Collaborative processing method, device and system for multi-link operation of personal information

Abstract

The present invention provides a collaborative processing method, device and system for multi-link operations of personal information, wherein the method includes: obtaining the operation requirements of the current subject to perform a first operation on the first information, the first operation includes at least one of collection, classification and grading, desensitization, use, circulation, storage, deletion, evidence storage, linkage, supervision, and supervision audit, the operation requirements are based on the operation intention of the first operation, and / or, the operation evidence information of the preceding operation of the first operation is determined, the preceding operation is the operation performed on the first information before the first operation, and the operation evidence information is generated by each subject based on the operation and / or supervision requirements of each subject on the first information; based on the operation requirements, the first operation is performed on the first information, and the operation evidence information of the first operation is generated. The present invention realizes the control operation of information in the whole life cycle of information dissemination, thereby effectively ensuring information security.

Description

Technical Field

[0001] The present invention relates to the fields of information technology, computer technology, network technology and Internet technology, and in particular to a collaborative processing method, device and system for multi-link operations of personal information. Background Art

[0002] The continuous evolution and in-depth application of communication technology, network technology and computing technology have promoted the intelligent interconnection of all things and the ubiquitous sharing of information. With the continuous evolution of new business forms, frequent cross-border, cross-system and cross-ecosystem exchange of information has become the norm.

[0003] The information contains a large amount of personal privacy data and sensitive data, which is retained intentionally or unintentionally between different systems, resulting in increasingly serious problems such as privacy leakage and abuse. The lack of existing information protection measures makes it difficult to control information abuse. Summary of the invention

[0004] The present invention provides a collaborative processing method, device and system for multi-link operations of personal information, so as to solve the defect of lack of information protection means in the prior art.

[0005] The present invention provides a collaborative processing method for multi-link operations of personal information, the method is applied to a current subject performing a first operation on first information, the method comprising:

[0006] Obtaining an operation requirement for the current subject to perform the first operation on the first information, where the first operation includes at least one of collection, classification and grading, desensitization, use, circulation, storage, deletion, evidence storage, linkage, supervision, and supervision audit, where the operation requirement is determined based on the operation intention of the first operation and / or operation evidence information of a preceding operation of the first operation, where the preceding operation is an operation performed on the first information before the first operation, and the operation evidence information is generated by each subject based on the operation and / or supervision requirement of each subject on the first information;

[0007] Based on the operation requirement, the first operation is performed on the first information, and operation evidence information of the first operation is generated.

[0008] According to a collaborative processing method for multi-link operations of personal information provided by the present invention, when the first operation includes desensitization, obtaining the operation requirement of the current subject to perform the first operation on the first information includes:

[0009] Generate desensitization requirements based on desensitization intentions and / or classified and graded evidence information;

[0010] The classification and grading evidence information includes classification and grading requirements and / or a pre-built classification and grading knowledge graph.

[0011] According to a collaborative processing method for multi-link operations of personal information provided by the present invention, the desensitization requirements are generated based on the desensitization intention and / or the classification and grading of evidence information, including:

[0012] Based on the desensitization intention and / or the classified and graded evidence information, as well as at least one of the content of the first information, the scene in which it is located, desensitization-related information, and linkage-related information, a desensitization requirement for desensitization and linkage of classification and grading is generated;

[0013] The desensitization related information includes at least one of desensitization control requirements, methods for obtaining and adjusting desensitization intentions, subjects for obtaining desensitization intentions, desensitization blacklists, current desensitization constraints, usage constraints, desensitization transmission constraints, dissemination constraints, evaluation constraints, and desensitization levels;

[0014] The linkage-related information includes quantitative protection strategies, receiver protection capabilities, transmission pathways, and extended control requirements.

[0015] According to a collaborative processing method for multi-link operations of personal information provided by the present invention, the first operation is performed on the first information based on the operation requirement, and operation evidence information of the first operation is generated, including:

[0016] Based on the desensitization requirement, determine a desensitization control set;

[0017] Based on the desensitizing control set, a desensitizing algorithm set is determined, and based on the desensitizing algorithm set, the first information is desensitized to obtain the second information, and desensitized evidence information is generated in the process of completing at least one of the desensitizing requirements, the desensitizing control set, the desensitizing algorithm set and the second information.

[0018] According to a collaborative processing method for multi-link operations of personal information provided by the present invention, when the first operation includes deletion, obtaining the operation requirement of the current subject to perform the first operation on the first information includes:

[0019] Generate a deletion request based on at least one of the deletion intention, the classified and graded evidence information, and the desensitized evidence information;

[0020] The classification and grading evidence storage information includes classification and grading requirements and / or a pre-built classification and grading knowledge graph;

[0021] The desensitized evidence information includes desensitization intentions and / or pre-built desensitized knowledge graphs.

[0022] According to a collaborative processing method for multi-link operations of personal information provided by the present invention, the generation of a deletion request based on at least one of deletion intention, classified and graded evidence information, and desensitized evidence information includes:

[0023] Based on the classified and graded evidence information and / or desensitized evidence information, the deletion intention, and at least one of the content of the first information itself, the scene in which it is located, and linkage-related information, a deletion requirement for linkage with the classified and graded evidence information and / or desensitized evidence information is generated;

[0024] The classified and graded evidence storage information also includes the classification and grading results;

[0025] The desensitized evidence information also includes at least one of desensitization control requirements, methods for obtaining and adjusting desensitization intentions, subjects for obtaining desensitization intentions, desensitization blacklists, current desensitization constraints, usage constraints, desensitization transmission constraints, dissemination constraints, evaluation constraints, and desensitization levels;

[0026] The linkage-related information includes at least one of quantitative protection strategies, recipient's protection capabilities, propagation channels, extended control requirements, storage methods, recipient's violation control measures, violation remote verification / supervision methods, and desensitized information flow status information.

[0027] According to a collaborative processing method for multi-link operations of personal information provided by the present invention, the first operation is performed on the first information based on the operation requirement, and operation evidence information of the first operation is generated, including:

[0028] Obtaining a deletion instruction, wherein the deletion instruction is determined based on the deletion requirement;

[0029] Performing information search based on the deletion instruction to obtain information to be deleted corresponding to the deletion instruction, wherein the information to be deleted is determined based on the first information;

[0030] Determining a deletion algorithm based on the deletion instruction and / or the information to be deleted;

[0031] Based on the deletion algorithm, the information to be deleted is deleted to obtain the second information, and deletion evidence information is generated in the process of completing at least one of the deletion request, the deletion instruction, the information to be deleted, the deletion algorithm and the second information.

[0032] According to a collaborative processing method for multi-link operations of personal information provided by the present invention, when the first operation includes supervision, obtaining the operation requirement of the current subject to perform the first operation on the first information includes:

[0033] Determine regulatory requirements based on at least one of regulatory intent, classification and grading of stored evidence information, desensitization of stored evidence information, and deletion of stored evidence information;

[0034] The classification and grading evidence storage information includes classification and grading requirements and / or a pre-built classification and grading knowledge graph;

[0035] The desensitized evidence information includes desensitization intention and / or pre-built desensitized knowledge graph;

[0036] The deletion evidence information includes deletion intention and / or a pre-built deletion knowledge graph.

[0037] According to a collaborative processing method for multi-link operations of personal information provided by the present invention, the regulatory requirements are determined based on at least one of regulatory intent, classified and graded evidence information, desensitized evidence information, and deleted evidence information, including:

[0038] Generate a regulatory requirement for the linkage between supervision and at least one of the classification and grading evidence information, the desensitized evidence information, and the deleted evidence information based on at least one of the classification and grading evidence information, the desensitized evidence information, and the deleted evidence information, the regulatory intention, and at least one of the content of the first information itself, the scene in which it is located, and linkage-related information;

[0039] The classified and graded evidence storage information also includes the classification and grading results;

[0040] The desensitized evidence information also includes at least one of desensitization control requirements, methods for obtaining and adjusting desensitization intentions, subjects for obtaining desensitization intentions, desensitization blacklists, current desensitization constraints, usage constraints, desensitization transmission constraints, dissemination constraints, evaluation constraints, and desensitization levels;

[0041] The deletion evidence information also includes at least one of the deletion intention, the deletion algorithm, the deleted data, and the deletion consistency assessment result;

[0042] The linkage-related information includes at least one of quantitative protection strategies, recipient's protection capabilities, propagation channels, extended control requirements, storage methods, recipient's violation control measures, violation remote verification / supervision methods, and desensitized information flow status information.

[0043] According to a collaborative processing method for multi-link operations of personal information provided by the present invention, the first operation is performed on the first information based on the operation requirement, and operation evidence information of the first operation is generated, including:

[0044] Generate a query message for stored evidence information based on the regulatory requirements;

[0045] Obtaining supervision information corresponding to the evidence information query message, wherein the supervision information is determined based on the evidence information query message and the operation evidence information;

[0046] Information supervision is performed based on the supervision information to obtain a supervision result.

[0047] According to a collaborative processing method for multi-link operations of personal information provided by the present invention, the operation intention of the first operation is determined based on the system security intention;

[0048] The system security intention includes the operation intention of each operation, or the system security intention includes the operation intention of each operation and also includes at least one of a system security intention acquisition subject and a system security intention acquisition time;

[0049] The various operations include the first operation.

[0050] A collaborative processing method for multi-link operations of personal information provided by the present invention also includes:

[0051] Generate first evidence information in the process of completing the system security intention.

[0052] A collaborative processing method for multi-link operations of personal information provided by the present invention also includes:

[0053] Based on at least one of the first evidence information, the second evidence information, the operation evidence information of each operation, the compliance / effectiveness information of each operation, and the availability / cost information of the collaborative processing system for multi-link operations of personal information, an information protection capability assessment result is generated.

[0054] The present invention also provides a collaborative processing device for multi-link operations of personal information, the device is applied to a current subject that performs a first operation on first information, and the device includes:

[0055] a requirement acquisition unit, configured to acquire an operation requirement of the current subject to perform the first operation on the first information, the first operation including at least one of collection, classification and grading, desensitization, use, circulation, storage, deletion, evidence storage, linkage, supervision, and supervision audit, the operation requirement being determined based on the operation intention of the first operation and / or operation evidence information of a preceding operation of the first operation, the preceding operation being an operation performed on the first information before the first operation, the operation evidence information being generated by each subject based on the operation and / or supervision requirement of each subject on the first information;

[0056] An operation execution unit is used to execute the first operation on the first information based on the operation requirement, and generate operation evidence information of the first operation.

[0057] The present invention also provides a collaborative processing system for multi-link operations on personal information, including a subject used to perform various operations on first information, and the subject is equipped with a collaborative processing device for multi-link operations on personal information as described above.

[0058] The present invention also provides an electronic device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the program, it implements a collaborative processing method for multi-link operations of personal information as described in any one of the above-mentioned methods.

[0059] The present invention also provides a non-transitory computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor, it implements a collaborative processing method for multi-link operations of personal information as described in any of the above.

[0060] The present invention also provides a computer program product, including a computer program, which, when executed by a processor, implements a collaborative processing method for multi-link operations of personal information as described in any one of the above.

[0061] The collaborative processing method, device and system for multi-link operations on personal information provided by the present invention determine the operation requirements of the first operation based on the operation intention and / or the operation evidence information of the previous operation, and execute the first operation accordingly, thereby realizing the control operation of information throughout the entire life cycle of information dissemination, thereby effectively ensuring information security. BRIEF DESCRIPTION OF THE DRAWINGS

[0062] In order to more clearly illustrate the technical solutions in the present invention or the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0063] Figure 1 It is a flowchart of the collaborative processing method of multi-link operations of personal information provided by the present invention;

[0064] Figure 2 It is a schematic diagram of the structure of the collaborative processing device for multi-link operation of personal information provided by the present invention;

[0065] Figure 3 This is one of the structural schematic diagrams of the collaborative processing system for multi-link operations of personal information provided by the present invention;

[0066] Figure 4 This is the second structural diagram of the collaborative processing system for multi-link operations of personal information provided by the present invention;

[0067] Figure 5 This is the third structural diagram of the collaborative processing system for multi-link operations of personal information provided by the present invention;

[0068] Figure 6 It is a structural schematic diagram of the electronic device provided by the present invention. DETAILED DESCRIPTION

[0069] In order to make the purpose, technical solution and advantages of the present invention clearer, the technical solution of the present invention will be clearly and completely described below in conjunction with the drawings of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0070] Figure 1 is a flow chart of the collaborative processing method of multi-link operation of personal information provided by the present invention, such as Figure 1 As shown, the method can be applied to each subject in the entire life cycle of information dissemination. Including the subject of information collection and transmission, as well as the subject of subsequent reception, storage, use, and processing of information. Further, any one of the subjects in the entire life cycle of information dissemination is taken as the current subject. Taking the current subject as an example, the method includes:

[0071] Step 110, obtaining the operation requirements of the current subject to perform the first operation on the first information, the first operation including at least one of collection, classification and grading, desensitization, use, circulation, storage, deletion, evidence storage, linkage, supervision, and supervision audit, the operation requirement is determined based on the operation intention of the first operation, and / or the operation evidence information of a predecessor operation of the first operation, the predecessor operation is an operation performed on the first information before the first operation, and the operation evidence information is generated by each subject based on the operation and / or supervision requirements of each subject on the first information.

[0072] Specifically, the first information is information containing user personal information. The user personal information here can be collected by a terminal or system (for example, the terminal can be a mobile phone, PAD, computer, wearable device, Internet of Things terminal, etc., and the system can be a software component, middleware, information system, etc.) and submitted to the background of Internet applications, enterprise or industry applications, etc. When the terminal or system collects the information, or after the background receives the first information containing user personal information, it can perform various operations on the first information.

[0073] The operation requirements are used to reflect the requirements that the current subject needs to follow when performing the first operation on the first information. The first operation here may include at least one of collection, classification and grading, desensitization, use, circulation, storage, deletion, evidence storage, linkage, supervision, and regulatory audit. The first operation performed by the current subject on the first information may be pre-set or determined according to the operation performed on the first information by the subject before the current subject in the entire life cycle of the information dissemination of the first information. For example, collection usually occurs at the very beginning subject in the entire life cycle of information dissemination, and operations such as desensitization, deletion, and storage all occur after the collection operation.

[0074] The operation requirement for the first information can be determined based on the operation intention of the first operation. The operation intention here is the specific intention of the current subject to perform the first operation on the first information. The operation intention is for the first operation. The operation intention can be input by the user, or it can be pre-set, or it can be received and obtained from other places. The embodiment of the present invention does not specifically limit this.

[0075] In addition, the operation requirements can also be determined based on the operation evidence information of the preceding operation of the first operation. Here, the preceding operation refers to the operation performed on the first information that occurs before the first operation. The preceding operation can be the operation performed by the current subject on the first information before performing the first operation, or it can be the operation performed on the first information by one or more subjects before the current subject in the entire life cycle of information dissemination. In the process of any subject performing an operation on the first information, the subject will record the information during the operation execution process based on the performed operation itself and / or the regulatory requirements for supervising the first information, and form the operation evidence information. Therefore, for the first operation performed by the current subject, the operation requirements for the current subject to perform the first operation can be determined based on the operation evidence information recorded for the preceding operation that has been performed previously.

[0076] Furthermore, the operation intention of the first operation and the operation evidence information of the preceding operation of the first operation may be combined to determine the operation requirement of the first operation.

[0077] Step 120: Based on the operation requirement, perform the first operation on the first information and generate operation evidence information of the first operation.

[0078] Specifically, after determining the operation requirements of the first operation, the first operation can be performed on the first information based on the operation requirements, thereby ensuring that the execution of the first operation can meet the operation intention and follow the operation rules of the previous operation. In this process, the information during the execution of the first operation can also be recorded, and operation evidence information of the first operation can be formed for call-up during information supervision, or to provide a reference for determining the operation requirements of subsequent operations.

[0079] The method provided by the embodiment of the present invention determines the operation requirements of the first operation based on the operation intention and / or the operation evidence information of the previous operation, and executes the first operation accordingly, thereby realizing the control operation of information throughout the entire life cycle of information dissemination, thereby effectively ensuring information security.

[0080] Based on the above embodiment, when the first operation includes desensitization, step 110 includes:

[0081] Generate desensitization requirements based on desensitization intentions and / or classified and graded evidence information;

[0082] The classification and grading evidence information includes classification and grading requirements and / or a pre-built classification and grading knowledge graph.

[0083] Specifically, when the first operation usually includes desensitization, the preceding operation of desensitization may include classification and grading. The classification and grading here can be applied after information collection to classify and grade the various contents contained in the collected information, so as to determine the first information required for subsequent transmission. It should be noted that classification and grading can be used to determine the privacy information in the information, and can also be used to determine the privacy level of the privacy information. The classification and grading can be the operation performed by the current subject, or it can be the operation performed by any subject before the current subject in the entire life cycle of information dissemination. In the process of classification and grading, classification and grading evidence information is formed, that is, the operation evidence information corresponding to the classification and grading.

[0084] Accordingly, when determining the desensitization requirements, the desensitization requirements can be determined only based on the desensitization intention, or only based on the classified and graded evidence information, or in combination with the desensitization intention and the classified and graded evidence information. It should be noted that the desensitization requirements determined by the classified and graded evidence information can be understood as the desensitization requirements when the classification, grading and desensitization are linked.

[0085] Furthermore, the classification and grading evidence information here includes classification and grading requirements and / or a pre-built classification and grading knowledge graph. The pre-built classification and grading knowledge graph is a knowledge graph of a pre-built classification and grading field. The pre-built classification and grading knowledge graph library includes requirements and guidance for the classification and grading of specific information from the levels of laws / regulations / standards / systems.

[0086] Based on any of the above embodiments, in step 110, generating a desensitization requirement based on the desensitization intention and / or the classified and graded evidence information includes:

[0087] Based on the desensitization intention and / or the classified and graded evidence information, as well as at least one of the content of the first information, the scene in which it is located, desensitization-related information, and linkage-related information, a desensitization requirement for desensitization and linkage of classification and grading is generated;

[0088] The desensitization related information includes at least one of desensitization related information, a method for obtaining and adjusting desensitization intention, a desensitization intention obtaining subject, a desensitization blacklist, a current desensitization constraint, a usage constraint, a desensitization transmission constraint, a dissemination constraint, an evaluation constraint, and a desensitization level;

[0089] The linkage-related information includes quantitative protection strategies, receiver protection capabilities, transmission pathways, and extended control requirements.

[0090] Specifically, when determining the desensitization requirements, in addition to applying the desensitization intention and / or the classified and graded evidence information, it is also possible to combine at least one of the content of the first information itself, the scene in which it is located, the desensitization related information, and the linkage related information. Specifically, the desensitization requirements can be determined based on the desensitization intention, or based on the desensitization intention and at least one of the content of the first information itself, the scene in which it is located, and the desensitization related information, and then the classified and graded evidence information is applied to adjust the determined desensitization requirements, so as to obtain the desensitization requirements of desensitization and classification and grading linkage.

[0091] Among them, the scenario where the first information is located can be determined based on the first information. For example, if the first information is the express recipient information, then the application scenario can be determined to be the express scenario. For another example, if the first information is the real-time location information of the map, and the sensitive information identification result includes the scene feature of the taxi customer's location, then the two can be combined to determine that the application scenario is the online car-hailing scenario. Taking the desensitization requirement as an example with reference to the scenario, assuming that when the hospital system receives a case access request initiated by doctor A at home, the scenario is determined to be home. Based on this, a stronger desensitization requirement is set for the desensitization of medical record information, and doctor A's permissions are restricted to read-only, and he cannot perform operations such as modification, deletion, and forwarding.

[0092] In the desensitization related information, the method of obtaining and adjusting the desensitization intention includes but is not limited to any combination of one or more of the following: buttons, circles, checks, marks, keys, switches, pulleys, menus, voice, audio, video, eye contact, gestures, text, bioelectric signals, and virtual environments; for example, here, the acquisition and adjustment can be reflected as input based on physical switches, such as up and down toggle keys, left and right toggle keys, and can also be reflected as input separated from physical switches, such as screen gestures (left to right, right to left, up to down, down to up, etc.), pop-up interface filling (such as form entry), file (such as XML, JSON format) import, voice entry, etc.; it should be noted that with the development of science and technology, new methods may emerge for obtaining and adjusting the desensitization intention method, and the embodiments of the present invention do not specifically limit this;

[0093] The subject of obtaining the desensitization intention refers to the subject of obtaining or modifying the desensitization intention;

[0094] The desensitization blacklist includes but is not limited to any combination of one or more of the following: desensitization blacklist identification, subject blacklist, information component blacklist, and description of the purpose of the desensitization blacklist;

[0095] The current desensitization constraints include, but are not limited to, any combination of one or more of the following: the current desensitization constraint identifier, desensitization granularity, desensitization level, desensitization before storage, desensitization before use, desensitization after one use, desensitization according to the transmitted desensitization control, desensitization algorithm and its parameters;

[0096] Usage constraints include, but are not limited to, any combination of one or more of the following: usage constraint identification, desensitization before storage, desensitization before use, no desensitization for local use, desensitization required for transmission or publication, local restricted use, and local shared use;

[0097] Desensitized transmission constraints include, but are not limited to, any combination of one or more of the following: desensitized transmission constraint identification, no longer desensitized transmission, updating desensitization control requirements according to extended control, autonomously updating desensitization control requirements, and updating desensitization control requirements according to the protection capabilities of the recipient;

[0098] Propagation constraints include but are not limited to: propagation path constraints, propagation mode constraints, and propagation hop count constraints;

[0099] The transmission path constraints include but are not limited to: information transmission type, information transmission App / system, information transmission ecosystem; the transmission mode constraints include but are not limited to: transmission between personal devices, horizontal transmission, cascade transmission; the transmission hop constraint set includes but is not limited to: the total number of transmission information subjects, the total number of information transmission chain layers;

[0100] The assessment constraints include but are not limited to any combination of one or more of the following: assessment constraint identifier, compliance assessment content, compliance assessment granularity, compliance assessment frequency, desensitization effect assessment content, desensitization effect assessment granularity, and desensitization effect assessment frequency.

[0101] In the linkage-related information, the quantitative protection strategy refers to the privacy protection algorithms and parameters that should be adopted for different types of privacy information in different situations, and / or the privacy protection effects that should be achieved; the protection capability of the receiver refers to the degree of privacy protection and / or effect that the privacy protection algorithm that the subject requires the receiver to support can provide, such as the privacy budget that can be achieved in the differential privacy algorithm; the dissemination path refers to the information exchange channel allowed by the subject, such as storage medium copying and forwarding, email forwarding, etc.; the extended control requirement refers to the information processing method allowed by the subject, such as whether it is allowed to be accessed, modified, deleted, etc., and in what way it is accessed, modified, deleted, etc.

[0102] Based on any of the above embodiments, when the first operation includes desensitization, step 120 includes:

[0103] Based on the desensitization requirement, determine a desensitization control set;

[0104] Based on the desensitizing control set, a desensitizing algorithm set is determined, and based on the desensitizing algorithm set, the first information is desensitized to obtain the second information, and desensitized evidence information is generated in the process of completing at least one of the desensitizing requirements, the desensitizing control set, the desensitizing algorithm set and the second information.

[0105] Specifically, the desensitization control set can reflect the relevant information for desensitizing the first information under the desensitization requirements, and can be used for but not limited to describing and disseminating the first information carried by the first information, and desensitizing control, wherein the carrying method includes but is not limited to: writing into the information extension domain, labeling the information, and writing into the information specific location field.

[0106] The desensitization control set may include the content that needs to be desensitized in the first information, the specific corresponding desensitization requirements, and the desensitization algorithms that may be applied. It may also include relevant information in the process of obtaining the first information, as well as the desensitization process and related information that the first information goes through before being transmitted to the current subject, such as the historical desensitization evaluation results of the first information, the algorithm used for desensitizing the first information in history, the record of changes in the first information before and after desensitization in history, the original information of the first information before desensitization in history, etc. The embodiment of the present invention does not make specific limitations on this.

[0107] The desensitization control set may be generated based on the desensitization requirement, or may be updated based on the desensitization control set sent by the subject before the current subject in combination with the desensitization requirement, which is not specifically limited in the embodiment of the present invention.

[0108] After determining the desensitization control set, the information that needs to be desensitized in the first information can be located based on the information contained in the first desensitization control set, and the desensitization algorithm that needs to be applied for desensitization can be determined accordingly, thereby constructing a desensitization algorithm set. The desensitization algorithm set here may include one or more desensitization algorithms, each of which corresponds to information that needs to be desensitized at different positions in the first information, or multiple desensitization algorithms correspond to information that needs to be desensitized at one or more positions in the first information, and the embodiment of the present invention does not specifically limit this.

[0109] After the desensitization algorithm set is determined, the information that needs to be desensitized in the first information can be desensitized based on the desensitization algorithm set, thereby obtaining the first information after desensitization, which is recorded as the second information here.

[0110] Optionally, in the process of desensitizing the first information based on a desensitizing algorithm set, a desensitization evaluation can be performed on the desensitized information. If the desensitization evaluation result meets the desensitization requirements, the second information is determined by the desensitized information; otherwise, the algorithm and / or algorithm parameters in the desensitization algorithm set are adjusted and desensitized again until the second information that meets the desensitization requirements is obtained.

[0111] In the above-mentioned desensitizing process, the current subject may record at least one of the process of determining the desensitizing requirements, the process of determining the desensitizing control set, the process of determining the desensitizing algorithm set, and the process of generating the second information, thereby forming desensitized evidence information reflecting the desensitizing process.

[0112] The method provided by the embodiment of the present invention desensitizes the first information through a desensitizing control set. The desensitizing control set is continuously updated during the information transmission process, thereby guiding the desensitization of information of each subject in the entire life cycle of information transmission, effectively realizing desensitization control of single / multiple forwarding, avoiding privacy data leakage due to the weak board effect, and realizing full-process iterative desensitization control during multiple forwardings. It can adapt to cross-system, ecosystem sharing and other scenarios with differentiated desensitization protection capabilities of the subject to which the information belongs and each information receiving subject.

[0113] Based on any of the foregoing embodiments, in the case where the first operation includes deletion, the step 110 includes:

[0114] Generate a deletion request based on at least one of the deletion intention, the classified and graded evidence information, and the desensitized evidence information;

[0115] The classification and grading evidence storage information includes classification and grading requirements and / or a pre-built classification and grading knowledge graph;

[0116] The desensitized evidence information includes desensitization intentions and / or pre-built desensitized knowledge graphs.

[0117] Specifically, when the first operation usually includes desensitization, the preceding operation of desensitization may include classification and grading and / or desensitization. The classification and grading here can be applied after information collection to classify and grade the various contents contained in the collected information, so as to determine the first information required for subsequent transmission. Desensitization is applied after the first information is generated to desensitize the first information. It should be noted that classification and grading and / or desensitization can be operations performed by the current subject, or operations performed by any subject arranged before the current subject in the entire life cycle of information dissemination. In the process of classification and grading and / or desensitization, classification and grading evidence information and / or desensitization evidence information are formed, that is, operation evidence information corresponding to classification and grading and / or desensitization.

[0118] Accordingly, when determining the deletion requirement, the deletion requirement may be determined based solely on the deletion intention, or based on the classified and graded evidence information and / or desensitized evidence information, or in combination with the deletion intention and the classified and graded evidence information and / or desensitized evidence information. It should be noted that the deletion requirement determined based on the classified and graded evidence information can be understood as the deletion requirement in the case where the classification and grading are linked with deletion, and the deletion requirement determined based on the desensitized evidence information can be understood as the deletion requirement in the case where desensitization and deletion are linked.

[0119] Furthermore, the desensitized evidence information here includes desensitization requirements and / or pre-built desensitized knowledge graphs. The pre-built desensitized knowledge graphs are knowledge graphs of desensitization fields that are pre-built. The pre-built desensitized knowledge graph library includes requirements and guidance for desensitizing specific information from the perspectives of laws / regulations / standards / systems.

[0120] Based on any of the above embodiments, in step 110, generating a deletion request based on at least one of the deletion intention, the classified and graded evidence information, and the desensitized evidence information includes:

[0121] Based on the classified and graded evidence information and / or desensitized evidence information, and the deletion intention, or based on the classified and graded evidence information and / or desensitized evidence information, the deletion intention, and at least one of the content of the first information itself, the scene in which it is located, and linkage-related information, a deletion requirement for linkage with the classified and graded and / or desensitized evidence information is generated;

[0122] The classified and graded evidence storage information also includes the classification and grading results;

[0123] The desensitized evidence information also includes at least one of desensitization control requirements, methods for obtaining and adjusting desensitization intentions, subjects for obtaining desensitization intentions, desensitization blacklists, current desensitization constraints, usage constraints, desensitization transmission constraints, dissemination constraints, evaluation constraints, and desensitization levels;

[0124] The linkage-related information includes at least one of quantitative protection strategies, recipient's protection capabilities, propagation channels, extended control requirements, storage methods, recipient's violation control measures, violation remote verification / supervision methods, and desensitized information flow status information.

[0125] Specifically, when determining the deletion requirement, in addition to applying the deletion intent, and the classified and graded evidence information and / or the desensitized evidence information, at least one of the content of the first information, the scene in which it is located, and the linkage-related information can also be combined. Specifically, the deletion requirement can be determined based on the deletion intent, or based on the deletion intent and the content of the first information itself and / or the scene in which it is located, and then the deletion requirement can be adjusted in combination with the classified and graded evidence information and / or the desensitized evidence information, so as to obtain the deletion requirement that is linked to the classification and grading and / or desensitization.

[0126] Among them, the storage method refers to the method of storing information allowed by the subject, such as centralized storage, split storage, plain text storage, desensitized storage, encrypted storage, etc.; the receiving party's violation control measures refer to the response methods taken when violations occur, such as prohibiting access, deleting, alarming, adding to blacklists, etc.; violation remote verification / supervision methods, such as remote access interface access inspection, etc., desensitized information flow status information refers to the records of the transmission of desensitized information at different nodes, for example, including: information source, flow sending node, flow receiving node, flow time, data format, desensitization method, etc. Based on any of the above embodiments, when the first operation includes deletion, step 120 includes:

[0127] Obtaining a deletion instruction, wherein the deletion instruction is determined based on the deletion requirement;

[0128] Performing information search based on the deletion instruction to obtain information to be deleted corresponding to the deletion instruction, wherein the information to be deleted is determined based on the first information;

[0129] Determining a deletion algorithm based on the deletion instruction and / or the information to be deleted;

[0130] Based on the deletion algorithm, the information to be deleted is deleted to obtain the second information, and deletion evidence information is generated in the process of completing at least one of the deletion request, the deletion instruction, the information to be deleted, the deletion algorithm and the second information.

[0131] Specifically, the deletion instruction is the embodiment of the deletion operation corresponding to the deletion request. The deletion instruction can be in the form of a deletion notification, that is, the deletion operation that needs to be performed corresponding to the deletion intention is conveyed to each subject in the transmission path of the first information through the deletion notification; the deletion instruction can also be in the form of a deletion trigger condition, that is, the conditions for performing the deletion operation corresponding to the deletion request and the deletion operation that needs to be performed when the conditions are met are conveyed to each subject in the transmission path of the first information through the deletion trigger condition. The embodiment of the present invention does not make specific limitations on this.

[0132] Regarding the acquisition of the deletion instruction, the subject that obtains the deletion request may generate the deletion instruction and send the deletion instruction to each subject in the transmission path of the first information, that is, the current subject directly receives the deletion instruction sent by the subject that generates the deletion instruction. Alternatively, the subject that obtains the deletion request may generate the deletion instruction and send the deletion instruction to the starting subject of the transmission path of the first information, and then each subject in the transmission path transmits the deletion instruction backward one by one according to the rule of the first information transmission, that is, the current subject receives the deletion instruction sent by the previous subject in the first information transmission path. Alternatively, the current subject may directly generate the corresponding deletion instruction based on the deletion request carried in the first information transmission process. The embodiments of the present invention do not make specific limitations on this.

[0133] It should be noted that the acquisition referred to herein may include at least one of receiving, generating, creating, extracting based on existing information, and setting based on existing rules. Taking the acquisition of deletion requirements as an example, the acquisition of deletion requirements may be receiving deletion requirements sent by other entities, or importing a pre-set deletion requirement into the current entity, or generating a deletion requirement based on the settings made by the user based on pre-set deletion requirement setting rules, which is not specifically limited in the embodiments of the present invention.

[0134] After determining the deletion instruction and the information to be deleted corresponding to the deletion instruction, a deletion algorithm suitable for the deletion instruction and the information to be deleted can be selected from a large number of candidate deletion algorithms based on the specific requirements indicated in the deletion instruction and the characteristics or attributes of the information to be deleted. Here, the candidate large number of deletion algorithms may include deleting data indexes, deleting data on storage media, overwriting data, using desensitization instead of deletion, physical destruction, and degaussing destruction.

[0135] After determining the deletion algorithm used to perform the deletion operation, the located information to be deleted can be deleted based on the deletion algorithm, that is, the current subject completes the deletion operation under the deletion requirement.

[0136] The method provided by the embodiment of the present invention executes the deletion operation based on the deletion instruction under the deletion requirement, which can ensure that each subject on the information transmission path can complete the information deletion according to the deletion requirement, thereby ensuring the compliance, efficiency and effectiveness of the execution of the information deletion operation.

[0137] Based on any of the foregoing embodiments, when the first operation includes supervision, obtaining an operation requirement for the current subject to perform the first operation on the first information includes:

[0138] Determine regulatory requirements based on at least one of regulatory intent, classification and grading of stored evidence information, desensitization of stored evidence information, and deletion of stored evidence information;

[0139] The classification and grading evidence storage information includes classification and grading requirements and / or a pre-built classification and grading knowledge graph;

[0140] The desensitized evidence information includes desensitization intention and / or pre-built desensitized knowledge graph;

[0141] The deletion evidence information includes deletion intention and / or a pre-built deletion knowledge graph.

[0142] Specifically, usually when the first operation includes supervision, the preceding operation of supervision may include at least one of classification and grading, desensitization, and deletion. The classification and grading here can be applied after information collection to classify and grade the various contents contained in the collected information, so as to determine the first information required for subsequent transmission. Desensitization and / or deletion is applied after the first information is generated to desensitize and / or delete the first information. It should be noted that at least one of classification and grading, desensitization, and deletion can be an operation performed by the current subject, or it can be an operation performed by any subject arranged before the current subject in the entire life cycle of information dissemination. In the process of at least one of classification and grading, desensitization, and deletion, at least one of classification and grading evidence information, desensitized evidence information, and deletion evidence information is formed, that is, at least one of classification and grading, desensitization, and deletion corresponding to operation evidence information.

[0143] Accordingly, when determining regulatory requirements, they may be determined based solely on regulatory intent, or based on at least one of classified and graded evidence information, desensitized evidence information, and deleted evidence information. They may also be determined in combination with regulatory intent and at least one of classified and graded evidence information, desensitized evidence information, and deleted evidence information. It should be noted that the regulatory requirements determined by the classified and graded evidence information can be understood as regulatory requirements under the linkage between classification and grading and supervision, the regulatory requirements determined by the desensitized evidence information can be understood as regulatory requirements under the linkage between desensitization and supervision, and the regulatory requirements determined by the deletion of evidence information can be understood as regulatory requirements under the linkage between deletion and supervision.

[0144] Furthermore, the deletion evidence information here includes deletion requirements and / or a pre-built deletion knowledge graph. The pre-built deletion knowledge graph is a pre-built knowledge graph of the deletion field. The pre-built deletion knowledge graph library includes requirements and guidance for the deletion of specific information from the legal / regulatory / standard / system levels.

[0145] Based on any of the above embodiments, in step 110, determining the regulatory requirements based on at least one of regulatory intent, classifying and grading the stored evidence information, desensitizing the stored evidence information, and deleting the stored evidence information includes:

[0146] Based on at least one of the classified and graded evidence information, the desensitized evidence information, and the deleted evidence information, and the regulatory intent, or based on at least one of the classified and graded evidence information, the desensitized evidence information, and the deleted evidence information, the regulatory intent, and at least one of the content of the first information itself, the scenario in which it is located, and linkage-related information, generate a regulatory requirement for linkage with at least one of the classified and graded, desensitized, and deleted evidence information;

[0147] The classified and graded evidence storage information also includes the classification and grading results;

[0148] The desensitized evidence information also includes at least one of desensitization control requirements, methods for obtaining and adjusting desensitization intentions, subjects for obtaining desensitization intentions, desensitization blacklists, current desensitization constraints, usage constraints, desensitization transmission constraints, dissemination constraints, evaluation constraints, and desensitization levels;

[0149] The deletion evidence information also includes at least one of the deletion intention, the deletion algorithm, the deleted data, and the deletion consistency assessment result;

[0150] The linkage-related information includes at least one of quantitative protection strategies, recipient's protection capabilities, propagation channels, extended control requirements, storage methods, recipient's violation control measures, violation remote verification / supervision methods, and desensitized information flow status information.

[0151] Specifically, when determining regulatory requirements, in addition to applying regulatory intent and at least one of classified and graded evidence information, desensitized evidence information, and deleted evidence information, it is also possible to combine at least one of the content of the first information itself, the scene in which it is located, and linkage-related information. Specifically, regulatory requirements can be determined based on regulatory intent, or based on regulatory intent and the content of the first information itself and / or the scene in which it is located, and then the regulatory requirements can be adjusted in combination with at least one of classified and graded evidence information, desensitized evidence information, and deleted evidence information, so as to obtain regulatory requirements that are linked to at least one of classification and grading, desensitization, and deletion.

[0152] Among them, in deleting the evidence information, the deletion intention reflects the deletion requirement for the information to be deleted in the first information; the deletion algorithm is the algorithm specifically applied for the deletion operation, which may include deleting data indexes, deleting data on storage media, overwriting data, using desensitization instead of deletion, physical destruction, demagnetization and destruction, etc.; the deleted data is the data after the deletion operation is completed; the deletion consistency assessment result is the result obtained by performing a consistency assessment on the deletion effect after deleting the main body and the copy of the information. The consistency assessment here is used to evaluate and analyze whether the deletion effects of different deletion algorithms used for different information main bodies and copies are consistent.

[0153] Based on any of the above embodiments, when the first operation includes supervision, step 120 includes:

[0154] Generate a query message for stored evidence information based on the regulatory requirements;

[0155] Obtaining supervision information corresponding to the evidence information query message, wherein the supervision information is determined based on the evidence information query message and the operation evidence information;

[0156] Information supervision is performed based on the supervision information to obtain a supervision result.

[0157] Specifically, regulatory requirements are used to reflect requirements for information supervision. Regulatory requirements can be reflected as regulatory requirements for the operations of various entities involved in the information transmission process on the first information. For example, the information operations that can be performed by various entities include at least one or more of collection, classification and grading, desensitizing, use, circulation, storage, deletion, evidence storage, linkage, supervision and regulatory audit. Correspondingly, regulatory requirements can also be used to supervise one or more of the above operations. That is, regulatory requirements may include any combination of one or more of the following: desensitizing regulatory requirements, deletion regulatory requirements, circulation regulatory requirements, collection regulatory requirements, use regulatory requirements, storage regulatory requirements, classification and grading regulatory requirements, evidence storage regulatory requirements, linkage regulatory requirements, and regulatory audit requirements.

[0158] Optionally, in addition to reflecting specific regulatory operations through at least one of desensitizing regulatory requirements, deleting regulatory requirements, circulating regulatory requirements, collecting regulatory requirements, using regulatory requirements, storing regulatory requirements, classifying and grading regulatory requirements, evidence storage regulatory requirements, linkage regulatory requirements, and regulatory audit requirements, the regulatory requirements may also include any combination of one or more of the following: regulatory requirement identification, regulatory requirement generating entity, regulatory requirement generating time, regulatory requirement receiving entity, regulatory requirement receiving time, and regulatory object, so as to reflect the relevant information of the regulatory requirements.

[0159] Taking into account the operation processes of various entities involved in the information transmission process, they are all recorded and stored in the form of operation evidence information. After determining the regulatory requirements, an evidence information query message can be generated based on the regulatory requirements. The evidence information query message here is used to query regulatory information. The regulatory information here is the operation evidence information required for information supervision based on regulatory requirements.

[0160] Similar to the regulatory requirements, corresponding to the operations that can be performed by each entity, the evidence information query message may include any combination of one or more of the following: desensitized evidence information query message, deleted evidence information query message, circulated evidence information query message, collected evidence information query message, used evidence information query message, stored evidence information query message, classified and graded evidence information query message, linked evidence information query message, supervised evidence information query message, and supervised audit evidence information query message.

[0161] It should be noted that the evidence information query message is based on the regulatory requirements, and the specific operations corresponding to the evidence information query message are consistent with the specific operations corresponding to the regulatory requirements. For example, in the case where the regulatory requirements include desensitization regulatory requirements, the evidence information query message generated accordingly must include desensitization evidence information query messages; in the case where the regulatory requirements include collection regulatory requirements, the evidence information query message generated accordingly must include collection evidence information query messages.

[0162] Optionally, in addition to reflecting the information operation corresponding to the evidence information to be queried through at least one of desensitizing the evidence information query message, deleting the evidence information query message, circulating the evidence information query message, collecting the evidence information query message, using the evidence information query message, storing the evidence information query message, classifying and grading the evidence information query message, linking the evidence information query message, and supervising and auditing the evidence information query message, the evidence information query message may also include any combination of one or more of the following: an evidence information query message identifier, an evidence information query message generating entity, an evidence information query message generating time, an evidence information query message receiving entity, and an evidence information query message receiving time, so as to reflect the relevant information of the evidence information query message.

[0163] For the evidence information query message, the current subject can query and determine the regulatory information corresponding to the evidence information query message from the evidence information stored in itself, or send the evidence information query message to other subjects that store evidence information, and the other subjects can query and determine the regulatory information corresponding to the evidence information query message from the evidence information stored in themselves, and return the regulatory information to the current subject. The regulatory information here refers to the evidence information required for information supervision as required by the regulator. It should be noted that the regulatory information is obtained by querying the evidence information query message, and the evidence operation corresponding to the regulatory information is consistent with the operation specifically corresponding to the evidence information query message.

[0164] After obtaining the regulatory information, the information supervision corresponding to the regulatory requirements can be carried out accordingly to obtain the regulatory results.

[0165] The method provided in the embodiment of the present invention determines the regulatory information from the stored evidence information reflecting the operations corresponding to each subject based on the regulatory requirements, and performs information supervision oriented to the regulatory requirements accordingly, thereby ensuring timely and effective supervision of the information operations of each module in the information flow process, which helps to reduce the risk of information leakage and ensure information security.

[0166] Based on any of the above embodiments, the operation intention of the first operation is determined based on the system security intention;

[0167] The system security intention includes the operation intention of each operation, or the system security intention includes the operation intention of each operation and also includes at least one of a system security intention acquisition subject and a system security intention acquisition time;

[0168] The various operations include the first operation.

[0169] Specifically, the system security intention may include the operational intention of each operation, which may be at least one of the collection intention, classification and grading intention, desensitization intention, usage intention, circulation intention, storage intention, deletion intention, evidence intention, linkage intention, supervision intention, and supervision and audit intention. In addition, the system security intention may also include the system security intention acquisition subject and / or the system security intention acquisition time.

[0170] Accordingly, the system security requirements determined based on the system security intention may include at least one of collection requirements, classification and grading requirements, desensitizing requirements, usage requirements, circulation requirements, storage requirements, deletion requirements, evidence requirements, linkage requirements, supervision requirements, and supervision audit requirements. In addition, the system security requirements may also include system security requirements to obtain subject identification and / or system security requirements to obtain subject name.

[0171] In addition, the system security requirements can also be determined based on a pre-built knowledge graph library, where the pre-built knowledge graph library may include at least one of a pre-built acquisition knowledge graph, a pre-built classification and grading knowledge graph, a pre-built desensitizing knowledge graph, a pre-built usage knowledge graph, a pre-built circulation knowledge graph, a pre-built storage knowledge graph, a pre-built deletion knowledge graph, a pre-built evidence knowledge graph, a pre-built linkage knowledge graph, a pre-built supervision knowledge graph, and a pre-built supervision audit knowledge graph.

[0172] Furthermore, the system security intention can be adjusted at any time according to privacy requirements. When privacy requirements change, the system security intention changes accordingly, and the operational requirements of each operation corresponding to the system security intention also change, thereby causing linkage adjustments to the execution of each operation. For example, the adjustment of privacy requirements will affect the selection of desensitization algorithms, the selection of deletion algorithms, and the determination / fusion analysis of abnormal operations, and it is necessary to adjust the desensitization, deletion and other operations in a linked manner.

[0173] Based on any of the above embodiments, the method further includes:

[0174] Generate first evidence information in the process of completing the system security intention.

[0175] Here, the first evidence information is used to record the process of obtaining the system security intention. The first evidence information may include but is not limited to any combination of one or more of the following: the environment in which the system security intention acquisition process is located, the content of the system security intention acquisition, the operator of the system security intention acquisition, the device or system information on which the system security intention acquisition relies, the time of system security intention acquisition, the address of system security intention acquisition, the process record of system security intention acquisition, and the process record of the system security intention being used.

[0176] In addition, second evidence information may also be recorded. The second evidence information is determined in the process of adjusting the operation requirements of the linkage. The second evidence information may include the linkage operation items, the reasons for the linkage, the linkage method, the systems / information involved, the desensitization / deletion / supervision algorithms and parameter adjustments of each system caused by the linkage, the effect after the linkage, etc. The embodiment of the present invention does not make specific limitations on this.

[0177] Based on any of the above embodiments, the method further includes:

[0178] Based on at least one of the first evidence information, the second evidence information, the operation evidence information of each operation, the compliance / effectiveness information of each operation, and the availability / cost information of the collaborative processing system for multi-link operations of personal information, an information protection capability assessment result is generated.

[0179] Specifically, during the execution of the collaborative processing method for multi-link operations on personal information, at least one of the first evidence information, the second evidence information, the operational evidence information of each operation, the compliance / effect information of each operation, and the availability / cost information of the collaborative processing system for multi-link operations on personal information can be applied to call a comprehensive evaluation function to generate an information protection capability evaluation result that can reflect the ability to protect personal rights and interests. The comprehensive evaluation function here can include any combination of one or more of the following contents: expert scoring, cluster analysis, and principal component analysis.

[0180] Here, by calling the comprehensive evaluation function to evaluate the ability to protect personal rights and interests, it is possible to detect whether all operations in desensitization, deletion, supervision, etc. are implemented, whether they are compliant, whether the effects meet the requirements, etc.; and whether the regulatory instructions are followed in conjunction with the disposal when non-compliance occurs, whether the disposal effect meets the requirements, etc. In addition, it is also possible to integrate and analyze the evidence information of each operation, as well as other data, cases, anomalies, reports and other information obtained from within and / or outside the system to evaluate whether there may be infringement incidents; in addition, it is also possible to analyze the availability of the system (for example, whether it affects normal business), the cost (for example, the iteration overhead and system delay caused by the failure to meet the requirements of desensitization, deletion, etc.), etc.

[0181] In addition, after obtaining the information protection capability evaluation results, system rectification requirements can be generated based on the information protection capability evaluation results, or based on abnormal events discovered during the supervision process, the infringement event tracing system can be used to track and trace the infringement events, discover the source of the infringement event, the transmission path, and the cause of the event, etc., and give disposal instructions, and then adjust the operational requirements of each operation according to the system rectification requirements or disposal instructions, so as to perform linkage adjustments on each operation.

[0182] Based on any of the above embodiments, a collaborative processing method for multi-link operations of personal information includes the following steps:

[0183] First, the system security intention is obtained. In addition, the first evidence information can also be determined for the process of obtaining the system security intention;

[0184] Here, the action of acquiring the system security intention can be performed in one or more of the following locations: terminal, information system background; the acquired content can be sent to any combination of one or more of the following: information system background, desensitized subject, deleted subject, regulatory subject, etc.; the first evidence information includes any combination of one or more of the following content: acquiring subject, conditions, environment, time and other elements.

[0185] Then, based on the operational intent of each operation involved in the system security intent, the operational requirements of each operation are determined, such as:

[0186] Based on the desensitization intention and classified and graded evidence information, generate desensitization requirements for desensitization and classification and grading linkage;

[0187] Based on the deletion intention, as well as the classified and graded evidence information and / or desensitized evidence information, a deletion requirement that links deletion with classification and grading and / or desensitization is generated;

[0188] Based on the supervision intention and at least one of the classification and grading of evidence information, desensitizing of evidence information, and deletion of evidence information, a supervision requirement is generated that links supervision with at least one of the classification and grading, desensitizing, and deletion.

[0189] In the process of generating the linkage operation requirement, the second stored evidence information and the second stored evidence information can be determined.

[0190] Then, after obtaining the various linked operation requirements, the corresponding operations can be executed, and during the execution of the corresponding operations, the operation evidence information can be determined.

[0191] Finally, the information protection capability evaluation result can be generated based on at least one of the first evidence information, the second evidence information, the operation evidence information of each operation, the compliance / effect information of each operation, and the availability / cost information of the collaborative processing system of the multi-link operation of personal information. In addition, in the process of adjusting the operation requirements of each operation according to the information protection capability evaluation result, the third evidence information can also be generated.

[0192] Based on any of the above embodiments, Figure 2 : is a schematic diagram of the structure of the collaborative processing device for multi-link operation of personal information provided by the present invention, such as Figure 2 As shown, the device comprises:

[0193] The requirement acquisition unit 210 is used to acquire the operation requirement of the current subject to perform the first operation on the first information, where the first operation includes at least one of collection, classification and grading, desensitization, use, circulation, storage, deletion, evidence storage, linkage, supervision, and supervision audit, where the operation requirement is determined based on the operation intention of the first operation and / or the operation evidence information of the preceding operation of the first operation, where the preceding operation is the operation performed on the first information before the first operation, and the operation evidence information is generated by each subject based on the operation and / or supervision requirement of each subject on the first information;

[0194] The operation execution unit 220 is used to execute the first operation on the first information based on the operation requirement, and generate operation evidence information of the first operation.

[0195] The device provided by the embodiment of the present invention determines the operation requirements of the first operation based on the operation intention and / or the operation evidence information of the previous operation, and executes the first operation accordingly, thereby realizing the control operation of information throughout the entire life cycle of information dissemination, thereby effectively ensuring information security.

[0196] Based on any of the foregoing embodiments, when the first operation includes desensitization, the acquisition unit is required to:

[0197] Generate desensitization requirements based on desensitization intentions and / or classified and graded evidence information;

[0198] The classification and grading evidence information includes classification and grading requirements and / or a pre-built classification and grading knowledge graph.

[0199] Based on any of the above embodiments, the acquisition unit is required to be used for:

[0200] Based on the desensitization intention and / or the classified and graded evidence information, as well as at least one of the content of the first information, the scene in which it is located, desensitization-related information, and linkage-related information, a desensitization requirement for desensitization and linkage of classification and grading is generated;

[0201] The desensitization related information includes at least one of desensitization control requirements, methods for obtaining and adjusting desensitization intentions, subjects for obtaining desensitization intentions, desensitization blacklists, current desensitization constraints, usage constraints, desensitization transmission constraints, dissemination constraints, evaluation constraints, and desensitization levels;

[0202] The linkage-related information includes quantitative protection strategies, receiver protection capabilities, transmission pathways, and extended control requirements.

[0203] Based on any of the above embodiments, the operation execution unit is used to:

[0204] Based on the desensitization requirement, determine a desensitization control set;

[0205] Based on the desensitizing control set, a desensitizing algorithm set is determined, and based on the desensitizing algorithm set, the first information is desensitized to obtain the second information, and desensitized evidence information is generated in the process of completing at least one of the desensitizing requirements, the desensitizing control set, the desensitizing algorithm set and the second information.

[0206] Based on any of the foregoing embodiments, when the first operation includes deletion, the acquiring unit is required to:

[0207] Generate a deletion request based on at least one of the deletion intention, the classified and graded evidence information, and the desensitized evidence information;

[0208] The classification and grading evidence storage information includes classification and grading requirements and / or a pre-built classification and grading knowledge graph;

[0209] The desensitized evidence information includes desensitization intentions and / or pre-built desensitized knowledge graphs.

[0210] Based on any of the above embodiments, the acquisition unit is required to be used for:

[0211] Generate a deletion requirement for linkage with classification and grading and / or desensitization based on the classified and graded evidence information and / or desensitized evidence information, the deletion intention, and at least one of the content of the first information, the scene in which it is located, and linkage related information;

[0212] The classified and graded evidence storage information also includes the classification and grading results;

[0213] The desensitized evidence information also includes at least one of desensitization control requirements, methods for obtaining and adjusting desensitization intentions, subjects for obtaining desensitization intentions, desensitization blacklists, current desensitization constraints, usage constraints, desensitization transmission constraints, dissemination constraints, evaluation constraints, and desensitization levels;

[0214] The linkage-related information includes at least one of quantitative protection strategies, recipient's protection capabilities, propagation channels, extended control requirements, storage methods, recipient's violation control measures, violation remote verification / supervision methods, and desensitized information flow status information.

[0215] Based on any of the above embodiments, the operation execution unit is used to:

[0216] Obtaining a deletion instruction, wherein the deletion instruction is determined based on the deletion requirement;

[0217] Performing information search based on the deletion instruction to obtain information to be deleted corresponding to the deletion instruction, wherein the information to be deleted is determined based on the first information;

[0218] Determining a deletion algorithm based on the deletion instruction and / or the information to be deleted;

[0219] Based on the deletion algorithm, the information to be deleted is deleted to obtain the second information, and deletion evidence information is generated in the process of completing at least one of the deletion request, the deletion instruction, the information to be deleted, the deletion algorithm and the second information.

[0220] Based on any of the foregoing embodiments, when the first operation includes supervision, the acquisition unit is required to:

[0221] Determine regulatory requirements based on at least one of regulatory intent, classification and grading of stored evidence information, desensitization of stored evidence information, and deletion of stored evidence information;

[0222] The classification and grading evidence storage information includes classification and grading requirements and / or a pre-built classification and grading knowledge graph;

[0223] The desensitized evidence information includes desensitization intention and / or pre-built desensitized knowledge graph;

[0224] The deletion evidence information includes deletion intention and / or a pre-built deletion knowledge graph.

[0225] Based on any of the above embodiments, the acquisition unit is required to be used for:

[0226] Generate a regulatory requirement for the linkage between supervision and at least one of the classification and grading evidence information, the desensitized evidence information, and the deleted evidence information based on at least one of the classification and grading evidence information, the desensitized evidence information, and the deleted evidence information, the regulatory intention, and at least one of the content of the first information itself, the scene in which it is located, and linkage-related information;

[0227] The classified and graded evidence storage information also includes the classification and grading results;

[0228] The desensitized evidence information also includes at least one of desensitization control requirements, methods for obtaining and adjusting desensitization intentions, subjects for obtaining desensitization intentions, desensitization blacklists, current desensitization constraints, usage constraints, desensitization transmission constraints, dissemination constraints, evaluation constraints, and desensitization levels;

[0229] The deletion evidence information also includes at least one of the deletion intention, the deletion algorithm, the deleted data, and the deletion consistency assessment result;

[0230] The linkage-related information includes at least one of quantitative protection strategies, recipient's protection capabilities, propagation channels, extended control requirements, storage methods, recipient's violation control measures, violation remote verification / supervision methods, and desensitized information flow status information.

[0231] Based on any of the above embodiments, the operation execution unit is used to:

[0232] Generate a query message for stored evidence information based on the regulatory requirements;

[0233] Obtaining supervision information corresponding to the evidence information query message, wherein the supervision information is determined based on the evidence information query message and the operation evidence information;

[0234] Information supervision is performed based on the supervision information to obtain a supervision result.

[0235] Based on any of the above embodiments, the operation intention of the first operation is determined based on the system security intention;

[0236] The system security intention includes the operation intention of each operation, or the system security intention includes the operation intention of each operation and also includes at least one of a system security intention acquisition subject and a system security intention acquisition time;

[0237] The various operations include the first operation.

[0238] Based on any of the above embodiments, the device further includes a first evidence storage unit, which is used to:

[0239] Generate first evidence information in the process of completing the system security intention.

[0240] Based on any of the above embodiments, the device further includes an evaluation unit, configured to:

[0241] Based on at least one of the first evidence information, the second evidence information, the operation evidence information of each operation, the compliance / effectiveness information of each operation, and the availability / cost information of the collaborative processing system for multi-link operations of personal information, an information protection capability assessment result is generated.

[0242] Based on any of the above embodiments, Figure 3 This is one of the structural diagrams of the collaborative processing system for multi-link operation of personal information provided by the present invention, such as Figure 3 As shown, the system includes a main body 310 for performing various operations on the first information, and the main body is equipped with a collaborative processing device 320 for multi-link operations of personal information.

[0243] The system provided by the embodiment of the present invention can integrate multiple links such as personal information collection and classification and grading, initial desensitization and iterative desensitization, automatic deletion and on-demand deletion, active supervision and passive supervision, status management and evidence storage, and comprehensive evaluation of personal rights and interests. The various links of the collaborative processing system for multi-link operations of personal information are integrated, organically integrated, and coordinated with each other to form a closed loop, thereby supporting the implementation of the right to know, the right to be forgotten, the right to delete, and extended authorization of privacy information.

[0244] Based on any of the above embodiments, Figure 4 This is the second structural diagram of the collaborative processing system for multi-link operation of personal information provided by the present invention. Figure 4 As shown, Figure 4 The terminals or systems, application platforms, information protection supervision centers, information protection supervision sub-centers, and evidence storage systems are all entities in the collaborative processing system for multi-link operations of personal information.

[0245] The terminal or system is used to perform the collection operation. After collecting the personal information, the terminal or system can form the first information containing the personal information and send it to the application platform. When the information is deleted, the terminal or system can send a deletion notification to the application platform, and the application platform can send a deletion confirmation to the terminal or system after deleting the information.

[0246] The application platform can perform the first operation mentioned in this embodiment, including at least one of classification, desensitization, use, circulation, storage, deletion, evidence storage, linkage, supervision and supervision audit. When performing the deletion operation, it can be specifically performed after receiving the deletion notification sent by the terminal or system, and the deletion confirmation is returned to the terminal or system after the deletion is completed. When performing classification, grading, desensitization and other operations on demand, iterative desensitization (multiple iterative desensitization can be performed within the application platform, and iterative desensitization can also occur when information circulates on different application platforms) and extended control operations can be performed when information needs to be transmitted between each other. The execution process of the above-mentioned various operations will form operation evidence information and store it in the evidence subject. The information protection supervision sub-center or information protection supervision center corresponding to the platform can send supervision and disposal instructions to the application platform according to the actual supervision results. After the application platform is executed, it sends the result of the supervision response to the information protection supervision sub-center or information protection supervision center. It should be noted that the evidence system can also exist in the application platform or exist independently, and is used to store operation evidence for the information protection supervision center (regional) and the information protection supervision sub-center (self-built) to collect evidence of abnormal operations.

[0247] Both the information protection supervision center and the information protection supervision sub-center can perform supervision operations, and the information protection supervision sub-center here can be set up inside the above-mentioned application platform as a self-built information protection supervision sub-center to achieve self-regulation of the subject. The information protection supervision center and the information protection supervision sub-center can obtain the evidence information required for supervision from the evidence storage subject, and collect evidence of abnormal operations from the subjects performing various operations. When infringement incidents are discovered through fusion analysis, receiving reports, etc., a supervision disposal strategy is generated and issued to the subjects performing various operations, so as to make corresponding adjustments in different links.

[0248] Apart from Figure 4 For each subject involved, a comprehensive assessment subject may also be set up to conduct an assessment of the individual rights and interests protection capability of each operation evidence information and the first and second evidence information, thereby obtaining an information protection capability assessment result.

[0249] Based on any of the above embodiments, Figure 5 This is the third structural diagram of the collaborative processing system for multi-link operation of personal information provided by the present invention. Figure 5 As shown, the system includes a privacy data flow status management and evidence storage subject, a classification and grading subject, a desensitizing subject, a deletion subject and a supervision subject.

[0250] The classification and grading subjects, desensitizing subjects, deletion subjects and regulatory subjects can all perform their corresponding operations and upload the operation logs obtained from the operations as operation evidence information to the privacy data flow status management and evidence subject.

[0251] During this process, the classification and grading subject can call the personal sensitive information identification module, the classification and grading module and the classification and grading knowledge graph library module based on the classification and grading requirements to classify and grade the user data to obtain the first information, and the desensitizing subject can call the personal sensitive information on-demand desensitization module based on the desensitization requirements to desensitize the first information to obtain the second information.

[0252] In addition, the desensitizing subject may also call the personal information splitting, desensitizing, storage and reconstruction module according to the usage requirements and / or storage requirements, split or reorganize the second information to obtain the third information, and store the third information according to the storage requirements; or, the desensitizing subject may also transfer the second information or the third information to the recipient according to the transfer requirements, and the recipient here may be any subject;

[0253] In addition, the desensitizing subject may also send the second information or the third information to the classification and grading subject, which will classify and grade the second information or the third information according to the classification and grading requirements and the classification and grading knowledge graph library module to obtain the fourth information. Subsequently, the desensitizing subject will call the on-demand desensitization module for personal sensitive information according to the desensitization requirements, and re-desensitize the fourth information to obtain the fifth information. The fifth information thus obtained can be regarded as the iterative execution of the above process by the second information, which will not be elaborated here.

[0254] In this process, the classification and grading subject can upload the classification and grading labels generated during the classification and grading process, the results of sensitive information identification, and the results of the effect evaluation after the classification and grading as classification and grading evidence information to the privacy data flow status management and evidence subject. The desensitizing subject can upload the desensitization strategy / implementation method / operation log generated during the desensitization process as classification and grading evidence information to the privacy data flow status management and evidence subject, and can also obtain historical desensitization operation logs from the privacy data flow status management and evidence subject to perform desensitization effect / compliance testing, and upload the test results as desensitization evidence information to the privacy data flow status management and evidence subject. The above-mentioned process of information collection, desensitization, storage, circulation, classification and grading, and use forms the first link evidence information in the privacy data flow status management and evidence subject.

[0255] During this process, the deleting subject can call the deletion instruction notification and confirmation module and the deterministic deletion module to delete the information to be deleted based on the deletion notification and the evidence information of the first stage, and determine the second stage evidence information to upload the privacy data flow status management and the evidence subject. Compared with the evidence information of the first stage, the evidence information of the second stage here can also include deletion evidence information. The deletion evidence information can include deletion notification / confirmation / operation log, and can also include deletion effect evaluation results.

[0256] In this process, the regulatory body can obtain the evidence information that needs to be supervised from the privacy data flow status management and evidence storage subject, that is, the operation log of the supervision operation. And according to the evidence information that needs to be supervised and the system security requirements, call the desensitization effect evaluation module, the desensitization technical requirements compliance inspection module, the classification and grading effect evaluation module, the deletion effect evaluation module, the abnormal operation aggregation storage module, and the abnormal operation fusion analysis module to make compliance and effectiveness judgments, generate supervision results, and generate third evidence information and upload it to the privacy data flow status management and evidence storage subject. Compared with the second link evidence information, the third link evidence information here can also include supervision evidence information and supervision audit evidence information.

[0257] In addition, the regulatory body can also call the abnormal operation fusion analysis module according to the system security requirements and regulatory information, analyze the regulatory information and generate fusion analysis results, and call the rights protection supervision and disposal module according to any combination of the regulatory results, fusion analysis results, infringement incident tracing results, and regulatory information to generate special rectification requirements; generate disposal instructions according to the special rectification requirements, and send the disposal instructions to each entity.

[0258] The treatment instruction includes but is not limited to any combination of one or more of the following: a treatment instruction identifier, a treatment object, a treatment time, and a treatment operation;

[0259] Each entity performs disposal operations according to the disposal instructions, generates disposal results, and sends the disposal results to the regulatory entity; the disposal results include but are not limited to any combination of one or more of the following: disposal result identification, disposal conclusion, disposal entity, disposal time, and disposal conclusion description.

[0260] In addition, the comprehensive evaluation function can be called based on any combination of one or more of the system solution evaluation index system, evidence information, supervision results, infringement incidents, infringement incident handling results, and infringement incident handling feedback results to generate information protection capability assessment results that can reflect the ability to protect personal rights and interests, and / or generate system rectification requirements.

[0261] Figure 6 An example of a physical structure diagram of an electronic device is shown in FIG. Figure 6As shown, the electronic device may include: a processor 610, a communication interface 620, a memory 630 and a communication bus 640, wherein the processor 610, the communication interface 620 and the memory 630 communicate with each other through the communication bus 640. The processor 610 may call the logic instructions in the memory 630 to execute the collaborative processing method of multi-link operation of personal information, the method comprising: obtaining the operation requirement of the current subject to perform the first operation on the first information, the first operation including at least one of collection, classification and grading, desensitization, use, circulation, storage, deletion, evidence storage, linkage, supervision and supervision audit, the operation requirement is determined based on the operation intention of the first operation, and / or the operation evidence information of the preceding operation of the first operation, the preceding operation is the operation performed on the first information before the first operation, the operation evidence information is generated by each subject based on the operation and / or supervision requirements of each subject on the first information; based on the operation requirement, the first operation is performed on the first information, and the operation evidence information of the first operation is generated.

[0262] In addition, the logic instructions in the above-mentioned memory 630 can be implemented in the form of a software functional unit and can be stored in a computer-readable storage medium when it is sold or used as an independent product. Based on such an understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art or the part of the technical solution, can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk and other media that can store program codes.

[0263] On the other hand, the present invention also provides a computer program product, which includes a computer program, which can be stored on a non-transitory computer-readable storage medium. When the computer program is executed by a processor, the computer can execute the collaborative processing method of multi-link operations on personal information provided by the above methods, the method including: obtaining the operation requirements of the current subject to perform the first operation on the first information, the first operation including at least one of collection, classification and grading, desensitization, use, circulation, storage, deletion, evidence, linkage, supervision, and supervision audit, the operation requirement is based on the operation intention of the first operation, and / or, the operation evidence information of the preceding operation of the first operation is determined, the preceding operation is the operation performed on the first information before the first operation, the operation evidence information is generated by each subject based on the operation and / or supervision requirements of each subject on the first information; based on the operation requirements, the first operation is performed on the first information, and the operation evidence information of the first operation is generated.

[0264] On the other hand, the present invention also provides a non-transitory computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements a collaborative processing method for executing multiple links of personal information operations provided by the above methods, the method comprising: obtaining the operation requirements of the current subject for performing the first operation on the first information, the first operation comprising at least one of collection, classification and grading, desensitization, use, circulation, storage, deletion, evidence storage, linkage, supervision, and regulatory audit, the operation requirement being determined based on the operation intention of the first operation, and / or the operation evidence information of a preceding operation of the first operation, the preceding operation being an operation performed on the first information before the first operation, the operation evidence information being generated by each subject based on the operation and / or supervision requirements of each subject on the first information; based on the operation requirements, performing the first operation on the first information, and generating operation evidence information of the first operation.

[0265] The device embodiments described above are merely illustrative, wherein the units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the scheme of this embodiment. Ordinary technicians in this field can understand and implement it without paying creative labor.

[0266] Through the description of the above implementation methods, those skilled in the art can clearly understand that each implementation method can be implemented by means of software plus a necessary general hardware platform, and of course, it can also be implemented by hardware. Based on this understanding, the above technical solution is essentially or the part that contributes to the prior art can be embodied in the form of a software product, and the computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, a disk, an optical disk, etc., including a number of instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in each embodiment or some parts of the embodiments.

[0267] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A collaborative processing method for multi-link operations of personal information, characterized in that: The method is applied to a current subject that performs a first operation on first information, and the method includes: Obtaining an operation requirement for the current subject to perform the first operation on the first information, where the first operation includes at least one of collection, classification and grading, desensitization, use, circulation, storage, deletion, evidence storage, linkage, supervision, and supervision audit, where the operation requirement is determined based on operation evidence information of a preceding operation of the first operation, or, where the operation requirement is determined based on an operation intention of the first operation and operation evidence information of a preceding operation of the first operation, where the preceding operation is an operation performed on the first information before the first operation, and the operation evidence information of the preceding operation is generated by each subject that is prior to the current subject in the entire life cycle of information dissemination based on the operation and / or supervision requirements of each subject on the first information; Based on the operation requirement, perform the first operation on the first information, and generate operation evidence information of the first operation; In a case where the first operation includes desensitization, the obtaining an operation requirement for the current subject to perform the first operation on the first information includes: Generate a desensitization requirement based on the desensitization intention and the classified and graded evidence information, or based on the graded and graded evidence information; The classification and grading evidence storage information includes classification and grading requirements and / or a pre-built classification and grading knowledge graph; The performing the first operation on the first information based on the operation requirement and generating operation evidence information of the first operation includes: Based on the desensitization requirement, determine a desensitization control set; Based on the desensitizing control set, a desensitizing algorithm set is determined, and based on the desensitizing algorithm set, the first information is desensitized to obtain the second information, and desensitized evidence information is generated in the process of completing at least one of the desensitizing requirements, the desensitizing control set, the desensitizing algorithm set and the second information.

2. The collaborative processing method for multi-link operations of personal information according to claim 1, characterized in that: The generating of desensitization requirements based on the desensitization intention and the classified and graded evidence information, or based on the classified and graded evidence information, includes: Based on the desensitization intention and the classified and graded evidence information, as well as at least one of the content of the first information, the scene in which it is located, desensitization-related information, and linkage-related information, a desensitization requirement for desensitization and linkage of classification and grading is generated; The desensitization related information includes at least one of desensitization control requirements, methods for obtaining and adjusting desensitization intentions, subjects for obtaining desensitization intentions, desensitization blacklists, current desensitization constraints, usage constraints, desensitization transmission constraints, dissemination constraints, evaluation constraints, and desensitization levels; The linkage-related information includes quantitative protection strategies, receiver protection capabilities, transmission pathways, and extended control requirements.

3. The collaborative processing method for multi-link operations of personal information according to claim 1, characterized in that: In the case where the first operation includes deletion, obtaining the operation requirement of the current subject to perform the first operation on the first information includes: Generate a deletion request based on at least one of the classified and graded evidence information and the desensitized evidence information, or based on at least one of the classified and graded evidence information and the desensitized evidence information and the deletion intention; The classification and grading evidence storage information includes classification and grading requirements and / or a pre-built classification and grading knowledge graph; The desensitized evidence information includes desensitization intentions and / or pre-built desensitized knowledge graphs.

4. The collaborative processing method for multi-link operations of personal information according to claim 3 is characterized in that: The step of generating a deletion request based on at least one of the classified and graded evidence information and the desensitized evidence information, or based on at least one of the classified and graded evidence information and the desensitized evidence information and the deletion intention, includes: Generate a deletion requirement for linkage with classification and grading and / or desensitization based on the classified and graded evidence information and / or desensitized evidence information, the deletion intention, and at least one of the content of the first information, the scene in which it is located, and linkage related information; The classification and grading evidence storage information also includes classification and grading results; The desensitized evidence information also includes at least one of desensitization control requirements, methods for obtaining and adjusting desensitization intentions, subjects for obtaining desensitization intentions, desensitization blacklists, current desensitization constraints, usage constraints, desensitization transmission constraints, dissemination constraints, evaluation constraints, and desensitization levels; The linkage-related information includes at least one of quantitative protection strategies, recipient's protection capabilities, propagation channels, extended control requirements, storage methods, recipient's violation control measures, violation remote verification / supervision methods, and desensitized information flow status information.

5. The collaborative processing method for multi-link operations of personal information according to claim 3 is characterized in that: The performing the first operation on the first information based on the operation requirement and generating operation evidence information of the first operation includes: Obtaining a deletion instruction, wherein the deletion instruction is determined based on the deletion requirement; Performing information search based on the deletion instruction to obtain information to be deleted corresponding to the deletion instruction, wherein the information to be deleted is determined based on the first information; Determining a deletion algorithm based on the deletion instruction and / or the information to be deleted; Based on the deletion algorithm, the information to be deleted is deleted to obtain the second information, and deletion evidence information is generated in the process of completing at least one of the deletion request, the deletion instruction, the information to be deleted, the deletion algorithm and the second information.

6. The collaborative processing method for multi-link operations of personal information according to claim 1, characterized in that: In a case where the first operation includes supervision, the obtaining an operation requirement for the current subject to perform the first operation on the first information includes: Determine the regulatory requirements based on at least one of the classified and graded evidence information, the desensitized evidence information, and the deleted evidence information, or based on at least one of the classified and graded evidence information, the desensitized evidence information, and the deleted evidence information, as well as the regulatory intent; The classification and grading evidence storage information includes classification and grading requirements and / or a pre-built classification and grading knowledge graph; The desensitized evidence information includes desensitization intention and / or pre-built desensitization knowledge graph; The deletion evidence information includes deletion intention and / or a pre-built deletion knowledge graph.

7. The collaborative processing method for multi-link operations of personal information according to claim 6, characterized in that: The determining of regulatory requirements based on at least one of the classified and graded evidence information, the desensitized evidence information, and the deleted evidence information, or based on at least one of the classified and graded evidence information, the desensitized evidence information, and the deleted evidence information, and the regulatory intent, includes: Generate a regulatory requirement for the linkage between supervision and at least one of the classification and grading evidence information, the desensitized evidence information, and the deleted evidence information based on at least one of the classification and grading evidence information, the desensitized evidence information, and the deleted evidence information, the regulatory intention, and at least one of the content of the first information itself, the scene in which it is located, and linkage-related information; The classified and graded evidence storage information also includes the classification and grading results; The desensitized evidence information also includes at least one of desensitization control requirements, methods for obtaining and adjusting desensitization intentions, subjects for obtaining desensitization intentions, desensitization blacklists, current desensitization constraints, usage constraints, desensitization transmission constraints, dissemination constraints, evaluation constraints, and desensitization levels; The deletion evidence information also includes at least one of the deletion intention, the deletion algorithm, the deleted data, and the deletion consistency assessment result; The linkage-related information includes at least one of quantitative protection strategies, recipient's protection capabilities, propagation channels, extended control requirements, storage methods, recipient's violation control measures, violation remote verification / supervision methods, and desensitized information flow status information.

8. The collaborative processing method for multi-link operations of personal information according to claim 6, characterized in that: The performing the first operation on the first information based on the operation requirement and generating operation evidence information of the first operation includes: Generate a query message for stored evidence information based on the regulatory requirements; Obtaining supervision information corresponding to the evidence information query message, wherein the supervision information is determined based on the evidence information query message and the operation evidence information; Information supervision is performed based on the supervision information to obtain a supervision result.

9. The collaborative processing method for multi-link operations of personal information according to any one of claims 1 to 8, characterized in that: The operation intention of the first operation is determined based on the system security intention; The system security intention includes the operation intention of each operation, or the system security intention includes the operation intention of each operation and also includes at least one of a system security intention acquisition subject and a system security intention acquisition time; The various operations include the first operation.

10. The collaborative processing method for multi-link operations of personal information according to claim 9, characterized in that: Also includes: Generate first evidence information in the process of completing the system security intention.

11. The collaborative processing method for multi-link operations of personal information according to claim 10, characterized in that: Also includes: Based on at least one of the first evidence information, the second evidence information, the operation evidence information of each operation, the compliance / effectiveness information of each operation, and the availability / cost information of the collaborative processing system for multi-link operations of personal information, an information protection capability assessment result is generated.

12. A collaborative processing device for multi-link operations of personal information, characterized in that: The device is applied to a current subject that performs a first operation on first information, and the device includes: a requirement acquisition unit, used for acquiring an operation requirement of the current subject to perform the first operation on the first information, the first operation including at least one of collection, classification and grading, desensitization, use, circulation, storage, deletion, evidence storage, linkage, supervision and supervision audit, the operation requirement is determined based on the operation evidence information of a preceding operation of the first operation, or the operation requirement is determined based on the operation intention of the first operation and the operation evidence information of a preceding operation of the first operation, the preceding operation is an operation performed on the first information before the first operation, and the operation evidence information of the preceding operation is generated by each subject that is before the current subject in the entire life cycle of information dissemination based on the operation and / or supervision requirements of each subject on the first information; an operation execution unit, configured to execute the first operation on the first information based on the operation requirement, and generate operation evidence information of the first operation; In the case where the first operation includes desensitization, the requirement acquisition unit is specifically used to: Generate a desensitization requirement based on the desensitization intention and the classified and graded evidence information, or based on the graded and graded evidence information; The classification and grading evidence storage information includes classification and grading requirements and / or a pre-built classification and grading knowledge graph; The operation execution unit is specifically used for: Based on the desensitization requirement, determine a desensitization control set; Based on the desensitizing control set, a desensitizing algorithm set is determined, and based on the desensitizing algorithm set, the first information is desensitized to obtain the second information, and desensitized evidence information is generated in the process of completing at least one of the desensitizing requirements, the desensitizing control set, the desensitizing algorithm set and the second information.

13. A collaborative processing system for multi-link operations of personal information, characterized in that: It includes a main body used to perform various operations on the first information, and the main body is equipped with a collaborative processing device for multi-link operations of personal information as described in claim 12.

14. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein: When the processor executes the program, it implements the collaborative processing method of multi-link operations of personal information as described in any one of claims 1 to 11.

15. A non-transitory computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, it implements the collaborative processing method of multi-link operations of personal information as described in any one of claims 1 to 11.

Images