Data processing method, device, storage medium and program product

Abstract

The disclosed embodiments provide a data processing method, device, storage medium and program product, wherein the method displays a search page, the search page supports searching for the propagation path of file content, receives search information input through the search page, responds to a search request corresponding to the search information, searches based on the search information to match the hit target file content based on the file security protection database, and obtains the propagation path of the target file content, wherein the file security protection database is used to maintain the propagation path related to at least one file that is pre-specified and needs to be securely protected, displays the propagation path of the target file content on the first search result display page, and the propagation path of the target file content is used to characterize the situation in which the target file content is operated and / or transmitted. The data processing method provided in this embodiment can achieve systematic data security management.

Description

Technical Field

[0001] The embodiments of the present disclosure relate to the field of computer and network communication technology, and in particular, to a data processing method, device, storage medium, and program product. Background Art

[0002] With the rapid development of computer technology, data security issues occur frequently, and data security protection technology has begun to become a top priority in enterprise data management technology. The current common solution is to encrypt data with a relatively high security level or limit the number of people who have access to the data to ensure data security. However, when data is lost due to malicious behavior, there is no relevant technical solution that can systematically support data security protection management. Summary of the invention

[0003] The embodiments of the present disclosure provide a data processing method, device, storage medium and program product to implement systematic data security protection management.

[0004] In a first aspect, an embodiment of the present disclosure provides a data processing method, including:

[0005] Displaying a search page; the search page supports searching for propagation paths of file contents;

[0006] Receiving search information input through the search page, responding to a search request corresponding to the search information, searching based on the search information to match the hit target file content based on the file security protection database, and obtaining a propagation path of the target file content; wherein the file security protection database is used to maintain a pre-specified propagation path related to at least one file that needs to be securely protected;

[0007] The propagation path of the target file content is displayed on the first search result display page, and the propagation path of the target file content is used to characterize the situation in which the target file content is operated and / or transmitted.

[0008] In a second aspect, an embodiment of the present disclosure provides a data processing device, including:

[0009] A display module, used to display a search page; the search page supports searching for propagation paths of file contents;

[0010] A search module, for receiving search information input through the search page, and in response to a search request corresponding to the search information, searching based on the search information to match the hit target file content based on the file security protection database, and obtaining a propagation path of the target file content; wherein the file security protection database is used to maintain a pre-specified propagation path related to at least one file that needs to be securely protected;

[0011] The display module is further used to display the propagation path of the target file content on the first search result display page, and the propagation path of the target file content is used to represent the situation in which the target file content is operated and / or transmitted.

[0012] In a third aspect, an embodiment of the present disclosure provides an electronic device, including: a processor and a memory;

[0013] The memory stores computer-executable instructions;

[0014] The processor executes the computer-executable instructions stored in the memory, so that the at least one processor executes the data processing method described in the first aspect and various possible designs of the first aspect.

[0015] In a fourth aspect, an embodiment of the present disclosure provides a computer-readable storage medium, in which computer execution instructions are stored. When a processor executes the computer execution instructions, the data processing method described in the first aspect and various possible designs of the first aspect is implemented.

[0016] In a fifth aspect, an embodiment of the present disclosure provides a computer program product, including a computer program, which, when executed by a processor, implements the data processing method described in the first aspect and various possible designs of the first aspect.

[0017] The data processing method, device, storage medium and program product provided in this embodiment include displaying a search page, the search page supports searching for the propagation path of file content, receiving search information input through the search page, responding to a search request corresponding to the search information, searching based on the search information and relying on a file security protection database to match the hit target file content, and obtaining the propagation path of the target file content, wherein the file security protection database is used to maintain a pre-specified propagation path related to at least one file that needs to be securely protected, and displaying the propagation path of the target file content on a first search result display page, wherein the propagation path of the target file content is used to characterize the situation where the target file content is operated and / or transmitted. The data processing method provided in this embodiment can establish a security protection database according to data security requirements and use the database to dynamically maintain the transmission paths of these files for specified files that need to be securely protected, and provide users with a search page through a search engine based on the database to search and feedback the propagation path of the target file content specified by the user, so that the user can quickly understand the data security status of the target file by triggering a search. Therefore, the data processing method, from the establishment of a bottom-level security protection database, to the collection and maintenance of information related to the propagation path of specified files that need to be securely protected in the middle layer, and to the construction of a search engine at the upper layer, can achieve systematic data security management. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] In order to more clearly illustrate the embodiments of the present disclosure or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of the present disclosure. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.

[0019] Figure 1 A schematic diagram of an application scenario of the data processing method provided in an embodiment of the present disclosure;

[0020] Figure 2 A flowchart of a data processing method provided by an embodiment of the present disclosure;

[0021] Figure 3a-3f A schematic diagram of an interface of a data processing method provided in an embodiment of the present disclosure;

[0022] Figure 4 A structural block diagram of a data processing device provided in an embodiment of the present disclosure;

[0023] Figure 5 A schematic diagram of the hardware structure of a data processing device provided in an embodiment of the present disclosure. DETAILED DESCRIPTION

[0024] In order to make the purpose, technical solution and advantages of the embodiments of the present disclosure clearer, the technical solution in the embodiments of the present disclosure will be clearly and completely described below in conjunction with the drawings in the embodiments of the present disclosure. Obviously, the described embodiments are part of the embodiments of the present disclosure, not all of the embodiments. Based on the embodiments in the present disclosure, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present disclosure.

[0025] In the embodiments of the present disclosure, the collection, storage, use, processing, transmission, provision and disclosure of information such as file content and user data involved are in compliance with the provisions of relevant laws and regulations and do not violate public order and good morals.

[0026] In view of the problem mentioned above that the existing data processing methods cannot systematically support data security protection management when data is lost due to malicious behavior, the inventors of the present disclosure have found that a security protection database can be established according to data security requirements and the database can be used to dynamically maintain the transmission paths of the specified files that need to be protected, and provide users with a search page that uses the search engine to search and feedback the transmission path of the target file content specified by the user based on the database, so that users can quickly understand the data security situation of the target file by triggering a search, thereby achieving systematic data security management. Based on this, the embodiments of the present disclosure provide a data processing method.

[0027] Figure 1 Schematic diagram of application scenarios of the data processing method provided by the embodiment of the present disclosure. Figure 1 As shown, the server 102 is connected to the terminal device 101 and the terminal device 103 through a network. The server 102 is used to provide services for the terminal device or the client installed on the terminal device. A database can be set on the server 102 or independently of the server 102 to provide data storage services for the server 102. The above network includes but is not limited to: a wide area network, a metropolitan area network or a local area network. The terminal device 101 and the terminal device 103 are not limited to PCs, mobile phones, tablet computers, etc. The data processing method provided in the embodiment of the present disclosure can be executed by the server 102, or by the terminal device 101, or by the server 102 and the terminal device 101. Among them, the terminal device 101 executes the data processing method of the embodiment of the present disclosure, and it can also be executed by the client installed thereon.

[0028] Exemplarily, in the specific implementation process, the terminal device 103 can install a client, obtain the policy configuration through the client, collect log records related to the target file content based on the policy configuration, and upload the log records to the file security protection database of the server 102. Exemplarily, the target file content stored on the terminal device 103 that triggers a preset operation (such as outbound, receiving, creating, downloading, etc.) can collect corresponding log records and upload the log records to the file security protection database of the server 102. After the user (such as an information security manager) finds that a certain data is lost due to malicious behavior, he can search on the terminal device 102 to obtain the propagation path of the target file content. The data processing method provided by the embodiment of the present disclosure obtains the target file content from the database by matching based on the search information input on the search page, and displays the propagation path of the target file content on the display page. The operation is convenient, the data display is intuitive, and it can realize systematic data security management.

[0029] Figure 2The following is a flow chart of the data processing method provided by the embodiment of the present disclosure. Figure 2 As shown, the method of the embodiment of the present disclosure may include:

[0030] 201. Display the search page.

[0031] Specifically, in order to facilitate data security management, the data to be protected can be divided into levels, and different protection strategies can be configured for different levels of data to be protected. In order to ensure that the target file is in a safe state, the data security management personnel can monitor the data to be protected on the second device that can be used by the operator through the first device. When it is found that the data to be protected (such as the target file content) is triggered to be sent out or other preset operations, the second device generates a corresponding log record for executing this preset operation. The log record may include the file subject, file content, information digest MD5, data type, data level, device information of the device, and relevant operator information of the target file content, and the log record is uploaded to the file security protection database for security testing to ensure the security of data transmission.

[0032] When a data security manager needs to check the propagation path of a target file content, he can display a search page through the second device or the client installed on the second device. The search page may include a search control, such as a text input box, a voice input control, etc. The user can touch the search control to enter the search information related to the target file content. The search information can be key information such as the file subject, file content, information digest MD5, data type, etc. of the target file content, or a complete file.

[0033] 202. Receive search information input through the search page, respond to a search request corresponding to the search information, search based on the search information and rely on a file security protection database to match the target file content that has been hit, and obtain a propagation path of the target file content; wherein the file security protection database is used to maintain a pre-specified propagation path related to at least one file that needs to be securely protected.

[0034] Receive search information input through the search page, and generate a search request based on the search information. According to the search request, multiple log records stored in the file security protection database can be searched and matched to obtain at least one target log record corresponding to the target file content corresponding to the search information, aggregate the at least one target log record, and generate a propagation path for the target file content; the log record may include: the target file content that triggers a preset operation and log source information (for example, device information of the device where the target file content is located and operator information of the user associated with the device, etc.).

[0035] The search information may be a clip or a complete file in the form of video, picture, text, chart, etc. The propagation path of the target file content may include the device information of the device where the target file content is located, the operator information of the user associated with the device, and the full-link information such as the target file content being stored on the disk, operated, and sent out.

[0036] In one disclosed embodiment, considering that operations such as file creation and reception at a specific source have a high data security risk, the specific source can be set as a monitoring object. Specifically, in the disclosed embodiment, the preset operation that triggers the log record may include creation; the log record is generated after detecting that the target application on the corresponding target device has opened a creation process. And / or, the preset operation may include reception; the log record is generated after detecting that the target application on the corresponding target device has opened a reception process. Among them, the target application can be a target website, a target APP, etc.

[0037] In one embodiment of the present disclosure, in order to intuitively understand the contents of the target file and the log sources corresponding to the contents of each target file, the target information source can be used as an index. Specifically, in an embodiment of the present disclosure, the aggregation processing of the at least one target log record to generate the file propagation path corresponding to the lost data can include: aggregating the at least one target log record to obtain an aggregation list indexed by the target file content, and determining the aggregation list as the file propagation path corresponding to the search information.

[0038] 203. Display the propagation path of the target file content on the first search result display page. The propagation path of the target file content is used to characterize the situation in which the target file content is operated and / or transmitted. The first search result display page is displayed, and the first search result display page presents the file propagation path.

[0039] In the disclosed embodiment, after the propagation path of the target file content is obtained, the first search result display page can be displayed and presented in the first search result display page. The file propagation path can be displayed in pages, and each page can be displayed in a list form. This embodiment does not limit this.

[0040] From the above description, it can be seen that the data processing method provided by the embodiment of the present disclosure can establish a security protection database according to data security requirements and use the database to dynamically maintain the transmission paths of these files for specified files that need to be securely protected, and provide users with a search page through a search engine based on the database to search and feedback the propagation path of the target file content specified by the user, so that the user can quickly understand the data security status of the target file by triggering a search. Therefore, the data processing method, from the establishment of a bottom-level security protection database, to the collection and maintenance of information related to the propagation path of specified files that need to be securely protected in the middle layer, and to the construction of a search engine at the upper layer, can achieve systematic data security management.

[0041] In one embodiment of the present disclosure, in the above Figure 2 Based on the embodiment, there are multiple ways to obtain the search information corresponding to the target file content on the search page. The search page can support two types of searches including: overall file search and file key information search; wherein, the search page supports overall file search, including: the search page supports inputting the target file as search information by dragging or uploading files; wherein, the search page supports file key information search, including: the search page supports inputting file key information as search information. wherein, the file key information can include relevant attribute information including file content, file subject, file MD5, file type, file level, etc.

[0042] For example, taking a computer as an example, after the client application installed on the computer is started, the display screen of the computer displays Figure 3a Interface 31 is shown. Interface 31 is a search page, which may include a collection of multiple search functions. The search page is mainly used to receive search information input by a user, match the corresponding target file content from the data in the file security protection database based on the search information, and return the search results of the propagation path of the target file content based on the target file content.

[0043] like Figure 3a As shown, the interface 31 includes an input box 301. The input box 301 can be displayed in the form of graphics, text, icons, etc., or can also be displayed in a combination of multiple forms. The present disclosure does not limit the display parameters such as color and size used by the input box 301. For example, Figure 3a As shown, the input box 301 is displayed in the form of "image+text".

[0044] The application receives a touch or voice control operation (such as a text or voice input operation) on the input box 301. In response to the touch or voice control operation, the computer may exemplarily display the following: Figure 3b or Figure 3c The search result page shown is the first search result display page.

[0045] Optionally, in order to achieve faster and more accurate matching, a specific data entry can be searched; the search page also includes a data entry selection control; the log record includes at least one data entry; step 202 may include: in response to an input operation acting on the input box, obtaining the search information; in response to acting on the data entry selection control, obtaining a target option; for each log record in the multiple log records, according to the target option, determining the target data entry corresponding to the log record from the corresponding multiple data entries; searching and matching the target data entries corresponding to the multiple log records respectively according to the first search information, obtaining at least one target log record corresponding to the target file content, and determining the propagation path of the target file content according to the at least one target log record corresponding to the target file content. Optionally, the data entry may include at least one of the following: file title, file content, information digest MD5, severity level, and data category.

[0046] like Figure 3a As shown, the interface 31 also includes a data entry selection control 302. In the embodiment of the present disclosure, the display parameters of the data entry selection control 302, such as size, color, display position, and display transparency, are not limited. Among them, the data entry selection control 302 may include multiple option controls, such as options 1 to 4. The options may be file titles, file contents, information digest MD5, severity levels, or data categories. The multiple selection controls may be selected in a one-selection mode or a multiple-selection mode. For example, you may select only option 1, or you may select both option 1 and option 2 at the same time. The specific setting is based on actual needs, and the embodiment of the present disclosure does not limit this.

[0047] The application receives a touch operation (such as a click operation or a hover operation) on the data entry selection control 302. In response to the touch operation, the selected control can be displayed differently, such as by thickening the line, changing the color, etc., to determine the search range of each log record, and then the file propagation path can be determined in combination with the search information entered in the input box 301. Exemplarily, assuming that the data entry selection control 302 includes the option of file name, and assuming that the file name is selected, then among multiple log records, only the content in the data entry of the file name is matched based on the search information, so as to select the target log record corresponding to the target file content, and then the file propagation path of the target file content can be obtained based on the obtained target log record aggregation.

[0048] Optionally, when the lost data is a certain file, in order to facilitate direct search based on the entire file, a file input control may be set. In this embodiment, the search page includes a file input control; step 202 may include: in response to a file input operation on the file input control, obtaining the search information. Optionally, the file input control includes a file input area, and the obtaining of the search information in response to the file input operation on the file input control may include: in response to a touch operation of dragging the file to be protected to the file input area, obtaining the search information; and / or, the file input control includes a first entry control, and the obtaining of the search information in response to the file input operation on the file input control may include: in response to a touch operation on the first entry control in the file input control, displaying a file selection interface; in response to a touch operation on the file selection interface, obtaining the search information.

[0049] like Figure 3a As shown, the interface 31 also includes a file input control 303. In the embodiment of the present disclosure, there is no limitation on the size, color, display position, display transparency and other display parameters of the file input control 303. The file input control 303 may include a file input area 3032 and / or a first entry control 3031.

[0050] The application receives a touch operation (such as a file dragging operation) triggered in the file input area 3032. In response to the touch operation, the search information can be determined based on the input file, specifically based on the file name, file content, information digest MD5 and other information of the file.

[0051] The application receives a touch operation (such as a click operation or a hover operation) on the first entry control 3031. In response to the touch operation, a file selection interface can be displayed. The file selection interface can include multiple files to be selected. In response to the selection operation on the multiple files to be selected, the search information is determined based on the selected file to be selected.

[0052] It should be noted that the input box 301, the data entry selection control 302 and the file input control 303 can be used one by one, or multiple of them can be used in combination. They can be set according to actual needs, and the embodiments of the present disclosure do not limit this.

[0053] In one embodiment of the present disclosure, in order to facilitate quick re-search after obtaining the previous search results, a search control can be set on the first search result display page. Figure 2Based on the illustrated embodiment, the first search result display page may include a second search control; after step 203, it may also include: responding to a touch operation acting on the second search control, obtaining new search information, generating a new file propagation path based on the new search information, and presenting the new file propagation path in the first search result display page.

[0054] For example, in Figure 3a After obtaining the search information from the search page shown in the figure and determining the file propagation path based on the search information, you can jump to the following Figures 3b to 3c The first search result display page shown shows the file propagation path.

[0055] like Figure 3b As shown, the interface 34 includes a search result list of multiple files related to the target file content. The record for each file may include file attribute information (such as file name, file MD5, level), details of the dissemination related information (such as the number of operators, the number of devices, the number of operations, etc.), and the file dissemination path (for example, it may include the full link information of file placement, operation, and forwarding). The number of operators may include the number of operators corresponding to triggering different preset operations (such as creation / reception, downloading, and outbound), and the number of devices may include the number of devices corresponding to triggering different preset operations (such as creation / reception, downloading, and outbound). The interface 34 also includes a search control 304. For details, please refer to Figure 3a The search control 304 is used to receive the search information input again by the user to update and display the file propagation path displayed in the lower area.

[0056] In one embodiment of the present disclosure, the search page also supports selecting a search range; the method further includes: determining a target search range corresponding to the search request; responding to the search request corresponding to the search information, searching based on the search information and relying on a file security protection database to match the hit target file content, and obtaining a propagation path for the target file content, including: responding to the search request corresponding to the search information, searching based on the search information and the target search range and relying on a file security protection database to match the hit target file content, and obtaining a propagation path for the target file content.

[0057] The target search scope may include: time, operator attributes, file type attributes and other related information.

[0058] For example, in order to facilitate searching for file propagation paths in different time periods, a time period selection control may be provided in the first search result display page so as to input a time range and limit the search range in terms of time. Figure 2Based on the illustrated embodiment, the first search result display page also includes a first time period selection control; after step 203, it may also include: in response to the first time period selection control, obtaining a time range, selecting a target file propagation path whose trigger time of the preset operation meets the time range from the propagation path of the target file content, and presenting the target file propagation path in the first search result display page.

[0059] like Figure 3c As shown, the interface 33 includes a time period selection control 305. For example, the time period selection control may include a specific date input area and a selection area for the last n days, so that the user can enter a time range in various forms. After the time range is determined, the file propagation path displayed in the lower area may be updated and displayed, and only the file propagation path that meets the above time range may be displayed.

[0060] In one embodiment of the present disclosure, considering that there are many operators and devices associated with the same target file content, the statistical number of devices and operators can be displayed on the first search result display page. In order to facilitate understanding of the details, an entry control can be set on the first search result display page to enter the details display page. Figure 2 Based on the illustrated embodiment, the first search result display page also includes a second entry control respectively associated with at least one target file content in the file propagation path; after step 203, it may also include: in response to the second entry control, displaying a details page; the details page presents the source information under different preset operations corresponding to the corresponding target file content.

[0061] like Figure 3c As shown, the interface 35 also includes an entry control 306, which is used to enter the details page to display the details page of the file propagation path, such as the specific operator information and device information involved in the number of operators and the number of devices. The application receives a trigger operation (such as a click operation or a hover operation) on the entry control 306, and in response to the touch operation, jumps to the Figure 3d Interface 34 is shown.

[0062] like Figure 3d As shown, the interface 34 includes a plurality of operator information corresponding to different preset operations (create / receive, download, send) corresponding to the target file content corresponding to the entry control 306, and a plurality of device information corresponding to each operator, so that the user can intuitively understand which operators and on which devices the corresponding target file content has been spread.

[0063] In one embodiment of the present disclosure, the search result display page also supports retrieval and viewing of at least one attribute dimension for the search results; the at least one attribute dimension includes one or more of time, text keywords, and file transfer path details page.

[0064] In one embodiment of the present disclosure, the search page also supports viewing the global security situation of the propagation paths of all files maintained in the file security protection database; the method may also include: receiving a request for viewing the global security situation triggered on the search page, the global security situation request being used to request viewing the global security situation of the propagation paths of all files maintained in the file security protection database; in response to the global security situation request, obtaining the propagation paths maintained in the file security protection database and displaying a global security situation diagram based on a preset data security level classification and a transmission path sequence summary on a second search results page.

[0065] Specifically, you can view the global security situation with one click, by clicking a button, or by touching the voice control.

[0066] For example, in order to facilitate data security managers to globally grasp the spread of all files maintained in the file security protection data, so as to protect the security of the target file content. Figure 2 On the basis of the illustrated embodiment, the method further includes: in response to acting on a global display control, obtaining a global file propagation path corresponding to the multiple log records; displaying a second search result display page; the second search result display page presents the global file propagation path. Optionally, in order to improve intuitiveness and logic, the global file propagation path can be displayed in a tree form. The tree structure includes multiple levels of nodes; nodes at different levels correspond to different factors; nodes at each level are divided based on corresponding factors; the factors include severity level, data application field, data type, file name, operation type, employee, device or data counterpart.

[0067] Exemplarily, the search page may include a function selection area and a main display area. The function selection area includes an entry control for the search function and an entry control for the global display function. The entry control for the search function is used to display controls related to the search function in the main display area, such as Figure 3a The controls 301 to 303 shown, the entry controls of the global display function are used to display content related to the global display function in the main display area. The two entry controls can be displayed in the form of icons, text, symbols, pictures, etc., or can be displayed in a combination of multiple forms. The present disclosure does not limit the display parameters such as color, size, etc. used by the two controls.

[0068] The application receives a touch operation (such as a click operation or a hover operation) on the entry control of the global display function. In response to the touch operation, the main display area displays the global security situation of the propagation paths of all files maintained in the file security protection database.

[0069] In one embodiment of the present disclosure, the second search result display page also supports hierarchical viewing of information in the global security situation map, and in response to the target content selected for viewing, highlights path information directly associated with the target content according to the transmission path of the target content.

[0070] like Figure 3e As shown, the interface 35 displays the file propagation paths of all files maintained in the file security protection database in a tree structure. The nodes of the first level of the tree structure are divided based on the severity level, the nodes of the second level are divided based on the data application field, the nodes of the third level are divided based on the data type, the nodes of the fourth level are divided based on different file individuals, and the nodes of the fifth level are divided based on different preset operation types, which may specifically include creation / receiving, downloading, outbound sending, etc. The nodes of the sixth level are divided based on different operator individuals, and the nodes of the seventh level are divided based on different device individuals. The display of this tree structure can display the file propagation path in a hierarchical and classified manner, making it convenient for users to view the global security situation in an orderly and intuitive manner. As shown Figure 3e As shown, in response to the selection operation on level 3, the sub-nodes of level 3 can be displayed, and level 3 can be highlighted, for example, displayed in bold. In response to the selection operation on field 3, the sub-nodes of field 3 can be displayed, and the border of field 3 can be displayed in bold, and so on, forming a transmission path of level 3, field 3, type 2, file 1, operation 3, and operator 2.

[0071] In one embodiment of the present disclosure, the second search result display page also supports retrieval and viewing of the global security situation in the time dimension; the method may also include: in response to a time range selection operation triggered on the second search result display page, determining a selected target time range, the target time range being used to indicate viewing the data security situation within the corresponding time range; in response to the global security situation request, obtaining the propagation path maintained in the file security protection database and displaying a global security situation map based on a preset data security level classification and a transmission path sequence summary on the second search result page may include: in response to the global security situation request, obtaining the propagation path maintained in the file security protection database based on the target time range and displaying a global security situation map based on a preset data security level classification and a transmission path sequence summary on the second search result page.

[0072] Specifically, in order to facilitate the search for file propagation paths in different time periods in the global file propagation path, a time period selection control can be set in the second search result display page to input a time range and limit the display range of the global file propagation path in terms of time. Figure 2 Based on the illustrated embodiment, the second search result display page also includes a second time period selection control; after step 203, it may also include: in response to the second time period selection control, obtaining a time range, obtaining the propagation path maintained in the file security protection database based on the target time range, and displaying a global security situation map based on a preset data security level classification and a transmission path sequence summary on the second search result page.

[0073] like Figure 3e As shown, the interface 35 also includes a time period selection control 308. For example, the time period selection control may include a specific date input area and a selection area for the last n days, so that the user can enter the time range in various forms. After the time range is determined, the global situation map within the time range can be displayed in the lower area, that is, only the file propagation paths that meet the above time range are displayed. This is conducive to generating different data sets based on different time dimensions.

[0074] In one embodiment of the present disclosure, displaying the propagation path of the target file content on the first search result display page may include: on the first search result display page, displaying the propagation path of the target file content based on full-link information including file disk drop records, file operation records, and file forwarding records.

[0075] Among them, disk placement refers to the process of writing data to disk through downloading / creating / receiving, etc. File transfer refers to the full-link process of data placement, operation, and outbound transmission.

[0076] In order to fully understand the operation process of each target file content on a certain target device, a file transfer page can be provided to the user. Figure 2 Based on the embodiment shown, after step 203, the following may be further included: displaying a file transfer page; the file transfer page presents operation records of multiple operation behaviors triggered on the corresponding target file content on the corresponding target device. The operation behaviors may include at least one of the following: downloading, creating, receiving, moving, renaming, copying, compressing, decompressing, and sending.

[0077] like Figure 3fAs shown, interface 36 displays the operations performed on the target file content at different times. Exemplarily, assuming that time 1 to time 8 are in chronological order, that is, time 1 is the earliest time, initially at time 1, a pdf file with the file name of name 1 is downloaded from application 1, and then at time 2, an xml file with name 2 is created based on name 1, and then at time 3, name 1 is moved from path 1 to path 2, and at time 4, name 1 is renamed to name 3, and at time 5, the name 3 file is copied to obtain the corresponding copy, and at time 6, name 3 is compressed, and at time 7, the compressed file is decompressed, and the decompressed name 4 file is sent out at time 8. The full-link tracking of file placement, operation and outbound delivery is realized, which helps to eliminate security risks and comprehensively improve data security.

[0078] In one embodiment of the present disclosure, considering that it is usually necessary to understand the operation record of a target file content on a target device, the entry control of the file flow page can be set in the log record display page corresponding to a device. Figure 2 Based on the illustrated embodiment, after step 203, the following may be included: displaying a log record display page; the alarm display page presents a log record corresponding to the corresponding target device and a third entry control associated with the log record; in response to a touch operation on the third entry control, the file transfer page is displayed. The file transfer page presents operation records of multiple operation behaviors triggered on the corresponding target file content on the corresponding target device.

[0079] Exemplarily, multiple log records related to the target device can be displayed on the log record display page. The log record includes an entry control of the file flow page, and the entry control is used to enter the file flow page. The alarm display page corresponds to the target device. Therefore, the entry control of the alarm display page can be associated with the target device. For example, the entry control of the alarm display page can be associated with the target device. Figure 3d The device information 1 to the device information 4 in the interface 34 shown and the interface 35 shown in 3e are associated.

[0080] Corresponding to the data processing method of the above embodiment, Figure 4 The structure block diagram of the data processing device provided by the embodiment of the present disclosure. For the convenience of explanation, only the part related to the embodiment of the present disclosure is shown. Figure 4 , the device includes: a display module 401 and a search module 402.

[0081] The display module 401 is used to display a search page; the search page supports searching for propagation paths of file contents;

[0082] The search module 402 is used to receive the search information input through the search page, and in response to the search request corresponding to the search information, search the file security protection database to match the hit target file content according to the search information, and obtain the propagation path of the target file content; wherein the file security protection database is used to maintain the propagation path related to at least one file that needs to be protected in advance;

[0083] The display module 401 is further used to display the propagation path of the target file content on the first search result display page, where the propagation path of the target file content is used to represent the situation in which the target file content is operated and / or transmitted.

[0084] In one embodiment of the present disclosure, the search information includes first search information; the search page includes an input box; the search module 402 is specifically used to: respond to an input operation acting on the input box, and obtain the first search information.

[0085] In one embodiment of the present disclosure, the search page supports two types of searches including: overall file search and file key information search; wherein, the search page supports overall file search, including: the search page supports inputting target files as search information by dragging and dropping or uploading files; wherein, the search page supports file key information search, including: the search page supports inputting file key information as search information.

[0086] In one embodiment of the present disclosure, the search page also supports selecting a search range; the search module 402 is also used to: determine a target search range corresponding to the search request; when the search module 402 responds to a search request corresponding to the search information, relies on a file security protection database to search according to the search information to match the hit target file content, and obtains a propagation path of the target file content, it is specifically used to: respond to a search request corresponding to the search information, relies on a file security protection database to search according to the search information and the target search range to match the hit target file content, and obtains a propagation path of the target file content.

[0087] In one embodiment of the present disclosure, the search result display page also supports retrieval and viewing of at least one attribute dimension for the search results; the at least one attribute dimension includes one or more of time, text keywords, and file transfer path details page.

[0088] In one embodiment of the present disclosure, the search page also supports viewing the global security situation of the propagation paths of all files maintained in the file security protection database; the search module 402 is also used to: receive a request for viewing the global security situation triggered on the search page, and the global security situation request is used to request viewing the global security situation of the propagation paths of all files maintained in the file security protection database; in response to the global security situation request, obtain the propagation paths maintained in the file security protection database and display a global security situation diagram based on a preset data security level classification and a transmission path sequence summary on a second search result page.

[0089] In one embodiment of the present disclosure, the second search result display page also supports retrieval and viewing of the global security situation in the time dimension; the display module 401 is also used to: in response to the time range selection operation triggered on the second search result display page, determine the selected target time range, and the target time range is used to indicate the data security situation within the corresponding time range for viewing; the search module 402, in response to the global security situation request, obtains the propagation path maintained in the file security protection database and displays the global security situation map based on the preset data security level classification and the transmission path sequence summary on the second search result page, specifically for: in response to the global security situation request, obtains the propagation path maintained in the file security protection database based on the target time range and displays the global security situation map based on the preset data security level classification and the transmission path sequence summary on the second search result page.

[0090] In one embodiment of the present disclosure, the second search result display page also supports hierarchical viewing of information in the global security situation map, and in response to the target content selected for viewing, highlights path information directly associated with the target content according to the transmission path of the target content.

[0091] In one embodiment of the present disclosure, when the display module 401 displays the propagation path of the target file content on the first search result display page, it is specifically used to: display the propagation path of the target file content on the first search result display page based on the full-link information including file disk drop records, file operation records and file forwarding records.

[0092] The device provided in this embodiment can be used to execute the technical solution of the above method embodiment. Its implementation principle and technical effect are similar, and this embodiment will not be repeated here.

[0093] In order to implement the above embodiment, the embodiment of the present disclosure also provides an electronic device.

[0094] refer to Figure 5, which shows a schematic diagram of the structure of an electronic device 900 suitable for implementing the embodiment of the present disclosure, and the electronic device 900 may be a terminal device or a server. The terminal device may include but is not limited to mobile terminals such as mobile phones, notebook computers, digital broadcast receivers, personal digital assistants (PDAs), tablet computers (Portable Android Devices, PADs), portable multimedia players (PMPs), vehicle terminals (such as vehicle navigation terminals), etc., and fixed terminals such as digital TVs, desktop computers, etc. Figure 5 The electronic device shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present disclosure.

[0095] like Figure 5 As shown, the electronic device 900 may include a processing device (e.g., a central processing unit, a graphics processing unit, etc.) 901, which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) 902 or a program loaded from a storage device 908 to a random access memory (RAM) 903. In the RAM 903, various programs and data required for the operation of the electronic device 900 are also stored. The processing device 901, the ROM 902, and the RAM 903 are connected to each other via a bus 904. An input / output (I / O) interface 905 is also connected to the bus 904.

[0096] Typically, the following devices may be connected to the I / O interface 905: input devices 906 including, for example, a touch screen, a touch pad, a keyboard, a mouse, a camera, a microphone, an accelerometer, a gyroscope, etc.; output devices 907 including, for example, a liquid crystal display (LCD), a speaker, a vibrator, etc.; storage devices 908 including, for example, a magnetic tape, a hard disk, etc.; and communication devices 909. The communication device 909 may allow the electronic device 900 to communicate with other devices wirelessly or by wire to exchange data. Although Figure 5 The electronic device 900 is shown with various devices, but it should be understood that it is not required to implement or possess all the devices shown. More or fewer devices may be implemented or possessed instead.

[0097] In particular, according to an embodiment of the present disclosure, the process described above with reference to the flowchart can be implemented as a computer software program. For example, an embodiment of the present disclosure includes a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program contains program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from a network through a communication device 909, or installed from a storage device 908, or installed from a ROM 902. When the computer program is executed by the processing device 901, the above-mentioned functions defined in the method of the embodiment of the present disclosure are executed.

[0098] It should be noted that the computer-readable medium disclosed above may be a computer-readable signal medium or a computer-readable storage medium or any combination of the above two. The computer-readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In the present disclosure, a computer-readable storage medium may be any tangible medium containing or storing a program that may be used by or in combination with an instruction execution system, device or device. In the present disclosure, a computer-readable signal medium may include a data signal propagated in a baseband or as part of a carrier wave, in which a computer-readable program code is carried. This propagated data signal may take a variety of forms, including but not limited to an electromagnetic signal, an optical signal, or any suitable combination of the above. The computer readable signal medium may also be any computer readable medium other than a computer readable storage medium, which may send, propagate or transmit a program for use by or in conjunction with an instruction execution system, apparatus or device. The program code contained on the computer readable medium may be transmitted using any suitable medium, including but not limited to: wires, optical cables, RF (radio frequency), etc., or any suitable combination of the above.

[0099] The computer-readable medium may be included in the electronic device, or may exist independently without being incorporated into the electronic device.

[0100] The computer-readable medium carries one or more programs. When the one or more programs are executed by the electronic device, the electronic device executes the method shown in the above embodiment.

[0101] Computer program code for performing the operations of the present disclosure may be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages, such as Java, Smalltalk, C++, and conventional procedural programming languages, such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as an independent software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer via any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0102] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present disclosure. In this regard, each square box in the flow chart or block diagram can represent a module, a program segment or a part of a code, and the module, the program segment or a part of the code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some implementations as replacements, the functions marked in the square box can also occur in a sequence different from that marked in the accompanying drawings. For example, two square boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each square box in the block diagram and / or flow chart, and the combination of the square boxes in the block diagram and / or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0103] The units involved in the embodiments described in the present disclosure may be implemented by software or hardware. The name of a unit does not limit the unit itself in some cases. For example, the first acquisition unit may also be described as a "unit for acquiring at least two Internet Protocol addresses".

[0104] The functions described above herein may be performed at least in part by one or more hardware logic components. For example, without limitation, exemplary types of hardware logic components that may be used include: field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), complex programmable logic devices (CPLDs), and the like.

[0105] In the context of the present disclosure, a machine-readable medium may be a tangible medium that may contain or store a program for use by or in conjunction with an instruction execution system, device, or equipment. A machine-readable medium may be a machine-readable signal medium or a machine-readable storage medium. A machine-readable medium may include, but is not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, device, or equipment, or any suitable combination of the foregoing. A more specific example of a machine-readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0106] The above description is only a preferred embodiment of the present disclosure and an explanation of the technical principles used. Those skilled in the art should understand that the scope of disclosure involved in the present disclosure is not limited to the technical solutions formed by a specific combination of the above technical features, but should also cover other technical solutions formed by any combination of the above technical features or their equivalent features without departing from the above disclosed concept. For example, the above features are replaced with the technical features with similar functions disclosed in the present disclosure (but not limited to) by each other to form a technical solution.

[0107] In addition, although each operation is described in a specific order, this should not be understood as requiring these operations to be performed in the specific order shown or in a sequential order. Under certain circumstances, multitasking and parallel processing may be advantageous. Similarly, although some specific implementation details are included in the above discussion, these should not be interpreted as limiting the scope of the present disclosure. Some features described in the context of a separate embodiment can also be implemented in a single embodiment in combination. On the contrary, the various features described in the context of a single embodiment can also be implemented in multiple embodiments individually or in any suitable sub-combination mode.

[0108] Although the subject matter has been described in language specific to structural features and / or methodological logical actions, it should be understood that the subject matter defined in the appended claims is not necessarily limited to the specific features or actions described above. On the contrary, the specific features and actions described above are merely example forms of implementing the claims.

Claims

1. A data processing method, characterized in that: include: Displaying a search page; the search page supports searching for propagation paths of file contents; Receiving search information input through the search page, responding to a search request corresponding to the search information, searching based on the search information to match the hit target file content based on the file security protection database, and obtaining a propagation path of the target file content; wherein the file security protection database is used to maintain a pre-specified propagation path related to at least one file that needs to be securely protected; Displaying the propagation path of the target file content on the first search result display page, where the propagation path of the target file content is used to represent the situation in which the target file content is operated and / or transmitted; The search page also supports viewing the global security situation of the propagation paths of all files maintained in the file security protection database; the method further includes: Receiving a request for viewing a global security situation triggered on the search page, the global security situation request being used to request viewing a global security situation of propagation paths of all files maintained in the file security protection database; In response to the global security situation request, the propagation path maintained in the file security protection database is obtained and a global security situation diagram based on a preset data security level classification and a transmission path sequence summary is displayed on a second search result page.

2. The method according to claim 1, characterized in that The search page supports two types of searches: file overall search and file key information search; Wherein, the search page supports overall file search, including: the search page supports inputting target files as search information by dragging or uploading files; The search page supports searching for key file information, including: the search page supports inputting key file information as search information.

3. The method according to claim 1, characterized in that: The search page also supports selecting a search range; the method further includes: Determine a target search range corresponding to the search request; Then, in response to the search request corresponding to the search information, searching based on the search information in a file security protection database to match the hit target file content, and obtaining the propagation path of the target file content, includes: In response to a search request corresponding to the search information, a search is performed based on the search information and the target search range in a file security protection database to match the hit target file content, and a propagation path of the target file content is obtained.

4. The method according to claim 1, characterized in that The search result display page also supports retrieval and viewing of at least one attribute dimension for the search results; the at least one attribute dimension includes one or more of time, text keywords, and file transfer path details page.

5. The method according to claim 1, characterized in that: The second search result page also supports retrieval and viewing of the global security situation in a time dimension; the method further includes: In response to a time range selection operation triggered on the second search result page, determining a selected target time range, the target time range being used to indicate viewing of data security situation within a corresponding time range; Then, in response to the global security situation request, obtaining the propagation path maintained in the file security protection database and displaying a global security situation diagram based on the preset data security level classification and the transmission path sequence summary on the second search result page includes: In response to the global security situation request, the propagation path maintained in the file security protection database is obtained based on the target time range and a global security situation map based on a preset data security level classification and a transmission path sequence summary is displayed on a second search result page.

6. The method according to claim 1, characterized in that The second search result page also supports hierarchical viewing of information in the global security situation map, and in response to a target content selected for viewing, highlights path information directly associated with the target content according to the transmission path of the target content.

7. The method according to claim 1, characterized in that The displaying of the propagation path of the target file content on the first search result display page includes: On the first search result display page, the propagation path of the target file content is displayed based on the full-link information including file disk drop records, file operation records and file forwarding records.

8. A data processing device, characterized in that: include: A display module, used to display a search page; the search page supports searching for propagation paths of file contents; A search module, for receiving search information input through the search page, and in response to a search request corresponding to the search information, searching based on the search information to match the hit target file content based on the file security protection database, and obtaining a propagation path of the target file content; wherein the file security protection database is used to maintain a pre-specified propagation path related to at least one file that needs to be securely protected; The display module is further used to display the propagation path of the target file content on the first search result display page, where the propagation path of the target file content is used to represent the situation in which the target file content is operated and / or transmitted; The search page also supports viewing the global security situation of the propagation paths of all files maintained in the file security protection database; The search module is further used to receive a request for viewing a global security situation triggered on the search page, wherein the global security situation request is used to request viewing a global security situation of propagation paths of all files maintained in the file security protection database; In response to the global security situation request, the propagation path maintained in the file security protection database is obtained and a global security situation diagram based on a preset data security level classification and a transmission path sequence summary is displayed on a second search result page.

9. An electronic device, characterized in that: include: Processor and memory; The memory stores computer-executable instructions; The processor executes the computer-executable instructions stored in the memory, so that the processor performs the data processing method according to any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer-executable instructions. When a processor executes the computer-executable instructions, the data processing method according to any one of claims 1 to 7 is implemented.

11. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the data processing method according to any one of claims 1 to 7 is implemented.

Images