A method, device, and readable storage medium for processing an operation request

Abstract

The application discloses a kind of, belong to data analysis field, for the reliability of operation request is evaluated.Considering the influence brought by operation request and its change to target sensitive data and the request content of the operation request has strong relevance, and the security of different request sources has big difference, therefore the present application can determine the content change information before and after target sensitive data executes operation request according to request content, then according to content change information, request content and respective preset weight, the influence score of operation request is calculated, according to request source, the security level of operation request is determined in combination with preset security evaluation algorithm, so that auditing personnel can audit operation request according to content change information, influence score, security level and request content, even if inexperienced also can obtain reliable audit result, improve user experience and reduce the risk of sensitive data.

Description

Technical Field

[0001] This invention relates to the field of data analysis, and in particular to a method for processing operation requests. This invention also relates to an apparatus, device, and computer-readable storage medium for processing operation requests. Background Technology

[0002] When using a network system, users often initiate sensitive operations on sensitive data, such as adding, deleting, and modifying data. Because these sensitive operations may pose certain risks, they need to be reviewed by dedicated auditors. Only after the review is approved can the user continue to execute the initiated sensitive operation. However, auditors usually rely solely on experience to review sensitive operations, which may lead to inaccurate reviews by inexperienced auditors, affecting user experience and increasing the risk to sensitive data.

[0003] Therefore, how to provide a solution to the above-mentioned technical problems is a problem that needs to be solved by those skilled in the art. Summary of the Invention

[0004] The purpose of this invention is to provide a method for processing operation requests, which can calculate the content change information, influence score, security level, and request content corresponding to the operation request, so as to assist reviewers in reviewing operation requests. Even if the reviewers lack experience, they can obtain reliable review results, thereby improving user experience and reducing the risk of sensitive data. Another purpose of this invention is to provide an apparatus, device, and computer-readable storage medium for processing operation requests, which can calculate the content change information, influence score, security level, and request content corresponding to the operation request, so as to assist reviewers in reviewing operation requests. Even if the reviewers lack experience, they can obtain reliable review results, thereby improving user experience and reducing the risk of sensitive data.

[0005] To address the aforementioned technical problems, the present invention provides a method for processing operation requests, comprising:

[0006] Intercept user-initiated requests to manipulate sensitive data;

[0007] Based on the parsed request content of the operation request, determine the content change information of the target sensitive data to be accessed by the operation request before and after the operation request is executed;

[0008] The influence score of the operation request is calculated based on the content change information, the preset weights of each field of the target sensitive data, the request content, and the preset weights of each parameter in the request content.

[0009] The security level of the operation request is determined based on the request source in the request content and a preset security assessment algorithm.

[0010] The content change information, the influence score, the security level, and the request content are sent together to the target location for review by the reviewers.

[0011] Preferably, determining the content change information of the target sensitive data to be accessed by the operation request before and after executing the operation request, based on the parsed request content, specifically involves:

[0012] Parse the request address, request parameters, request implementation class and implementation method, request source, operator information and request time in the operation request;

[0013] The target sensitive data to be accessed by the operation request is determined from the request address;

[0014] Based on the request parameters, determine the content changes of the target sensitive data before and after executing the operation request.

[0015] Preferably, determining the security level of the operation request based on the request source in the request content and in conjunction with a preset security assessment algorithm specifically involves:

[0016] Determine whether the request source in the request content is located in a preset set of secure sources;

[0017] If it is located in [location], then the security level of the operation request is high;

[0018] If not located, the security level of the operation request is low.

[0019] Preferably, the interception of user-initiated operation requests for sensitive data specifically refers to:

[0020] Intercept user-initiated requests for operations on sensitive data that fall within a preset interception range.

[0021] Preferably, the method for processing the operation request after the content change information, the influence score, the security level, and the request content are jointly sent to the target location for review by the reviewer further includes:

[0022] When the operation request is approved, the operation request is invoked and executed using Java reflection technology based on the request parameters, implementation class, and implementation method of the operation request.

[0023] Preferably, when the operation request is approved, after invoking and executing the operation request using Java reflection technology based on the request parameters, implementation class, and implementation method of the operation request, the processing method for the operation request further includes:

[0024] Determine whether the operation request was executed successfully;

[0025] If the execution fails, the execution count is incremented by one and it is determined whether the execution count is greater than a preset threshold.

[0026] If it is not greater than, then the step of calling and executing the operation request using JAVA reflection technology according to the request parameters, implementation class and implementation method of the operation request is executed;

[0027] If the value is greater than the specified value, the control prompt will indicate that the execution failed.

[0028] Preferably, the method for processing the operation request further includes:

[0029] Determine the time consumed at each step from the generation of the operation request to the generation of the review result and execution result of the operation request, and determine the final number of times the operation request is executed and the execution result;

[0030] Based on the time consumed, the number of executions, and the execution result, a health status assessment is performed on the review and execution process of the operation request;

[0031] The control prompt displays the assessment results of the health status evaluation.

[0032] To address the aforementioned technical problems, the present invention also provides an operation request processing apparatus, comprising:

[0033] The interception module is used to intercept user-initiated requests to manipulate sensitive data;

[0034] The determination module is used to determine, based on the parsed request content of the operation request, the content change information of the target sensitive data to be accessed by the operation request before and after the operation request is executed;

[0035] The calculation module is used to calculate the influence score of the operation request based on the content change information, the preset weights of each field of the target sensitive data, the request content, and the preset weights of each parameter in the request content.

[0036] The evaluation module is used to determine the security level of the operation request based on the request source in the request content and a preset security evaluation algorithm.

[0037] The sending module is used to send the content change information, the influence score, the security level, and the request content to the target location for review by the reviewers.

[0038] To address the aforementioned technical problems, the present invention also provides an operation request processing device, comprising:

[0039] Memory, used to store computer programs;

[0040] A processor for executing the computer program to implement the steps of a processing method for the operation request as described above.

[0041] To address the aforementioned technical problems, the present invention also provides a computer-readable storage medium storing a computer program, which, when executed by a processor, implements the steps of the processing method for the operation request described above.

[0042] This invention provides a method for processing operation requests. Considering the strong correlation between the impact of an operation request and its modification of the target sensitive data, as well as the content of the request, and the significant differences in security between different request sources, this application can determine the content changes of the target sensitive data before and after the operation request is executed based on the request content. Then, based on the content change information, the request content, and their respective preset weights, an impact score for the operation request is calculated. The security level of the operation request is determined based on the request source and a preset security assessment algorithm. This allows reviewers to review operation requests based on content change information, impact score, security level, and request content. Even with limited experience, reliable review results can be obtained, improving user experience and reducing the risk to sensitive data.

[0043] The present invention also provides an operation request processing apparatus, device, and computer-readable storage medium, which have the same beneficial effects as the operation request processing method described above. Attached Figure Description

[0044] To more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings used in the prior art and embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0045] Figure 1 A flowchart illustrating an operation request processing method provided by the present invention;

[0046] Figure 2 A schematic diagram of the structure of an operation request processing device provided by the present invention;

[0047] Figure 3 This is a schematic diagram of the structure of an operation request processing device provided by the present invention. Detailed Implementation

[0048] The core of this invention is to provide a method for processing operation requests, which can calculate the content change information, influence score, security level, and request content corresponding to the operation request, so as to assist reviewers in reviewing operation requests. Even if they lack experience, they can obtain reliable review results, thereby improving user experience and reducing the risk of sensitive data. Another core aspect of this invention is to provide an operation request processing device, equipment, and computer-readable storage medium, which can calculate the content change information, influence score, security level, and request content corresponding to the operation request, so as to assist reviewers in reviewing operation requests. Even if they lack experience, they can obtain reliable review results, thereby improving user experience and reducing the risk of sensitive data.

[0049] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0050] Please refer to Figure 1 , Figure 1 This is a flowchart illustrating a method for processing an operation request provided by the present invention. The method includes:

[0051] S101: Intercept user-initiated requests to manipulate sensitive data;

[0052] Specifically, considering the technical problems mentioned above, and taking into account the strong correlation between the impact of the operation request and its modification of the target sensitive data and the content of the operation request, and the significant differences in the security of different request sources, this application aims to assist reviewers in reviewing sensitive operation requests from the perspectives of "the impact of the operation request" and "the security of the request source". To analyze the operation request, it is necessary to first intercept the required operation request. Therefore, in this embodiment of the invention, user-initiated operation requests for sensitive data are intercepted first.

[0053] Sensitive data can be set independently. For example, the path of the directory where sensitive data is located can be preset. If the path of the data that the operation request wants to access is the same as the preset path, it can be considered that the operation request needs to access sensitive data.

[0054] Specifically, the operation request can be of various types, such as the operation request for adding, deleting, modifying and querying specified data. This embodiment of the invention does not limit the types of operations.

[0055] S102: Based on the parsed request content of the operation request, determine the content changes of the target sensitive data to be accessed by the operation request before and after the operation request is executed;

[0056] Specifically, based on the intercepted operation request, the request content can be parsed out. The request content usually contains the target data that the operation request specifies to be accessed. Therefore, in this embodiment of the invention, the target sensitive data that the operation request specifies to be accessed is determined based on the request content. The content change information of the target sensitive data before and after the operation request is executed is a relatively important part of the "impact of the operation request". Therefore, this application can determine the content change information of the target sensitive data before and after the operation request is executed based on the request content of the operation request, so as to use it as the data basis for subsequent steps to evaluate the "impact of the operation request".

[0057] S103: Calculate the impact score of the operation request based on the content change information, the preset weights of each field of the target sensitive data, the request content, and the preset weights of each parameter in the request content.

[0058] Specifically, the changes made to data in an operation request can generally be specific to changes to certain fields in the data. Since different fields have varying importance, this embodiment of the invention can calculate the score corresponding to the content change information based on the content change information and the preset weights of each field in the target sensitive data. Furthermore, considering that different parameters in the request content also have different impacts on the sensitive data (e.g., different request sources and different operators have different impacts), this embodiment of the invention can calculate the influence score corresponding to each parameter in the request content based on the request content and the preset weights of each parameter in the request content. Finally, by adding the score corresponding to the content change information and the influence score corresponding to the parameters in the request content, the influence score of the operation request can be obtained. This influence score can accurately reflect the magnitude of the influence of the operation request on the target sensitive data.

[0059] The preset weights of each field and parameter can be set flexibly and independently, and this embodiment of the invention does not impose any limitations on them.

[0060] S104: Determine the security level of the operation request based on the request source in the request content and the preset security assessment algorithm;

[0061] Specifically, considering that the security of different request sources varies, for example, some request sources are usually more secure than others, and auditors usually do not have the ability to directly observe the security differences between different request sources, this embodiment of the invention can determine the security level of the operation request based on the request source in the request content and a preset security assessment algorithm, so as to provide the security level as a reference to the auditors and facilitate their comprehensive analysis and audit.

[0062] S105: Send the content change information, influence score, security level, and request content together to the target location for review by the reviewers.

[0063] Specifically, after obtaining the aforementioned influence score and security level, these two data points can be sent to the target location as the core data so that the reviewers can refer to them when reviewing the operation request.

[0064] Furthermore, since the applicant also considers that the information on content changes and the content of the request are usually of certain reference value for the review work, the embodiment of the present invention can also send the information on content changes and the content of the request together to the target location, so that the reviewers can combine these four types of data to review the operation request, which improves the reliability of the review results, helps to improve the user experience and reduce the risk of sensitive data.

[0065] Specifically, information on content changes, influence scores, security levels, and request content can be encapsulated into a JSON (JavaScript Object Notation) file and created as an approval ticket. The approval ticket can be stored in a database and automatically submitted for review by auditors.

[0066] JavaScript (JS) is a lightweight, interpreted or just-in-time (JIT) programming language that prioritizes functions.

[0067] This invention provides a method for processing operation requests. Considering the strong correlation between the impact of an operation request and its modification of target sensitive data, as well as the content of the request, and the significant differences in security between different request sources, this application can determine the content changes of the target sensitive data before and after the operation request is executed based on the request content. Then, based on the content change information, the request content, and their respective preset weights, an impact score for the operation request is calculated. The security level of the operation request is determined based on the request source and a preset security assessment algorithm. This allows reviewers to review operation requests based on content change information, impact score, security level, and request content. Even with limited experience, reliable review results can be obtained, improving user experience and reducing the risk to sensitive data.

[0068] Based on the above embodiments:

[0069] In a preferred embodiment, based on the parsed request content of the operation request, the specific changes in the content of the target sensitive data to be accessed by the operation request before and after the operation request is executed are determined as follows:

[0070] Parse the request URL, request parameters, request implementation class and implementation method, request source, operator information and request time in the operation request;

[0071] Identify the target sensitive data that the operation request specifies to be accessed from the request address;

[0072] Based on the request parameters, determine the content changes of the target sensitive data before and after the operation request is executed.

[0073] Specifically, the operation request can be an operation request made by the user when performing an audit operation. Of course, the operation request can also be made in other scenarios, which are not limited here by the embodiments of the present invention.

[0074] Specifically, to facilitate the use of the request content in the operation request, all of its content can be parsed out, including the request address, request parameters, request implementation class and implementation method, request source, operator information, and request time. The target sensitive data specified by the operation request can be found from the location pointed to by the request address. The request parameters contain the operation proposed by the operation request for the target sensitive data. Therefore, in this embodiment of the invention, the content change information of the target sensitive data before and after the execution of the operation request can be determined according to the request parameters, so as to use it as the data basis for subsequent steps.

[0075] It is worth mentioning that, in the process of determining the content change information, this application did not modify the target sensitive data in the request address, but only calculated the content change information before and after the execution of the operation request. The operation request will only be executed and modified when the operation request is approved.

[0076] Specifically, the specific methods in the embodiments of the present invention can quickly and accurately determine the content changes of the target sensitive data before and after the execution of the operation request.

[0077] Of course, in addition to this method, other methods can be used to determine the content changes of the target sensitive data before and after the execution of the operation request, and the embodiments of the present invention are not limited here.

[0078] As a preferred embodiment, the security level of the operation request is determined based on the request source in the request content and a preset security assessment algorithm as follows:

[0079] Determine whether the request source in the request content is within a preset set of secure sources;

[0080] If it is located in [location], the security level of the operation request is high;

[0081] If not located, the security level of the operation request is low.

[0082] Specifically, in order to improve the speed and flexibility of security level determination, a set of security sources can be pre-set in this embodiment of the invention. Staff can flexibly set the sources included in it, thereby improving the flexibility of security source determination. Furthermore, since the determination can be completed by simply judging whether the request source is in the set of security sources, the determination speed is improved.

[0083] Of course, in addition to this method of determining the security level of an operation request, other methods can be used to determine the security level of the request source. For example, a correspondence between each source and its security level can be pre-defined, and then the security level corresponding to the request source can be determined based on the correspondence. This embodiment of the invention does not limit this method.

[0084] As a preferred embodiment, intercepting user-initiated requests to operate on sensitive data specifically involves:

[0085] Intercept user-initiated requests for operations on sensitive data that fall within a preset interception range.

[0086] Specifically, considering that although all of these are requests to operate on sensitive data, some of these requests do not require review, meaning that these requests will not have serious consequences, such as data query requests, which will not modify sensitive data, blocking these requests would undoubtedly waste resources and reduce work efficiency. Therefore, in this embodiment of the invention, an interception range can be preset, and then user-initiated requests to operate on sensitive data within the preset interception range can be blocked, thereby reducing resource waste and improving work efficiency.

[0087] The preset interception range can be set independently, and this embodiment of the invention does not limit it.

[0088] In addition, it is worth mentioning that various technologies can be used to intercept operation requests, such as AOP (Aspect Oriented Programming) technology, etc., which are not limited in this embodiment of the invention.

[0089] AOP is a technique that uses pre-compilation and runtime dynamic proxies to achieve unified maintenance of program functionality.

[0090] As a preferred embodiment, the method for processing the operation request further includes sending content change information, influence score, security level, and request content together to the target location so that the reviewer can review it.

[0091] When an operation request is approved, the operation request is invoked and executed using Java reflection technology, based on the request parameters, implementation class, and implementation method of the operation request.

[0092] Specifically, considering that in existing technologies, such business scenarios are usually completed through a two-stage operation, i.e., the user needs to submit an operation request first, and after the request is approved, the user still needs to perform the corresponding operation, which is cumbersome. To address this technical problem, this embodiment of the invention can use JAVA reflection technology to call and execute the operation request after the approval, based on the request parameters, implementation class, and implementation method of the operation request. In this way, the user is saved from repeatedly performing the operation, improving work efficiency and user experience.

[0093] Among them, Java reflection technology refers to the ability to construct an object of any class, understand the class to which any object belongs, understand the member variables and methods of any class, and call the attributes and methods of any object during program execution.

[0094] As a preferred embodiment, when an operation request is approved, after the operation request is invoked and executed using Java reflection technology based on the request parameters, implementation class, and implementation method of the operation request, the processing method for the operation request further includes:

[0095] Determine whether the operation request was executed successfully;

[0096] If the execution fails, the execution count is incremented and it is checked whether the execution count exceeds a preset threshold.

[0097] If it is not greater than, then the steps of calling and executing the operation request using JAVA reflection technology are executed according to the request parameters, implementation class and implementation method of the operation request;

[0098] If the value is greater than the specified value, the control prompt will indicate that the execution failed.

[0099] Specifically, considering that there is a possibility of failure in the process of automatically executing operation requests, in order to minimize the workload of users, an automatic retry mechanism is also added in this embodiment of the invention. That is, in the case of execution failure, it can be automatically re-executed until the number of executions exceeds a preset threshold before it is determined to be an execution failure and will no longer be tried. The prompt device will then be controlled to indicate the execution failure, which will facilitate the staff to carry out maintenance.

[0100] The prompter can be of various types, such as a display or a voice announcer, and this embodiment of the invention does not limit it.

[0101] The preset threshold can be set independently, for example, it can be 4 times, etc., and this embodiment of the invention does not limit it.

[0102] Specifically, the approval results, the execution results of each operation request, and the execution time can be recorded for later use by staff.

[0103] As a preferred embodiment, the method for processing the operation request further includes:

[0104] Determine the time consumed at each step from the generation of the operation request to the generation of the review result and execution result of the operation request, and determine the final number of times the operation request is executed and the execution result;

[0105] A health status assessment is conducted on the review and execution process of operation requests based on the time consumed, number of executions, and execution results.

[0106] The control prompt displays the assessment results of the health status evaluation.

[0107] Specifically, in order to facilitate the analysis and optimization of the operation request processing flow by staff, this embodiment of the invention can also determine the time consumed at each step from the generation of the operation request to the generation of the operation request review result and the execution result, determine the final number of executions and the execution result of the operation request, and then conduct a health status assessment of the operation request review and execution flow based on the time consumed, the number of executions and the execution result, and finally display the assessment result of the health status assessment through a prompter.

[0108] Specifically, in addition to the evaluation results, the approval results, execution results, and the time taken for each step can also be displayed through a prompter, making it easier for staff to conduct more detailed analysis.

[0109] The specific methods for assessing the health status of the operation request review and execution process based on the time consumed, number of executions, and execution results can be varied. This embodiment of the invention does not limit the specific methods. The results of the health status assessment can be in various forms, such as a score. A high score indicates a healthy process, while a low score indicates an unhealthy process that needs to be optimized.

[0110] Specifically, in summary, this application intercepts sensitive operation requests, analyzes the request content and data changes before and after, and derives the impact score and security level of the request source. This information is then encapsulated and displayed in the review work order, allowing reviewers to understand the impact of the data to be reviewed and whether the source of the operation is secure, thus increasing the basis for review. It also facilitates reviewers' assessment of whether the sensitive data of this operation can be approved. Since the original sensitive operation request can be automatically executed after approval without manual execution by operators and reviewers, and can also be retried on failure, the manual operation is reduced, ensuring that sensitive operations are executed promptly after approval. Finally, the method also provides analysis and calculation of the process time and process health score, allowing operators to understand the operation process and whether it needs optimization.

[0111] Please refer to Figure 2 , Figure 2 This is a schematic diagram of the structure of an operation request processing device provided by the present invention. The operation request processing device includes:

[0112] The interception module 21 is used to intercept user-initiated requests to operate on sensitive data;

[0113] The determination module 22 is used to determine the content change information of the target sensitive data to be accessed by the operation request before and after the operation request is executed, based on the request content of the parsed operation request.

[0114] The calculation module 23 is used to calculate the influence score of the operation request based on the content change information, the preset weights of each field of the target sensitive data, the request content, and the preset weights of each parameter in the request content.

[0115] The assessment module 24 is used to determine the security level of the operation request based on the request source in the request content and in combination with a preset security assessment algorithm.

[0116] The sending module 25 is used to send content change information, influence score, security level and request content to the target location for review by the reviewers.

[0117] For a description of the operation request processing apparatus provided in the embodiments of the present invention, please refer to the aforementioned embodiments of the operation request processing method; the embodiments of the present invention will not be repeated here.

[0118] Please refer to Figure 3 , Figure 3 This is a schematic diagram of the structure of an operation request processing device provided by the present invention. The operation request processing device includes:

[0119] Memory 31 is used to store computer programs;

[0120] The processor 32 is configured to implement the steps of the operation request processing method as described in the foregoing embodiments when executing a computer program.

[0121] For a description of the operation request processing device provided in the embodiments of the present invention, please refer to the aforementioned embodiments of the operation request processing method; the embodiments of the present invention will not be repeated here.

[0122] The present invention also provides a computer-readable storage medium storing a computer program, which, when executed by a processor, implements the steps of the operation request processing method as described in the foregoing embodiments.

[0123] For a description of the computer-readable storage medium provided in the embodiments of the present invention, please refer to the aforementioned embodiments of the operation request processing method; the embodiments of the present invention will not be repeated here.

[0124] The various embodiments in this specification are described in a progressive manner, with each embodiment focusing on its differences from other embodiments. Similar or identical parts between embodiments can be referred to interchangeably. For the apparatus disclosed in the embodiments, since it corresponds to the method disclosed in the embodiments, the description is relatively simple; relevant parts can be referred to the method section. It should also be noted that in this specification, relational terms such as "first" and "second" are used only to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising a..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes that element.

[0125] The above description of the disclosed embodiments enables those skilled in the art to make or use the invention. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the invention. Therefore, the invention is not to be limited to the embodiments shown herein, but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A method for processing operation requests, characterized in that, include: Intercept user-initiated requests to manipulate sensitive data; Based on the parsed request content of the operation request, determine the content change information of the target sensitive data to be accessed by the operation request before and after the operation request is executed; The influence score of the operation request is calculated based on the content change information, the preset weights of each field of the target sensitive data, the request content, and the preset weights of each parameter in the request content. The security level of the operation request is determined based on the request source in the request content and a preset security assessment algorithm. The content change information, the influence score, the security level, and the request content are encapsulated into a JS object abbreviation file and created as an approval work order; Submit the aforementioned approval work order for review by the auditors.

2. The method for processing operation requests according to claim 1, characterized in that, The step of determining the content change information of the target sensitive data to be accessed by the operation request before and after executing the operation request, based on the parsed request content, specifically involves: Parse the request address, request parameters, request implementation class and implementation method, request source, operator information and request time in the operation request; The target sensitive data to be accessed by the operation request is determined from the request address; Based on the request parameters, determine the content changes of the target sensitive data before and after executing the operation request.

3. The method for processing operation requests according to claim 2, characterized in that, The specific steps for determining the security level of the operation request based on the request source in the request content and a preset security assessment algorithm are as follows: Determine whether the request source in the request content is located in a preset set of secure sources; If it is located in [location], then the security level of the operation request is high; If not located, the security level of the operation request is low.

4. The method for processing operation requests according to claim 1, characterized in that, The interception of user-initiated requests to manipulate sensitive data specifically refers to: Intercept user-initiated requests for operations on sensitive data that fall within a preset interception range.

5. The method for processing operation requests according to any one of claims 1 to 4, characterized in that, The method for processing the operation request, which involves sending the content change information, the influence score, the security level, and the request content together to the target location for review by the reviewer, further includes: When the operation request is approved, the operation request is invoked and executed using Java reflection technology based on the request parameters, implementation class, and implementation method of the operation request.

6. The method for processing operation requests according to claim 5, characterized in that, When the operation request is approved, after invoking and executing the operation request using Java reflection technology based on the request parameters, implementation class, and implementation method of the operation request, the processing method for the operation request further includes: Determine whether the operation request was executed successfully; If the execution fails, the execution count is incremented by one and it is determined whether the execution count is greater than a preset threshold. If it is not greater than, then the step of calling and executing the operation request using JAVA reflection technology according to the request parameters, implementation class and implementation method of the operation request is executed; If the value is greater than the specified value, the control prompt will indicate that the execution failed.

7. The method for processing operation requests according to claim 6, characterized in that, The processing methods for this operation request also include: Determine the time consumed at each step from the generation of the operation request to the generation of the review result and execution result of the operation request, and determine the final number of times the operation request is executed and the execution result; Based on the time consumed, the number of executions, and the execution result, a health status assessment is performed on the review and execution process of the operation request; The control prompt displays the assessment results of the health status evaluation.

8. An apparatus for processing operation requests, characterized in that, include: The interception module is used to intercept user-initiated requests to manipulate sensitive data; The determination module is used to determine, based on the parsed request content of the operation request, the content change information of the target sensitive data to be accessed by the operation request before and after the operation request is executed; The calculation module is used to calculate the influence score of the operation request based on the content change information, the preset weights of each field of the target sensitive data, the request content, and the preset weights of each parameter in the request content. The evaluation module is used to determine the security level of the operation request based on the request source in the request content and a preset security evaluation algorithm. The sending module is used to encapsulate the content change information, the influence score, the security level, and the request content into a JS object abbreviation format file, and create an approval work order; submit the approval work order for review by the reviewer.

9. A processing device for operation requests, characterized in that, include: Memory, used to store computer programs; A processor for executing the computer program to implement the steps of the processing method for the operation request as described in any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a computer program that, when executed by a processor, implements the steps of the processing method for an operation request as described in any one of claims 1 to 7.

Images