Data processing method and related apparatus

Abstract

The application provides a data processing method and related device. The data processing method comprises: obtaining to-be-transformed data, and determining a data type of the to-be-transformed data; sending the data type to a data tracking server, so that the data tracking server determines transformation instruction information of the to-be-transformed data according to the data type; receiving the transformation instruction information sent by the data tracking server; and performing transformation processing on a structure of the to-be-transformed data according to the transformation instruction information, to obtain target data, wherein the structure of the target data comprises a code block and a code information block, the code block is used for execution when the target data is triggered, to obtain trigger information of the target data, and the trigger information is sent to the data tracking server, and the code information block is used for storing data required by the code block at runtime. The application can comprehensively protect the data, to improve the accuracy of data tracking.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of Internet, and in particular to a data processing method and related device. BACKGROUND

[0002] In various scenes of daily life, various data are often involved, and the data involved in some scenes with high confidentiality requirements are particularly valued for data confidentiality. Therefore, in the process of transmitting or processing data, whether the data is leaked or modified can be checked by tracking the data.

[0003] In the prior art, the tracking of data leakage prevention is often directed to data that can run scripts. However, data tracking cannot be achieved for data files such as pictures, documents and data that cannot run scripts, thereby causing some important data to be leaked and the security of the data to be unable to be comprehensively protected. Therefore, how to improve the accuracy of the data tracking process is a technical problem to be solved at present. SUMMARY

[0004] Embodiments of the present application provide a data processing method and related device, which can comprehensively protect data to improve the accuracy of data tracking.

[0005] In a first aspect, the embodiments of the present application provide a data processing method, which comprises:

[0006] Obtaining to-be-transformed data and determining a data type of the to-be-transformed data;

[0007] Sending the data type to a data tracking server, so that the data tracking server determines transformation instruction information of the to-be-transformed data according to the data type;

[0008] Receiving the transformation instruction information sent by the data tracking server;

[0009] Transforming a structure of the to-be-transformed data according to the transformation instruction information to obtain target data, the structure of the target data comprising a code block and a code information block, the code block being used to execute to obtain trigger information of the target data when the target data is triggered and send the trigger information to the data tracking server, and the code information block being used to store data required by the code block when running.

[0010] In a second aspect, the embodiments of the present application provide a data processing method, which comprises:

[0011] Receiving a data type of to-be-transformed data sent by a data transformation client;

[0012] generate, according to the data type, transformation instruction information of the data to be transformed;

[0013] send the transformation instruction information to the data transformation client, so that the data transformation client performs transformation processing on a structure of the data to be transformed according to the transformation instruction information, to obtain target data, the structure of the target data including a code block and a code information block, the code block being used to execute when the target data is triggered, to obtain trigger information of the target data and send the trigger information to the data tracking server, and the code information block being used to store data required by the code block at runtime.

[0014] In a third aspect, an embodiment of the present application provides a data processing apparatus, which comprises:

[0015] an acquisition unit, configured to acquire data to be transformed and determine a data type of the data to be transformed;

[0016] a sending unit, configured to send the data type to the data tracking server, so that the data tracking server determines transformation instruction information of the data to be transformed according to the data type;

[0017] a receiving unit, configured to receive the transformation instruction information sent by the data tracking server;

[0018] a processing unit, configured to perform transformation processing on a structure of the data to be transformed according to the transformation instruction information, to obtain target data, the structure of the target data including a code block and a code information block, the code block being used to execute when the target data is triggered, to obtain trigger information of the target data and send the trigger information to the data tracking server, and the code information block being used to store data required by the code block at runtime.

[0019] In a fourth aspect, an embodiment of the present application provides a data processing apparatus, which comprises:

[0020] a receiving unit, configured to receive a data type of data to be transformed sent by a data transformation client;

[0021] a processing unit, configured to generate transformation instruction information of the data to be transformed according to the data type;

[0022] The sending unit is configured to send the transformation instruction information to the data transformation client, so that the transformation client transforms the structure of the data to be transformed according to the transformation instruction information to obtain target data, the structure of the target data includes a code block and a code information block, the code block is used to execute when the target data is triggered to obtain trigger information of the target data and send the trigger information to the data tracking server, and the code information block is used to store data required by the code block at runtime.

[0023] In a fifth aspect, an embodiment of the present application provides a computer device, which comprises a memory and a processor, the memory stores one or more computer programs, and the computer programs are executed by the processor to make the processor execute the data processing method in the first aspect.

[0024] In a sixth aspect, an embodiment of the present application provides a server, which comprises a memory and a processor, the memory stores one or more computer programs, and the computer programs are executed by the processor to make the processor execute the data processing method in the second aspect.

[0025] In a seventh aspect, an embodiment of the present application provides a computer readable storage medium, which stores a computer program, and the computer program is read and executed by a processor of a computer device to make the computer device execute the data processing method in the first aspect or the second aspect.

[0026] In an eighth aspect, an embodiment of the present application provides a computer program product or a computer program, which comprises a computer program stored in a computer readable storage medium. A processor of a computer device reads the computer program from the computer readable storage medium, and the processor executes the computer program to make the computer device execute the data processing method in the first aspect or the second aspect.

[0027] In the embodiment of the present application, first, the data to be transformed can be acquired, and the data type of the data to be transformed is determined; then, the data type is sent to the data tracking server, so that the data tracking server determines the transformation instruction information of the data to be transformed according to the data type; next, the transformation instruction information sent by the data tracking server is received; finally, the structure of the data to be transformed can be transformed according to the transformation instruction information to obtain target data. The structure of the target data includes a code block and a code information block, the code block is used to execute when the target data is triggered to obtain trigger information of the target data, and the trigger information is sent to the data tracking server, and the code information block is used to store data required by the code block at runtime. As can be seen, in the present application, the data of different data types can be transformed accordingly, and then the code block included in the obtained target data can obtain the trigger information of the target data. Further, the trigger information of the target data can be used for tracking processing of the data to be transformed. Since the present application can be applied to tracking data of different data types, more comprehensive data leakage prevention tracking can be performed, thereby improving the accuracy of data tracking. BRIEF DESCRIPTION OF DRAWINGS

[0028] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings needed in the embodiment description will be briefly introduced. Obviously, the drawings in the following description are some embodiments of the present application, and other drawings can be obtained by those skilled in the art without creative labor.

[0029] Figure 1 is a schematic diagram of the architecture of a data processing system provided by an embodiment of the present application;

[0030] Figure 2 is a schematic diagram of the flow of a data processing method provided by an embodiment of the present application;

[0031] Figure 3 is a schematic diagram of the data structure of the data to be transformed provided by an embodiment of the present application;

[0032] Figure 4 is a schematic diagram of the flow of another data processing method provided by an embodiment of the present application;

[0033] Figure 5 is a schematic diagram of the structure of a tracking path provided by an embodiment of the present application;

[0034] Figure 6 is a schematic diagram of the structure of a data processing device provided by an embodiment of the present application;

[0035] Figure 7 is a schematic diagram of the structure of another data processing device provided by an embodiment of the present application;

[0036] Figure 8 is a structural schematic diagram of a computer device provided by an embodiment of the present application.

[0037] Figure 9 is a structural schematic diagram of a server provided by an embodiment of the present application. DETAILED DESCRIPTION

[0038] The exemplary embodiments will be described in detail herein with reference to the attached drawings. The following description is only exemplary and is not intended to limit the scope, applicability or configuration of the application. Rather, the following description is intended to describe some exemplary embodiments consistent with the application and is not intended to limit the scope, applicability or configuration of the application. Those skilled in the art will realize that some of the exemplary embodiments described herein are applicable to other embodiments and can be used in other embodiments without departing from the scope of the application.

[0039] An embodiment of the present application proposes a data processing scheme, which can improve the accuracy of data tracking. The general principle of the scheme is as follows: when data tracking is needed, the data to be transformed can be obtained first, and the data type of the data to be transformed is determined; then, the data type is sent to the data tracking server, so that the data tracking server determines the transformation instruction information of the data to be transformed according to the data type; next, the transformation instruction information sent by the data tracking server is received; finally, the structure of the data to be transformed can be transformed according to the transformation instruction information to obtain target data. The structure of the target data includes a code block and a code information block, the code block is used to execute when the target data is triggered to obtain trigger information of the target data, and the trigger information is sent to the data tracking server, and the code information block is used to store data required by the code block when running.

[0040] As can be seen, in the present application, different data types of data can be transformed accordingly, and the code block included in the target data obtained can obtain the trigger information of the target data. Further, the trigger information of the target data can be used for tracking processing of the data to be transformed. Since the present application can be applied to tracking data of different data types, more comprehensive data leakage prevention tracking can be performed, thereby improving the accuracy of data tracking.

[0041] Next, the above-mentioned data processing scheme will be introduced in combination with the technical terms involved in the present application:

[0042] In a possible implementation, the data such as the data to be transformed, the transformation instruction information, and the target data involved in the present application requires huge storage space when storing the above data, therefore, in the present application, sufficient storage space can be obtained by cloud storage technology, and the data is stored to facilitate subsequent access to the data. The so-called cloud storage is a new concept extended and developed on the basis of the concept of cloud computing. The distributed cloud storage system (hereinafter referred to as the storage system) refers to a storage system that cooperatively works together to provide data storage and business access functions to the network by means of functions such as cluster application, grid technology, and distributed storage file system, and the like, by means of application software or application interface.

[0043] In a possible implementation, the present application can be combined with the blockchain technology. For example, the data such as the data to be transformed, the transformation instruction information, and the target data in the present application can be uploaded to the blockchain for storage, which can ensure that the data on the blockchain is not easily tampered with. The blockchain is essentially a decentralized database, and is a new application mode of computer technologies such as distributed data storage, peer-to-peer transmission, consensus mechanism, and encryption algorithm. The blockchain essentially is a decentralized database, and is a series of data blocks associated using cryptographic methods, each of which contains information of a batch of network transactions, for verifying the validity (anti-fake) of the information and generating the next block. The blockchain can include a blockchain underlying platform, a platform product service layer, and an application service layer.

[0044] Next, please refer to Figure 1 , Figure 1 is a structural schematic diagram of a data processing system provided by an embodiment of the present application. The structural diagram of the data processing system can at least include a data transformation client 101, a data tracking server 102, a data storage server 103, and at least one terminal device 104. Wherein, Figure 1 The number of terminal devices 104 shown is only for example, and does not constitute a limitation on the system architecture diagram provided by the embodiment of the present application. In addition, the data tracking server 102 can be directly or indirectly connected to the data transformation client 101 and the data storage server 103 through wired or wireless communication; at least one terminal device 104 can be directly or indirectly connected to each other through wired or wireless communication; and each terminal device 104 in at least one terminal device 104 can be directly or indirectly connected to the data tracking server 102 through wired or wireless communication; and the like, which are not specifically limited by the present application.

[0045] Figure 1The illustrated data transformation client 101 is a device for data transformation processing on the structure of the data to be transformed, which can include functions and mechanisms for reorganizing the data structure of the data to be transformed. Figure 1 The illustrated terminal device 104 can be used to receive and send the target data after the data transformation client 101 transforms the data to be transformed.

[0046] Figure 1 The illustrated terminal device 104 can include but is not limited to a mobile phone, a tablet computer, a notebook computer, a palm computer, a mobile internet device (MID), a smart voice interaction device, a vehicle-mounted terminal, a roadside device, an aircraft, a wearable device, a smart home appliance, or a wearable device with data processing function such as a smart watch, a smart bracelet, a pedometer, etc.

[0047] Figure 1 The illustrated data tracking server 102 or data storage server 103 can be a standalone physical server, a server cluster or distributed system composed of multiple physical servers, a cloud server providing cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communication, middleware services, domain name services, security services, CDN (Content Delivery Network), and basic cloud computing services such as big data and artificial intelligence platforms, etc.

[0048] The data tracking server 102 can be used to track data, which can include specifying specific details of data transformation, such as determining transformation instruction information of the data to be transformed, and communicating with the code block in the target data to transmit related details of the use of the data to be transformed, etc. The data storage server 103 can store information of the data to be transformed and the tracking path of the data to be transformed, wherein the tracking path refers to the specific circumstances of the use of the transformed data (target data) and the path of the user's external transmission, such as transmission to a person or an institution, etc. It should be noted that the data tracking server 102 and the data storage server 103 can be the same type of server or different types of servers, and the embodiments of the present application do not make specific limitations on this.

[0049] In one possible implementation, in combination with Figure 1The interaction between the data transformation client 101 and the data tracking server 102 is used to explain the data processing scheme provided by the embodiments of the present application. First, the data transformation client 101 obtains the data to be transformed, and determines the data type of the data to be transformed. Then, the data transformation client 101 sends the data type to the data tracking server 102, so that the data tracking server 102 determines the transformation instruction information of the data to be transformed according to the data type. Next, the data transformation client 101 receives the transformation instruction information sent by the data tracking server 102. Finally, the data transformation client 101 can transform the structure of the data to be transformed according to the transformation instruction information to obtain target data, and the structure of the target data includes a code block and a code information block. The code block is used to execute when the target data is triggered to obtain trigger information of the target data, and the trigger information is sent to the data tracking server 102.

[0050] In a possible implementation, the data tracking server 102 receives the data type of the data to be transformed sent by the data transformation client 101; then, the data tracking server 102 generates the transformation instruction information of the data to be transformed according to the data type; finally, the data tracking server 102 sends the transformation instruction information to the data transformation client 101, so that the data transformation client 101 transforms the structure of the data to be transformed according to the transformation instruction information to obtain target data.

[0051] It can be understood that the data processing system provided by the present application can be deployed on the nodes of the blockchain, for example, the server and the terminal device can be regarded as the node devices of the blockchain, and together constitute a blockchain network. Therefore, the data processing flow for determining the plurality of damaged maintenance relationship groups in the present application can be executed on the blockchain, which can not only ensure the fairness of the data processing flow, but also make the data processing flow traceable, thereby improving the security of the data processing flow. Figure 1

[0052] Based on the above analysis, the data processing method of the present application will be described below. Figure 2 The data processing method of the present application will be described below. Figure 2 , Figure 2 is a flow diagram of a data processing method provided by an embodiment of the present application. The data processing method can be executed by a computer device, which can be a data transformation client. Referring to FIG. 10, the data processing method can include steps S201-S204: Figure 2

[0053] S201: Obtain the data to be transformed, and determine the data type of the data to be transformed.

[0054] ​​In the embodiments of the present application, the data type of the data to be transformed determined by the data transformation client can include, but is not limited to, any one of the following: a document type, a picture type, a file type, and the like. The document type can include, but is not limited to, any one of the following: a Word, an Excel, a PowerPoint, and the like. The data to be transformed can include one or more data types. For convenience of description, in the following, the embodiments of the present application take the data type of the data to be transformed including one data type as an example for corresponding description.

[0055] When the data owner needs to track the data (data to be transformed) to be sent out, the data transformation client can be used to transform the data. When the data transformation client is used, the data transformation client communicates with the data transformation server to transmit the data type of the data to be transformed.

[0056] S202: The data type is sent to the data tracking server, so that the data tracking server determines the transformation instruction information of the data to be transformed according to the data type.

[0057] The corresponding transformation mode of different data types is different, and the transformation mode can be described by the transformation instruction information. In specific implementation, the data transformation client can send the data type to the data tracking server, so that the data transformation server determines the transformation instruction information of the data to be transformed according to the data type of the data to be transformed.

[0058] S203: The transformation instruction information sent by the data tracking server is received.

[0059] In specific implementation, the data transformation client receives the transformation instruction information sent by the data tracking server. The transformation instruction information is used to instruct the transformation mode of the data to be transformed by the data transformation client.

[0060] For example, when the data type of the data to be transformed is a document type such as Word, Excel, and PowerPoint, and the document type includes multimedia resources, the transformation instruction information of the data to be transformed can be: analyzing the data content of the data to be transformed, and caching the multimedia resources (such as picture, audio, and video data) in the data to be transformed in the computer device where the data transformation client is located. In addition, the position of the multimedia resources in the data to be transformed is recorded at the same time, and only the data content exists in the analyzed document. For another example, when the data type of the data to be transformed does not include multimedia resources, the transformation instruction information of the data to be transformed can be: analyzing the data content of the data to be transformed, and storing the data content of the data to be transformed in the data content block.

[0061] S204: reconstructing the structure of the to-be-reconstructed data according to the reconstruction instruction information to obtain target data, the structure of the target data including a code block and a code information block, the code block being used to execute to obtain trigger information of the target data when the target data is triggered, and send the trigger information to the data tracking server, and the code information block being used to store data required by the code block at runtime.

[0062] The code information block can include a data variable block and a code resource block, the data variable block being used to store variables, constants and some defined data required by the code block at runtime.

[0063] In a possible implementation, when the data type is the to-be-reconstructed data containing multimedia resources, the data reconstruction client reconstructs the structure of the to-be-reconstructed data according to the reconstruction instruction information to obtain target data, which can include the following steps. First, the to-be-reconstructed data is parsed to obtain data content and multimedia resources of the to-be-reconstructed data. Then, an executable container is generated, the executable container including a code block, a code information block, a data content block and a data resource block. Finally, the data content is stored in the data content block, the multimedia resources are stored in the data resource block, and a source hash value is stored in the data variable block in the code information block, to obtain the target data.

[0064] In a specific implementation, the executable container can use a flat memory address space, that is, the data and the executable code are combined together to form a data structure. Please refer to Figure 3 , Figure 3 is a schematic diagram of a data structure of to-be-reconstructed data provided by an embodiment of the present application. As shown in Figure 3 , the data structure of the to-be-reconstructed data can include an executable container structure and a memory mapping structure, and the mapping relationship between the executable container structure and the memory mapping structure when the executable container is read and executed can be as shown in Figure 3 . The executable container structure can include a plurality of blocks, each of which is continuous, for example, can include a code block (.text), a code resource block (.rdata), a data variable block (.data), a data content block, a data resource block and other parts. The memory mapping structure can also include a plurality of blocks, for example, a data variable block, a code resource block, a code block, a blank block, a data content block, a data resource block and other parts. The code block (.text) is used to place the code connected to and communicated with the data tracking server, and the data variable block (.data) is used to store the data required by the code block at runtime, for example, variables, constants and some defined data.

[0065] Additionally, the executable container stores the target data (e.g., data documents / files) obtained after the data transformation client has transformed the data to be transformed. Once the target data is loaded into memory, it forms a structure like... Figure 3 The memory image structure shown illustrates how the terminal device's operating system allocates a base address for the target data loaded into memory. The operating system then accesses various blocks within the target data by adding the base address to the relative virtual address (i.e., offset address) allocated to the target data. For example, if the operating system allocates a base address of 400000h and a relative virtual address of 1000h to the code block of the target data, then the address for accessing the code block is: 400000h (base address) + 1000h (relative virtual address) = 401000h.

[0066] In one possible implementation, the data modification client can also perform a hash operation on the data to be modified to obtain the source hash value of the data to be modified; then, the data modification client obtains the data identifier of the data to be modified and sends the data identifier and the source hash value to the data tracking server.

[0067] In specific implementation, the data modification client can calculate the source hash value of the data to be modified and write it into the ".data" block of the executable container. Then, the calculated source hash value is set as a constant. Simultaneously, the data identifier (e.g., filename) of the data to be modified and the calculated source hash value are transmitted to the data tracking server, which then sends the data to the data information storage terminal for storage. The data modification client can utilize hash algorithms to perform hash operations on the data to be modified. Hash algorithms can include, but are not limited to, SHA512, SHA224, and SHA384 algorithms; this embodiment does not specifically limit the specific algorithms used.

[0068] In one possible implementation, the code block is executed when the target data is triggered to obtain the trigger information of the target data and send the trigger information to the data tracking server. Specifically, the code block is executed when the target data is processed by the communication software to obtain the transmission information of the target data; and / or, the code block is executed when the target data is opened by the terminal device to obtain the operation information of the terminal device.

[0069] For example, if the code block is executed when the target data is processed by the communication software, the code block can obtain the transmission information of the target data, and the process of obtaining the transmission information of the target data will be described in detail. After the data to be transformed is transformed, the data tracker (i.e., the data owner) can send the transformed target data to the terminal device of the other user, so that the terminal device of the other user can use and modify the target data (if necessary). During the transmission of the target data, the communication software generally processes and transmits the target data, so that once the communication software processes the transformed data file (target data), the running operation of the code block in the target data can be triggered (because the communication software will open and parse it in the memory to trigger the running of the code block). In this way, the code block can read the transmission information of the target data from the memory. The transmission information can include but is not limited to: the calling software (i.e., the software that processes the target data during the transmission of the target data), the sender (i.e., the user who sends the target data) ID (Identity document) or username, the receiver (i.e., the user who receives the target data) ID value or username, and the IP address of the communication between the two parties (including the network address of the terminal device used by the user who sends the target data and the network address of the terminal device used by the user who receives the target data). After obtaining the transmission information, the code block can send the above transmission information to the data tracking server.

[0070] For another example, if the code block is executed when the target data is opened by the terminal device, the code block can obtain the operation information of the terminal device, and the process of obtaining the operation information of the terminal device will be described in detail. When the other user opens the target data, the code block of the target data will run and call the software that opens the document type according to the data type of the target data (assuming it is a document type). Next, the multimedia resource is read from the "data resource block" according to the recorded position of the multimedia resource and restored to the document content, and finally the document content is read by the software that can open the document type (such as word software, Excel software or PowerPoint software) and displayed to the user. In this way, the problem that the target data cannot be read and displayed by the corresponding software can be prevented. Next, when the target data is opened by the terminal device and loaded into the memory, the code block can obtain the operation information of the terminal device. The operation information includes but is not limited to: the IP address of the current user, the username, the operation type, and the software that opens the target data. Then, the code block sends the obtained operation information of the terminal device to the data tracking server.

[0071] In a possible implementation, the data transformation client generates a data tracking request for the data to be transformed according to the indication; then, the data transformation client sends the data tracking request to the data tracking server, so that the data tracking server obtains tracking information of the data to be transformed from the data storage server. The tracking information of the data to be transformed can be used to track the transmission of the data to be transformed, for example, transmission to a user or an organization, and whether the data to be transformed is modified, so that the anti-leakage tracking of the data to be transformed can be implemented.

[0072] In the embodiment of the application, the data to be transformed can be obtained first, and the data type of the data to be transformed is determined; then, the data type is sent to the data tracking server, so that the data tracking server determines the transformation indication information of the data to be transformed according to the data type; next, the transformation indication information sent by the data tracking server is received; finally, the structure of the data to be transformed can be transformed according to the transformation indication information, and the target data is obtained. The structure of the target data includes a code block and a code information block, the code block is used to execute when the target data is triggered, so as to obtain the trigger information of the target data, and the trigger information is sent to the data tracking server, and the code information block is used to store the data required by the code block when running. As can be seen, in the application, the data of different data types can be transformed accordingly, and the code block included in the target data obtained can obtain the trigger information of the target data. Further, the trigger information of the target data can be used to track the data to be transformed. Since the application can be applied to track data of different data types, the anti-leakage tracking of the data can be more comprehensive, so that the accuracy of the data tracking can be improved.

[0073] Please refer to Figure 4 , Figure 4 is a flow diagram of another data processing method provided by the embodiment of the application. The data processing method can be executed by a server, and the server can be a data tracking server. As shown in Figure 4 , the data processing method can include steps S401-S403:

[0074] S401: receiving the data type of the data to be transformed sent by the data transformation client.

[0075] The data type of the data to be transformed can include but is not limited to any one of the following: document type, picture type, file type, and the like.

[0076] In a possible implementation, before receiving the data type of the to-be-transformed data sent by the data transformation client, the data transformation server can also acquire the client identifier of the data transformation client, and check the data transformation client according to the client identifier (which can include any one or more of security verification and legality verification), and if the check passes, trigger the step of generating the transformation instruction information of the to-be-transformed data according to the data type.

[0077] S402: Generating the transformation instruction information of the to-be-transformed data according to the data type.

[0078] If the data type includes multimedia resources, the transformation instruction information generated by the to-be-transformed data can be: parsing the data content of the to-be-transformed data, and caching the multimedia resources (such as picture, audio, and video data) in the to-be-transformed data in the computer device where the data transformation client is located. If the data type does not include multimedia resources, the transformation instruction information generated by the to-be-transformed data can be: parsing the data content of the to-be-transformed data, and storing the data content of the to-be-transformed data into the data content block.

[0079] S403: Sending the transformation instruction information to the data transformation client, so that the transformation client transforms the structure of the to-be-transformed data according to the transformation instruction information to obtain the target data.

[0080] In a specific implementation, the structure of the target data includes a code block and a code information block, the code block is used to execute when the target data is triggered to obtain trigger information of the target data, and send the trigger information to the data tracking server, and the code information block is used to store data required by the code block when running.

[0081] In a possible implementation, the data tracking server receives the data identifier and the source hash value of the to-be-transformed data sent by the data transformation client, and then sends the data identifier and the hash value to the data storage server for storage.

[0082] In a possible implementation, the data tracking server receives the trigger information of the target data sent by the code block, and sends the trigger information to the data storage server, so that the data storage server associates the trigger information with the data identifier and the source hash value to establish the tracking information of the to-be-transformed data.

[0083] For example, when the trigger information of the target data includes transmission information of the target data, the data tracking server can obtain the source hash value of the data to be transformed (i.e., the source hash value of the data to be transformed transmitted by the data transformation client to the data tracking server and stored in the data information storage during data transformation) according to the source hash value stored in the data variable block in the executable container after obtaining the transmission information of the target data. Finally, the data tracking server can send the obtained transmission information to the data storage server, so that the data storage server stores the transmission information in the data field associated with the source hash value of the data to be transformed. The transmission information and the source hash value can be stored in a table, which can be as shown in Table 1:

[0084] Table 1. Transmission information and source hash value

[0085]

[0086] In addition, when the trigger information of the target data includes operation information of the terminal device, the data tracking server sends the obtained operation information of the terminal device to the data storage server after obtaining the transmission information of the target data, so that the data storage server stores the operation information in the data field associated with the source hash value of the data to be transformed. The operation information and the source hash value can be stored in a table, which can be as shown in Table 2:

[0087] Table 2. Operation information and source hash value

[0088]

[0089]

[0090] The record of the operation type shown in Table 2 can be determined according to the difference between the target hash value of the transformed data newly generated after the user changes the target data and the source hash value of the data to be transformed. That is, once the user changes the data content of the target data, the hash value of the target data will change. It can be understood that the user changing the data content of the target data cannot destroy the data structure of the target data, i.e. Figure 3 the data structure described above, because the data content and the multimedia resource of the target data have been restored in the memory, and when the user edits, the edited is the target data that has been restored in the memory, so as not to destroy the data structure of the target data.

[0091] Further, if a user (e.g., User-1) opens or edits the target data and continues to transmit the target data through communication software and other means, the trigger information of the target data can be obtained by using the code block in the target data according to the method shown above, and the trigger information can be sent to the data tracking server. The data tracking server can send the trigger information of the target data to the data storage server for storage, so that the user can track the data to be transformed.

[0092] In a possible implementation, the data tracking server receives a data tracking request submitted by the data transformation client for the data to be transformed, and the data tracking request carries one or more of a data identifier of the data to be transformed and a source hash value of the data to be transformed. Then, the data tracking server obtains tracking information matching the data identifier or the source hash value from the data storage server, and sends the tracking information to the data transformation client.

[0093] In a specific implementation, when a data tracker (a user who wants to track the data to be transformed) wants to view how the data to be transformed is transmitted and used, or find that the data content of the data to be transformed is used by other users or institutions, the data tracker can view the tracking information stored in the data storage server to view the use of the data to be transformed or determine whether the data to be transformed is used illegally. For example, the data tracker can generate a data tracking request according to the data identifier (e.g., a file name) of the data to be transformed, and send the data tracking request generated for the data to be transformed to the data tracking server through the data transformation client. After receiving the data tracking request, the data tracking server can obtain tracking information matching the data identifier from the data storage server. For another example, the data tracker can generate a data tracking request according to the source hash value of the data to be transformed, and send the data tracking request generated for the data to be transformed to the data tracking server through the data transformation client. After receiving the data tracking request, the data tracking server can obtain tracking information matching the data identifier from the data storage server according to the source hash value. Of course, the data tracking request can be generated according to the data identifier and the source hash value of the data to be transformed. According to the method described above, the data tracking server can also obtain the tracking information of the data to be transformed from the data storage server. The tracking information obtained by the data tracking server can form a tracking path, as shown in Figure 5

[0094] ​In the embodiments of the present application, the structure of the data to be transformed is transformed, so that the code block of the target data obtained after transformation can be connected to the data tracking server and send tracking information when being opened, read, modified and transmitted. When the data to be transformed is illegally used and spread by other users, the source of the data leakage can be traced and found. In addition, since the present application can be applied to tracking different types of data, the data leakage tracking can be more comprehensive, thereby improving the accuracy and comprehensiveness of data tracking.

[0095] Please refer to Figure 6 , Figure 6 is a structural schematic diagram of a data processing device provided by the embodiments of the present application. The data processing device 600 can be applied to the data transformation client in the corresponding method embodiments described above. The data processing device 600 can be a computer program (including program code) running in the data transformation client, for example, the data processing device 600 is an application software; the device can be used to execute the corresponding steps in the method provided by the embodiments of the present application. The data processing device 600 can include:

[0096] The acquisition unit 601 is configured to acquire the data to be transformed, and determine the data type of the data to be transformed;

[0097] The sending unit 602 is configured to send the data type to the data tracking server, so that the data tracking server determines the transformation instruction information of the data to be transformed according to the data type;

[0098] The receiving unit 603 is configured to receive the transformation instruction information sent by the data tracking server;

[0099] The processing unit 604 is configured to transform the structure of the data to be transformed according to the transformation instruction information to obtain target data, the structure of the target data includes a code block and a code information block, the code block is used to execute when the target data is triggered to obtain trigger information of the target data, and the trigger information is sent to the data tracking server, and the code information block is used to store data required by the code block when running.

[0100] In a possible implementation, the processing unit 604 is further configured to perform the following operations:

[0101] Hashing the data to be transformed to obtain a source hash value of the data to be transformed;

[0102] Obtain the data identifier of the data to be transformed, and send the data identifier and the source hash value to the data tracking server.

[0103] In a possible implementation, the code block is configured to be executed when the target data is triggered to obtain triggering information of the target data, and the triggering information is specifically configured to perform the following operation:

[0104] The code block is configured to be executed when the target data is processed by the communication software to obtain transmission information of the target data; and / or,

[0105] The code block is configured to be executed when the target data is opened by the terminal device to obtain operation information of the terminal device.

[0106] In a possible implementation, the processing unit 604 is further configured to perform the following operation:

[0107] generate a data tracking request for the data to be transformed according to the indication;

[0108] send the data tracking request to the data tracking server, so that the data tracking server obtains tracking information of the data to be transformed from the data storage server.

[0109] Please refer to Figure 7 , Figure 7 is a structural schematic diagram of another data processing apparatus provided in the embodiments of the present application. The data processing apparatus 700 can be applied to the data tracking server in the corresponding method embodiments described above. The data processing apparatus 700 can be a computer program (including program code) running in the data tracking server, for example, the data processing apparatus 700 is an application software; the apparatus can be used to execute the corresponding steps in the method provided in the embodiments of the present application. The data processing apparatus 700 can include:

[0110] The receiving unit 701 is configured to receive a data type of data to be transformed sent by a data transformation client;

[0111] The processing unit 702 is configured to generate transformation indication information of the data to be transformed according to the data type;

[0112] The sending unit 703 is configured to send the transformation indication information to the data transformation client, so that the data transformation client transforms the structure of the data to be transformed according to the transformation indication information to obtain target data, the structure of the target data includes a code block and a code information block, the code block is configured to be executed when the target data is triggered to obtain triggering information of the target data, and the triggering information is sent to the data tracking server, and the code information block is configured to store data required by the code block when running.

[0113] In a possible implementation, the receiving unit 701 receives the data identifier of the data to be refactored and the source hash value of the data to be refactored sent by the data refactoring client.

[0114] The processing unit 702 stores the data identifier and the source hash value in the data storage server.

[0115] In a possible implementation, the receiving unit 701 receives the trigger information of the target data sent by the code block.

[0116] The sending unit 703 sends the trigger information to the data storage server, so that the data storage server associates the trigger information with the data identifier and the source hash value, to establish the tracking information of the data to be refactored.

[0117] In a possible implementation, the receiving unit 701 receives a data tracking request submitted by the data refactoring client for the data to be refactored, and the data tracking request carries any one or more of the data identifier of the data to be refactored and the source hash value of the data to be refactored.

[0118] The processing unit 702 obtains the tracking information matched with the data identifier or the source hash value from the data storage server, and sends the tracking information to the data refactoring client.

[0119] Please refer to Figure 8 , Figure 8 is a structural schematic diagram of a computer device provided by an embodiment of the present application. The computer device 800 is configured to perform the steps performed by the computer device (data refactoring client) in the method embodiments described above. The computer device 800 comprises one or more processors 810, one or more input devices 820, one or more output devices 830, and a memory 840. The processor 810, the input device 820, the output device 830, and the memory 840 are connected through a bus 850. The memory 840 is configured to store a computer program, and the computer program comprises program instructions. The processor 810 is configured to invoke the program instructions stored in the memory 840, and perform the following operations:

[0120] Obtain data to be refactored, and determine a data type of the data to be refactored;

[0121] Send the data type to the data tracking server, so that the data tracking server determines refactoring instruction information of the data to be refactored according to the data type;

[0122] Receive the refactoring instruction information sent by the data tracking server;

[0123] According to the reconstruction indication information, a reconstruction process is performed on a structure of the data to be reconstructed, to obtain target data, the structure of the target data including a code block and a code information block, the code block being used to execute when the target data is triggered, to obtain trigger information of the target data and send the trigger information to the data tracking server, and the code information block being used to store data required by the code block at runtime.

[0124] In a possible implementation, the processor 810 is further configured to perform the following operation:

[0125] performing a hash operation on the data to be reconstructed, to obtain a source hash value of the data to be reconstructed;

[0126] obtaining a data identifier of the data to be reconstructed, and sending the data identifier and the source hash value to the data tracking server.

[0127] In a possible implementation, the code block is used to execute when the target data is triggered, to obtain trigger information of the target data, and the trigger information is specifically used to perform the following operation:

[0128] the code block is used to execute when the target data is processed by communication software, to obtain transmission information of the target data; and / or,

[0129] the code block is used to execute when the target data is opened by a terminal device, to obtain operation information of the terminal device.

[0130] In a possible implementation, the processor 810 is further configured to perform the following operation:

[0131] generating a data tracking request for the data to be reconstructed according to the indication;

[0132] sending the data tracking request to the data tracking server, to enable the data tracking server to obtain tracking information of the data to be reconstructed from the data storage server.

[0133] See Figure 9 , Figure 9Fig. 1 is a schematic diagram of a server according to an embodiment of the present application. The server 900 is configured to perform the steps performed by the server (data tracking server) in the method embodiments described above. The server 900 comprises one or more processors 910, one or more input devices 920, one or more output devices 930, and a memory 940. The processor 910, the input device 920, the output device 930, and the memory 940 are connected by a bus 950. The memory 940 is configured to store a computer program, which comprises program instructions. The processor 910 is configured to invoke the program instructions stored in the memory 940 to perform the following operations:

[0134] receiving a data type of the data to be transformed sent by the data transformation client;

[0135] generating transformation instruction information of the data to be transformed according to the data type;

[0136] sending the transformation instruction information to the data transformation client, so that the data transformation client performs transformation processing on a structure of the data to be transformed according to the transformation instruction information, to obtain target data. The structure of the target data comprises a code block and a code information block. The code block is configured to be executed when the target data is triggered, to obtain trigger information of the target data, and send the trigger information to the data tracking server. The code information block is configured to store data required by the code block at runtime.

[0137] In a possible implementation, the processor 910 is further configured to perform the following operations:

[0138] receiving a data identifier of the data to be transformed and a source hash value of the data to be transformed sent by the data transformation client;

[0139] storing the data identifier and the source hash value in the data storage server.

[0140] In a possible implementation, the processor 910 is further configured to perform the following operations:

[0141] receiving the trigger information of the target data sent by the code block, and sending the trigger information to the data storage server, so that the data storage server associates the trigger information with the data identifier and the source hash value, to establish tracking information of the data to be transformed.

[0142] In a possible implementation, the processor 910 is further configured to perform the following operations:

[0143] receive a data tracking request sent by the data transformation client for the data to be transformed, the data tracking request carrying one or more of a data identifier of the data to be transformed and a source hash value of the data to be transformed;

[0144] obtain tracking information matching the data identifier or the source hash value from the data storage server, and send the tracking information to the data transformation client.

[0145] In the embodiments of the present application, the data to be transformed can be obtained first, and the data type of the data to be transformed is determined. Then, the data type is sent to the data tracking server, so that the data tracking server determines the transformation instruction information of the data to be transformed according to the data type. Next, the transformation instruction information sent by the data tracking server is received. Finally, the structure of the data to be transformed can be transformed according to the transformation instruction information to obtain target data. The structure of the target data includes a code block and a code information block. The code block is used to execute when the target data is triggered to obtain trigger information of the target data, and send the trigger information to the data tracking server. The code information block is used to store data required by the code block when running. As can be seen, in the present application, the data of different data types can be transformed accordingly, and the code block included in the target data obtained can obtain the trigger information of the target data. Further, the trigger information of the target data can be used for tracking processing of the data to be transformed. Since the present application can be applied to tracking data of different data types, more comprehensive data leakage prevention tracking can be performed, thereby improving the accuracy of data tracking.

[0146] In addition, it should be noted that the embodiments of the present application also provide a computer storage medium, and the computer storage medium stores a computer program, and the computer program includes program instructions. When the processor executes the above program instructions, the method in the foregoing embodiments can be executed, and therefore, the description will not be repeated here. For technical details of the computer storage medium embodiments involved in the present application, please refer to the description of the method embodiments of the present application. As an example, the program instructions can be deployed on one computer device, or executed on multiple computer devices located in one place, or executed on multiple computer devices distributed in multiple places and interconnected through a communication network.

[0147] According to an aspect of the present application, a computer program product or computer program is provided, which comprises a computer program stored in a computer readable storage medium. A processor of a computer device reads the computer program from the computer readable storage medium, and the processor executes the computer program, so that the computer device can perform the method in the foregoing embodiments. Therefore, here will not be described again.

[0148] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiments can be completed by a computer program instructing related hardware. The above-mentioned program can be stored in a computer readable storage medium, and when the program is executed, the program can include the processes of the above-mentioned embodiments. The storage medium can be a magnetic disc, an optical disc, a read-only memory (ROM), a random access memory (RAM), or the like.

[0149] The above disclosure is only the preferred embodiments of the present application, and of course cannot limit the scope of the rights of the present application. Therefore, equivalent changes made according to the claims of the present application are still within the scope of the present application.

Claims

1. A data processing method, characterized by, The method is applied to a data transformation client and comprises the following steps: Obtaining data to be transformed and determining the data type of the data to be transformed; the data type comprises one or more of the following types: document type, picture type, and file type; Sending the data type to a data tracking server, so that the data tracking server determines transformation instruction information of the data to be transformed according to the data type; the transformation instruction information is used to indicate the transformation mode of the data to be transformed by the data transformation client, and different data types correspond to different transformation modes; Receiving the transformation instruction information sent by the data tracking server; According to the transformation instruction information, the structure of the data to be transformed is transformed to obtain target data, the structure of the target data comprises a code block and a code information block, the code information block comprises a data variable block and a code resource block, and the code information block is used to store data required by the code block at runtime; If the code block detects that the target data is processed by communication software, the transmission information of the target data is obtained, the transmission information at least comprises the following: the calling software for processing the target data, the identifier of the sender, the identifier of the receiver, the network address of the terminal device used by the sender, and the network address of the terminal device used by the receiver; If the code block detects that the target data is opened by a terminal device, the operation information of the terminal device is obtained, the operation information at least comprises the following: the network address of the user of the target data, the username, the operation type, and the software for opening the target data; The obtained transmission information and operation information are sent to the data tracking server; so that the data tracking server sends the transmission information and the operation information to a data storage server for data storage, so as to trigger data tracking of the data to be transformed; When the data type is that the data to be transformed contains multimedia resources, the structure of the data to be transformed is transformed according to the transformation instruction information to obtain target data, which comprises the following steps: analyzing the data to be transformed to obtain the data content and multimedia resources of the data to be transformed; generating an executable container, the executable container comprises a code block, a code information block, a data content block, and a data resource block; storing the data content in the data content block, storing the multimedia resources in the data resource block, and storing the source hash value of the data to be transformed in the data variable block to obtain the target data.

2. The method of claim 1, wherein, The method further comprises the following steps: Performing a hash operation on the data to be transformed to obtain a source hash value of the data to be transformed; Obtaining the data identifier of the data to be transformed and sending the data identifier and the source hash value to the data tracking server.

3. The method of claim 1 or 2, wherein, The method further comprises the following steps: Generating a data tracking request for the data to be transformed according to the indication; Sending the data tracking request to the data tracking server, so that the data tracking server obtains tracking information of the data to be transformed from the data storage server.

4. A data processing method, characterized by, The method is applied to a data tracking server, and the method comprises the following steps: receiving a data type of to-be-transformed data sent by a data transformation client; the data type comprises one or more of a document type, a picture type, and a file type; generating transformation instruction information of the to-be-transformed data according to the data type; the transformation instruction information is used to instruct a transformation manner of the to-be-transformed data by the data transformation client, and the transformation manners corresponding to different data types are different; sending the transformation instruction information to the data transformation client, so that the data transformation client performs transformation processing on a structure of the to-be-transformed data according to the transformation instruction information, and obtains target data; the structure of the target data comprises a code block and a code information block; the code block is used to obtain transmission information of the target data when the target data is processed by communication software, and obtain operation information of a terminal device when the target data is opened by the terminal device, and the transmission information and the operation information are sent to the data tracking server; the code information block comprises a data variable block and a code resource block, and the code information block is used to store data required by the code block when the code block is running; the transmission information at least comprises calling software for processing the target data, an identifier of a sender, an identifier of a receiver, a network address of a terminal device used by the sender, and a network address of a terminal device used by the receiver; the operation information at least comprises a network address of a user of the target data, a username, an operation type, and software for opening the target data; when the data type is that the to-be-transformed data contains multimedia resources, the data transformation client performs transformation processing on the structure of the to-be-transformed data according to the transformation instruction information, and obtains target data, which comprises the following steps: analyzing the to-be-transformed data to obtain data content and multimedia resources of the to-be-transformed data; generating an executable container; the executable container comprises the code block, the code information block, a data content block, and a data resource block; storing the data content in the data content block, storing the multimedia resources in the data resource block, and storing a source hash value of the to-be-transformed data in the data variable block; generating target data according to the data content block, the data resource block, the data variable block, the code block, and the code information block after storage.

5. The method of claim 4, wherein, The method further comprises the following steps: receiving a data identifier of the to-be-transformed data and a source hash value of the to-be-transformed data sent by the data transformation client; storing the data identifier and the source hash value in a data storage server.

6. The method of claim 5, wherein, The method further comprises the following steps: receiving transmission information and operation information of the target data sent by the code block, and sending the transmission information and the operation information to the data storage server, so that the data storage server associates the transmission information and the operation information with the data identifier and the source hash value, to establish tracking information of the to-be-transformed data.

7. The method of claim 6, wherein, The method further comprises the following steps: The data transformation client receives a data tracking request submitted by the data transformation client for the to-be-transformed data, and the data tracking request carries one or more of a data identifier of the to-be-transformed data and a source hash value of the to-be-transformed data; The data tracking server obtains tracking information matching the data identifier or the source hash value from the data storage server and sends the tracking information to the data transformation client.

8. A data processing apparatus, characterized by, The device is applied to a data transformation client and includes: An obtaining unit that obtains to-be-transformed data and determines a data type of the to-be-transformed data; the data type includes one or more of a document type, a picture type, and a file type; A sending unit that sends the data type to a data tracking server to enable the data tracking server to determine transformation instruction information of the to-be-transformed data according to the data type; the transformation instruction information is used to instruct a transformation manner of the to-be-transformed data by the data transformation client, and different data types correspond to different transformation manners; A receiving unit that receives the transformation instruction information sent by the data tracking server; A processing unit that performs transformation processing on a structure of the to-be-transformed data according to the transformation instruction information to obtain target data; the structure of the target data includes a code block and a code information block; the code information block includes a data variable block and a code resource block; and the code information block is used to store data required by the code block at runtime; The processing unit is further configured to, if the code block detects that the target data is processed by communication software, obtain transmission information of the target data, the transmission information at least including calling software that processes the target data, an identifier of a sender, an identifier of a receiver, a network address of a terminal device used by the sender, and a network address of a terminal device used by the receiver; The processing unit is further configured to, if the code block detects that the target data is opened by a terminal device, obtain operation information of the terminal device, the operation information at least including a network address of a user of the target data, a username, an operation type, and software that opens the target data; The processing unit is further configured to send the obtained transmission information and operation information to the data tracking server; and the data tracking server sends the transmission information and the operation information to a data storage server for data storage, to trigger data tracking on the to-be-transformed data. When the data type is multimedia resources contained in the data to be transformed, the transforming the structure of the data to be transformed according to the transformation instruction information to obtain target data comprises: parsing the data to be transformed to obtain data content and multimedia resources of the data to be transformed; generating an executable container, the executable container comprising a code block, a code information block, a data content block and a data resource block; storing the data content in the data content block, storing the multimedia resources in the data resource block, and storing a source hash value of the data to be transformed in the data variable block to obtain the target data.

9. A data processing apparatus, characterized by, The application is applied to a data tracking server, and the device comprises: A receiving unit is configured to receive a data type of data to be transformed sent by a data transformation client, wherein the data type comprises one or more of a document type, a picture type and a file type. A processing unit is configured to generate transformation instruction information of the data to be transformed according to the data type, wherein the transformation instruction information is used to indicate a transformation mode of the data to be transformed by the data transformation client, and the transformation modes corresponding to different data types are different. A sending unit is configured to send the transformation instruction information to the data transformation client, so that the data transformation client transforms the structure of the data to be transformed according to the transformation instruction information to obtain target data, wherein the structure of the target data comprises a code block and a code information block, the code block is used to obtain transmission information of the target data when the target data is processed by communication software, and is used to obtain operation information of a terminal device when the target data is opened by the terminal device, and the transmission information and the operation information are sent to the data tracking server, the code information block comprises a data variable block and a code resource block, and the code information block is used to store data required by the code block when running; the transmission information at least comprises calling software for processing the target data, an identifier of a sender, an identifier of a receiver, a network address of a terminal device used by the sender and a network address of a terminal device used by the receiver; and the operation information at least comprises a network address of a user of the target data, a username, an operation type and software for opening the target data. When the data type is multimedia resources contained in the data to be transformed, the transforming the structure of the data to be transformed according to the transformation instruction information to obtain target data comprises: parsing the data to be transformed to obtain data content and multimedia resources of the data to be transformed; generating an executable container, the executable container comprising a code block, a code information block, a data content block and a data resource block; storing the data content in the data content block, storing the multimedia resources in the data resource block, and storing a source hash value of the data to be transformed in the data variable block; According to the data content block, the data resource block, the data variable block, the code block and the code information block after storage, target data is generated.

Images