain the target display data.

[0013] The present invention also provides a data display device, comprising: A data acquisition module, used for acquiring hierarchical encrypted data of the data to be displayed when receiving the data to be displayed; A security level determination module, used to determine a first security level of the data to be displayed based on the hierarchical encrypted data, and to obtain a second security level of a data display node used to display the data to be displayed; A data display module is used to determine target display data that can be displayed at the data display node among the data to be displayed based on the first security level and the second security level, and display the target display data at the data display node.

[0014] The present invention also provides an electronic device, comprising a memory and a processor, wherein: The memory is used to store programs; The processor is coupled to the memory, and is used to execute the program stored in the memory to implement the steps in the data display method described in any of the above embodiments.

[0015] The present invention also provides a computer-readable storage medium for storing a computer-readable program or instruction, which, when executed by a processor, can implement the steps in the data presentation method described in any of the above embodiments.

[0016] The beneficial effects of the present invention are as follows: the data display method provided by the present invention can be used in the data display node of the distributed decentralized system. When the data display node receives the data to be displayed, the hierarchical encrypted data of the data to be displayed is obtained, and the first security level of the data to be displayed is determined based on the hierarchical encrypted data, and the second security level of the data display node is obtained, and the target display data in the data to be displayed is determined based on the first security level and the second security level, and the target display data is displayed at the data display node. There is no need to set up a separate display logic for all data, and there is no need to synchronize the data display logic in the entire system. There will be no delay in data display, and it is guaranteed that the data display node can only display the target display data, the data confidentiality is good, and data leakage is prevented. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative work.

[0018] Figure 1 A flowchart of a data display method provided by an embodiment of the present invention; Figure 2 A flowchart of a data decryption method provided by an embodiment of the present invention; Figure 3 A schematic diagram of the structure of a data display device provided by an embodiment of the present invention; Figure 4 A schematic diagram of the structure of an electronic device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0019] The preferred embodiments of the present invention will be described in detail below in conjunction with the accompanying drawings, wherein the accompanying drawings constitute a part of the present invention and are used together with the embodiments of the present invention to illustrate the principles of the present invention, but are not used to limit the scope of the present invention.

[0020] In the description of the embodiments of the present invention, unless otherwise specified, "multiple" means two or more than two. "And / or" describes the association relationship of associated objects, indicating that three relationships may exist. For example, "A and / or B" may mean: A exists alone, A and B exist at the same time, and B exists alone.

[0021] The descriptions of "first", "second", etc. involved in the embodiments of the present invention are only for descriptive purposes and cannot be understood as indicating or implying their relative importance or implicitly indicating the number of the indicated technical features. Therefore, the technical features defined as "first" and "second" may explicitly or implicitly include at least one of the features.

[0022] Reference to an "embodiment" herein means that a particular feature, structure, or characteristic described in conjunction with the embodiment may be included in at least one embodiment of the present invention. The appearance of the phrase in various places in the specification does not necessarily refer to the same embodiment, nor is it an independent or alternative embodiment that is mutually exclusive with other embodiments. It is explicitly and implicitly understood by those skilled in the art that the embodiments described herein may be combined with other embodiments.

[0023] A specific embodiment of the present invention, as Figure 1 As shown, a data display method is disclosed, comprising: S101, when receiving data to be displayed, obtaining hierarchical encrypted data of the data to be displayed; S102, determining a first security level of the data to be displayed based on the hierarchical encrypted data, and obtaining a second security level of a data display node used to display the data to be displayed; S103: Determine target display data that can be displayed at the data display node among the data to be displayed based on the first security level and the second security level, and display the target display data at the data display node.

[0024] In an embodiment of the present invention, the data display method provided is applicable to a data display node of a distributed decentralized system. The data display node may be a server, a computer, or other device that has the functions of processing, storing, and displaying data. The data to be displayed refers to data that is transmitted and displayed in the distributed decentralized system. The hierarchical encrypted data refers to data bound to the data to be displayed and used to indicate the security level of the data to be displayed, wherein the hierarchical encrypted data and the data to be displayed are transmitted through two data packets. Furthermore, there are corresponding security levels for the data display nodes. In order to distinguish the security level of the data to be displayed from the security level of the data display node, the first security level refers to the security level of the data to be displayed, and the second security level refers to the security level of the data display node. Furthermore, the target display data refers to data that can be displayed at the data display node. Generally, all the data in the data to be displayed can be displayed at different data display nodes respectively, and the target data that can be displayed at different data display nodes may be different.

[0025] In an embodiment of the present invention, data to be displayed and hierarchical encrypted data bound to the data to be displayed are sent to a data display node via two data packets. After receiving the data to be displayed, the data display node first obtains the hierarchical encrypted data of the data to be displayed, and then obtains the first security level of the data to be displayed based on the hierarchical encrypted data, and determines target display data in the data to be displayed based on its own second security level and the first security level, and displays the target display data. Specifically, how to determine the first security level of the data to be displayed and how to determine the target display data according to the first security level and the second security level will be described later in the present invention.

[0026] The data display method provided by the present invention can be used for the data display node of the distributed decentralized system. When the data display node receives the data to be displayed, the hierarchical encrypted data of the data to be displayed is obtained, and the first security level of the data to be displayed is determined based on the hierarchical encrypted data, and the second security level of the data display node is obtained, and the target display data in the data to be displayed is determined based on the first security level and the second security level, and the target display data is displayed at the data display node. There is no need to set up a separate display logic for all data, and there is no need to synchronize the data display logic in the entire system. There will be no delay in data display, and it is guaranteed that the data display node can only display the target display data, the data confidentiality is good, and data leakage is prevented.

[0027] As a possible implementation of the present invention, in this implementation, determining the first security level of the data to be displayed based on the hierarchical encrypted data includes: The data classification label corresponding to each data field and data strip in the hierarchical encrypted data is obtained, and the data classification label is used to indicate the first security level of the data field and the data strip.

[0028] In an embodiment of the present invention, the data to be displayed may include multiple data fields and data strips. Different data fields and data strips may be data of different security levels. Therefore, the data fields and data strips in the data to be displayed can be classified by data classification labels. Each data field and data strip has a corresponding data classification label. When determining the first security level of the data to be displayed, the first security level of each data field and each data strip can be determined based on the data classification labels of each data field and data strip in the data to be displayed.

[0029] As a possible implementation of the present invention, in this implementation, the data to be displayed is customer information statistics, which includes multiple data strips, each of which is customer information of a customer, wherein the customers include Class A customers and Class B customers, then a Class A label can be added to Class A customers, and a Class B label can be added to Class B customers, indicating that the data strips of Class A customers and the data strips of Class B customers have different security levels, wherein the security level of Class A customers is higher than that of Class B customers; for each piece of customer information data, including multiple data fields such as customer name, customer address, and customer communication method, for each data field, there is a corresponding data classification label, which is used to indicate the security level of the data field. Furthermore, the data classification label is packaged separately from the data to be displayed, and after receiving the data to be displayed and its corresponding data classification label data, the data display node first obtains the data classification label, and then determines the security level of each data field and data strip in the data to be displayed based on the data classification label.

[0030] The embodiment of the present invention uses data classification labels to distinguish the security levels of data fields and data bars in the data to be displayed, ensuring that the data display node will not display data that exceeds the display authority, thereby ensuring data security.

[0031] As a possible implementation manner of the present invention, in this implementation manner, obtaining the second security level of a data presentation node for presenting data to be presented includes: A node classification label of a data display node for displaying data to be displayed is obtained, where the node classification label is used to indicate a second security level of the data display node.

[0032] In an embodiment of the present invention, similar to the data to be displayed, the data display node is also marked with a node classification label, and the node classification label is used to indicate the second security level of the data display node. Specifically, there should be a corresponding relationship between the second security level and the first security level to ensure that the data to be displayed with different first security levels can be displayed at the corresponding data display nodes with different second security levels. For example, the first security level of the data to be displayed can be divided into 1 to 3 levels, and correspondingly, the second security level of the data node should also be divided into 1 to 3 levels, with 1 being the highest security level. A data display node with a security level of 1 can display the number of households to be displayed with security levels of 1, 2, and 3, and a data display node with a security level of 3 can only display data to be displayed with a security level of 3. Of course, in the specific implementation process, the security level of the data to be displayed and the data display node can be determined according to the actual situation.

[0033] The embodiment of the present invention sets a second security level for the data display node to ensure that the data will not be displayed beyond the authority when being displayed, thereby ensuring data security.

[0034] As a possible implementation of the present invention, in this implementation, determining target display data that can be displayed at a data display node in the data to be displayed based on the first security level and the second security level includes: The data segment and / or data strip corresponding to the data hierarchical label matching the node hierarchical label is determined as the target display data.

[0035] In an embodiment of the present invention, when determining the target display data in the data to be displayed based on the first security level and the second security level, it can be specific to the data fields and data strips of the data to be displayed. Specifically, the target display data strips that can be displayed in the data display node can be determined based on the data classification labels of each data strip in the data to be displayed and the node classification labels of the data display node, and then the target display data fields in the target display data strip that can be displayed in the display node are determined based on the data classification labels of each data field in the target display data strip and the node classification labels of the data display node. For the convenience of explanation, following the above embodiment, customers are divided into Class A customers and Class B customers, and the node classification label of the data display node is Class B, then only Class B customer data strips in the customer information data can be displayed in the data node; further, for the customer name, customer address and customer contact information in the Class B customer data strip, the customer name is a security level of 3, the customer address is a security level of 2, the customer contact information is a security level of 1, and the security level of the data display node is a security level of 2, then only the name and address of the Class B customer can be displayed in the data display node.

[0036] The embodiment of the present invention determines the data fields and / or data bars that can be displayed at the data display node through the data classification label and the node classification label, thereby ensuring that the data will not be displayed beyond the authority.

[0037] As a possible implementation of the present invention, in this implementation, a data display node may be marked with multiple node classification labels, and target display data that can be displayed at the data display node in the data to be displayed is determined based on the first security level and the second security level, including: The data segment and / or data strip corresponding to the data hierarchical label matching any node hierarchical label of the data display node is determined as the target display data.

[0038] In an embodiment of the present invention, for the same data node, there may be multiple node classification labels. When displaying different data to be displayed, the target display data in the data to be displayed may be determined based on different node classification labels. Specifically, when the data classification label in the data to be displayed matches any node classification label in the data display node, the data to be displayed corresponding to the data classification label is determined as the target display data. The specific method for determining the target display data has been described in the aforementioned embodiment and will not be repeated here.

[0039] As a possible implementation of the present invention, in this implementation, the method further includes: The data classification label is used as the key to encrypt the data to be displayed.

[0040] In an embodiment of the present invention, in order to ensure the security of the data to be displayed during the transmission process, the data classification label can be used as a key to encrypt the data to be displayed. Specifically, the data packet to be displayed can be encrypted using the data classification label, and the data classification label can only unpack the corresponding data field and / or data strip.

[0041] Further, such as Figure 2 As shown, determining target display data that can be displayed at the data display node in the data to be displayed based on the first security level and the second security level includes: S201, decrypting the data to be displayed based on the data classification label and the node classification label, and determining the target display data; S202, unpacking the data to be displayed to obtain target display data.

[0042] In the embodiment of the present invention, after receiving the encrypted data to be displayed, the data display node decrypts the number of households to be displayed based on the matching relationship between the data classification label and the node classification label, determines the target display data, and unpacks the target display data from the data packet to be displayed for display. The specific method for determining the target display data has been described in the above embodiment and will not be repeated here.

[0043] In the embodiment of the present invention, the data classification label is used as a key to encrypt the number of households to be displayed, thereby further ensuring the security of the data to be displayed during the transmission process.

[0044] In order to better implement the data display method in the embodiment of the present invention, based on the data display method, correspondingly, Figure 3 As shown, the embodiment of the present invention further provides a data display device, and the data display device 300 includes: The data acquisition module 301 is used to acquire the hierarchical encrypted data of the data to be displayed when receiving the data to be displayed; A security level determination module 302, used to determine a first security level of the data to be displayed based on the hierarchical encrypted data, and to obtain a second security level of a data display node used to display the data to be displayed; The data display module 303 is used to determine target display data that can be displayed at the data display node among the data to be displayed based on the first security level and the second security level, and display the target display data at the data display node.

[0045] The data display device 300 provided in the above embodiment can implement the technical solution described in the above data display method embodiment. The specific implementation principles of the above modules or units can refer to the corresponding contents in the above data display method embodiment, which will not be repeated here.

[0046] The data display device provided by the present invention obtains the hierarchical encrypted data of the data to be displayed when receiving the data to be displayed, determines the first security level of the data to be displayed based on the hierarchical encrypted data, obtains the second security level of the data display node, determines the target display data in the data to be displayed based on the first security level and the second security level, and displays the target display data at the data display node. There is no need to set up a separate display logic for all data, there is no need to synchronize the data display logic in the entire system, there is no delay in data display, and it is guaranteed that the data display node can only display the target display data, the data confidentiality is good, and data leakage is prevented.

[0047] like Figure 4 As shown, the present invention also provides an electronic device 400. The electronic device 400 includes a processor 401, a memory 402 and a display 403. Figure 4 Only some components of the electronic device 400 are shown, but it should be understood that it is not required to implement all of the components shown, and more or fewer components may be implemented instead.

[0048] In some embodiments, the processor 401 may be a central processing unit (CPU), a microprocessor or other data processing chip, and is used to run program codes stored in the memory 402 or process data, such as the data display method of the present invention.

[0049] In some embodiments, processor 401 may be a single server or a server group. The server group may be centralized or distributed. In some embodiments, processor 401 may be local or remote. In some embodiments, processor 401 may be implemented in a cloud platform. In one embodiment, the cloud platform may include a private cloud, a public cloud, a hybrid cloud, a community cloud, a distributed cloud, an internal cloud, a multi-cloud, etc., or any combination thereof.

[0050] In some embodiments, the memory 402 may be an internal storage unit of the electronic device 400, such as a hard disk or memory of the electronic device 400. In other embodiments, the memory 402 may also be an external storage device of the electronic device 400, such as a plug-in hard disk, a smart media card (SMC), a secure digital (SD) card, a flash card, etc., equipped on the electronic device 400.

[0051] Furthermore, the memory 402 may include both an internal storage unit of the electronic device 400 and an external storage device. The memory 402 is used to store application software installed in the electronic device 400 and various data.

[0052] In some embodiments, the display 403 may be an LED display, a liquid crystal display, a touch-sensitive liquid crystal display, an OLED (Organic Light-Emitting Diode) touch device, etc. The display 403 is used to display information of the electronic device 400 and to display a visual user interface. The components 401-403 of the electronic device 400 communicate with each other via a system bus.

[0053] In some embodiments, when the processor 401 executes the data display program in the memory 402, the following steps may be implemented: When receiving the data to be displayed, obtaining the hierarchical encrypted data of the data to be displayed; Determine a first security level of the data to be displayed based on the hierarchical encrypted data, and obtain a second security level of a data display node for displaying the data to be displayed; Target display data that can be displayed at the data display node is determined among the data to be displayed based on the first security level and the second security level, and the target display data is displayed at the data display node.

[0054] It should be understood that: when the processor 401 executes the data display program in the memory 402, in addition to the above functions, other functions can also be implemented. For details, please refer to the description of the corresponding method embodiment above.

[0055] Furthermore, the embodiment of the present invention does not specifically limit the type of the electronic device 400 mentioned, and the electronic device 400 may be a portable electronic device such as a mobile phone, a tablet computer, a personal digital assistant (PDA), a wearable device, a laptop computer, etc. Exemplary embodiments of portable electronic devices include but are not limited to portable electronic devices equipped with IOS, Android, Microsoft or other operating systems. The above-mentioned portable electronic devices may also be other portable electronic devices, such as a laptop computer with a touch-sensitive surface (e.g., a touch panel). It should also be understood that in some other embodiments of the present invention, the electronic device 400 may not be a portable electronic device, but a desktop computer with a touch-sensitive surface (e.g., a touch panel).

[0056] Accordingly, an embodiment of the present invention also provides a computer-readable storage medium, which is used to store computer-readable programs or instructions. When the program or instructions are executed by a processor, the steps or functions in the data display method provided in the above-mentioned method embodiments can be implemented.

[0057] Those skilled in the art can understand that all or part of the processes of the above-mentioned embodiments can be implemented by instructing related hardware through a computer program, and the program can be stored in a computer-readable storage medium, wherein the computer-readable storage medium is a disk, an optical disk, a read-only storage memory, or a random access memory, etc.

[0058] The above description is only a preferred specific implementation manner of the present invention, but the protection scope of the present invention is not limited thereto. Any changes or substitutions that can be easily conceived by any technician familiar with the technical field within the technical scope disclosed by the present invention should be covered within the protection scope of the present invention.

Claims

1. A data display method, characterized in that: include: When receiving the data to be displayed, obtaining the hierarchical encrypted data of the data to be displayed; Determining a first security level of the data to be displayed based on the hierarchical encrypted data, and acquiring a second security level of a data display node for displaying the data to be displayed; Target display data that can be displayed at the data display node among the data to be displayed is determined based on the first security level and the second security level, and the target display data is displayed at the data display node.

2. The data display method according to claim 1, characterized in that: The determining the first security level of the to-be-displayed data based on the hierarchical encrypted data comprises: A data classification label corresponding to each data field and data strip in the hierarchical encrypted data is obtained, wherein the data classification label is used to indicate a first security level of the data field and the data strip.

3. The data display method according to claim 2, characterized in that: The obtaining of the second security level of the data display node for displaying the data to be displayed includes: A node classification label of a data display node for displaying the data to be displayed is obtained, wherein the node classification label is used to indicate a second security level of the data display node.

4. The data display method according to claim 3, characterized in that: The determining, based on the first security level and the second security level, target display data in the to-be-displayed data that can be displayed at the data display node includes: The data segments and / or data strips corresponding to the data hierarchical labels matching the node hierarchical labels are determined as target display data.

5. The data display method according to claim 4, characterized in that: The data display node may be marked with a plurality of node classification labels, and the determining, based on the first security level and the second security level, target display data that can be displayed at the data display node among the data to be displayed includes: The data segment and / or data strip corresponding to the data hierarchical label matching any node hierarchical label of the data display node is determined as the target display data.

6. The data display method according to claim 3, characterized in that: The method further comprises: The data classification label is used as a key to encrypt the data to be displayed.

7. The data display method according to claim 6, characterized in that: The determining, based on the first security level and the second security level, target display data in the to-be-displayed data that can be displayed at the data display node includes: Decrypting the data to be displayed based on the data classification label and the node classification label to determine target display data; The data to be displayed is unpacked to obtain the target display data.

8. A data display device, characterized in that: include: A data acquisition module, used for acquiring hierarchical encrypted data of the data to be displayed when receiving the data to be displayed; A security level determination module, used to determine a first security level of the data to be displayed based on the hierarchical encrypted data, and to obtain a second security level of a data display node used to display the data to be displayed; A data display module is used to determine target display data that can be displayed at the data display node among the data to be displayed based on the first security level and the second security level, and display the target display data at the data display node.

9. An electronic device, characterized in that: comprising a memory and a processor, wherein: The memory is used to store programs; The processor is coupled to the memory, and is used to execute the program stored in the memory to implement the steps in the data display method described in any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that: Used to store computer-readable programs or instructions, which, when executed by a processor, can implement the steps of the data presentation method described in any one of claims 1 to 7.

Images