Data access control method and device

Abstract

This application provides a data access control method and apparatus, comprising: receiving a data access request from a user; determining, based on the data access request, whether the user has access rights; if so, determining whether the user's security access level meets preset security requirements; and if so, obtaining target data based on the data access request and feeding the target data back to the user. This method can perform multiple security authentications, effectively regulating data access and thus avoiding the risk of data leakage.

Description

Technical Field

[0001] The present application relates to the field of network technology, and in particular to a data access control method and device. Background Art

[0002] Currently, various banking services require extensive information about individual and corporate customers. This process often requires numerous bank employees to access and use customer information. To strengthen system access to sensitive customer information, we need to implement enhanced protection at the system design level to prevent the unauthorized use, leakage, or abuse of this information. Existing data access control methods typically only perform simple account authentication, failing to effectively regulate data access and posing a risk of data leakage. Summary of the Invention

[0003] The purpose of the embodiments of the present application is to provide a data access control method and device that can perform multiple security authentications, effectively regulate data access, and thus avoid the risk of data leakage.

[0004] A first aspect of an embodiment of the present application provides a data access control method, including:

[0005] Receive data access request sent by the user;

[0006] Determining whether the user terminal has access rights according to the data access request;

[0007] If yes, determining whether the security access level of the user terminal meets the preset security requirements;

[0008] If yes, the target data is acquired according to the data access request, and the target data is fed back to the user end.

[0009] In the above implementation, the method prioritizes receiving data access requests from the user; then, based on the data access request, determines whether the user has access rights; and if so, determines whether the user's security access level meets the preset security requirements; and if so, retrieves the target data based on the data access request and returns the target data to the user. This method can perform multiple security authentications, effectively regulating data access and thus avoiding the risk of data leakage.

[0010] Furthermore, the determining whether the user terminal has access rights according to the data access request includes:

[0011] Acquire the access account source information and access terminal source information of the user terminal according to the data access request;

[0012] Determining whether the user terminal has relevant API permissions based on the access account source information and the access terminal source information;

[0013] If yes, determining that the user terminal has access rights;

[0014] If not, it is determined that the user terminal does not have the access authority.

[0015] In the above implementation process, the method can determine whether the user terminal has access rights based on the data access request by first obtaining the user terminal's access account source information and access terminal source information based on the data access request; then, based on the access account source information and access terminal source information, determine whether the user terminal has the relevant API permissions; and if the user terminal has the relevant API permissions, determine that the user terminal has access rights; or if the user terminal does not have the relevant API permissions, determine that the user terminal does not have access rights. It can be seen that this method can effectively and accurately determine whether the user terminal has access rights.

[0016] Furthermore, the determining whether the security access level of the user terminal meets the preset security requirements includes:

[0017] Determine the API permissions of the user terminal according to the access account source information and the access terminal source information;

[0018] Determining the security access level of the user terminal according to the API permissions;

[0019] Determining whether the security access level meets preset security requirements;

[0020] If yes, the target data is obtained according to the data access request.

[0021] In the above implementation process, when determining whether the user's security access level meets the preset security requirements, the method can first determine the user's API permissions based on the access account source information and the access terminal source information; then determine the user's security access level based on the API permissions; finally, determine whether the security access level meets the preset security requirements; and if the security access level meets the preset security requirements, execute the data access request to obtain the target data. It can be seen that this method can effectively determine whether the user's security access level meets the preset security requirements.

[0022] Furthermore, acquiring target data according to the data access request includes:

[0023] Perform security verification according to the security access level to obtain a verification result;

[0024] Determine whether the verification result is successful;

[0025] If yes, the target data is acquired according to the data access request.

[0026] In the above implementation, when acquiring target data according to the data access request, the method can first perform a security check based on the security access level to obtain a check result; then determine whether the check result is successful; and if the check result is successful, acquire the target data according to the data access request. This shows that the method can acquire the target data after verification.

[0027] Furthermore, the method further comprises:

[0028] When it is determined according to the data access request that the user terminal does not have access rights, prompt information for prompting the user to apply for access rights is output.

[0029] Furthermore, the method further comprises:

[0030] When it is determined that the security access level of the user terminal does not meet the preset security requirements, prompt information for prompting the user to enhance the security access level is output.

[0031] A second aspect of an embodiment of the present application provides a data access control device, the data access control device comprising:

[0032] A receiving unit, configured to receive a data access request sent by a user terminal;

[0033] a first determining unit, configured to determine whether the user terminal has access rights according to the data access request;

[0034] A second judgment unit is configured to, when it is determined that the user terminal has access rights, judge whether the security access level of the user terminal meets the preset security requirements;

[0035] The acquiring unit is configured to acquire target data according to the data access request and feed the target data back to the user terminal when it is determined that the security access level of the user terminal meets the preset security requirements.

[0036] In the above implementation process, the device can receive a data access request sent by a user terminal through a receiving unit; determine whether the user terminal has access rights based on the data access request through a first judgment unit; if the second judgment unit determines that the user terminal has access rights, it then determines whether the user terminal's security access level meets the preset security requirements; if the acquisition unit determines that the user terminal's security access level meets the preset security requirements, it then acquires the target data based on the data access request and feeds the target data back to the user terminal. It can be seen that the device can perform multiple security authentications, effectively standardize data access, and thus avoid the risk of data leakage.

[0037] Furthermore, the first judgment unit includes:

[0038] A first acquiring subunit is configured to acquire the access account source information and the access terminal source information of the user terminal according to the data access request;

[0039] A first judgment subunit is used to judge whether the user terminal has relevant API permissions based on the access account source information and the access terminal source information;

[0040] The first determining subunit is configured to determine that the user terminal has access rights when it is determined that the user terminal has relevant API rights; and to determine that the user terminal does not have access rights when it is determined that the user terminal does not have relevant API rights.

[0041] In the above implementation process, the first judgment unit can obtain the access account source information and access terminal source information of the user terminal according to the data access request through the first acquisition subunit; determine whether the user terminal has the relevant API permission based on the access account source information and the access terminal source information through the first judgment subunit; determine that the user terminal has access rights when the first determination subunit determines that the user terminal has the relevant API permission; and determine that the user terminal does not have access rights when the first determination subunit determines that the user terminal does not have the relevant API permission. It can be seen that the device can effectively and accurately determine whether the user terminal has access rights.

[0042] Furthermore, the second judgment unit includes:

[0043] A second determining subunit is configured to determine the API authority of the user terminal according to the access account source information and the access terminal source information;

[0044] The second determining subunit is further configured to determine the security access level of the user terminal according to the API permission;

[0045] The second judgment subunit is used to judge whether the security access level meets the preset security requirements; and when the security access level meets the preset security requirements, trigger the acquisition unit to execute the operation of acquiring the target data according to the data access request.

[0046] In the above implementation process, the second judgment unit can determine the API permissions of the user terminal based on the access account source information and the access terminal source information through the second determination subunit; determine the security access level of the user terminal based on the API permissions through the second determination subunit; determine whether the security access level meets the preset security requirements through the second judgment subunit; and trigger the acquisition unit to execute the operation of acquiring the target data according to the data access request when the security access level meets the preset security requirements. It can be seen that this device can effectively determine whether the security access level of the user terminal meets the preset security requirements.

[0047] Furthermore, the acquisition unit includes:

[0048] A verification subunit, configured to perform security verification according to the security access level and obtain a verification result;

[0049] A third judgment subunit is used to judge whether the verification result is successful;

[0050] The second acquisition subunit is configured to acquire target data according to the data access request when the verification result is successful.

[0051] In the above implementation, the acquisition unit can use the verification subunit to perform a security check based on the security access level to obtain a check result; the third judgment subunit can determine whether the check result is successful; and the second acquisition subunit can then acquire the target data according to the data access request if the check result is successful. Therefore, the device can obtain the target data after verification.

[0052] Furthermore, the data access control device further includes:

[0053] The output unit is configured to output prompting the user to apply for access permission when it is determined that the user terminal does not have access permission according to the data access request.

[0054] Furthermore, the data access control device further includes:

[0055] The output unit is used to output prompt information for prompting the user to enhance the security access level when it is determined that the security access level of the user terminal does not meet the preset security requirements.

[0056] A third aspect of an embodiment of the present application provides an electronic device, including a memory and a processor, wherein the memory is used to store a computer program, and the processor runs the computer program to enable the electronic device to execute the data access control method described in any one of the first aspects of the embodiment of the present application.

[0057] A fourth aspect of an embodiment of the present application provides a computer-readable storage medium storing computer program instructions. When the computer program instructions are read and executed by a processor, the data access control method described in any one of the first aspects of the embodiment of the present application is executed. BRIEF DESCRIPTION OF THE DRAWINGS

[0058] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the following is a brief introduction to the drawings required for use in the embodiments of the present application. It should be understood that the following drawings only show certain embodiments of the present application and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other relevant drawings can be obtained based on these drawings without creative work.

[0059] Figure 1 A flowchart of a data access control method provided in an embodiment of the present application;

[0060] Figure 2 A flowchart of another data access control method provided in an embodiment of the present application;

[0061] Figure 3 A schematic diagram of the structure of a data access control device provided in an embodiment of the present application;

[0062] Figure 4 A schematic diagram of the structure of another data access control device provided in an embodiment of the present application;

[0063] Figure 5 This is a schematic diagram illustrating an example of a processing flow of an interceptor before sending a data request provided in an embodiment of the present application;

[0064] Figure 6 This is a schematic diagram showing an example of the processing flow of an interceptor after returning data results provided in an embodiment of the present application. DETAILED DESCRIPTION

[0065] The technical solutions in the embodiments of the present application will be described below in conjunction with the drawings in the embodiments of the present application.

[0066] It should be noted that similar reference numerals and letters represent similar items in the following drawings. Therefore, once an item is defined in one drawing, it does not need to be further defined or explained in subsequent drawings. At the same time, in the description of this application, the terms "first", "second", etc. are only used to distinguish the description and should not be understood as indicating or implying relative importance.

[0067] Example 1

[0068] Please see Figure 1 , Figure 1 A flowchart of a data access control method is provided for an embodiment of the present application. The data access control method includes:

[0069] S101: Receive a data access request sent by a user terminal.

[0070] S102: Determine whether the user terminal has access rights according to the data access request. If so, execute step S103; if not, end this process.

[0071] S103: Determine whether the security access level of the user terminal meets the preset security requirements. If so, execute step S104; if not, end this process.

[0072] S104: Obtain target data according to the data access request, and feed the target data back to the user end.

[0073] In this embodiment, the method effectively controls access to sensitive customer information by intercepting, monitoring, and processing data in two phases: the data request phase before the data query and the data result phase after the data query.

[0074] For example, the access terminal in this method sends a data request to the interceptor, which then processes it and sends the data request to the background application; when the background application returns the data result, the interceptor processes it and then returns the data result to the access terminal.

[0075] In this embodiment, the execution subject of the method may be a computing device such as a computer or a server, and this is not limited in this embodiment.

[0076] In this embodiment, the execution subject of the method may also be a smart device such as a smart phone, a tablet computer, etc., which is not limited in this embodiment.

[0077] As can be seen, implementing the data access control method described in this embodiment can control access to all data according to unified standards, thereby effectively regulating data access. Furthermore, it can prevent the leakage of important data through permission control. Specifically, the design of the security access level mechanism in this method can effectively prevent data leakage. Furthermore, this method can be decoupled from business applications, making application development unaware and facilitating maintenance and management.

[0078] Example 2

[0079] Please see Figure 2 , Figure 2 A flowchart of a data access control method is provided for an embodiment of the present application. The data access control method includes:

[0080] S201: Receive a data access request sent by a user terminal.

[0081] S202: Obtain the user's access account source information and access terminal source information according to the data access request.

[0082] S203. Determine whether the user terminal has relevant API permissions based on the access account source information and the access terminal source information. If so, execute step S204; if not, execute step S211.

[0083] S204: Determine the API authority of the user terminal according to the access account source information and the access terminal source information.

[0084] S205: Determine the security access level of the user terminal according to the API authority.

[0085] S206: Determine whether the security access level meets the preset security requirements. If so, execute step S207; if not, execute step S210.

[0086] S207: Perform security verification according to the security access level and obtain a verification result.

[0087] S208: Determine whether the verification result is successful. If so, execute step S209; if not, end this process.

[0088] S209: Obtain target data according to the data access request, feed the target data back to the user end, and end this process.

[0089] S210: Output prompt information for prompting the user to enhance the security access level, and end this process.

[0090] S211: Output prompt information for prompting the user to apply for access rights, and end this process.

[0091] Please see Figure 5 , Figure 5 Provides a processing flow for interceptors before sending data requests.

[0092] Figure 5 Step 1 in the process logs data request information. This records data request information, such as the source of the request, the terminal being accessed, and other information. This data is primarily used for security monitoring and auditing. This step is often used in conjunction with logging in the return data result interceptor.

[0093] Figure 5 Step 2 is to determine whether the visitor has the relevant API permissions. All APIs require access control. Only visitors with the specified API permissions can successfully access the relevant APIs. Otherwise, the entire process ends directly.

[0094] Figure 5 Step 3 determines whether the visitor's security access level meets the requirements. Security access levels can be categorized based on login method and identity authentication. All APIs require security access levels, and different APIs have different security access level requirements, as shown in the table below. For example, if a user is currently logged in at level 2, they cannot access APIs requiring level 3 login. Access is only possible after the user completes facial recognition.

[0095] Security access levels Remark No login required No login required Level 1 Login Remember historical login status and other ways to log in Secondary login Log in by verification code, gesture password, password, etc. Level 3 login Login with real-time identity authentication, such as face recognition

[0096] Figure 5 Step 4 in the method is to send a data request. When the API permission and security access level verification are completed, the method continues to call the data application API to complete the data request service.

[0097] Please see Figure 6 , Figure 6 Provides a processing flow for the interceptor after returning the data result.

[0098] Figure 6 Step 1 in the data request process is to record information related to the data request result. This can include information about the visitor and the metadata of the data being accessed. This step is usually used in conjunction with the logging of the data request interceptor.

[0099] Figure 6 Step 2 in the process is to determine whether the data access meets the security requirements. This step is one of the core steps of the entire access control. It can control the frequency of data access and whether specific data is allowed to be accessed according to actual needs.

[0100] Figure 6The third step is to return the data result. If the data access meets the security requirements, the method can return the queried data to the query terminal.

[0101] In this embodiment, the execution subject of the method may be a computing device such as a computer or a server, and this is not limited in this embodiment.

[0102] In this embodiment, the execution subject of the method may also be a smart device such as a smart phone, a tablet computer, etc., which is not limited in this embodiment.

[0103] As can be seen, implementing the data access control method described in this embodiment can control access to all data according to unified standards, thereby effectively regulating data access. Furthermore, it can prevent the leakage of important data through permission control. Specifically, the design of the security access level mechanism in this method can effectively prevent data leakage. Furthermore, this method can be decoupled from business applications, making application development unaware and facilitating maintenance and management.

[0104] Example 3

[0105] Please see Figure 3 , Figure 3 This is a structural diagram of a data access control device provided in an embodiment of the present application. Figure 3 As shown, the data access control device includes:

[0106] The receiving unit 310 is configured to receive a data access request sent by a user terminal;

[0107] The first determination unit 320 is configured to determine whether the user terminal has access rights according to the data access request;

[0108] The second judgment unit 330 is used to judge whether the security access level of the user terminal meets the preset security requirements when it is determined that the user terminal has access rights;

[0109] The acquisition unit 340 is configured to acquire target data according to the data access request and feed the target data back to the user terminal when it is determined that the security access level of the user terminal meets the preset security requirements.

[0110] In this embodiment, the explanation of the data access control device can refer to the description in embodiment 1 or embodiment 2, and will not be further elaborated in this embodiment.

[0111] As can be seen, the data access control device described in this embodiment can control access to all data according to unified standards, thereby effectively regulating data access. Furthermore, it can prevent the leakage of important data through permission control. The design of the security access level mechanism in this device can effectively prevent data leakage. Furthermore, this device can be decoupled from business applications, making application development unaware and facilitating maintenance and management.

[0112] Example 4

[0113] Please see Figure 4 , Figure 4 This is a structural diagram of a data access control device provided in an embodiment of the present application. Figure 4 As shown, the data access control device includes:

[0114] The receiving unit 310 is configured to receive a data access request sent by a user terminal;

[0115] The first determination unit 320 is configured to determine whether the user terminal has access rights according to the data access request;

[0116] The second judgment unit 330 is used to judge whether the security access level of the user terminal meets the preset security requirements when it is determined that the user terminal has access rights;

[0117] The acquisition unit 340 is configured to acquire target data according to the data access request and feed the target data back to the user terminal when it is determined that the security access level of the user terminal meets the preset security requirements.

[0118] As an optional implementation manner, the first judgment unit 320 includes:

[0119] The first acquisition subunit 321 is used to obtain the access account source information and access terminal source information of the user terminal according to the data access request;

[0120] The first judgment subunit 322 is used to judge whether the user terminal has relevant API permissions based on the access account source information and the access terminal source information;

[0121] The first determining subunit 323 is configured to determine that the user terminal has access rights when it is determined that the user terminal has relevant API rights; and to determine that the user terminal does not have access rights when it is determined that the user terminal does not have relevant API rights.

[0122] As an optional implementation manner, the second judgment unit 330 includes:

[0123] The second determining subunit 331 is used to determine the API authority of the user terminal according to the access account source information and the access terminal source information;

[0124] The second determining subunit 331 is further configured to determine the security access level of the user terminal according to the API permissions;

[0125] The second judging subunit 332 is configured to judge whether the security access level meets the preset security requirements; and trigger the acquisition unit to execute an operation of acquiring target data according to the data access request when the security access level meets the preset security requirements.

[0126] As an optional implementation, the acquiring unit 340 includes:

[0127] The verification subunit 341 is used to perform security verification according to the security access level and obtain a verification result;

[0128] The third judgment subunit 342 is used to judge whether the verification result is successful;

[0129] The second acquisition subunit 343 is configured to acquire target data according to the data access request when the verification result is successful.

[0130] As an optional implementation manner, the data access control device further includes:

[0131] The output unit 350 is configured to output prompting the user to apply for access permission when it is determined that the user terminal does not have access permission according to the data access request.

[0132] As an optional implementation manner, the data access control device further includes:

[0133] The output unit 350 is used to output prompt information for prompting the user to enhance the security access level when it is determined that the security access level of the user terminal does not meet the preset security requirements.

[0134] In this embodiment, the explanation of the data access control device can refer to the description in embodiment 1 or embodiment 2, and will not be further elaborated in this embodiment.

[0135] As can be seen, the data access control device described in this embodiment can control access to all data according to unified standards, thereby effectively regulating data access. Furthermore, it can prevent the leakage of important data through permission control. The design of the security access level mechanism in this device can effectively prevent data leakage. Furthermore, this device can be decoupled from business applications, making application development unaware and facilitating maintenance and management.

[0136] An embodiment of the present application provides an electronic device, including a memory and a processor, wherein the memory is used to store a computer program, and the processor runs the computer program to enable the electronic device to execute the data access control method in embodiment 1 or embodiment 2 of the present application.

[0137] An embodiment of the present application provides a computer-readable storage medium storing computer program instructions. When the computer program instructions are read and executed by a processor, the data access control method in embodiment 1 or embodiment 2 of the present application is executed.

[0138] In the several embodiments provided in this application, it should be understood that the disclosed devices and methods can also be implemented in other ways. The device embodiments described above are merely illustrative. For example, the flowcharts and block diagrams in the accompanying drawings show the possible architectures, functions and operations of the devices, methods and computer program products according to the multiple embodiments of the present application. In this regard, each box in the flowchart or block diagram can represent a module, a program segment or a part of the code, and the module, program segment or a part of the code contains one or more executable instructions for implementing the specified logical functions. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in an order different from that marked in the accompanying drawings. For example, two consecutive boxes can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram and / or flowchart, and the combination of boxes in the block diagram and / or flowchart, can be implemented using a dedicated hardware-based system that performs the specified function or action, or can be implemented using a combination of dedicated hardware and computer instructions.

[0139] In addition, the functional modules in each embodiment of the present application can be integrated together to form an independent part, or each module can exist independently, or two or more modules can be integrated to form an independent part.

[0140] If the functions are implemented in the form of software function modules and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes several instructions for enabling a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.

[0141] The foregoing is merely an embodiment of the present application and is not intended to limit the scope of protection of the present application. Various modifications and variations are possible for those skilled in the art. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present application shall be included within the scope of protection of the present application. It should be noted that similar reference numerals and letters represent similar items in the following figures. Therefore, once an item is defined in one figure, it does not need to be further defined or explained in subsequent figures.

[0142] The above description is merely a specific embodiment of the present application, but the scope of protection of the present application is not limited thereto. Any changes or substitutions that can be easily conceived by a person skilled in the art within the technical scope disclosed in the present application should be included in the scope of protection of the present application. Therefore, the scope of protection of the present application should be based on the scope of protection of the claims.

[0143] It should be noted that, in this document, relational terms such as first and second, etc., are used only to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply the existence of any such actual relationship or order between these entities or operations. Moreover, the terms "comprises," "comprising," or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article, or device comprising a series of elements includes not only those elements, but also other elements not explicitly listed, or elements inherent to such process, method, article, or device. In the absence of further limitations, an element defined by the phrase "comprising a ..." does not exclude the presence of other identical elements in the process, method, article, or device comprising the element.

Claims

1. A data access control method, characterized in that: include: Receive data access request sent by the user; Determining whether the user terminal has access rights according to the data access request; If yes, determining whether the security access level of the user terminal meets the preset security requirements; If yes, acquiring the target data according to the data access request, and feeding the target data back to the user end; The step of determining whether the user terminal has access rights according to the data access request includes: Acquire the access account source information and access terminal source information of the user terminal according to the data access request; Determining whether the user terminal has relevant API permissions based on the access account source information and the access terminal source information; If yes, determining that the user terminal has access rights; If not, determining that the user terminal does not have access rights; The step of determining whether the security access level of the user terminal meets the preset security requirements includes: Determine the API permissions of the user terminal according to the access account source information and the access terminal source information; Determine the security access level of the user terminal according to the API permission; the security access level includes at least no login, first-level login, second-level login and third-level login; Determining whether the security access level meets preset security requirements; If yes, then executing the step of acquiring the target data according to the data access request; If not, a prompt message is outputted to prompt the user to enhance the security access level.

2. The data access control method according to claim 1, characterized in that: The acquiring target data according to the data access request includes: Perform security verification according to the security access level to obtain a verification result; Determine whether the verification result is successful; If yes, the target data is acquired according to the data access request.

3. The data access control method according to claim 1, wherein: The method further comprises: When it is determined according to the data access request that the user terminal does not have access rights, prompt information for prompting the user to apply for access rights is output.

4. A data access control device, characterized in that: The data access control device includes: A receiving unit, configured to receive a data access request sent by a user terminal; a first determining unit, configured to determine whether the user terminal has access rights according to the data access request; A second judgment unit is configured to, when it is determined that the user terminal has access rights, judge whether the security access level of the user terminal meets the preset security requirements; an acquiring unit, configured to acquire target data according to the data access request and feed the target data back to the user terminal when it is determined that the security access level of the user terminal meets the preset security requirements; The first judgment unit includes: A first acquiring subunit is configured to acquire the access account source information and the access terminal source information of the user terminal according to the data access request; A first judgment subunit is used to judge whether the user terminal has relevant API permissions based on the access account source information and the access terminal source information; A first determining subunit is configured to determine that the user terminal has access rights when it is determined that the user terminal has relevant API rights; and to determine that the user terminal does not have access rights when it is determined that the user terminal does not have relevant API rights; The second judgment unit includes: The second determining subunit is used to determine the API permissions of the user terminal based on the access account source information and the access terminal source information; The second determining subunit is further configured to determine a security access level of the user terminal according to the API permissions; the security access levels include at least no login, first-level login, second-level login, and third-level login; The second judgment subunit is used to judge whether the security access level meets the preset security requirements; and when the security access level meets the preset security requirements, trigger the acquisition unit to perform an operation of acquiring the target data according to the data access request; Wherein, the data access control device further includes: The output unit is used to output prompt information for prompting the user to enhance the security access level when it is determined that the security access level of the user terminal does not meet the preset security requirements.

5. An electronic device, characterized in that: The electronic device includes a memory and a processor, the memory is used to store a computer program, and the processor runs the computer program to enable the electronic device to execute the data access control method according to any one of claims 1 to 3.

6. A readable storage medium, characterized in that: The readable storage medium stores computer program instructions, and when the computer program instructions are read and executed by a processor, the data access control method according to any one of claims 1 to 3 is executed.

Images