A sensitive field early warning method, system, computer device and medium

Abstract

The application relates to the technical field of computers and discloses a sensitive field early warning method and system, computer equipment and a medium, the method comprising the following steps: when detecting a target network interface request of a mobile terminal webpage, determining a field set corresponding to the target network interface request; determining a to-be-checked field in the field set according to a pre-configured field checking rule, checking each to-be-checked field, and generating a checking result of each to-be-checked field; determining a sensitive field according to the checking result of each to-be-checked field, and constructing a current page alarm prompt based on the sensitive field to perform early warning. The application can discover sensitive data existing in a field set by monitoring a target network interface request of a mobile terminal webpage in real time and processing a field set of the target network interface request according to a pre-configured field checking rule, can timely modify the related function of the sensitive data, and can avoid the risk that a system platform is offline, thereby improving the safety of the system platform.

Description

Technical Field

[0001] This invention relates to the field of computer technology, and in particular to a method, system, computer device, and medium for early warning of sensitive fields. Background Technology

[0002] As industries undergo digital transformation, online data is constantly growing. For example, user actions on online platforms generate various types of data, such as browsing data, click data, payment data, registration information, and so on. Within this massive amount of data, there is inevitably some sensitive information. Therefore, protecting sensitive data is currently of paramount importance.

[0003] Currently, as the business functions within system platforms continue to expand, developers can easily overlook the protection of user privacy data in the process of developing massive business functions. Simultaneously, as regulatory authorities become increasingly stringent in their compliance testing of applications, and the scope of their testing expands, when regulatory authorities detect log information that fails to protect user privacy data, they will order the system platform to be modified. Failure to make timely modifications may result in the system platform being taken offline, thereby reducing its security. Summary of the Invention

[0004] Therefore, it is necessary to provide a method, system, computer equipment, and media for early warning of sensitive fields to address the issue of low system platform security.

[0005] A sensitive field early warning method includes: when a target network interface request of a mobile webpage is detected, determining the field set corresponding to the target network interface request; determining at least one field to be verified in the field set according to pre-configured field verification rules, and verifying each field to be verified to generate a verification result for each field to be verified; determining sensitive fields based on the verification results of each field to be verified, and constructing an alarm prompt for the current page based on the sensitive fields to issue an early warning.

[0006] In one embodiment, a current page alarm prompt is constructed based on a sensitive field for early warning, including: determining the severity level of the sensitive field according to the field information of the sensitive field; generating a current page alarm prompt based on the severity level of the sensitive field; and reporting and issuing an early warning for the current page alarm prompt.

[0007] In one embodiment, determining the severity level of a sensitive field based on its field information includes: determining the severity level of the sensitive field as severe when the field information is in plaintext; or, determining the severity level of the sensitive field as moderate when the field information is in masked state; or, determining the severity level of the sensitive field as mild when the field information is in encrypted state; wherein the severity level of severe is greater than that of moderate, and the severity level of moderate is greater than that of mild.

[0008] In one embodiment, generating a current page alert based on the severity level of a sensitive field includes: when the severity level of the sensitive field is severe, creating a severe alert message and rendering the severe alert message with a red parameter to generate a current page alert; or, when the severity level of the sensitive field is moderate, creating a moderate alert message and rendering the moderate alert message with an orange parameter to generate a current page alert; or, when the severity level of the sensitive field is mild, creating a mild alert message and rendering the mild alert message with a yellow parameter to generate a current page alert.

[0009] In one embodiment, determining at least one field to be verified in a field set according to pre-configured field verification rules includes: extracting multiple key-value pairs existing in the pre-configured field verification rules, wherein the key-value pairs include a key name and a verification strategy value; matching each field in the field set with the key name of each key-value pair to obtain fields that are successfully matched and fields that are not matched; determining the fields that are not matched as non-sensitive fields, and obtaining at least one field to be verified based on the fields that are successfully matched.

[0010] In one embodiment, each field to be verified is verified to generate a verification result for each field to be verified, including: determining the priority of each field to be verified and sorting each field to be verified sequentially based on its priority to obtain multiple sorted fields; determining the verification strategy value in the key-value pairs that are successfully matched by each sorted field to obtain a verification strategy for each sorted field; verifying whether the field attribute value of the corresponding sorted field conforms to a preset rule according to the verification strategy of each sorted field to obtain a self-data verification result for each field to be verified; verifying whether the field attribute value of the corresponding sorted field is masked according to the verification strategy of each sorted field to obtain a field mask verification result for each field to be verified; verifying whether the field attribute value of the corresponding sorted field is encrypted according to the verification strategy of each sorted field to obtain a field encryption verification result for each field to be verified; and determining the self-data verification result, field mask verification result, and field encryption verification result of each field to be verified as the verification result for each field to be verified.

[0011] In one embodiment, the sensitive field is determined based on the verification result of each field to be verified, including: obtaining the self-data verification result, field mask verification result, and field encryption verification result contained in the verification result of each field to be verified; when there is a verification failure state in the self-data verification result, field mask verification result, and field encryption verification result, each field to be verified is determined to be a sensitive field.

[0012] A sensitive field early warning system includes: a field set determination module, used to determine the field set corresponding to the target network interface request when a target network interface request of a mobile webpage is detected; a verification result generation module, used to determine at least one field to be verified in the field set according to pre-configured field verification rules, and to verify each field to be verified and generate a verification result for each field to be verified; and an early warning reporting module, used to determine sensitive fields based on the verification results of each field to be verified, and to construct an alarm prompt for the current page based on the sensitive fields to issue an early warning.

[0013] A computer device includes a memory and a processor. The memory stores computer-readable instructions, which, when executed by the processor, cause the processor to perform the steps of the aforementioned sensitive field warning method.

[0014] A medium storing computer-readable instructions, which, when executed by one or more processors, cause the one or more processors to perform the steps of the aforementioned sensitive field warning method.

[0015] The aforementioned sensitive field early warning method, system, device, and medium first determine the set of fields corresponding to the target network interface request when a target network interface request is detected on a mobile webpage. Then, according to pre-configured field validation rules, the fields to be validated are identified from the field set, and each field to be validated is validated, generating a validation result for each field. Finally, sensitive fields are determined based on the validation results of each field to be validated, and an alarm prompt is constructed on the current page based on the sensitive fields to issue an early warning. Because this application monitors the target network interface request of the mobile webpage in real time and processes the field set of the target network interface request according to pre-configured field validation rules to discover sensitive data in the field set, the relevant functions for sensitive data can be modified in a timely manner, thereby avoiding the risk of the system platform being taken offline and improving the security of the system platform. Attached Figure Description

[0016] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments consistent with the invention and, together with the description, serve to explain the principles of the invention.

[0017] Figure 1 This is a diagram illustrating the implementation environment of a sensitive field early warning method provided in one embodiment of this application.

[0018] Figure 2 This is a schematic diagram of the internal structure of a computer device in one embodiment of this application;

[0019] Figure 3 This is a schematic diagram of a sensitive field early warning method provided in one embodiment of this application;

[0020] Figure 4 This is a schematic diagram of a field and pre-configured field validation rules provided in one embodiment of this application;

[0021] Figure 5 This is a schematic block diagram illustrating a sensitive field early warning process provided in one embodiment of this application;

[0022] Figure 6 This is a schematic diagram of another sensitive field early warning method provided in one embodiment of this application;

[0023] Figure 7 This is a schematic diagram of the system structure of a sensitive field early warning system provided in an embodiment of this application. Detailed Implementation

[0024] To make the objectives, technical solutions, and advantages of this invention clearer, the invention will be further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the invention.

[0025] It is understood that the terms “first,” “second,” etc., used in this application may be used herein to describe various elements, but these elements are not limited by these terms. These terms are only used to distinguish one element from another.

[0026] Figure 1 This is a diagram illustrating the implementation environment of a sensitive field early warning method provided in one embodiment, such as... Figure 1 As shown, this implementation environment includes a server 110 and a client 120.

[0027] Server 110 can be a server, specifically a standalone server or a cloud server providing basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communication, middleware services, domain name services, security services, content delivery networks (CDN), and big data and artificial intelligence platforms. For example, it could be a server device storing pre-configured field validation rules. Client 120 connects to server 110. When client 120 detects a target network interface request from a mobile webpage, it determines the set of fields corresponding to the target network interface request. Client 120 retrieves the pre-configured field validation rules from server 110. Based on these rules, client 120 identifies at least one field to be validated from the field set and validates each field, generating a validation result for each field. Client 120 determines sensitive fields based on the validation results of each field and constructs an alert for the current page based on these sensitive fields.

[0028] It should be noted that the client 120 can be a smartphone, tablet, laptop, desktop computer, etc., but is not limited to these. The server 110 and the client 120 can connect via Bluetooth, USB (Universal Serial Bus), or other communication connection methods, which are not limited in this invention.

[0029] Figure 2 This is a schematic diagram of the internal structure of a computer device in one embodiment. For example... Figure 2As shown, the computer device includes a processor, media, memory, and network interface connected via a system bus. The media of the computer device stores an operating system, a database, and computer-readable instructions. The database may store control information sequences. When the computer-readable instructions are executed by the processor, they enable the processor to implement a sensitive field warning method. The processor of the computer device provides computing and control capabilities to support the operation of the entire device. The memory of the computer device may store computer-readable instructions, which, when executed by the processor, enable the processor to implement a sensitive field warning method. The network interface of the computer device is used for communication with a terminal. Those skilled in the art will understand that… Figure 2 The structure shown is merely a block diagram of a portion of the structure related to the present application and does not constitute a limitation on the computer device to which the present application is applied. A specific computer device may include more or fewer components than shown in the figure, or combine certain components, or have different component arrangements. The medium is a readable storage medium.

[0030] The following will be combined with the appendix Figure 3-6 This application provides a detailed description of the sensitive field early warning method provided in its embodiments. This method can be implemented using a computer program and can run on a sensitive field early warning system based on the von Neumann architecture. This computer program can be integrated into an application or run as a standalone utility application.

[0031] The embodiments of this application can acquire and process relevant data based on artificial intelligence technology. Artificial intelligence (AI) refers to the theories, methods, technologies, and application systems that use digital computers or machines controlled by digital computers to simulate, extend, and expand human intelligence, perceive the environment, acquire knowledge, and use that knowledge to obtain optimal results.

[0032] Foundational artificial intelligence technologies generally include sensors, dedicated AI chips, cloud computing, distributed storage, early warning technology for highly sensitive fields, operating / interactive systems, and mechatronics. AI software technologies mainly encompass computer vision, robotics, biometrics, speech processing, natural language processing, and machine learning / deep learning.

[0033] Please see Figure 3 The above is a flowchart illustrating a sensitive field early warning method provided in this application embodiment.

[0034] like Figure 3 As shown, the method in this application embodiment may include the following steps:

[0035] S101, when a target network interface request for a mobile webpage is detected, determine the set of fields corresponding to the target network interface request;

[0036] The mobile webpage is a functional page developed using the Hypertext Markup Language (HTML), integrating various display formats such as text, images, music, video, and links. This application preferably uses functional pages developed using the fifth-generation Hypertext Markup Language (H5). The target network interface request refers to the relevant request information generated by the user triggering corresponding functions on the functional page. This relevant request information includes URL links, cookies, local storage, session storage, and indexed databases. Each relevant request information contains corresponding fields, and each field carries field information used to implement the corresponding function.

[0037] In this embodiment of the application, after the user triggers the function on the H5 page, a target network interface request can be generated. At the same time, when the pre-set automatic detection mode detects the target network interface request, it can automatically obtain all the field information carried by the target network interface request to determine the field set corresponding to the target network interface request.

[0038] In one possible implementation, when a user logs in on an H5 page, the user first opens the login page, then enters their username and password, and clicks the submit button. This generates a target network interface request, which includes at least the username and password. When the user terminal detects the target network interface request, it can automatically obtain a set of fields, which can be either username or password, by retrieving the username and password from the request.

[0039] S102, determine at least one field to be verified in the field set according to the pre-configured field verification rules, and verify each field to be verified to generate a verification result for each field to be verified.

[0040] Each pre-configured field validation rule is a key-value pair, which includes a key name and a validation strategy value. The key name is used to match the field to identify non-sensitive fields; the validation strategy value is used to validate the field information, and can be a regular expression used to validate the field information.

[0041] Generally, issuing warnings for sensitive fields can be understood as issuing warnings for non-sensitive fields that are not protected by data. This requires first identifying non-sensitive fields from the field set. For example, in the login function, cookies are simply set as "true" or "false" flags, so they are non-sensitive fields. Then, the fields in the field set other than non-sensitive fields are identified as fields to be verified. Legitimate fields in the fields to be verified are not subject to warnings, while illegitimate fields in the fields to be verified are identified as sensitive fields and warnings are issued.

[0042] In this embodiment of the application, when at least one field to be verified is determined in the field set according to the pre-configured field verification rules, multiple key-value pairs existing in the pre-configured field verification rules are first extracted. The key-value pairs include a key name and a verification strategy value. Then, each field in the field set is matched with the key name of each key-value pair to obtain the fields that are successfully matched and the fields that are not matched. Finally, the fields that are not matched are determined as non-sensitive fields, and at least one field to be verified is obtained based on the fields that are successfully matched.

[0043] In this embodiment, when validating each field to be validated and generating a validation result for each field to be validated, the priority of each field to be validated is first determined, and each field to be validated is sorted sequentially based on its priority, resulting in multiple sorted fields. Then, the validation strategy value in the key-value pairs that are successfully matched by each sorted field is determined, resulting in a validation strategy for each sorted field. Next, the field attribute value of the corresponding sorted field is checked against a preset rule according to the validation strategy of each sorted field, resulting in a self-data validation result for each field to be validated. Then, the field attribute value of the corresponding sorted field is checked against a masking process according to the validation strategy of each sorted field, resulting in a field mask validation result for each field to be validated. Finally, the self-data validation result, field mask validation result, and field encryption validation result of each field to be validated are determined as the validation result for each field to be validated.

[0044] In one possible implementation, for example Figure 4 As shown, Figure 4This is a schematic diagram illustrating a field and pre-configured field validation rules provided in this application. The field set includes name, mobile phone number, ID card number, bank card number, password, and others (non-sensitive fields that did not match any rules). In the validation of the name field, the key-value rule for the name in the successfully matched validation strategy value is as follows: check if the name contains 2-4 Chinese characters, check if the name contains a mask format "*", and check if the name is encrypted. After the checks are completed, the validation results for the name field itself, the mask validation result, and the encryption validation result can be obtained. For specific validation of other fields, please refer to [link to relevant documentation]. Figure 4 The details will not be elaborated here.

[0045] S103, determine the sensitive fields based on the verification results of each field to be verified, and build an alert prompt on the current page based on the sensitive fields to issue a warning.

[0046] Sensitive fields are non-sensitive fields that do not conform to the pre-configured field validation rules.

[0047] In this embodiment of the application, when determining sensitive fields based on the verification results of each field to be verified, the self-data verification result, field mask verification result, and field encryption verification result contained in the verification results of each field to be verified are first obtained. Then, when there is a verification failure state in the self-data verification result, field mask verification result, and field encryption verification result, each field to be verified is determined to be a sensitive field.

[0048] In this embodiment of the application, when constructing a current page alarm prompt based on a sensitive field to issue an early warning, the severity level of the sensitive field is first determined according to the field information of the sensitive field, and then a current page alarm prompt is generated based on the severity level of the sensitive field, and the current page alarm prompt is reported and issued as an early warning.

[0049] Specifically, when determining the severity level of a sensitive field based on its information, the severity level is determined as follows: if the sensitive field information is in plaintext, the severity level is set to severe; if the sensitive field information is in masked state, the severity level is set to moderate; or if the sensitive field information is in encrypted state, the severity level is set to mild. The severity level of severe is greater than that of moderate, and the severity level of moderate is greater than that of mild.

[0050] Specifically, when generating an alert for the current page based on the severity level of a sensitive field, firstly, if the severity level of the sensitive field is severe, a severe alert message is created and rendered in red, generating an alert for the current page; secondly, if the severity level of the sensitive field is moderate, a moderate alert message is created and rendered in orange, generating an alert for the current page; and thirdly, if the severity level of the sensitive field is mild, a mild alert message is created and rendered in yellow, generating an alert for the current page.

[0051] For example Figure 5 As shown, Figure 5 This application provides a schematic flowchart of a sensitive field early warning process. First, during the research and testing phase, the project testing environment introduces the eruda testing tool to monitor network requests triggered by users for functional pages in real time during project operation. After detecting a network request, the relevant content of the network request can be determined, such as URL, cookie, local storage, session storage, and indexDB. Then, the set of fields of the relevant content is determined, and the pre-configured field validation rules are read. Based on the rules, the fields to be validated in the field set are determined, and the validation rules are executed on the fields to be validated. If the validation passes, the field is determined to be valid; if the validation fails, the field is determined to be an invalid sensitive field. The invalid sensitive fields are displayed on the current page and fed back to the research and testing platform for project rectification.

[0052] In this embodiment, the sensitive field early warning system first determines the set of fields corresponding to the target network interface request when it detects a target network interface request on a mobile webpage. Then, according to pre-configured field validation rules, it identifies the fields to be validated in the field set and validates each field, generating a validation result for each field. Finally, it determines the sensitive fields based on the validation results of each field and constructs an alert for the current page based on these sensitive fields. Because this application monitors the target network interface request on the mobile webpage in real time and processes the field set of the target network interface request according to pre-configured field validation rules to discover sensitive data within the field set, it can promptly modify the relevant functions for sensitive data, thereby avoiding the risk of the system platform being taken offline and improving the system platform's security.

[0053] Please see Figure 6 The above is a flowchart illustrating a sensitive field early warning method provided in this application embodiment.

[0054] like Figure 6 As shown, the method in this application embodiment may include the following steps:

[0055] S201, when a target network interface request for a mobile webpage is detected, determine the set of fields corresponding to the target network interface request;

[0056] S202, Extract multiple key-value pairs that exist in the pre-configured field validation rules. The key-value pairs include the key name and the validation strategy value.

[0057] S203, match each field in the field set with the key name of each key-value pair to obtain the fields that match successfully and the fields that do not match successfully;

[0058] S204, determine the fields that failed to match as non-sensitive fields, and obtain at least one field to be verified based on the fields that matched successfully;

[0059] S205, perform validation on each field to be validated and generate the validation result for each field to be validated;

[0060] S206, obtain the self-data verification result, field mask verification result and field encryption verification result contained in the verification result of each field to be verified;

[0061] S207, when there is a verification failure state in the self-data verification result, field mask verification result and field encryption verification result, each field to be verified is determined to be a sensitive field;

[0062] S208, Build an alert prompt on the current page based on sensitive fields to issue a warning.

[0063] In this embodiment, the sensitive field early warning system first determines the set of fields corresponding to the target network interface request when it detects a target network interface request on a mobile webpage. Then, according to pre-configured field validation rules, it identifies the fields to be validated in the field set and validates each field, generating a validation result for each field. Finally, it determines the sensitive fields based on the validation results of each field and constructs an alert for the current page based on these sensitive fields. Because this application monitors the target network interface request on the mobile webpage in real time and processes the field set of the target network interface request according to pre-configured field validation rules to discover sensitive data within the field set, it can promptly modify the relevant functions for sensitive data, thereby avoiding the risk of the system platform being taken offline and improving the system platform's security.

[0064] The following are system embodiments of the present invention, which can be used to execute the method embodiments of the present invention. For details not disclosed in the system embodiments of the present invention, please refer to the method embodiments of the present invention.

[0065] Please see Figure 7This diagram illustrates a schematic representation of a sensitive field early warning system provided by an exemplary embodiment of the present invention. This sensitive field early warning system can be implemented as all or part of a device through software, hardware, or a combination of both. System 1 includes a field set determination module 10, a verification result generation module 20, and an early warning reporting module 30.

[0066] The field set determination module 10 is used to determine the field set corresponding to the target network interface request when a target network interface request for a mobile webpage is detected.

[0067] The verification result generation module 20 is used to determine at least one field to be verified in the field set according to the pre-configured field verification rules, and to verify each field to be verified and generate a verification result for each field to be verified.

[0068] The reporting and early warning module 30 is used to determine sensitive fields based on the verification results of each field to be verified, and to build an alarm prompt on the current page based on the sensitive fields to issue an early warning.

[0069] It should be noted that the sensitive field early warning system provided in the above embodiments is only illustrated by the division of the above functional modules when executing the sensitive field early warning method. In actual applications, the above functions can be assigned to different functional modules as needed, that is, the internal structure of the device can be divided into different functional modules to complete all or part of the functions described above. In addition, the sensitive field early warning system and the sensitive field early warning method embodiments provided in the above embodiments belong to the same concept, and the implementation process is detailed in the method embodiments, which will not be repeated here.

[0070] The sequence numbers of the embodiments in this application are for descriptive purposes only and do not represent the superiority or inferiority of the embodiments.

[0071] In this embodiment, the sensitive field early warning system first determines the set of fields corresponding to the target network interface request when it detects a target network interface request on a mobile webpage. Then, according to pre-configured field validation rules, it identifies the fields to be validated in the field set and validates each field, generating a validation result for each field. Finally, it determines the sensitive fields based on the validation results of each field and constructs an alert for the current page based on these sensitive fields. Because this application monitors the target network interface request on the mobile webpage in real time and processes the field set of the target network interface request according to pre-configured field validation rules to discover sensitive data within the field set, it can promptly modify the relevant functions for sensitive data, thereby avoiding the risk of the system platform being taken offline and improving the system platform's security.

[0072] In one embodiment, a computer device is provided, the device including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the computer program to perform the following steps:

[0073] When a target network interface request for a mobile webpage is detected, the set of fields corresponding to the target network interface request is determined.

[0074] According to the pre-configured field validation rules, at least one field to be validated is determined in the field set, and each field to be validated is validated to generate a validation result for each field to be validated.

[0075] Sensitive fields are determined based on the verification results of each field to be verified, and an alert is generated on the current page based on the sensitive fields to issue a warning.

[0076] In one embodiment, when the processor executes the alert notification for the current page based on the sensitive fields, it specifically performs the following operations:

[0077] The severity level of the sensitive field is determined based on the field information of the sensitive field;

[0078] Based on the severity level of the sensitive fields, generate an alarm message for the current page, and report and issue a warning for the current page alarm message.

[0079] In one embodiment, when the processor determines the severity level of the sensitive field based on the field information of the sensitive field, it specifically performs the following operations:

[0080] When the field information of the sensitive field is in plaintext, the severity level of the sensitive field is determined to be severe; or,

[0081] When the field information of the sensitive field is in a masked state, the severity level of the sensitive field is determined to be moderate; or,

[0082] When the field information of the sensitive field is encrypted, the severity level of the sensitive field is determined to be mild; wherein,

[0083] The severity level of the severe level is greater than that of the moderate level, and the severity level of the moderate level is greater than that of the mild level.

[0084] In one embodiment, when the processor generates a current page alert based on the severity level of the sensitive field, it specifically performs the following operations:

[0085] When the severity level of the sensitive field is high, a high-level alert message is created, and the high-level alert message is rendered with a red parameter to generate an alarm message for the current page.

[0086] or,

[0087] When the severity level of the sensitive field is medium, a medium-level prompt message is created, and the medium-level prompt message is rendered with an orange parameter to generate an alarm prompt for the current page.

[0088] or,

[0089] When the severity level of the sensitive field is mild, a mild warning message is created, and the mild warning message is rendered with a yellow parameter to generate an alarm message for the current page.

[0090] In one embodiment, when the processor determines at least one field to be validated in the field set according to pre-configured field validation rules, it specifically performs the following operations:

[0091] Extract multiple key-value pairs from the pre-configured field validation rules, wherein the key-value pairs include a key name and a validation strategy value;

[0092] Each field in the field set is matched with the key name of each key-value pair to obtain the fields that match successfully and the fields that do not match successfully.

[0093] Fields that fail to match are identified as non-sensitive fields, and at least one field to be validated is obtained based on the fields that match successfully.

[0094] In one embodiment, when the processor performs validation on each field to be validated and generates a validation result for each field, it specifically performs the following operations:

[0095] Determine the priority of each field to be verified, and sort each field to be verified in order of priority to obtain multiple sorting fields;

[0096] Determine the validation strategy value in the key-value pairs that are successfully matched for each sorting field to obtain the validation strategy for each sorting field;

[0097] Based on the validation strategy of each sorting field, the field attribute values ​​of the corresponding sorting field are validated to see if they conform to the preset rules, and the data validation result of each field to be validated is obtained.

[0098] Based on the validation strategy of each sorting field, check whether the field attribute values ​​of the corresponding sorting field are masked to obtain the field mask validation result of each field to be validated.

[0099] Based on the verification strategy of each sorting field, verify whether the field attribute value of the corresponding sorting field has been encrypted, and obtain the field encryption verification result of each field to be verified.

[0100] The self-data verification result, field mask verification result, and field encryption verification result of each field to be verified are determined as the verification result of each field to be verified.

[0101] In one embodiment, when the processor determines the sensitive fields based on the validation results of each field to be validated, it specifically performs the following operations:

[0102] Retrieve the validation results of each field to be validated, including its own data validation results, field mask validation results, and field encryption validation results.

[0103] When any of the self-data verification results, field mask verification results, or field encryption verification results show a verification failure, each field to be verified is determined to be a sensitive field.

[0104] In this embodiment, the sensitive field early warning system first determines the set of fields corresponding to the target network interface request when it detects a target network interface request on a mobile webpage. Then, according to pre-configured field validation rules, it identifies the fields to be validated in the field set and validates each field, generating a validation result for each field. Finally, it determines the sensitive fields based on the validation results of each field and constructs an alert for the current page based on these sensitive fields. Because this application monitors the target network interface request on the mobile webpage in real time and processes the field set of the target network interface request according to pre-configured field validation rules to discover sensitive data within the field set, it can promptly modify the relevant functions for sensitive data, thereby avoiding the risk of the system platform being taken offline and improving the system platform's security.

[0105] In one embodiment, a medium storing computer-readable instructions is provided, which, when executed by one or more processors, cause the one or more processors to perform the following steps:

[0106] When a target network interface request for a mobile webpage is detected, the set of fields corresponding to the target network interface request is determined.

[0107] According to the pre-configured field validation rules, at least one field to be validated is determined in the field set, and each field to be validated is validated to generate a validation result for each field to be validated.

[0108] Sensitive fields are determined based on the verification results of each field to be verified, and an alert is generated on the current page based on the sensitive fields to issue a warning.

[0109] In one embodiment, when the processor executes the alert notification for the current page based on the sensitive fields, it specifically performs the following operations:

[0110] The severity level of the sensitive field is determined based on the field information of the sensitive field;

[0111] Based on the severity level of the sensitive fields, generate an alarm message for the current page, and report and issue a warning for the current page alarm message.

[0112] In one embodiment, when the processor determines the severity level of the sensitive field based on the field information of the sensitive field, it specifically performs the following operations:

[0113] When the field information of the sensitive field is in plaintext, the severity level of the sensitive field is determined to be severe; or,

[0114] When the field information of the sensitive field is in a masked state, the severity level of the sensitive field is determined to be moderate; or,

[0115] When the field information of the sensitive field is encrypted, the severity level of the sensitive field is determined to be mild; wherein,

[0116] The severity level of the severe level is greater than that of the moderate level, and the severity level of the moderate level is greater than that of the mild level.

[0117] In one embodiment, when the processor generates a current page alert based on the severity level of the sensitive field, it specifically performs the following operations:

[0118] When the severity level of the sensitive field is high, a high-level alert message is created, and the high-level alert message is rendered with a red parameter to generate an alarm message for the current page.

[0119] or,

[0120] When the severity level of the sensitive field is medium, a medium-level prompt message is created, and the medium-level prompt message is rendered with an orange parameter to generate an alarm prompt for the current page.

[0121] or,

[0122] When the severity level of the sensitive field is mild, a mild warning message is created, and the mild warning message is rendered with a yellow parameter to generate an alarm message for the current page.

[0123] In one embodiment, when the processor determines at least one field to be validated in the field set according to pre-configured field validation rules, it specifically performs the following operations:

[0124] Extract multiple key-value pairs from the pre-configured field validation rules, wherein the key-value pairs include a key name and a validation strategy value;

[0125] Each field in the field set is matched with the key name of each key-value pair to obtain the fields that match successfully and the fields that do not match successfully.

[0126] Fields that fail to match are identified as non-sensitive fields, and at least one field to be validated is obtained based on the fields that match successfully.

[0127] In one embodiment, when the processor performs validation on each field to be validated and generates a validation result for each field, it specifically performs the following operations:

[0128] Determine the priority of each field to be verified, and sort each field to be verified in order of priority to obtain multiple sorting fields;

[0129] Determine the validation strategy value in the key-value pairs that are successfully matched for each sorting field to obtain the validation strategy for each sorting field;

[0130] Based on the validation strategy of each sorting field, the field attribute values ​​of the corresponding sorting field are validated to see if they conform to the preset rules, and the data validation result of each field to be validated is obtained.

[0131] Based on the validation strategy of each sorting field, check whether the field attribute values ​​of the corresponding sorting field are masked to obtain the field mask validation result of each field to be validated.

[0132] Based on the verification strategy of each sorting field, verify whether the field attribute value of the corresponding sorting field has been encrypted, and obtain the field encryption verification result of each field to be verified.

[0133] The self-data verification result, field mask verification result, and field encryption verification result of each field to be verified are determined as the verification result of each field to be verified.

[0134] In one embodiment, when the processor determines the sensitive fields based on the validation results of each field to be validated, it specifically performs the following operations:

[0135] Retrieve the validation results of each field to be validated, including its own data validation results, field mask validation results, and field encryption validation results.

[0136] When any of the self-data verification results, field mask verification results, or field encryption verification results show a verification failure, each field to be verified is determined to be a sensitive field.

[0137] In this embodiment, the sensitive field early warning system first determines the set of fields corresponding to the target network interface request when it detects a target network interface request on a mobile webpage. Then, according to pre-configured field validation rules, it identifies the fields to be validated in the field set and validates each field, generating a validation result for each field. Finally, it determines the sensitive fields based on the validation results of each field and constructs an alert for the current page based on these sensitive fields. Because this application monitors the target network interface request on the mobile webpage in real time and processes the field set of the target network interface request according to pre-configured field validation rules to discover sensitive data within the field set, it can promptly modify the relevant functions for sensitive data, thereby avoiding the risk of the system platform being taken offline and improving the system platform's security.

[0138] Those skilled in the art will understand that all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. This computer program can be stored in a computer-readable medium, and when executed, it can include the processes of the embodiments of the methods described above. The aforementioned medium can be a non-volatile medium such as a magnetic disk, optical disk, or read-only memory (ROM), or random access memory (RAM).

[0139] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0140] The above embodiments merely illustrate several implementation methods of the present invention, and their descriptions are relatively specific and detailed, but they should not be construed as limiting the scope of the present invention. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of the present invention, and these all fall within the protection scope of the present invention. Therefore, the protection scope of this patent should be determined by the appended claims.

Claims

1. A method for early warning of sensitive fields, characterized in that, The method includes: When a target network interface request is detected on a mobile webpage, the set of fields corresponding to the target network interface request is determined; the target network interface request is the relevant request information generated by the user triggering the corresponding function on the function page; According to the pre-configured field validation rules, at least one field to be validated is determined in the field set, and each field to be validated is validated to generate a validation result for each field to be validated. The step of validating each field to be validated and generating a validation result for each field to be validated includes: determining the priority of each field to be validated, and sorting each field to be validated sequentially based on the priority order to obtain multiple sorted fields; determining the validation strategy value in the key-value pairs successfully matched by each sorted field to obtain the validation strategy for each sorted field; validating whether the field attribute value of each sorted field conforms to a preset rule according to the validation strategy of each sorted field to obtain the self-data validation result of each field to be validated; validating whether the field attribute value of each sorted field is masked according to the validation strategy of each sorted field to obtain the field mask validation result of each field to be validated; validating whether the field attribute value of each sorted field is encrypted according to the validation strategy of each sorted field to obtain the field encryption validation result of each field to be validated; and determining the self-data validation result, field mask validation result, and field encryption validation result of each field to be validated as the validation result of each field to be validated. The step of determining at least one field to be validated in the field set according to pre-configured field validation rules includes: extracting multiple key-value pairs existing in the pre-configured field validation rules, wherein the key-value pairs include a key name and a validation strategy value; matching each field in the field set with the key name of each key-value pair to obtain fields that match successfully and fields that do not match successfully; determining the fields that do not match successfully as non-sensitive fields, and obtaining at least one field to be validated based on the fields that match successfully; wherein, the key name is used to match with the field to determine the non-sensitive field; the validation strategy value is used to perform legality validation on the field information, and the validation strategy value is a regular expression for validating the field information; Sensitive fields are determined based on the verification results of each field to be verified, and an alert is generated on the current page based on the sensitive fields to issue a warning. The step of constructing a current page alarm prompt based on the sensitive field and issuing an early warning includes: determining the severity level of the sensitive field according to the field information of the sensitive field; generating a current page alarm prompt based on the severity level of the sensitive field; and reporting and issuing an early warning for the current page alarm prompt. The step of determining the severity level of the sensitive field based on the field information of the sensitive field includes: determining the severity level of the sensitive field as severe when the field information of the sensitive field is in plaintext; or, determining the severity level of the sensitive field as moderate when the field information of the sensitive field is in masked state; or, determining the severity level of the sensitive field as mild when the field information of the sensitive field is in encrypted state; wherein the severity level of severe is greater than the severity level of moderate, and the severity level of moderate is greater than the severity level of mild.

2. The method according to claim 1, characterized in that, The process of generating a current page alert based on the severity level of the sensitive field includes: When the severity level of the sensitive field is high, a high-level alert message is created, and the high-level alert message is rendered with a red parameter to generate an alarm message for the current page. or, When the severity level of the sensitive field is medium, a medium-level prompt message is created, and the medium-level prompt message is rendered with an orange parameter to generate an alarm prompt for the current page. or, When the severity level of the sensitive field is mild, a mild warning message is created, and the mild warning message is rendered with a yellow parameter to generate an alarm message for the current page.

3. The method according to claim 1, characterized in that, The process of determining sensitive fields based on the validation results of each field to be validated includes: Retrieve the validation results of each field to be validated, including its own data validation results, field mask validation results, and field encryption validation results. When any of the self-data verification results, field mask verification results, or field encryption verification results show a verification failure, each field to be verified is determined to be a sensitive field.

4. A sensitive field early warning system implemented using the method described in any one of claims 1-3, characterized in that, The system includes: The field set determination module is used to determine the field set corresponding to the target network interface request when a target network interface request of a mobile webpage is detected. The verification result generation module is used to determine at least one field to be verified in the field set according to the pre-configured field verification rules, and to verify each field to be verified and generate a verification result for each field to be verified. The reporting and early warning module is used to determine sensitive fields based on the verification results of each field to be verified, and to construct an alarm prompt on the current page based on the sensitive fields to issue an early warning.

5. A computer device, characterized in that, The system includes a memory and a processor, wherein the memory stores computer-readable instructions that, when executed by the processor, cause the processor to perform the steps of the sensitive field warning method as described in any one of claims 1 to 3.

6. A medium storing computer-readable instructions, characterized in that, When the computer-readable instructions are executed by one or more processors, the one or more processors cause the processors to perform the steps of the sensitive field warning as described in any one of claims 1 to 3.

Images