File processing method, device, equipment and storage medium

Abstract

The application relates to the technical field of file processing, and discloses a file processing method, a file processing device, a file processing equipment and a storage medium. According to an obtained file operation request related to a cloud database, a corresponding file operation type and file key information corresponding to a to-be-processed file are determined; the file key information corresponding to the to-be-processed file is subjected to security processing by adopting a security processing flow corresponding to the file operation type, so that a target file path of the to-be-processed file in the cloud database after security processing is determined, thereby guaranteeing the security of the to-be-processed file; and the to-be-processed file is subjected to corresponding operation processing by adopting the file operation type and the target file path, so that the to-be-processed file is operated by using the target file path after security processing, thereby guaranteeing the security of the to-be-processed file.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of file processing, and in particular to a file processing method and device, computer equipment and a storage medium. BACKGROUND

[0002] In the process of Internet data transmission, the OSS storage system provided by Ali Cloud can serve as a stable and convenient cloud database warehouse. Administrators can set different file bucket configurations for storing different categories of information. However, the OSS buckets required by actual business in different scenarios are indeed different. If you want to achieve targeted uploading of different types of files, you need to collect file intentions during the uploading stage and make special configurations for OSS.

[0003] In the prior art, users need to store different types of files in corresponding file buckets according to the types of the files. However, the operation mode of users on the files is prone to error operation, which leads to the risk of file leakage and reduces the security of cloud file access. SUMMARY

[0004] The present application provides a file processing method, device, computer equipment and storage medium, which solves the problem of file operation security in the existing cloud database.

[0005] The present application provides a file processing method, which comprises the following steps:

[0006] Obtaining a file operation request related to a cloud database;

[0007] According to the file operation request, obtaining a file operation type and file key information corresponding to a to-be-processed file;

[0008] Using a security processing flow corresponding to the file operation type to perform security processing on the file key information corresponding to the to-be-processed file, and obtaining a target file path of the to-be-processed file in the cloud database;

[0009] Using the file operation type and the target file path to perform operation processing on the to-be-processed file.

[0010] The present application also provides a file processing device, which comprises:

[0011] A file operation request obtaining module is configured to obtain a file operation request related to a cloud database;

[0012] A file key information obtaining module is configured to obtain, according to the file operation request, a file operation type and file key information corresponding to a to-be-processed file;

[0013] The target file path acquisition module acquires a target file path of the to-be-processed file in the cloud database by using a security processing flow corresponding to the file operation type to perform security processing on file key information corresponding to the to-be-processed file.

[0014] The to-be-processed file processing module performs operation processing on the to-be-processed file by using the file operation type and the target file path.

[0015] The embodiment of the present application further provides a computer device, including a memory, a processor and a computer program stored in the memory and executable on the processor, and the processor implements the steps of the file processing method.

[0016] The embodiment of the present application further provides a computer readable storage medium, and the computer readable storage medium stores a computer program, and the computer program is executed by a processor to implement the steps of the file processing method.

[0017] The file processing method, the device, the computer device and the storage medium ensure the security of the to-be-processed file by determining the corresponding file operation type and the file key information corresponding to the to-be-processed file according to the obtained file operation request related to the cloud database, performing security processing on the file key information corresponding to the to-be-processed file by using the security processing flow corresponding to the file operation type, determining the target file path of the to-be-processed file in the cloud database after security processing, performing corresponding operation processing on the to-be-processed file by using the file operation type and the target file path, and operating the to-be-processed file by using the target file path after security processing. BRIEF DESCRIPTION OF DRAWINGS

[0018] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the following will briefly introduce the drawings needed to be used in the description of the embodiments of the present application. Obviously, the drawings in the following description are only some embodiments of the present application, and other drawings can be obtained by those skilled in the art without creative labor.

[0019] Figure 1 is an application environment diagram of a file processing method in an embodiment of the present application;

[0020] Figure 2 is a flowchart of a file processing method in an embodiment of the present application;

[0021] Figure 3 is another flowchart of a file processing method in an embodiment of the present application;

[0022] Figure 4 is another flowchart of a file processing method in an embodiment of the present application;

[0023] Figure 5 is another flowchart of a file processing method in an embodiment of the present application;

[0024] Figure 6 is another flowchart of a file processing method in an embodiment of the present application;

[0025] Figure 7 is a schematic diagram of a file processing device in an embodiment of the present application;

[0026] Figure 8 is a schematic diagram of a computer device in an embodiment of the present application. DETAILED DESCRIPTION

[0027] The technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are only some of the embodiments of the present application, but not all the embodiments of the present application. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative work fall within the scope of the present application.

[0028] The file processing method provided by the embodiments of the present application can be applied in an application environment as shown in Figure 1 . As shown in Figure 1 , a client (computer device) communicates with a server through a network. The client, also known as the user end, is a program that provides local services for clients corresponding to the server. The client (computer device) includes but is not limited to various personal computers, notebook computers, smart phones, tablet computers, cameras, and portable wearable devices. The server can be an independent server or a cloud server that provides cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communication, middleware services, domain name services, security services, content distribution networks (CDN), and basic cloud computing services such as big data and artificial intelligence platforms.

[0029] The file processing method provided by the embodiments of the present application can be applied in an application environment as shown in Figure 1 . Specifically, the file processing method is applied in a file processing system, which includes a client and a server as shown in Figure 1 . The client and the server communicate through a network to realize secure processing of a to-be-processed file, so as to improve the security of file processing.

[0030] In an embodiment, as shown in Figure 2As shown, a file processing method is provided, which is applied to... Figure 1 Taking the server in the example, the following steps are included:

[0031] S201: Obtain file operation requests related to the cloud database;

[0032] S202: Based on the file operation request, obtain the file operation type and the key file information corresponding to the file to be processed;

[0033] S203: Adopt the security processing flow corresponding to the file operation type, perform security processing on the key file information corresponding to the file to be processed, and obtain the target file path of the file to be processed in the cloud database.

[0034] S204: Perform operations on the file to be processed using the file operation type and the target file path.

[0035] Among them, the file operation request is used to trigger the operation and processing of the cloud database, and the file to be processed refers to the file that needs to be processed.

[0036] As an example, in step S201, the server can receive a file operation request triggered by the user through the client, and based on the file operation request, determine the file to be processed. The file to be processed can be file data in a local database or file data in a cloud database. The file data includes, but is not limited to, common text files, spreadsheet files, and configuration files.

[0037] In this example, the OSS storage system is used as a cloud database. In the OSS storage system, different file data can be stored in different storage areas.

[0038] As an example, in step S202, after the server receives the file operation request, it parses the file operation request to obtain the file operation type and the key file information corresponding to the file to be processed. In this example, when the file operation request is triggered, the server can generate request data that can be parsed according to the pre-set data rules.

[0039] File operation type refers to the type of operation that needs to be performed on the file, including but not limited to uploading, downloading and online editing of the file to be processed.

[0040] The key information in a file includes, but is not limited to, the file name, file type, file attributes, and file author information. The file name can be set according to specific requirements. The file type refers to the development environment to which the file belongs. File attributes refer to the file's properties, such as whether it's a .txt file, an XML file, or a Word file. The file author information is the information of the file's creator.

[0041] As an example, in step S203, after obtaining the file operation type and the file key information corresponding to the to-be-processed file, the server performs security processing on the file key information corresponding to the to-be-processed file according to the security processing procedure corresponding to the file operation type, and obtains a target file path corresponding to the to-be-processed file. In this example, different security processing procedures are used to perform security processing on the file key information corresponding to the to-be-processed file according to different file operation types, and finally a target file path with higher security is obtained.

[0042] The target file path is a secure operation path for performing a file operation type corresponding operation on the to-be-processed file.

[0043] As an example, in step S204, the server performs an operation with higher security on the to-be-processed file through the target file path with higher security according to the file operation type corresponding to the file operation request according to the generated target file path. In this example, if the file operation type is a download operation of the to-be-processed file corresponding to the cloud database, that is, a file extraction type, a download operation with higher security is performed through the target file path; if the file operation type is an upload operation of the to-be-processed file corresponding to the local database, that is, a file storage type, an upload operation with higher security is performed through the target file path.

[0044] In this example, by obtaining a file operation request related to the cloud database, performing security processing on the to-be-processed file according to the file operation type corresponding to the file operation request and the file key information corresponding to the to-be-processed file, and obtaining a target file path after security processing, the to-be-processed file is processed through the target file path. Compared with the original mode, the to-be-processed file is operated by the user according to his own judgment, which reduces the difficulty of human operation and also ensures that operation errors will not occur due to human errors, thereby improving the security of the to-be-processed file operation.

[0045] In an embodiment, as shown in Figure 3 S202, according to the file operation request, the file operation type and the file key information corresponding to the to-be-processed file are obtained, including:

[0046] S301: Obtain current request data according to a file operation request, the current request data carrying a data identifier;

[0047] S302: Determine a file operation type according to the data identifier;

[0048] S303: Determine file key information corresponding to a to-be-processed file according to the file operation type.

[0049] Among them, the data identifier refers to the data identifier corresponding to the file to be processed. The data identifier is used as a unique data identifier for the file to be processed, and the data identifier information included includes, but is not limited to, the development environment of the file to be processed, the business scenario of the file to be processed, and the storage location of the file to be processed.

[0050] As an example, in step S301, the server, based on the received user-triggered file operation request, sets a unique data identifier for the file to be processed in the current request data to ensure the uniqueness of the file to be processed in the request. In subsequent operations, the server parses the current request data to obtain the data identifier of the file to be processed carried within it. In this example, the data identifier includes the operation command, development environment, business scenario, and storage location of the file to be processed. Specifically, the operation command is the command triggered by the user's needs to operate on the file; the development environment and business scenario are used to determine the sensitivity of the file to be processed; and the storage location is used to obtain the key information of the file corresponding to the file to be processed.

[0051] As an example, in step S302, the server determines the file operation type based on the data identifier. The file operation type includes, but is not limited to, the file storage type corresponding to an upload operation of the file to be processed, the file extraction type corresponding to a download operation of the file to be processed, and the file extraction type corresponding to an online editing operation of the file to be processed. In this example, the file operation type can be determined based on the operation command triggered by the user in the data identifier, or it can be determined based on the storage location in the data identifier.

[0052] As an example, in step S303, the server determines the key file information corresponding to the file to be processed based on the different file operation types. Because the file operation types differ, the methods for obtaining the key file information also differ. In this example, when the file operation type is file extraction, the file to be processed is located in a cloud database, and the key file information is obtained from the cloud database; when the file operation type is file storage, the file to be processed is located in a local database, and the key file information is obtained directly from the local database.

[0053] In one specific implementation, the key document information in step S303 can be extracted using an intelligent verification and recognition system, such as an OCR intelligent verification and recognition system. For example, OCR can be used to determine if the document to be processed contains key information such as an ID card or company documents, thereby identifying the key document information of the document to be processed.

[0054] In the present example, when a user triggers a file operation request, the data identifier and the file operation type are determined, the file key information is obtained in different ways according to the file operation type, and the to-be-processed file is processed securely according to the file operation type and the file key information, so as to ensure the security of cloud database operation.

[0055] In an embodiment, S303, the file key information corresponding to the to-be-processed file is determined according to the file operation type, including:

[0056] S3031: If the file operation type is a file extraction type, the target extraction position corresponding to the to-be-extracted file is obtained through request analysis of the file operation request;

[0057] S3032: If the target extraction position is a high-risk storage area, user authentication processing is performed to obtain a user authentication result, and the file key information of the to-be-extracted file is obtained from the high-risk storage area when the user authentication result is passed;

[0058] S3033: If the target extraction position is a low-risk storage area, the file key information of the to-be-extracted file is obtained from the low-risk storage area.

[0059] As an example, in step S3031, when the file operation type received by the server is a file extraction type, since different files are placed in different areas in the cloud database, in order to obtain the to-be-processed file, the to-be-processed file in the cloud database needs to be analyzed according to the file operation request to obtain the target extraction position corresponding to the to-be-extracted file. In the present example, in order to ensure security, the files in the cloud database are stored in different positions in the cloud database according to different types, and the target extraction position corresponding to the to-be-extracted file is determined according to the file operation type, so as to ensure the obtaining of the file key information of the to-be-extracted file.

[0060] Wherein, when the file operation type is a file storage type, the file key information of the local database can be directly obtained through the data identifier of the to-be-processed file.

[0061] As an example, in step S3032, when the target extraction position corresponding to the to-be-extracted file to be processed by the server is a high-risk storage area, the user needs to perform user authentication processing and obtain a user authentication result to ensure the security of the to-be-extracted file. In the present example, the user's authority is obtained through an authentication interface to perform user authentication processing, and the user's authority is obtained through biological authentication recognition to obtain the corresponding user authentication result.

[0062] In this example, the server obtains the user authentication result after the user authentication process. If the authentication result is successful, it retrieves the key file information of the file to be extracted from the high-risk storage area. In this example, the key file information of the file to be extracted can be the key file information extracted when the file operation request is for the file storage type; alternatively, it can be extracted through an intelligent verification and identification system.

[0063] As an example, in step S3033, if the target extraction location corresponding to the file to be extracted is a low-risk storage area, then the file to be extracted does not need to undergo user authentication processing, and the key information of the file to be extracted can be directly obtained from the low-risk storage area. In this example, the key information of the file to be extracted can be the key information extracted when the file operation request is for file storage type; or it can be extracted by the intelligent verification and recognition system.

[0064] In this example, when the file operation type of the file to be processed is file extraction, if the target extraction location of the file to be extracted in the cloud database is a high-risk storage area, then user authentication is performed, and the key information of the file to be extracted is obtained based on the user authentication result; while if the target extraction location of the file to be extracted in the cloud database is a low-risk storage area, the key information of the file to be extracted is obtained directly, thereby ensuring the security of the file to be extracted in the high-risk storage area.

[0065] In one embodiment, such as Figure 4 As shown in S204, according to the security processing flow corresponding to the file operation type, the key file information corresponding to the file to be processed is processed securely, and the target file path of the file to be processed in the cloud database is obtained, including:

[0066] S401: Perform sensitivity analysis on the key information of the file corresponding to the file to be processed, and obtain the sensitivity analysis results;

[0067] S402: Generate the path based on the file operation type and sensitivity analysis results to obtain the target file path.

[0068] As an example, in step S401, the server performs sensitivity analysis on the file key information corresponding to the to-be-processed file, analyzes and processes the file key information to obtain a sensitivity analysis result corresponding to the to-be-processed file. In this example, the sensitivity of the to-be-processed file can be detected by the sensitive words in the file key information, for example, when the file key information includes the word "bill", a high sensitivity sensitivity analysis result is obtained; each file feature item in the file key information can also be analyzed and processed, for example, the sensitivity scores of all file feature items are weighted to obtain the sensitivity analysis result.

[0069] As an example, in step S402, the server performs path generation processing on the file operation type and the sensitivity analysis result to generate a target file path corresponding to the to-be-processed file corresponding to different sensitivity analysis results, thereby improving the convenience of user file processing operation and improving the security of file processing.

[0070] In this example, the sensitivity of the to-be-processed file is analyzed by the file key information corresponding to the to-be-processed file, and the target file path corresponding to the to-be-processed file is determined according to the sensitivity analysis result and the file operation type, thereby improving the convenience of user file processing operation and improving the security of file processing.

[0071] In an embodiment, S401, sensitivity analysis is performed on the file key information corresponding to the to-be-processed file to obtain a sensitivity analysis result, including:

[0072] S4011: extracting features from the file key information corresponding to the to-be-processed file to obtain at least two file feature items;

[0073] S4012: using a target sensitivity analysis model to analyze and process the at least two file feature items to obtain a sensitivity analysis result.

[0074] As an example, in step S4011, after the server extracts the file key information, it extracts features from each file feature item in the file key information to obtain at least two file feature items, and discretizes the above file feature items for sensitivity analysis of the to-be-processed file. In this example, the file name, file type, file attribute, and file author information in the file key information can be discretized by a pre-set reference table to obtain corresponding file feature items.

[0075] As an example, in step S4012, the server analyzes the extracted at least two file feature items using the target sensitivity analysis model to obtain a sensitivity analysis result. For example, the server can classify the at least two file feature items through a classification algorithm to determine the sensitive scores corresponding to the at least two file feature items, and then perform weighting processing on the sensitive scores corresponding to the at least two file feature items to obtain the sensitivity analysis result of the to-be-processed file, which is used for subsequent target file path generation.

[0076] The target sensitivity analysis model is obtained through training of file key information of at least two training files, and is a model for determining file sensitivity by using a classification algorithm, including but not limited to a Bayesian classification algorithm, a decision tree algorithm, or a KNN classification algorithm.

[0077] In this example, file key information is used for feature extraction to obtain file feature items for classification processing, thereby determining the sensitivity analysis result of the to-be-processed file, which is further used for subsequent target file path generation, thereby improving the security of to-be-processed file operations.

[0078] In an embodiment, as shown in FIG. 4B, in step S402, a path is generated according to the file operation type and the sensitivity analysis result to obtain a target file path, including: Figure 5

[0079] S501: If the file operation type is a file storage type, an idle storage area in a cloud database is obtained, and a security level and a storage path corresponding to each idle storage area are obtained.

[0080] S502: If the sensitivity analysis result is a high-sensitivity file, a storage path of an idle storage area corresponding to a high security level is determined as the target file path.

[0081] S503: If the sensitivity analysis result is a low-sensitivity file, a storage path of an idle storage area corresponding to a low security level is determined as the target file path.

[0082] The file storage type refers to a file operation type of uploading a to-be-processed file in a local database to a cloud database.

[0083] As an example, in step S501, when the server confirms that the file operation type is a file storage type, multiple idle storage areas in the cloud database are provided for the to-be-processed file for uploading the to-be-processed file to the cloud database, and a security level and a storage path corresponding to each idle storage area are obtained. In this example, an OSS storage system is used as the cloud database, and each idle storage area in the OSS storage system is divided into storage areas of different security levels to ensure classified storage of files of different sensitivities.​

[0084] As an example, in step S502, when the server determines that the sensitivity analysis result of the file to be processed is a high-sensitivity file, the file to be processed is allocated to the storage path of the free storage area corresponding to the high security level, and a corresponding upload path is generated as the target file path corresponding to the file to be processed. In this example, when the sensitivity analysis result of the file to be processed is a high-sensitivity file, after user authentication processing is performed using the authentication interface, the corresponding target file path is generated. The target file path includes the storage location corresponding to the file to be processed, the storage path of the free storage area corresponding to the high security level, and the key of the free storage area corresponding to the high security level.

[0085] The free storage area is encrypted to serve as a high-security free storage area. The encryption methods include, but are not limited to, HMacSHA1 encryption, symmetric encryption, and asymmetric encryption.

[0086] As an example, in step S503, when the server determines that the sensitivity analysis result of the file to be processed is a low-sensitivity file, the file to be processed is allocated to the storage path of the free storage area corresponding to the low security level, and the corresponding upload path is generated as the target file path corresponding to the file to be processed.

[0087] Among them, the free storage area corresponding to the low security level is usually the public area of ​​the cloud database, which has lower security. Different free storage areas are selected according to different application scenarios and files to be processed.

[0088] In this example, when the file operation type is file storage type, based on the sensitivity analysis results of the file to be processed, a free storage area with the corresponding security level is allocated in the cloud database, and the corresponding target file path is generated. This reduces the difficulty for users to perform cloud database operations based on the sensitivity of the file when using the original file storage type, while improving the security of file processing.

[0089] In another embodiment, such as Figure 6 As shown in step S402, the path is generated based on the file operation type and sensitivity analysis results to obtain the target file path, including:

[0090] S601: If the file operation type is file extraction and the sensitivity analysis result is a low-sensitivity file, then request the target file path through the gateway;

[0091] S602: If the file operation type is file extraction and the sensitivity analysis result is a highly sensitive file, then generate a temporary file URL and determine the target file path using the temporary file URL.

[0092] Among them, file extraction type refers to the file operation type that downloads the files to be processed from the cloud database to the local database.

[0093] As an example, in step S601, when the server confirms that the file operation type is a file extraction type, if the sensitivity analysis result of the file to be extracted is a low-sensitivity file, the target file path for downloading the file to be extracted can be directly confirmed through the gateway based on the target extraction location corresponding to the file to be extracted.

[0094] As an example, in step S602, when the server determines that the sensitivity analysis result of the file to be extracted is a highly sensitive file, a temporary URL for the file is generated according to the target extraction location corresponding to the file to be extracted. The temporary URL for the file is determined as the target file path. The temporary URL for the file is used to ensure the security of the file extraction operation.

[0095] In one specific implementation, step S602, generating a temporary file URL, specifically includes: calling an authentication interface to perform secondary authentication based on the key file information corresponding to the file to be extracted, and obtaining a second authentication result; if the second authentication result is successful, then generating a temporary file URL for downloading the file to be extracted from the cloud database. Furthermore, by embedding tracking points, a corresponding signature or watermark can be set during the extraction operation of the file to be extracted to improve its security.

[0096] In this example, based on the sensitivity analysis results of the file to be extracted, the target file path for downloading the file to be extracted is set in the cloud database. When the sensitivity analysis result indicates a highly sensitive file, a temporary URL is used as the target file path, thereby improving the security of the file to be extracted.

[0097] In one embodiment, a file processing apparatus is provided, which corresponds one-to-one with the file processing methods described in the above embodiments. For example... Figure 7 As shown, the file processing device includes a file operation request acquisition module 801, a file key information acquisition module 802, a target file path acquisition module 803, and a file processing module 804. Detailed descriptions of each functional module are as follows:

[0098] File operation request acquisition module 801 acquires file operation requests related to the cloud database;

[0099] The file key information acquisition module 802 acquires the file key information corresponding to the file operation type and the file to be processed based on the file operation request.

[0100] The target file path acquisition module 803 acquires the target file path of the to-be-processed file in the cloud database by using a security processing flow corresponding to the file operation type to perform security processing on file key information corresponding to the to-be-processed file.

[0101] The to-be-processed file processing module 804 performs operation processing on the to-be-processed file by using the file operation type and the target file path.

[0102] In an embodiment, the file key information acquisition module 802 includes:

[0103] The target extraction location acquisition unit acquires the target extraction location of the to-be-extracted file according to request analysis of the file operation request if the file operation type is the file extraction type.

[0104] The file key information acquisition unit acquires the file key information of the to-be-extracted file from the high-risk storage area if the target extraction location is the high-risk storage area, and acquires a user authentication result by performing user authentication processing, and acquires the file key information of the to-be-extracted file from the high-risk storage area if the user authentication result is authentication passed.

[0105] The file key information acquisition unit acquires the file key information of the to-be-extracted file from the low-risk storage area if the target extraction location is the low-risk storage area.

[0106] In an embodiment, the target file path acquisition module 803 includes:

[0107] The sensitivity analysis result acquisition unit acquires a sensitivity analysis result by performing sensitivity analysis on the file key information corresponding to the to-be-processed file.

[0108] The target file path acquisition unit acquires the target file path by performing path generation according to the file operation type and the sensitivity analysis result.

[0109] In an embodiment, the sensitivity analysis result acquisition unit includes:

[0110] The file feature item acquisition subunit acquires at least two file feature items by performing feature extraction on the file key information corresponding to the to-be-processed file.

[0111] The sensitivity analysis result acquisition subunit acquires the sensitivity analysis result by performing analysis processing on the at least two file feature items by using a target sensitivity analysis model.

[0112] In an embodiment, the target file path acquisition unit includes:

[0113] The idle storage area acquisition subunit acquires at least one idle storage area in the cloud database if the file operation type is the file storage type, and each idle storage area corresponds to a security level and a storage path.

[0114] The target file path acquisition subunit determines, as the target file path, a storage path of the idle storage area corresponding to the high security level if the sensitivity analysis result is a high-sensitivity file; and determines, as the target file path, a storage path of the idle storage area corresponding to the low security level if the sensitivity analysis result is a low-sensitivity file.

[0115] In another embodiment, the target file path acquisition unit further includes:

[0116] The target file path acquisition subunit acquires, through a gateway request, the target file path if the file operation type is a file extraction type and the sensitivity analysis result is a low-sensitivity file.

[0117] The target file path acquisition subunit generates a file temporary URL and determines the file temporary URL as the target file path if the file operation type is a file extraction type and the sensitivity analysis result is a high-sensitivity file.

[0118] The specific limitations of the file processing apparatus can refer to the limitations of the file processing method described above, and will not be repeated here. Each module in the above file processing apparatus can be realized by software, hardware and their combination in whole or in part. The above modules can be embedded in or independent of the processor in the computer device in hardware form, or can be stored in the memory in the computer device in the form of software, so as to call and execute the operations corresponding to each module by the processor.

[0119] In one embodiment, a computer device is provided, which can be a server, and the internal structure diagram thereof can be as shown in Figure 8 The computer device includes a processor, a memory, a network interface and a database connected through a system bus. The processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the computer device is used to store data used or generated in the process of the file processing method. The network interface of the computer device is used to communicate with the external terminal through the network connection. The computer program is executed by the processor to implement a file processing method.

[0120] In one embodiment, a computer device is provided, which includes a memory, a processor and a computer program stored in the memory and executable on the processor. The processor executes the computer program to implement the file processing method in the above embodiments, such as Figure 2 as shown in S201-S204, or Figures 3 to 6The functions of the file operation request obtaining module 801, the file key information obtaining module 802, the target file path obtaining module 803, and the to-be-processed file processing module 804 are as shown in FIG. 8, and are not repeated here to avoid repetition. Figure 7 The functions of the file operation request obtaining module 801, the file key information obtaining module 802, the target file path obtaining module 803, and the to-be-processed file processing module 804 are as shown in FIG. 8, and are not repeated here to avoid repetition.

[0121] In an embodiment, a computer readable storage medium is provided, and the computer readable storage medium stores a computer program. The computer program is executed by a processor to implement the file processing method in the above embodiments, for example, the steps S201-S204 as shown in FIG. 2, or Figure 2 The functions of the file operation request obtaining module 801, the file key information obtaining module 802, the target file path obtaining module 803, and the to-be-processed file processing module 804 are as shown in FIG. 8, and are not repeated here to avoid repetition. Figures 3 to 6 The functions of the file operation request obtaining module 801, the file key information obtaining module 802, the target file path obtaining module 803, and the to-be-processed file processing module 804 are as shown in FIG. 8, and are not repeated here to avoid repetition. Figure 7 The functions of the file operation request obtaining module 801, the file key information obtaining module 802, the target file path obtaining module 803, and the to-be-processed file processing module 804 are as shown in FIG. 8, and are not repeated here to avoid repetition.

[0122] Those skilled in the art can understand that all or part of the processes in the above embodiments can be completed by a computer program instructing related hardware. The computer program can be stored in a non-volatile computer readable storage medium, and when executed, can include the processes of the above embodiments. Any reference to memory, storage, database, or other medium used in the embodiments provided by the present application can include non-volatile and / or volatile memory. Non-volatile memory can include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM), or flash memory. Volatile memory can include random access memory (RAM) or external cache memory. As an illustration but not limitation, RAM is available in various forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDR SDRAM), enhanced SDRAM (ESDRAM), synchronous link (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM).

[0123] Those skilled in the art can clearly understand that, for the convenience and brevity of description, only the above-mentioned division of each functional unit and module is exemplified, and in actual application, the above-mentioned functions can be completed by different functional units and modules according to needs, that is, the internal structure of the device is divided into different functional units or modules to complete all or part of the functions described above.

[0124] The above examples are only used to illustrate the technical solutions of the present application, but not to limit it; although the present application has been described in detail with reference to the foregoing examples, those skilled in the art should understand that the technical solutions recorded in the foregoing examples can still be modified, or some technical features can be replaced by equivalents; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the embodiments of the present application, and should be included in the protection scope of the present application.

Claims

1. A file processing method characterized by, The method comprises the following steps: obtaining a file operation request related to a cloud database; obtaining a file operation type and file key information corresponding to a to-be-processed file according to the file operation request; performing security processing on the file key information corresponding to the to-be-processed file by using a security processing flow corresponding to the file operation type, to obtain a target file path of the to-be-processed file in the cloud database; performing operation processing on the to-be-processed file by using the file operation type and the target file path. The method comprises the following steps: performing sensitivity analysis on the file key information corresponding to the to-be-processed file to obtain a sensitivity analysis result; generating a target file path according to the file operation type and the sensitivity analysis result.

2. The file processing method of claim 1, wherein, The method comprises the following steps: obtaining current request data according to the file operation request, wherein the current request data carries a data identifier; determining a file operation type according to the data identifier; determining file key information corresponding to a to-be-processed file according to the file operation type.

3. The file processing method of claim 2, wherein, The method comprises the following steps: if the file operation type is a file extraction type, performing request analysis according to the file operation request to obtain a target extraction position corresponding to a to-be-extracted file; if the target extraction position is a high-risk storage area, performing user authentication processing to obtain a user authentication result, and if the user authentication result is authentication passed, obtaining file key information of the to-be-extracted file from the high-risk storage area; if the target extraction position is a low-risk storage area, obtaining file key information of the to-be-extracted file from the low-risk storage area.

4. The file processing method of claim 1, wherein, The method comprises the following steps: performing feature extraction on the file key information corresponding to the to-be-processed file to obtain at least two file feature items; performing analysis processing on the at least two file feature items by using a target sensitivity analysis model to obtain a sensitivity analysis result.

5. The file processing method of claim 1, wherein, The method comprises the following steps: if the file operation type is a file storage type, obtaining an idle storage area in the cloud database and determining a security level and a storage path corresponding to the idle storage area; if the sensitivity analysis result is a high-sensitivity file, determining a storage path of an idle storage area corresponding to a high security level as a target file path; if the sensitivity analysis result is a low-sensitivity file, determining a storage path of an idle storage area corresponding to a low security level as a target file path.

6. The file processing method of claim 1, wherein, The method comprises the following steps: If the file operation type is a file extraction type and the sensitivity analysis result is a low-sensitivity file, a target file path is obtained through a gateway request; If the file operation type is a file extraction type and the sensitivity analysis result is a high-sensitivity file, a file temporary URL is generated, and the file temporary URL is determined as the target file path.

7. A file processing apparatus characterized by comprising: The method comprises the following steps: a file operation request obtaining module obtains a file operation request related to a cloud database; a file key information obtaining module obtains a file operation type and file key information corresponding to a to-be-processed file according to the file operation request; a target file path obtaining module performs security processing on the file key information corresponding to the to-be-processed file by using a security processing process corresponding to the file operation type, and obtains a target file path of the to-be-processed file in the cloud database; a to-be-processed file processing module performs operation processing on the to-be-processed file by using the file operation type and the target file path. The target file path obtaining module performs sensitivity analysis on the file key information corresponding to the to-be-processed file, obtains a sensitivity analysis result, and generates a target file path according to the file operation type and the sensitivity analysis result.

8. A computer device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, The processor executes the computer program to implement the file processing method of any one of claims 1 to 6.

9. A computer-readable storage medium storing a computer program, the computer program comprising instructions that, when executed by a computer, cause the computer to perform the method of any one of claims 1 to 8. The computer program is executed by the processor to implement the file processing method of any one of claims 1 to 6.

Images