Information access method and device, terminal equipment and storage medium

Abstract

The application discloses an information access method and device, a terminal device and a storage medium. The method comprises the following steps: when a document link exists in a to-be-accessed document, obtaining document content according to the document link; when the obtained document content contains a document link, jumping to execute the step of obtaining the document content according to the document link; when the obtained document content does not contain a document link and / or the number of times of obtaining the document content corresponding to the document link is greater than a preset threshold, determining whether an access right of the to-be-accessed document is possessed by an access person according to the document content corresponding to the to-be-accessed document and all the obtained document content. The method of the application limits the access right of the to-be-accessed document of the access person based on the document content corresponding to the to-be-accessed document and all the document content accessible through the document link of the to-be-accessed document, thereby avoiding the risk of leaking sensitive data caused by accessing the document content corresponding to the document link when the access person accesses the to-be-accessed document.

Description

Technical Field

[0001] This invention relates to the field of information security technology, and in particular to an information access method, apparatus, terminal device, and storage medium. Background Technology

[0002] In traditional information access technologies, the identification and location of sensitive data are based on techniques such as regular expression matching, keyword code table mapping, data type definition discrimination, and data feature calculation. Traditional information access technologies often only identify and detect whether the information to be accessed, such as document information, image information, and web page information, contains sensitive fields, such as ID card numbers and mobile phone numbers. If a sensitive field is identified in the information to be accessed, it indicates that the information to be accessed is sensitive data; if no sensitive field is identified, it indicates that the information to be accessed is non-sensitive data.

[0003] However, if the information to be accessed, which is determined to be non-sensitive data, contains document links to other information, there is a risk of leaking sensitive data when accessing the information, because the content of the document corresponding to the document link may contain sensitive fields.

[0004] The above content is only used to help understand the technical solution of the present invention and does not represent an admission that the above content is related technology. Summary of the Invention

[0005] This invention provides an information access method, apparatus, terminal device, and storage medium to address the technical problem that when the information to be accessed contains document links for accessing other information, there is a risk of sensitive data leakage when accessing the information, as the content of the document corresponding to the document link may contain sensitive fields.

[0006] This invention provides an information access method, the information access method comprising:

[0007] If a document link exists in the document to be accessed, the document content is obtained based on the document link.

[0008] If a document link exists in the obtained document content, proceed to the step of obtaining the document content based on the document link.

[0009] If no document link exists in the obtained document content, and / or the number of times the document content corresponding to the document link is obtained exceeds a preset threshold, the accessor is determined to have access rights to the document to be accessed based on the document content corresponding to the document to be accessed and all obtained document content.

[0010] Optionally, the step of determining whether the visitor has access rights to the document to be accessed based on the document content corresponding to the document to be accessed and all the document content obtained includes:

[0011] Obtain the correlation between each document content in the total document content and the document content corresponding to the document to be accessed;

[0012] Retrieve target sensitive words that match preset sensitive words for each piece of content in all documents;

[0013] Based on the relevance and the target sensitive words, it is determined whether the visitor has access rights to the document to be accessed.

[0014] Optionally, the step of obtaining the correlation between each piece of document content in all document content and the document content corresponding to the document to be accessed includes:

[0015] The document content corresponding to the document to be accessed is segmented into words to obtain the first segmentation field corresponding to the document to be accessed;

[0016] Each document content is segmented into words to obtain a second segmentation field corresponding to each document content;

[0017] Based on the first word segmentation field and the second word segmentation field corresponding to each document content, the correlation between each document content and the document content corresponding to the document to be accessed is determined.

[0018] Optionally, the step of determining the correlation between each piece of document content and the document content corresponding to the document to be accessed, based on the first word segmentation field and the second word segmentation field corresponding to each piece of document content, includes:

[0019] Identify all first sensitive fields in the first word segmentation field that match preset sensitive fields;

[0020] Identify all second sensitive fields in the second word segmentation field that match preset sensitive fields for each document content;

[0021] Identify the common fields between the first word segmentation field and the second word segmentation field;

[0022] Identify the common sensitive fields between all the first sensitive fields and all the second sensitive fields;

[0023] The word segmentation relevance is determined based on the number of fields corresponding to the same field, the number of fields corresponding to the first word segmentation field, and the number of fields corresponding to the second word segmentation field.

[0024] The degree of sensitivity association is determined based on the number of fields corresponding to the same sensitive fields, the number of fields corresponding to all first sensitive fields, and the number of fields corresponding to all second sensitive fields.

[0025] The degree of sensitivity repetition is determined based on the number of fields corresponding to the same sensitive fields and the number of fields corresponding to the same fields.

[0026] Based on the word segmentation correlation degree, the sensitivity correlation degree, and the sensitivity repetition correlation degree, the correlation degree between each document content and the document content corresponding to the document to be accessed is determined.

[0027] Optionally, after the step of obtaining the document content based on the document link, the method further includes:

[0028] Determine whether the document content contains sensitive fields;

[0029] When the document content contains the sensitive field, the system determines whether the visitor has access rights to the document content corresponding to the document link based on the document content corresponding to the document to be accessed and the obtained document content.

[0030] Optionally, after determining whether the document content contains sensitive fields, the process includes:

[0031] If the document content does not contain the sensitive field and the document content meets the preset conditions, then proceed to the step of obtaining the document content based on the document link.

[0032] Optionally, the preset conditions include any one of the following:

[0033] The document content contains document links;

[0034] The number of times the document content corresponding to the document link is retrieved is less than or equal to the preset threshold.

[0035] Furthermore, to achieve the above objectives, the present invention also provides an information access device, comprising:

[0036] The acquisition module is used to acquire document content based on the document link when a document link exists in the document to be accessed.

[0037] An execution module is used to jump to execute the step of obtaining document content based on the document link when a document link exists in the obtained document content;

[0038] The determination module is used to determine whether the visitor has access rights to the document to be accessed, based on the document content corresponding to the document to be accessed and all the document content obtained, when there is no document link in the obtained document content and / or the number of times the document content corresponding to the document link is obtained is greater than a preset threshold.

[0039] In addition, to achieve the above objectives, the present invention also provides a terminal device, which includes: a memory, a processor, and an information access program stored in the memory and executable on the processor. When the information access program is executed by the processor, it implements the steps of the information access method described above.

[0040] In addition, to achieve the above objectives, the present invention also provides a storage medium storing an information access program, which, when executed by a processor, implements the steps of the information access method described above.

[0041] To avoid the risk of a document being deemed non-sensitive simply because its content does not contain sensitive fields, while ignoring the presence of sensitive data in document content linked to by other documents within the same document, and thus allowing users to access the document and subsequently the linked content, this invention provides an information access method, apparatus, terminal device, and storage medium. When a document contains a link, the method retrieves the document content through that link. If the retrieved document content contains a link, the method returns to the step of retrieving the document content based on the link, thereby obtaining all documents accessible through the document. Furthermore, if the obtained document content does not contain document links, and / or the number of times the document content corresponding to the document links is obtained exceeds a preset threshold, the access permissions of the visitor to the document can be determined based on the document content corresponding to the document to be accessed and all the obtained document content. This restricts the visitor's access permissions to the document to be accessed based on the document content corresponding to the document to be accessed and all the document content corresponding to the document links accessible through the document to be accessed. This avoids the potential risk of sensitive data being leaked due to the neglect of sensitive data in the document content corresponding to the document links, which may be present in the document content to be accessed. Attached Figure Description

[0042] Figure 1 This is a schematic diagram of the structure of the terminal device involved in various embodiments of the information access method of the present invention;

[0043] Figure 2 This is a flowchart illustrating the first embodiment of the information access method of the present invention;

[0044] Figure 3 This is a flowchart illustrating a second embodiment of the information access method of the present invention;

[0045] Figure 4 This is a flowchart illustrating the process of determining the correlation between document contents in a second embodiment of the information access method of the present invention.

[0046] Figure 5 This is a flowchart illustrating the third embodiment of the information access method of the present invention;

[0047] Figure 6 This is a schematic diagram of the module composition of the information access device of the present invention. Detailed Implementation

[0048] To better understand the above technical solutions, exemplary embodiments of the present invention will be described in more detail below with reference to the accompanying drawings. Although exemplary embodiments of the present invention are shown in the drawings, it should be understood that the present invention can be implemented in various forms and should not be limited to the embodiments set forth herein. Rather, these embodiments are provided to enable a more thorough understanding of the present invention and to fully convey the scope of the invention to those skilled in the art.

[0049] Please refer to Figure 1 , Figure 1 This is a schematic diagram of the structure of the terminal devices involved in various embodiments of the information access method of the present invention. The terminal devices involved in the information access method of the present invention may include terminal devices such as mobile phones, tablet computers, laptops, handheld computers, and personal digital assistants (PDAs).

[0050] like Figure 1 As shown, the terminal device may include a memory 101 and a processor 102. Those skilled in the art will understand that... Figure 1 The structural block diagram of the terminal shown does not constitute a limitation on the terminal. The terminal may include more or fewer components than shown, or combine certain components, or have different component arrangements. The memory 101 stores operating devices and information access programs. The processor 102 is the control center of the terminal device. The processor 102 executes the information access programs stored in the memory 101 to implement the steps of the various embodiments of the information access method of the present invention.

[0051] Optionally, the terminal device also includes a display unit 103, which includes a display panel. The display panel can be configured in the form of a liquid crystal display (LCD), an organic light-emitting diode (OLED), or the like, to output and display the interface browsed by the user.

[0052] Optionally, the terminal device may also include a communication unit, which establishes data communication with other terminal devices such as computers via network protocols (the data communication may be IP communication or Bluetooth channel) to enable data transmission with other terminal devices.

[0053] The embodiments of the present invention provide an embodiment of an information access method. It should be noted that although the logical order is shown in the flowchart, in some cases, the steps shown or described may be performed in a different order than that shown here.

[0054] Based on the above structural block diagram of the terminal device, various embodiments of the information access method of the present invention are proposed. In the first embodiment, the present invention provides an information access method, please refer to... Figure 2 , Figure 2 This is a flowchart illustrating a first embodiment of the information access method of the present invention. In this embodiment, the information access method includes the following steps:

[0055] Step S10: If a document link exists in the document to be accessed, obtain the document content based on the document link;

[0056] As we can understand, a document to be accessed refers to a document to be viewed. The content of a document to be accessed includes, but is not limited to, webpage content, image content, document content, and email content. A link, also known as a hyperlink, is a connection between a webpage and a target. The target can be another webpage, a different location on the same webpage, an image, an email address, a document, or even an application.

[0057] The connection relationship can refer to an access address, which includes, but is not limited to, a webpage address and detailed information about the document's storage location, to uniquely identify the target to be accessed. For example, a webpage address could be https: / / www.baidu.com / , and the document's storage location could be C:\Document and Settings\Administrator\Application Data.

[0058] If a document link is found to exist in the document to be accessed, the document content corresponding to the document to be accessed can be segmented into words to obtain all the segmented fields of the document content corresponding to the document to be accessed. From all the segmented fields, the target segmented field of the corresponding document link can be determined.

[0059] It is understandable that if the target segmentation field is found among all segmentation fields, it indicates that a document link exists in the document to be accessed; if the target segmentation field is not found among all segmentation fields, it indicates that a document link does not exist in the document to be accessed.

[0060] Optionally, the target word segmentation field for the corresponding document link can be determined from all word segmentation fields. Pre-defined keyword recognition can be performed on each word segmentation field to determine the target word segmentation field for the corresponding document link from all word segmentation fields.

[0061] It should be noted that preset keywords can be set in advance to identify target word segments with preset keywords from all word segmentation fields, in order to determine whether there are document links in the document to be accessed.

[0062] For example, the preset keywords can be the suffixes of document links, such as .doc, .docx, and .txt. By identifying the target word segmentation field with the preset keywords, i.e. the suffixes, the storage path of the document storage location is determined based on the target word segmentation field, and then the corresponding document content is read through the storage path.

[0063] For example, the preset keywords can be identifiers corresponding to web page addresses, such as http. By identifying the target word segmentation field with preset keywords, i.e., identifiers, the web page address can be determined based on the target word segmentation field, and then the corresponding web page content can be read through the web page address.

[0064] Optionally, the number of target segmentation fields can be one or at least two.

[0065] Optionally, the document content corresponding to the document to be accessed can be segmented into words using a lexical analyzer.

[0066] The lexical analyzer includes an input layer, a word vector layer, a convolutional neural network layer, a recurrent neural network layer, a feedforward neural network layer, and a conditional random field layer.

[0067] The input layer preprocesses the document to be accessed to obtain the input sequence X = (x1, x2, ..., xn), where n is the number of characters in the input sequence;

[0068] The character vector layer performs character embedding processing on each character in the input sequence X to obtain the sentence matrix E = (e1, e2, ..., en);

[0069] The convolutional neural network layer processes the sentence matrix E, learns the local features of the sentence matrix E, and generates a set of local feature vectors C = {c1, c2, ..., cn-m+1}, where m is the number of convolutional kernels. After pooling each local feature vector, the sentence feature vector U1 = {v1, v2, ..., vn-m+1} is obtained.

[0070] The recurrent neural network layer processes the sentence matrix E, learns the contextual features of the sentence matrix E, and generates a contextual feature vector U2.

[0071] The feedforward neural network layer merges the sentence feature vector U1 and the context feature vector U2, learns the merged feature vector, and obtains the probability of each label classification corresponding to each character in the input sequence X, i.e., the initial score, and then obtains the initial score matrix S1.

[0072] In the Conditional Random Field layer, the transition score of each character in the input sequence X is obtained from the initial score matrix S1 and the transition matrix A. The total score matrix S is obtained by summing the initial score and the transition score of each character. The label classification with the largest total score value corresponding to each character is selected from the total score matrix and combined as the label sequence predicted by the text segmentation model.

[0073] For example, if the j-th segment Aj in the obtained word segment is C:\Users\echo\Desktop\file.doc, then segment Aj can be identified as a document link.

[0074] Optionally, before determining whether to access the document content corresponding to the document to be accessed, the decision to access the document content corresponding to the document to be accessed can be made based on the access level of the visitor of the document to be accessed.

[0075] Optionally, access to the document content corresponding to the document to be accessed can be determined based on the access level of the visitor of the document to be accessed. Access levels can be assigned to visitors in advance, and different access levels correspond to different sensitive fields. For the sensitive fields corresponding to different access levels, the correspondence between access levels and sensitive fields can be pre-set and stored.

[0076] For example, when a visitor logs in with a username and password, the system obtains the visitor's username and password, determines the visitor's access level based on the username and password, and then determines the sensitive field corresponding to the visitor based on the access relationship between the pre-stored access level and sensitive fields. In turn, it determines whether the document content of the document to be accessed contains the sensitive field, so as to determine whether the visitor should access the document content corresponding to the document to be accessed.

[0077] Understandably, if the content of the document to be accessed contains the sensitive field, the access to the document will be denied; if the content of the document to be accessed does not contain the sensitive field, the access to the document will be allowed.

[0078] Step S20: If a document link exists in the obtained document content, proceed to the step of obtaining document content based on the document link.

[0079] Step S30: If there is no document link in the obtained document content, and / or the number of times the document content corresponding to the document link is obtained is greater than a preset threshold, determine whether the visitor has access rights to the document to be accessed based on the document content corresponding to the document to be accessed and all the obtained document content.

[0080] It's important to note that, generally, it's only necessary to determine whether the content of the document to be accessed contains sensitive fields. If it's determined that the document content does not contain sensitive fields, then the document is considered non-sensitive data, and anyone can access its content. However, if the document to be accessed, determined to be non-sensitive data, contains links to other documents, the content of those linked documents may contain sensitive fields. This could lead to a potential leak of sensitive data if someone accesses the document directly through those linked documents.

[0081] To avoid the potential leakage of sensitive data due to the failure to perform sensitive field detection on the document content corresponding to document links in the document to be accessed, when document links are found in the document content, the process jumps to execute the step of obtaining document content based on the document links until no document links are found in the obtained document content. This achieves unified retrieval of all document content with nested document links when accessing the document to be accessed. Alternatively, when document links are found in the document content, the process jumps to execute the step of obtaining document content based on the document links until the number of times the document content corresponding to the document links is retrieved exceeds a preset threshold, indicating that unified retrieval of all document content with nested document links when accessing the document to be accessed is highly probable. Based on the document content corresponding to the document to be accessed and all the retrieved document content, it is determined whether the visitor has access rights to the document to be accessed. For a detailed implementation of the step of determining whether the visitor has access rights to the document to be accessed based on the document content corresponding to the document to be accessed and all the retrieved document content, please refer to the second embodiment.

[0082] The preset number of attempts can be set in advance, and the preset number of attempts can be based on empirical values.

[0083] To avoid the risk of a document being deemed non-sensitive simply because its content does not contain sensitive fields, while ignoring the presence of sensitive data in document content linked to by other documents, and thus allowing users to access the document and subsequently the linked content, this embodiment discloses a method where, when document links exist within the document to be accessed, document content is obtained through those links. If the obtained document content contains links, the process returns to the step of obtaining document content based on those links. This process retrieves all document content accessible through the document links in the document to be accessed. If the obtained document content does not contain document links, and / or the number of times the document content corresponding to the document links is obtained exceeds a preset threshold, the access permissions of the visitor to the document can be determined based on the document content corresponding to the document to be accessed and all the obtained document content. This restricts the visitor's access permissions to the document to be accessed based on the document content corresponding to the document to be accessed and all the document content corresponding to the document links accessible through the document to be accessed. This avoids the potential risk of sensitive data being leaked due to the visitor accessing the document to access the document and then further accessing the document content corresponding to the document links, which could have been caused by ignoring the presence of sensitive data in the document content corresponding to the document links.

[0084] Based on the first embodiment described above, a second embodiment of the present invention is proposed. Please refer to [reference needed]. Figure 3 , Figure 3 This is a flowchart illustrating a second embodiment of the information access method of the present invention. Step S30, which involves determining whether the visitor has access rights to the document to be accessed based on the document content corresponding to the document to be accessed and all obtained document content, includes:

[0085] Step S31: Obtain the correlation between each document content in all document content and the document content corresponding to the document to be accessed;

[0086] Step S32: Determine whether the visitor has access rights to the document to be accessed based on the correlation degree.

[0087] It should be noted that relevance refers to the sensitivity correlation between the content of the document to be accessed and the content of the document linked through the document obtained from the document to be accessed. When the relevance is greater than or equal to a preset relevance threshold, it indicates a high degree of correlation between the content of the document to be accessed and the content of the document linked. In other words, if the document to be accessed is leaked, there is a high probability that the sensitive information in the content of the document linked is also leaked. In this case, users can be re-verified. Only when the user has access rights to the document to be accessed and passes the re-verification can the user access the document.

[0088] Optionally, the preset association threshold can be set in advance, and the preset association threshold uses an empirical value.

[0089] Optionally, when the correlation is less than a preset correlation threshold, it indicates a low correlation between the document content corresponding to the document to be accessed and the document content corresponding to the document link. That is, if the document to be accessed is leaked, the likelihood of sensitive information in the document content corresponding to the document link being leaked is low. In this case, the document to be accessed can be determined as an accessible document, or access to the document can be determined based on the access level of the user accessing the document. An accessible document refers to a document that can be accessed by any user.

[0090] Optionally, access to the document can be determined based on the access level of the visitor. Access levels can be pre-assigned to visitors, with different access levels corresponding to different sensitive fields. For the sensitive fields corresponding to different access levels, the correspondence between access levels and sensitive fields can be pre-set and stored.

[0091] For example, when a visitor logs in with a username and password, the system obtains the visitor's username and password, determines the visitor's access level based on the username and password, and then determines the sensitive field corresponding to the visitor based on the access relationship between the pre-stored access level and sensitive fields. This determines whether the document to be accessed and / or the document content corresponding to the document link contains the sensitive field, thereby determining whether the visitor should access the document to be accessed.

[0092] It is understandable that if the content of the document to be accessed and / or the document corresponding to the document link contains the sensitive field, then the visitor's access to the document to be accessed will be denied; if the content of the document to be accessed and / or the document corresponding to the document link does not contain the sensitive field, then the visitor's access to the document to be accessed will be allowed.

[0093] As an alternative implementation method, please refer to Figure 4 , Figure 4 This is a flowchart illustrating the process of determining the correlation between document contents in the second embodiment of the information access method of the present invention. Step S31 includes:

[0094] Step S311: Segment the document content corresponding to the document to be accessed into words to obtain the first segmentation field corresponding to the document to be accessed;

[0095] Step S312: Segment each document content into words to obtain a second segmentation field corresponding to each document content;

[0096] Step S313: Determine the correlation between each document content and the document content corresponding to the document to be accessed based on the first word segmentation field and the second word segmentation field corresponding to each document content.

[0097] It should be noted that the specific implementation of steps S311 and S312 can be found in the first embodiment of the specific implementation of word segmentation of the document content corresponding to the document to be accessed, and will not be described in detail here.

[0098] As an optional implementation, step S313 includes:

[0099] Identify all first sensitive fields in the first word segmentation field that match preset sensitive fields;

[0100] Identify all second sensitive fields in the second word segmentation field that match preset sensitive fields for each document content;

[0101] Identify the common fields between the first word segmentation field and the second word segmentation field;

[0102] Identify the common sensitive fields between all the first sensitive fields and all the second sensitive fields;

[0103] The word segmentation relevance is determined based on the number of fields corresponding to the same field, the number of fields corresponding to the first word segmentation field, and the number of fields corresponding to the second word segmentation field.

[0104] The degree of sensitivity association is determined based on the number of fields corresponding to the same sensitive fields, the number of fields corresponding to all first sensitive fields, and the number of fields corresponding to all second sensitive fields.

[0105] The degree of sensitivity repetition is determined based on the number of fields corresponding to the same sensitive fields and the number of fields corresponding to the same fields.

[0106] Based on the word segmentation correlation degree, the sensitivity correlation degree, and the sensitivity repetition correlation degree, the correlation degree between each document content and the document content corresponding to the document to be accessed is determined.

[0107] Optionally, the step of determining the correlation between each piece of document content and the document content corresponding to the document to be accessed, based on the word segmentation correlation, the sensitivity correlation, and the sensitivity repetition correlation, includes:

[0108] The document weight value is determined based on the number of fields in the second sensitive field and the number of fields corresponding to the second word segmentation field;

[0109] Based on the document weight value, the word segmentation relevance, the sensitivity relevance, and the sensitivity repetition relevance, the relevance between each document content and the document content corresponding to the document to be accessed is determined.

[0110] For example, the following example is used to help understand the entire implementation process of determining the relevance between each document content and the document content corresponding to the document to be accessed based on word segmentation relevance, sensitivity relevance, and sensitivity repetition relevance. Assume that the document to be accessed includes sensitive fields, there are document links in the document to be accessed, the document content corresponding to the document link is document D, and document D also includes sensitive fields. Then 1) Determine the overall weight w1 of document D = number of word segmentation fields in document D that include sensitive fields / total number of word segmentation fields in document D;

[0111] Since document D is segmented, the segmentation results of document D will be directly used here to obtain the total number of segments in document D, as well as the number of segments including sensitive fields.

[0112] In other words, document D may contain H word segmentation fields, of which only S word segmentation fields are sensitive fields. Here, S / H will be used to obtain the percentage of sensitive fields in document D. The higher the percentage, the higher the sensitivity of the document, and the more necessary secondary user verification is. Secondary user verification can determine whether to access the document based on the access level of the visitor.

[0113] 2) Determine the word segmentation relevance I1 between document D and the document to be accessed = the number of identical word segmentation fields between document D and the document to be accessed / (total number of word segments in document D + total number of word segments in the document to be accessed);

[0114] The same fields are the word segmentation fields that exist in both document D and the document to be accessed. Optionally, the same word segmentation fields do not need to be deduplicated; the count is incremented by one as long as the word segmentation field is repeated once.

[0115] For example, if document D contains H words and the document to be accessed contains H' words, and J of the H word segmentation fields in document D also appear in the document to be accessed, then I1 = J / (H+H'), where I1 represents the proportion of the same word segmentation fields in the two documents to the total number of word segmentation fields in the two documents. The higher the value, the greater the probability of the same word segmentation fields appearing in the two documents, and the higher the correlation between the two documents.

[0116] 3) Determine the sensitivity correlation between document D and the document to be accessed: I2 = Number of fields with the same sensitive fields in document D and the document to be accessed / (Total number of sensitive fields in document D + Total number of sensitive fields in the document to be accessed);

[0117] The same sensitive field is a sensitive field that exists in both document D and the document to be accessed.

[0118] For example, document D contains S sensitive words, and the document to be accessed contains S' sensitive words. Furthermore, K of the S sensitive fields in document D also appear in the S' sensitive fields in the document to be accessed. Then, I2 = K / (S+S'), where I2 represents the proportion of the same sensitive fields in the two documents to all the word segmentation fields in the two documents. The higher the value, the greater the probability of the same sensitive fields appearing in the two documents, and the higher the correlation between the sensitivity of the two documents.

[0119] 4) Determine the degree of sensitive repetition between document D and the document to be accessed: I3 = Number of fields with the same sensitive fields in document D and the document to be accessed / Number of fields with the same word segmentation fields in document D and the document to be accessed;

[0120] For example, if J out of H segmentation fields in document D appear in the document to be accessed, and K out of S sensitive fields in document D also appear in S' sensitive fields in the document to be accessed, then I3 = J / K. Here, I3 represents the proportion of the same sensitive fields in the two documents to the proportion of the same fields. The larger I3 is, the greater the probability that the same segmentation field is a sensitive field when the two documents have the same segmentation field.

[0121] 5) The degree of association between document D and the document to be accessed is I = w1 * I1 + I2 + I3.

[0122] It should be noted that for documents containing sensitive fields, the authentication of visitors will be relatively strict. When two documents contain the same sensitive fields, the probability of secondary user authentication will increase. Therefore, I2 and I3 are both used as dimensions for assessing relevance. I1 represents the probability of duplicate words in two documents. Duplicate words do not necessarily affect the sensitivity of a document. Therefore, the product of I1 and w1 is used as a dimension for assessing relevance. The degree of relevance between two documents is used to determine the sensitivity association between them. The greater the relevance, the greater the sensitivity association between the two documents. For example, if the document to be accessed is leaked, the probability of sensitive fields or sensitive information in document D being leaked is greater.

[0123] Understandably, if I is greater than the preset association threshold, it indicates that the document to be accessed is highly associated with document D, and the visitor will be required to verify again. Only when the visitor has the access permission to access the document to be accessed and passes the verification again can the visitor access the document to be accessed.

[0124] Optionally, step S32 includes:

[0125] Retrieve target sensitive words that match preset sensitive words in each document's content;

[0126] Based on the relevance and the target sensitive words, it is determined whether the visitor has access to the document to be accessed.

[0127] Preset sensitive words can be set in advance. Optionally, preset sensitive words can be determined by first obtaining the visitor's access level, and then obtaining the sensitive fields corresponding to the access level, so as to determine the sensitive fields as preset sensitive words.

[0128] Optionally, before the step of obtaining the target sensitive words that match the preset sensitive words for each document content in the entire document content, the method further includes:

[0129] Determine whether each document in the entire document contains a target sensitive word that matches a preset sensitive word. If no target sensitive word matches the preset sensitive word, it means that the document to be accessed is non-sensitive data for the visitor, and the visitor can access the document. If a target sensitive word matches the preset sensitive word, it means that the document to be accessed is sensitive data for the visitor.

[0130] Based on relevance and target sensitive words, it can be determined whether the visitor has access rights to the document to be accessed. After determining that the document to be accessed is sensitive data through target sensitive words, the access rights of the visitor can be determined based on relevance.

[0131] The access level of a visitor to a document is determined based on the degree of relevance. When the degree of relevance is greater than or equal to a preset threshold, it indicates a high degree of relevance between the content of the document corresponding to the document and the content of the document link. In other words, if the document to be accessed is leaked, there is a high probability that sensitive information in the content of the document link will also be leaked. In this case, the user can be re-verified. Only after the user has the access level to the document and passes the re-verification can the user access the document. When the degree of relevance is less than the preset threshold, it indicates a low degree of relevance between the content of the document corresponding to the document and the content of the document link. In other words, if the document to be accessed is leaked, there is a low probability that sensitive information in the content of the document link will also be leaked. In this case, the document to be accessed can be determined as an accessible document, or access to the document can be determined based on the visitor's access level.

[0132] In the technical solution disclosed in this embodiment, by obtaining the correlation between each document content in all document content and the document content corresponding to the document to be accessed, the sensitivity correlation between the document content corresponding to the document to be accessed and the document content corresponding to the document link obtained through the document to be accessed is clarified. Then, based on the correlation, it is determined whether the visitor has access rights to the document to be accessed. Based on the sensitivity correlation between the document to be accessed and the document corresponding to the document link obtained through the document to be accessed, the possibility of sensitive information in the document content corresponding to the document link being leaked after the document to be accessed is known. By limiting the visitor's access rights to the document to be accessed based on the correlation, the visitor's access to the document to be accessed can be made more flexible.

[0133] Based on the first or second embodiment described above, a third embodiment of the present invention is proposed. Please refer to [the original text]. Figure 5 , Figure 5 This is a flowchart illustrating the third embodiment of the information access method of the present invention. After step S10, the method further includes:

[0134] Step S40: Determine whether the document content contains sensitive fields;

[0135] When the document content contains the sensitive field and a document link exists in the obtained document content, proceed to the step of obtaining the document content based on the document link.

[0136] It should be noted that in this embodiment, after performing sensitive field retrieval on the document to be accessed, sensitive field retrieval is performed again based on the document content corresponding to the document links in the document to be accessed. Furthermore, after retrieving new document links from the document content corresponding to the document links, a further retrieval is performed based on the document content corresponding to the new document links, including other links and documents. This achieves radial retrieval based on nested document links within the document to be accessed. It is understood that each time the document content is determined to contain document links, the corresponding document content is the object of the next round of retrieval, ensuring the comprehensiveness and accuracy of the retrieval results.

[0137] In practical applications, if the document content corresponding to a document link hidden in the document to be accessed contains sensitive fields, the likelihood of the current visitor accessing the document content corresponding to the document link while having access permissions to the document to be accessed can be considered. If the likelihood is high, the access permissions of the current visitor to access the document content corresponding to the document link can be considered. In this embodiment, the correlation between the document to be accessed and other documents hidden in the document to be accessed, i.e., the document content corresponding to the document link, can be used as the probability that the current visitor will access other documents while accessing the document to be accessed. The visitor's access permissions to the document content corresponding to the document link can be dynamically determined based on the correlation, thereby improving the security of accessing sensitive data.

[0138] Optionally, after dynamically determining the access permissions of visitors to the document content corresponding to the document link based on the relevance, secondary authentication of visitors can be performed to further enhance the security of access to sensitive data.

[0139] To determine whether a document contains sensitive fields, the document content can first be segmented into words to obtain the corresponding second segmentation field. Then, the preset sensitive fields are compared with each segmentation field in the second segmentation field. If there is a segmentation field in the second segmentation field that is the same as the preset sensitive fields, it indicates that the document content contains sensitive fields; otherwise, it indicates that the document content does not contain sensitive fields.

[0140] Optionally, if the document content contains sensitive fields and the obtained document content contains document links, the process jumps to execute the step of obtaining the document content based on the document links.

[0141] Alternatively, in step S50, when the document content contains the sensitive field, determine whether the visitor has access rights to the document content corresponding to the document link based on the document content corresponding to the document to be accessed and the obtained document content.

[0142] When a document contains sensitive fields, the system determines whether the visitor has access rights to the document content linked to in the document link, based on the document content of the document to be accessed and the document content obtained. This restricts the visitor's access rights to the document content linked to in the document link, avoiding the risk of sensitive data being leaked due to overlooking the presence of sensitive data in the document content linked to in the document to be accessed.

[0143] Furthermore, even if the document content corresponding to the document link in the document to be accessed also contains the first document link, the visitor will still be unable to access the document content corresponding to the first document link, thus improving the security and efficiency of accessing the document to be accessed.

[0144] When the document content contains the aforementioned sensitive fields, the possibility of the current visitor accessing the document content corresponding to the document link while having access permissions to the document to be accessed can be considered. That is, based on the document content corresponding to the document to be accessed and the document content corresponding to the document link obtained, it can be determined whether the visitor has access permissions to the document content corresponding to the document link. Optionally, the step of determining whether the visitor has access permissions to the document content corresponding to the document link based on the document content corresponding to the document to be accessed and the document content corresponding to the document link obtained includes obtaining the correlation between the document content corresponding to the document to be accessed and the document content corresponding to the document link obtained, and determining whether the visitor has access permissions to the document content corresponding to the document link based on the correlation. The specific implementation is similar to the second embodiment, and can be referred to the second embodiment for details; it will not be described in detail in this embodiment.

[0145] It is understood that when the document content does not contain the sensitive field and the document content meets the preset conditions, the process will jump to the step of obtaining the document content based on the document link.

[0146] Optionally, the preset conditions include any one of the following:

[0147] The document content contains document links;

[0148] The number of times the document content corresponding to the document link is retrieved is less than or equal to the preset threshold.

[0149] To avoid simply identifying a document as sensitive data only when sensitive fields are found in its content, and classifying it as non-sensitive when no sensitive fields are found, while ignoring document links that may contain sensitive fields, which could lead to data leakage when accessing the document, a more accurate approach is to determine if a document is sensitive data. If the document content of the linked document does not contain sensitive fields, but the linked document's content does, then the document can be identified as containing sensitive fields, thus classifying it as sensitive data.

[0150] To accurately determine if the document to be accessed is sensitive data, if the document content does not contain sensitive fields and the document content meets preset conditions, the process will jump to the step of obtaining the document content based on the document link.

[0151] For example, if the document content corresponding to the document to be accessed does not include sensitive fields, but includes a document link, one or more other documents can be identified through the document link, and these other documents contain sensitive fields. If the document to be accessed is leaked, it will indirectly expose other documents, thereby making it risky to leak sensitive fields in those other documents.

[0152] In this embodiment, by further obtaining document links in the document to be accessed, obtaining the document content corresponding to the document links, and then searching the document content corresponding to the document links again, the process is not limited to searching only the document content corresponding to the document links in the document to be accessed. Instead, if the document content corresponding to the document links contains the first document link, then the document content corresponding to the first document link is further searched, and so on, until the searched document content does not contain document links, or the number of searches exceeds a preset number. It can be simply understood that the sensitive field search of the document to be accessed is the first round of search, the search of the document content corresponding to the document links in the document to be accessed is the second round of search, the search of the document content corresponding to the first document link in the document content corresponding to the document links is the third round of search, and so on, until the searched document content does not contain document links, or the number of searches exceeds a preset number.

[0153] In the technical solution disclosed in this embodiment, when the document content contains sensitive fields, it is determined whether the visitor has access rights to the document content corresponding to the document link based on the document content corresponding to the document to be accessed and the obtained document content. This restricts the visitor's access rights to the document content corresponding to the document link based on the document content corresponding to the document to be accessed and the document content corresponding to the document link within the document to be accessed. This avoids the potential risk of sensitive data leakage due to overlooking the presence of sensitive data in the document content corresponding to the document link within the document to be accessed. Furthermore, even if the document content corresponding to the document link within the document to be accessed contains a first document link, the visitor will still be unable to access the document content corresponding to the first document link, even if the document content corresponding to the document link within the document to be accessed contains a first document link. This improves the security of accessing the document to be accessed and also increases access efficiency.

[0154] like Figure 6 As shown, Figure 6 This is a schematic diagram of the module composition of the information access device of the present invention. The present invention provides an information access device 100, which includes:

[0155] The acquisition module 110 is used to acquire document content based on the document link when a document link exists in the document to be accessed;

[0156] The execution module 120 is used to jump to the step of obtaining the document content based on the document link when there is a document link in the obtained document content;

[0157] The determining module 130 is used to determine whether the visitor has access rights to the document to be accessed based on the document content corresponding to the document to be accessed and all the document content obtained when there is no document link in the obtained document content and / or the number of times the document content corresponding to the document link is obtained is greater than a preset threshold.

[0158] The specific implementation of the information access device of the present invention is basically the same as the embodiments of the information access method described above, and will not be repeated here.

[0159] In addition, the present invention also provides a terminal device, the terminal device comprising: a memory, a processor, and an information access program stored in the memory and executable on the processor, wherein the information access program, when executed by the processor, implements the steps of the information access method in any of the above embodiments.

[0160] In addition, to achieve the above objectives, the present invention also provides a storage medium storing an information access program, which, when executed by a processor, implements the steps of the information access method in any of the above embodiments.

[0161] Those skilled in the art will understand that embodiments of the present invention can be provided as methods, systems, or computer program products. Therefore, the present invention can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present invention can take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0162] This invention is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart illustrations and / or block diagrams. Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0163] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0164] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0165] It should be noted that any reference signs placed between parentheses in the claims should not be construed as limiting the claims. The word "comprising" does not exclude the presence of components or steps not listed in the claims. The word "a" or "an" preceding a component does not exclude the presence of a plurality of such components. The invention can be implemented by means of hardware comprising several different components and by means of a suitably programmed computer. In a unit claim enumerating several means, several of these means may be embodied by the same item of hardware. The use of the words first, second, and third, etc., does not indicate any order. These words can be interpreted as names.

[0166] Although preferred embodiments of the invention have been described, those skilled in the art, upon learning the basic inventive concept, can make other changes and modifications to these embodiments. Therefore, the appended claims are intended to be interpreted as including both the preferred embodiments and all changes and modifications falling within the scope of the invention.

[0167] Obviously, those skilled in the art can make various modifications and variations to this invention without departing from its spirit and scope. Therefore, if these modifications and variations fall within the scope of the claims of this invention and their equivalents, this invention also intends to include these modifications and variations.

Claims

1. An information access method, characterized in that, The information access method includes: If a document link exists in the document to be accessed, the document content is obtained based on the document link. If a document link exists in the obtained document content, proceed to the step of obtaining the document content based on the document link. If there is no document link in the obtained document content, and / or the number of times the document content corresponding to the document link is obtained is greater than a preset threshold, it is determined whether the visitor has access rights to the document to be accessed based on the document content corresponding to the document to be accessed and all the obtained document content. The step of determining whether the visitor has access rights to the document to be accessed based on the document content corresponding to the document to be accessed and all the obtained document content includes: Obtain the correlation between each document content in the total document content and the document content corresponding to the document to be accessed; When the relevance is greater than or equal to a preset relevance threshold, if the user has access to the document to be accessed, and the user passes the verification again, it is determined that the visitor has access to the document to be accessed. When the relevance is less than a preset relevance threshold, the visitor's username and password are obtained, and the visitor's access level is determined based on the username and password. According to the access relationship between the pre-stored access level and sensitive fields, the sensitive fields corresponding to the visitor are determined, and it is determined whether the document to be accessed and / or the document content corresponding to the document link contains the sensitive fields. If the document to be accessed and / or the document content corresponding to the document link contains the sensitive fields, the visitor's access to the document is denied; if the document to be accessed and / or the document content corresponding to the document link does not contain the sensitive fields, the visitor's access to the document is allowed. The step of obtaining the correlation between each document content in all document content and the document content corresponding to the document to be accessed includes: The document content corresponding to the document to be accessed is segmented into words to obtain the first segmentation field corresponding to the document to be accessed; Each document content is segmented into words to obtain a second segmentation field corresponding to each document content; Identify all first sensitive fields in the first word segmentation field that match preset sensitive fields; Identify all second sensitive fields in the second word segmentation field that match preset sensitive fields for each document content; Identify the common fields between the first word segmentation field and the second word segmentation field; Identify the common sensitive fields between all the first sensitive fields and all the second sensitive fields; The word segmentation relevance is determined based on the number of fields corresponding to the same field, the number of fields corresponding to the first word segmentation field, and the number of fields corresponding to the second word segmentation field. The degree of sensitivity association is determined based on the number of fields corresponding to the same sensitive fields, the number of fields corresponding to all first sensitive fields, and the number of fields corresponding to all second sensitive fields. The degree of sensitivity repetition is determined based on the number of fields corresponding to the same sensitive fields and the number of fields corresponding to the same fields. Based on the word segmentation correlation degree, the sensitivity correlation degree, and the sensitivity repetition correlation degree, the correlation degree between each document content and the document content corresponding to the document to be accessed is determined.

2. The method as described in claim 1, characterized in that, The step of determining whether the visitor has access rights to the document to be accessed based on the document content corresponding to the document to be accessed and all the document content obtained includes: Obtain the correlation between each document content in the total document content and the document content corresponding to the document to be accessed; Retrieve target sensitive words that match preset sensitive words for each piece of content in all documents; Based on the relevance and the target sensitive words, it is determined whether the visitor has access to the document to be accessed.

3. The method as described in claim 1, characterized in that, After the step of obtaining the document content based on the document link, the method further includes: Determine whether the document content contains sensitive fields; When the document content contains the sensitive field, the system determines whether the visitor has access rights to the document content corresponding to the document link based on the document content corresponding to the document to be accessed and the obtained document content.

4. The method as described in claim 3, characterized in that, After the step of determining whether the document content contains sensitive fields, the following steps are included: If the document content does not contain the sensitive field and the document content meets the preset conditions, then proceed to the step of obtaining the document content based on the document link.

5. The method as described in claim 4, characterized in that, The preset conditions include any one of the following conditions: The document content contains document links; The number of times the document content corresponding to the document link is retrieved is less than or equal to the preset threshold.

6. An information access device, characterized in that, The information access device includes: The acquisition module is used to acquire document content based on the document link when a document link exists in the document to be accessed. An execution module is used to jump to execute the step of obtaining document content based on the document link when a document link exists in the obtained document content; The determination module is used to determine whether the visitor has access rights to the document to be accessed based on the document content corresponding to the document to be accessed and all the document content obtained when there is no document link in the obtained document content and / or the number of times the document content corresponding to the document link is obtained is greater than a preset threshold. The step of determining whether the visitor has access rights to the document to be accessed based on the document content corresponding to the document to be accessed and all the obtained document content includes: The correlation between each document content in all document content and the document content corresponding to the document to be accessed is obtained. The correlation refers to the sensitivity correlation between the document content corresponding to the document to be accessed and the document content corresponding to the document link obtained through the document to be accessed. When the relevance is greater than or equal to a preset relevance threshold, if the user has access to the document to be accessed, and the user passes the verification again, it is determined that the visitor has access to the document to be accessed. When the relevance is less than a preset relevance threshold, the visitor's username and password are obtained, and the visitor's access level is determined based on the username and password. According to the access relationship between the pre-stored access level and sensitive fields, the sensitive fields corresponding to the visitor are determined, and it is determined whether the document to be accessed and / or the document content corresponding to the document link contains the sensitive fields. If the document to be accessed and / or the document content corresponding to the document link contains the sensitive fields, the visitor's access to the document is denied; if the document to be accessed and / or the document content corresponding to the document link does not contain the sensitive fields, the visitor's access to the document is allowed. The step of obtaining the correlation between each document content in all document content and the document content corresponding to the document to be accessed includes: The document content corresponding to the document to be accessed is segmented into words to obtain the first segmentation field corresponding to the document to be accessed; Each document content is segmented into words to obtain a second segmentation field corresponding to each document content; Identify all first sensitive fields in the first word segmentation field that match preset sensitive fields; Identify all second sensitive fields in the second word segmentation field that match preset sensitive fields for each document content; Identify the common fields between the first word segmentation field and the second word segmentation field; Identify the common sensitive fields between all the first sensitive fields and all the second sensitive fields; The word segmentation relevance is determined based on the number of fields corresponding to the same field, the number of fields corresponding to the first word segmentation field, and the number of fields corresponding to the second word segmentation field. The degree of sensitivity association is determined based on the number of fields corresponding to the same sensitive fields, the number of fields corresponding to all first sensitive fields, and the number of fields corresponding to all second sensitive fields. The degree of sensitivity repetition is determined based on the number of fields corresponding to the same sensitive fields and the number of fields corresponding to the same fields. Based on the word segmentation correlation degree, the sensitivity correlation degree, and the sensitivity repetition correlation degree, the correlation degree between each document content and the document content corresponding to the document to be accessed is determined.

7. A terminal device, characterized in that, The terminal device includes: a memory, a processor, and an information access program stored in the memory and executable on the processor, wherein the information access program, when executed by the processor, implements the steps of the information access method as described in any one of claims 1-5.

8. A storage medium, characterized in that, The storage medium stores an information access program, which, when executed by a processor, implements the steps of the information access method according to any one of claims 1-5.

Images