A method, apparatus, electronic device, and storage medium for de-identifying logs.

By generating hash codes for log files as index information and combining them with resource utilization indexes and privacy levels to select de-identification devices, the problems of duplicate de-identification and storage difficulties in bank system log de-identification are solved, enabling fast and accurate log file retrieval and storage, and saving computer resources.

CN115600238BActive Publication Date: 2026-01-30PING AN BANK CO LTD
View PDF 2 Cites 0 Cited by

Patent Information

Application Number
CN202211103916.0
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2022-09-09
Publication Date
2026-01-30
Estimated Expiration
2042-09-09

AI Technical Summary

Technical Problem

In existing technologies, log desensitization in banking systems suffers from problems such as repeated desensitization, storage difficulties, insufficient automation, and long processing times.

Method used

The hash code of the generated log file is used as index information for de-identification and storage. The resource utilization index is used to determine whether de-identification should be performed on the local device. The appropriate de-identification device is selected according to the privacy level of the business server, and different hash code calculation servers are set up on different servers to reduce hash code inconsistency.

Benefits of technology

It enables fast and accurate log file retrieval and storage, avoids repeated desensitization, saves computer resources, and improves processing efficiency.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN115600238B_ABST
    Figure CN115600238B_ABST
Patent Text Reader

Abstract

This application provides a log de-identification method, apparatus, electronic device, and storage medium. The method includes: acquiring a log file; generating a hash code based on the log file; de-identifying the log file to obtain a de-identified log file; and storing the de-identified log file using the hash code as index information. By implementing the above embodiments and storing the log file using its hash code as index information, subsequent retrieval of the log file is convenient, and it also allows for quick determination of whether the log file has been de-identified.
Need to check novelty before this filing date? Find Prior Art

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of servers, in particular to a log desensitization method and device, electronic equipment and storage medium. BACKGROUND

[0002] Data desensitization (Data Masking) is to shield sensitive data, and to perform data transformation on certain sensitive information (such as ID number, mobile phone number, card number, customer name, customer address, email address, salary, etc.) through desensitization rules to achieve reliable protection of private data. Common desensitization rules in the industry include replacement, rearrangement, encryption, truncation, and masking, and users can also customize desensitization rules according to desired desensitization algorithms.

[0003] In the operation and maintenance of a bank system, server logs can reflect the performance of analysis servers and algorithms, and can also be used to analyze user consumption habits and consumption capacity. In order to protect user privacy, user private data needs to be shielded before being stored. There are many problems in existing technologies for log desensitization, including repeated desensitization, storage difficulties, insufficient automation, and long time consumption. SUMMARY

[0004] The purpose of the embodiments of the present application is to provide a log desensitization method, device, electronic equipment and storage medium, which can avoid repeated desensitization and storage difficulties.

[0005] In a first aspect, the embodiments of the present application provide a log desensitization method, comprising:

[0006] obtaining a log file;

[0007] generating a hash code according to the log file;

[0008] desensitizing the log file to obtain a desensitized log file;

[0009] storing the desensitized log file with the hash code of the log file as index information.

[0010] In the above implementation process, considering that in the prior art, the business system of a bank is relatively large and there is no uniform naming form for log files, there are problems such as retrieval difficulty and search difficulty. The embodiments of the present application generate a hash code according to a log file, desensitize the log file, and store the log file with the hash code of the log file as index information, which can facilitate subsequent retrieval of the log file and quickly determine whether the log file has been desensitized.

[0011] Further, the step of storing the desensitized log file with the hash code of the log file as index information comprises:

[0012] determining whether the desensitized log file has been stored according to the hash code;

[0013] if not, storing the desensitized log file;

[0014] if yes, returning stored reminding information.

[0015] In the above implementation process, in order to avoid repeated desensitization of the log file, the embodiment of the application proposes to determine whether the desensitized log file has been stored according to the hash code, and if the log file has been stored, the stored reminding information can be sent out, avoiding repeated desensitization of the log file. Based on the above embodiment, the computer resources can be saved.

[0016] Further, before the step of desensitizing the log file to obtain the desensitized log file, further comprising:

[0017] obtaining a resource utilization index of the local device;

[0018] determining whether to desensitize the log on the local device according to the resource utilization index.

[0019] In the above implementation process, considering that the bank data is huge, therefore, the log files are numerous, if only the local device is used for log desensitization, the entire processing process will be very long, and the server may also be jammed. Therefore, the embodiment of the application proposes to obtain a resource utilization index of the local device, and determine whether to desensitize the log on the local device according to the resource utilization index. Based on the above embodiment, the server resources can be reasonably used, and the computer resources can be saved.

[0020] Further, the log file is from a plurality of business servers;

[0021] The step of desensitizing the log file to obtain the desensitized log file comprises:

[0022] determining a business server to which the log file belongs;

[0023] obtaining a privacy level corresponding to the business server;

[0024] sending the log file to a desensitization device corresponding to the privacy level for desensitization.

[0025] In the implementation process, different service servers process different services, different services are associated with different information, and different information corresponds to different privacy levels. Therefore, different algorithms are configured on different servers to desensitize different sensitive information. Based on the above implementation, precise desensitization of the log file can be achieved.

[0026] Further, the step of storing the desensitized log file with the hash code of the log file as index information comprises:

[0027] The desensitized log file is stored with the desensitization device corresponding to the privacy level and the hash code as index information.

[0028] In the implementation process, different privacy levels correspond to different desensitization devices, and the bank has a large number of log files, which may have the same hash code. Therefore, the desensitized log file is stored with the desensitization device corresponding to the privacy level and the hash code as index information.

[0029] Further, the log file is derived from a plurality of service servers; and the step of generating a hash code from the log file comprises:

[0030] Determining the service server to which the log file belongs;

[0031] Sending the log file to the operation server corresponding to the service server to which the log file belongs for operation to obtain a hash code;

[0032] Receiving the hash code sent by the operation server.

[0033] In the implementation process, in order to further avoid the problem of the same hash code, different hash code operation servers are set for different servers. When obtaining the hash code, the service server to which the log file belongs is determined; the log file is sent to the operation server corresponding to the service server to which the log file belongs for operation to obtain a hash code; and the hash code sent by the operation server is received. Based on the above implementation, the probability of different log files generating the same hash code can be effectively reduced, and the log files can be quickly classified based on the hash code.

[0034] In a possible implementation, the step of determining whether to desensitize the log on the local device according to the resource utilization index comprises:

[0035] If the resource utilization index is greater than a preset value, the log is sent to another server for desensitization.

[0036] In the implementation process, considering that the bank data is huge, and therefore, the log files are numerous, if only the local device is used for log desensitization, the entire processing process will be very long, and the server may also be jammed. Therefore, the embodiment of the present application proposes to obtain a resource utilization index of the local device, and determine whether to perform log desensitization on the local device according to the resource utilization index. If the resource utilization index is greater than a preset value, the log is sent to other servers for desensitization. Based on the above implementation, the server resources can be reasonably used, and the computer resources can be saved.

[0037] In a second aspect, the embodiment of the present application provides a log desensitization device, comprising:

[0038] A log acquisition module is configured to acquire a log file.

[0039] A hash code generation module is configured to generate a hash code according to the log file.

[0040] A desensitization module is configured to desensitize the log file to obtain a desensitized log file.

[0041] A storage module is configured to store the desensitized log file by taking the hash code of the log file as index information.

[0042] In the implementation process, considering that in the prior art, the business system of a bank is relatively large, and the log files do not have a unified naming form, therefore, there are problems such as retrieval difficulty and search difficulty. The embodiment of the present application generates a hash code according to a log file, desensitizes the log file, and stores the log file by taking the hash code of the log file as index information, so that the log file can be conveniently retrieved subsequently, and it can be quickly determined whether the log file has been desensitized.

[0043] In a third aspect, the embodiment of the present application provides an electronic device, which comprises a memory, a processor, and a computer program stored in the memory and capable of running on the processor. When the processor executes the computer program, the steps of the method according to any one of the first aspect are implemented.

[0044] In a fourth aspect, the embodiment of the present application provides a computer readable storage medium, which stores instructions. When the instructions run on a computer, the computer executes the method according to any one of the first aspect.

[0045] Other features and advantages of the present application will be described in the following description, or can be known or determined without doubt from the description, or can be known by implementing the above-mentioned technology of the present application.

[0046] In order to make the above objectives, characteristics and advantages of the present application more apparent, more comprehensible, the following will specifically describe a preferred embodiment in conjunction with the accompanying drawings. BRIEF DESCRIPTION OF DRAWINGS

[0047] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the following will briefly introduce the drawings needed to be used in the embodiments of the present application. It should be understood that the following drawings only show some embodiments of the present application, and therefore should not be considered as a limitation to the scope. For those skilled in the art, other related drawings can also be obtained without creative labor on the basis of these drawings.

[0048] Figure 1 The flowchart of the log desensitization method provided by the embodiments of the present application is shown in the following figure.

[0049] Figure 2 The flowchart of the log file storage provided by the embodiments of the present application is shown in the following figure.

[0050] Figure 3 The flowchart of the log file desensitization provided by the embodiments of the present application is shown in the following figure.

[0051] Figure 4 The flowchart of the log file desensitization provided by the embodiments of the present application is shown in the following figure.

[0052] Figure 5 The structural diagram of the log desensitization device provided by the embodiments of the present application is shown in the following figure.

[0053] Figure 6 The structural diagram of the electronic device provided by the embodiments of the present application is shown in the following figure. DETAILED DESCRIPTION

[0054] The technical solutions of the embodiments of the present application will be described in the following in conjunction with the drawings in the embodiments of the present application.

[0055] It should be noted that: similar reference numerals and letters represent similar items in the following drawings, and therefore, once an item is defined in one drawing, it does not need to be further defined and explained in the subsequent drawings. Meanwhile, in the description of the present application, the terms “first”, “second”, etc. are only used for distinguishing description, and cannot be understood as indicating or implying relative importance.

[0056] Data desensitization (Data Masking) is to shield sensitive data, and to perform data transformation on certain sensitive information (such as ID number, mobile phone number, card number, customer name, customer address, email address, salary, etc.) through desensitization rules, so as to realize reliable protection of private data. Common desensitization rules in the industry include replacement, rearrangement, encryption, truncation, masking, and users can also customize desensitization rules according to the expected desensitization algorithm.

[0057] In the operation and maintenance of a bank system, the log of a server can reflect the performance of an analysis server and an algorithm, and can also be used to analyze user consumption habits and consumption capacity. In order to protect the privacy of a user, the private data of the user needs to be shielded before being stored after being analyzed. In the prior art, there are many problems in log desensitization, including repeated desensitization, storage difficulty, insufficient automation, long time consumption, and the like.

[0058] Embodiment 1

[0059] With reference to Figure 1 The embodiment of the present application provides a log desensitization method, comprising:

[0060] S1: acquiring a log file;

[0061] S2: generating a hash code according to the log file;

[0062] S3: desensitizing the log file to obtain a desensitized log file;

[0063] S4: storing the desensitized log file by taking the hash code of the log file as index information.

[0064] In the implementation process, considering that in the prior art, the business system of a bank is relatively large, and the log file does not have a unified naming form, therefore, there are problems such as retrieval difficulty and search difficulty. The embodiment of the present application generates a hash code according to a log file, desensitizes the log file, and stores the log file by taking the hash code of the log file as index information, which can facilitate subsequent retrieval of the log file and can quickly determine whether the log file has been desensitized.

[0065] With reference to Figure 2 In a possible implementation, S4 comprises:

[0066] S41: determining whether the desensitized log file has been stored according to the hash code; if yes, performing S43; if no, performing S42;

[0067] S42: storing the desensitized log file;

[0068] S43: returning stored reminding information.

[0069] In the implementation process, in order to avoid repeated desensitization of the log file, the embodiment of the present application proposes to determine whether the desensitized log file has been stored according to the hash code. If the log file has been stored, stored reminding information can be returned, thereby avoiding repeated desensitization of the log file. Based on the above implementation, the resources of a computer can be saved.

[0070] In a possible implementation, before S3, the method further includes:

[0071] According to the hash code, it is determined whether the log file has been desensitized, and if yes, the log desensitization is not performed.

[0072] According to the implementation, S41-S43 can not be performed.

[0073] For example, the hash code of the log file is first obtained, and it is determined in the storage area whether the hash code exists, and if yes, the desensitization is not performed.

[0074] In a possible implementation, before the step of desensitizing the log file to obtain the desensitized log file, the method further includes:

[0075] An index of resource utilization of the local device is obtained.

[0076] According to the index of resource utilization, it is determined whether the log desensitization is performed on the local device.

[0077] In the above embodiment, the index of resource utilization can be the number of instances of the log desensitization currently performed, the number of instantiations of the algorithm in the computer, the CPU utilization of the computer, the memory occupation rate of the computer, and the like. The application does not limit the specific index of resource utilization.

[0078] In the implementation process, considering that the bank data is huge, the log files are numerous, and if the log desensitization is performed only by using the local device, the entire processing process will be very long, and the server may be jammed. Therefore, the application embodiment proposes to obtain the index of resource utilization of the local device, and according to the index of resource utilization, it is determined whether the log desensitization is performed on the local device. Based on the implementation, the server resources can be reasonably used, and the computer resources are saved.

[0079] Referring to Figure 3 In a possible implementation, the log file is from a plurality of business servers.

[0080] S3 includes:

[0081] S31: determining a business server to which the log file belongs.

[0082] S32: obtaining a privacy level corresponding to the business server.

[0083] S33: sending the log file to a desensitization device corresponding to the privacy level for desensitization.

[0084] Exemplarily, the name of the user belongs to the first level of privacy information, the first algorithm is configured in the first server cluster, and is specially used for desensitizing the first level of privacy information, and the photo and address of the user belong to the second level of privacy information, the second algorithm is configured in the second server cluster, and is specially used for desensitizing the second level of privacy information. Meanwhile, the algorithm in the first server cluster and the algorithm in the second server cluster are not the same, which is considering that different algorithms have different advantages when desensitizing the log files corresponding to different privacy levels, and the processing time is also different, therefore, based on the above embodiment, the desensitization time can be reduced.

[0085] In the above implementation process, different business servers process different businesses, different businesses are associated with different information, and different information corresponding to different privacy levels are not the same, therefore, different algorithms are configured on different servers, and are used for desensitizing different sensitive information. Based on the above embodiment, accurate desensitization of the log file can be realized.

[0086] In a possible implementation, the step of storing the desensitized log file by taking the hash code of the log file as index information includes:

[0087] The desensitized log file is stored by taking the desensitization device corresponding to the privacy level and the hash code as index information.

[0088] Exemplarily, the specific structure of the index information is {desensitization device, hash code}, since the desensitization device corresponds to the privacy level, the index information can be further set as {privacy level, hash code}.

[0089] In the above implementation process, since different privacy levels correspond to different desensitization devices, the log files of the bank are numerous, and the problem of consistent hash codes may occur, therefore, the desensitized log file is stored by taking the desensitization device corresponding to the privacy level and the hash code as index information.

[0090] Referring to Figure 4 In a possible implementation, S3 includes:

[0091] S34: determining the business server to which the log file belongs;

[0092] S35: sending the log file to the operation server corresponding to the belonging business server to perform operation, and obtaining a hash code;

[0093] S36: receiving the hash code sent by the operation server.

[0094] Exemplarily, different business servers collect different information of users, for example, when a user registers a profile, more information is collected, and more privacy information is also collected, therefore, a first server cluster is specially set, which is used for desensitizing logs generated by a server when a user registers a profile. When a user performs remittance, less information is involved, and desensitizing related logs does not need to spend too much time, therefore, a second server cluster is set to desensitize log files generated by remittance business, which can reduce processing time, and the hash value algorithm applied by the first server cluster and the second server cluster is also different, based on this, the same possibility of hash codes generated by different business corresponding log files is further reduced.

[0095] In the above implementation process, in order to further avoid the problem of consistent hash codes, different hash code operation servers are set for different servers, when the hash code is obtained, the business server to which the log file belongs is determined; the log file is sent to the operation server corresponding to the business server to which the log file belongs for operation to obtain the hash code; and the hash code sent by the operation server is received. Based on the above embodiment, the probability of different log files generating the same hash code can be effectively reduced, and the log files can be quickly classified based on the hash code.

[0096] Embodiment 2

[0097] Referring to Figure 5 The embodiment of the present application provides a log desensitization device, which comprises:

[0098] A log acquisition module 1 is configured to acquire a log file.

[0099] A hash code generation module 2 is configured to generate a hash code according to the log file.

[0100] A desensitization module 3 is configured to desensitize the log file to obtain a desensitized log file.

[0101] A storage module 4 is configured to store the desensitized log file by taking the hash code of the log file as index information.

[0102] In the above implementation process, considering that in the prior art, the business system of a bank is relatively large, and log files do not have a unified naming form, therefore, there are problems such as retrieval difficulty and search difficulty, the embodiment of the present application generates a hash code according to a log file, desensitizes the log file, and stores the log file by taking the hash code of the log file as index information, which can facilitate subsequent retrieval of the log file and can quickly determine whether the log file has been desensitized.

[0103] In a possible implementation, the storage module is further configured to determine whether the desensitized log file has been stored according to the hash code; if not, store the desensitized log file; and if yes, return stored reminding information.

[0104] In the implementation process, in order to avoid repeated desensitization of the log file, the embodiment of the application proposes to determine whether the desensitized log file has been stored according to the hash code, and if the log file has been stored, the stored reminding information can be sent, so as to avoid repeated desensitization of the log file. Based on the above implementation, the computer resources can be saved.

[0105] In a possible implementation, the desensitization module is further configured to obtain a resource utilization index of the local device; and determine whether to perform log desensitization on the local device according to the resource utilization index.

[0106] In the implementation process, considering that the bank data is huge, the log files are numerous, and if the log desensitization is performed only by using the local device, the entire processing process will be very long and the server may be jammed. Therefore, the embodiment of the application proposes to obtain a resource utilization index of the local device, and determine whether to perform log desensitization on the local device according to the resource utilization index. Based on the above implementation, the server resources can be reasonably used, and the computer resources can be saved.

[0107] In a possible implementation, the log file is from a plurality of business servers; the desensitization module is further configured to determine a business server to which the log file belongs; obtain a privacy level corresponding to the business server; and send the log file to a desensitization device corresponding to the privacy level for desensitization.

[0108] In the implementation process, different business servers process different businesses, different businesses are associated with different information, and different information corresponds to different privacy levels. Therefore, different algorithms are configured on different servers to desensitize different sensitive information. Based on the above implementation, the precise desensitization of the log file can be implemented.

[0109] In a possible implementation, the storage module is further configured to store the desensitized log file by using the desensitization device corresponding to the privacy level and the hash code as index information.

[0110] In the implementation process, different privacy levels correspond to different desensitization devices, and the log files of the bank are numerous, so that the hash codes may be consistent. Therefore, the desensitized log file is stored by using the desensitization device corresponding to the privacy level and the hash code as index information.

[0111] In a possible implementation, the hash code obtaining module is further configured to determine a service server to which the log file belongs.

[0112] send the log file to a computing server corresponding to the service server to which the log file belongs to perform computation, and obtain a hash code.

[0113] receive the hash code sent by the computing server.

[0114] In the implementation process, in order to further avoid the problem of consistent hash codes, different hash code computing servers are set for different servers, and when obtaining the hash code, the service server to which the log file belongs is determined; the log file is sent to a computing server corresponding to the service server to which the log file belongs to perform computation, and the hash code is obtained; and the hash code sent by the computing server is received. Based on the above implementation, the probability of different log files generating the same hash code can be effectively reduced, and the log files can be quickly classified based on the hash code.

[0115] In a possible implementation, the hash code obtaining module is further configured to send the log to other servers to perform desensitization when the resource utilization index is greater than a preset value.

[0116] In the implementation process, considering that the bank data is huge, and therefore, the log files are numerous, if only the local device is used to perform log desensitization, the entire processing process will be very long, and the server may be stalled. Therefore, the resource utilization index of the local device is obtained, it is judged whether to perform log desensitization on the local device according to the resource utilization index, and if the resource utilization index is greater than a preset value, the log is sent to other servers to perform desensitization. Based on the above implementation, the server resources can be reasonably used, and the computer resources can be saved.

[0117] The application further provides an electronic device, please refer to Figure 6 , Figure 6 a structural block diagram of an electronic device provided by the application. The electronic device can include a processor 61, a communication interface 62, a memory 63, and at least one communication bus 64. Wherein, the communication bus 64 is used to realize the direct connection communication of these components. Wherein, the communication interface 62 of the electronic device in the application embodiment is used to communicate with other node devices. The processor 61 can be an integrated circuit chip with signal processing capability.

[0118] The processor 61 can be a general processor, including a central processing unit (CPU), a network processor (NP), etc. It can also be a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic device, discrete gate or transistor logic, discrete hardware components. The disclosed methods, steps and logic block diagrams in the embodiments of the present application can be implemented or executed. The general processor can be a microprocessor or the processor 61 can also be any conventional processor.

[0119] The memory 63 can be, but is not limited to, a random access memory (RAM), a read only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), etc. The memory 63 stores computer readable instructions, which when executed by the processor 61, the electronic device can perform the steps involved in the above method embodiments.

[0120] Optionally, the electronic device can also include a storage controller, an input / output unit.

[0121] The memory 63, the storage controller, the processor 61, the peripheral interface, the input / output unit are directly or indirectly electrically connected to each other to realize data transmission or interaction. For example, these elements can be electrically connected to each other through one or more communication buses 64. The processor 61 is used to execute the executable modules stored in the memory 63, such as software function modules or computer programs included in the electronic device.

[0122] The input / output unit is used to provide the user with creating tasks and creating optional time periods or preset execution times for the tasks to realize the interaction between the user and the server. The input / output unit can be, but is not limited to, a mouse and a keyboard, etc.

[0123] It can be understood that Figure 6 The structure shown is only a schematic, and the electronic device can include more or fewer components than Figure 6 shown or have a different configuration than Figure 6 shown.Figure 6 The components shown in the figures can be implemented in hardware, software, or a combination thereof.

[0124] The embodiments of the present application also provide a computer readable storage medium, which stores instructions, when the instructions are executed on a computer, the computer program is executed by a processor to implement the method of the method embodiment. To avoid repetition, it will not be described here.

[0125] In several embodiments provided in the present application, it should be understood that the disclosed devices and methods can also be implemented in other ways. The device embodiments described above are only schematic. For example, the flowcharts and block diagrams in the drawings show the possible implementation architectures, functions and operations of the devices, methods and computer program products according to the embodiments of the present application. In this regard, each block in the flowcharts or block diagrams can represent a module, a program segment or a part of code, which contains one or more executable instructions for implementing the specified logical functions. It should also be noted that in some alternative implementations, the functions noted in the blocks can occur in different orders from those shown in the drawings. For example, two consecutive blocks can actually be executed substantially in parallel, and sometimes they can be executed in reverse order, depending on the functions involved. It should also be noted that each block in the block diagrams and / or flowcharts, and the combination of blocks in the block diagrams and / or flowcharts, can be implemented by a dedicated hardware-based system for performing the specified functions or actions, or can be implemented by a combination of dedicated hardware and computer instructions.

[0126] In addition, the functional modules in the various embodiments of the present application can be integrated together to form an independent part, or each module can exist independently, or two or more modules can be integrated to form an independent part.

[0127] The functions can be realized in the form of software function modules and sold or used as independent products when the functions are realized in the form of software function modules and sold or used as independent products. Based on such understanding, the technical solutions of the present application can be embodied in the form of software product, and the computer software product is stored in a storage medium, including a plurality of instructions for causing a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of the present application. The foregoing storage medium includes: a U disk, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, and various media that can store program codes.

[0128] The above merely provides an example of the present application, and is not intended to limit the protection scope of the present application. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application shall be included in the protection scope of the present application. It should be noted that similar reference numerals and letters represent similar items in the following drawings, and thus, once an item is defined in one drawing, it need not be further defined and explained in subsequent drawings.

[0129] The above merely provides an example of the present application, and is not intended to limit the protection scope of the present application. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application shall be included in the protection scope of the present application. It should be noted that similar reference numerals and letters represent similar items in the following drawings, and thus, once an item is defined in one drawing, it need not be further defined and explained in subsequent drawings.

[0130] It should be noted that the relational terms herein such as first and second and the like are used solely to distinguish one from another entity or action, without necessarily requiring or implying any actual relationship or order between such entities or actions. Moreover, the terms "comprises", "comprising", or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but can include other elements not expressly listed or inherent to such process, method, article, or apparatus. An element proceeded by "comprises... a" does not, without more constraints, exclude the existence of additional identical elements in the process, method, article, or apparatus that comprises the element.

Claims

1. A log desensitization method, characterized in that, The method comprises the following steps: acquiring a log file; the log file is used for performance analysis or user behavior analysis in bank system operation and maintenance; generating a hash code according to the log file; desensitizing the log file to obtain a desensitized log file; storing the desensitized log file by taking the hash code of the log file as index information; wherein the log file is from a plurality of business servers; the step of generating a hash code according to the log file comprises: determining the business server to which the log file belongs; sending the log file to the operation server corresponding to the belonging business server for operation to obtain a hash code; wherein the operation servers corresponding to different business servers adopt different hash algorithms; receiving the hash code sent by the operation server.

2. The log desensitization method of claim 1, wherein, The step of storing the desensitized log file by taking the hash code of the log file as index information comprises: judging whether the desensitized log file has been stored according to the hash code; if not, storing the desensitized log file; if yes, returning a stored reminder information.

3. The log desensitization method of claim 2, wherein, Before the step of desensitizing the log file to obtain a desensitized log file, the method further comprises the following steps: acquiring a resource utilization index of a local device; judging whether to desensitize the log on the local device according to the resource utilization index.

4. The log desensitization method of claim 2, wherein, The log file is from a plurality of business servers; The step of desensitizing the log file to obtain a desensitized log file comprises: determining the business server to which the log file belongs; acquiring a privacy level corresponding to the business server; sending the log file to a desensitizing device corresponding to the privacy level for desensitization.

5. The log desensitization method of claim 4, wherein, The step of storing the desensitized log file by taking the hash code of the log file as index information comprises: storing the desensitized log file by taking the desensitizing device corresponding to the privacy level and the hash code as index information.

6. The log desensitization method of claim 3, wherein, The step of judging whether to desensitize the log on the local device according to the resource utilization index comprises: if the resource utilization index is greater than a preset value, sending the log to other servers for desensitization.

7. A log desensitization apparatus, comprising: The method comprises the following steps: a log acquisition module is configured to acquire a log file; the log file is used for performance analysis or user behavior analysis in bank system operation and maintenance; a hash code generation module is configured to generate a hash code according to the log file; a desensitization module is configured to desensitize the log file to obtain a desensitized log file; a storage module is configured to store the desensitized log file by taking the hash code of the log file as index information; wherein the log file is from a plurality of business servers; the hash code acquisition module is further configured to determine the business server to which the log file belongs; send the log file to the operation server corresponding to the belonging business server for operation to obtain a hash code; wherein the operation servers corresponding to different business servers adopt different hash algorithms; receive the hash code sent by the operation server.

8. An electronic device, comprising: The method comprises the following steps: A memory, a processor, and a computer program stored in the memory and loadable on the processor, the processor implementing the steps of the method according to any one of claims 1 to 6 when the computer program is run on the processor.

9. A computer-readable storage medium, characterized in that, The computer readable storage medium has stored thereon instructions which, when run on a computer, cause the computer to perform the method according to any one of claims 1 to 6.

Citation Information

Patent Citations

  • Security level identification management method and device

    CN110059488A

  • Log storage and reading method and device based on block chain, equipment and medium

    CN110839015A