A data governance method and system for an information platform

Abstract

The present invention relates to the field of data governance technology, and in particular to a data governance method and system for an information platform, the method comprising determining a user's access level based on the user's access success rate and the security level of the network environment in which the user is located when applying for access; determining the data level based on the amount of accessed data and the desensitization processing ratio of the accessed data; judging an authentication method based on the user's access level and the data level for which the user applies for access, the authentication method comprising authenticating the user's personal identity or authenticating the user's access rights; determining whether to update stored data in the information platform based on the access efficiency of the user currently applying to access the data on the information platform, the number of data accesses, and the storage time of the data; and determining, based on the user's access qualification evaluation value after deleting useless data, a judgment parameter for useless data in the data governance process and an adjustment amount of a judgment parameter for the user's access level.

Description

Technical Field

[0001] The present invention relates to the field of data governance technology, and in particular to a data governance method and system for an information platform. Background Art

[0002] With the advent of the big data era, many companies feel helpless in the process of digital transformation in the face of a large number of business systems and the massive amounts of data that are constantly generated. Due to the lack of macro-control over the use of data within the company, the data obtained by various departments have many problems such as being difficult to use, not being used well, and being difficult to manage. This is mainly reflected in the increasingly prominent data security issues. Sensitive data leaks often occur when sharing information data. In order to prevent the leakage of sensitive data, the current data governance system simply integrates data encryption and data desensitization functions to achieve encryption and desensitization of data assets. It does not consider the use of privacy protection technology from the overall perspective of data resource participants, which limits data sharing, resulting in each data owner being able to use only the small-scale data they hold. Data is difficult to be integrated through sharing, and the value of data elements cannot be fully utilized.

[0003] Chinese patent application publication number: CN116821106A discloses a digital governance system and method for enterprise data. It includes a server, which includes a data concentration module, which is used to collect business data from various business systems under the enterprise, and convert, clean and organize the business data of each business system to obtain standardized enterprise data of various data types, and store them in a standard analysis database; a data sending module, which receives access requests from various business systems, retrieves corresponding standardized enterprise data from the standard analysis database according to the access content in the access request of each business system, and sends it to the business system that sent the access request; a risk warning module, which is used to filter the standardized enterprise data according to preset risk indicators and identify the risk data therein. It can collect and analyze various business systems under the enterprise and issue risk warnings for business data.

[0004] It can be seen from this that the existing technology has the problem of inaccurate analysis of the data types and user permissions of the information platform, which leads to the leakage of confidential information due to unreasonable authorization when users access data. Summary of the invention

[0005] To this end, the present invention provides a data governance method for an information platform to overcome the problem in the prior art that the data type and user authority analysis of the information platform is not accurate enough, resulting in the leakage of confidential information due to unreasonable authority granting when users access data.

[0006] To achieve the above objectives, the present invention provides a data governance method for an information platform, comprising:

[0007] When a user applies to the information platform for access to data, the user's access level is determined based on the user's access success rate and the security level of the network environment in which the user is located when applying for access;

[0008] Determine the data level based on the amount of accessed data and the desensitization ratio of the accessed data;

[0009] Determine the authentication method according to the user's access level and the data level that the user applies to access, wherein the authentication method includes authenticating the user's personal identity or authenticating the user's access rights;

[0010] Determining to update the stored data in the information platform according to the access efficiency of the user who currently applies to access the data on the information platform, the number of accesses to the data in the information platform, and the storage time of the data in the information platform, wherein the updating includes deleting useless data;

[0011] The data of the information platform is periodically obtained and analyzed based on the amount of data obtained when users apply for access before deleting useless data, the amount of data obtained when users apply for access after deleting useless data, and the number of times users are forcibly disconnected during the access process. The adjustment amount of the judgment parameters for useless data in the data governance process and the judgment parameters for user access levels are determined based on the user's access qualification evaluation value after deleting useless data.

[0012] Furthermore, when determining the user's access level, it includes:

[0013] Determine the user's access level based on a comparison result of the user's historical access success rate and a preset success rate;

[0014] The access level of the user is determined based on the comparison result of the user's historical access success rate with the preset success rate and the comparison result of the security level of the network environment in which the user is located when applying for access with the preset security level.

[0015] Furthermore, the security level of the network environment in which the user applies for access is determined based on the number of successful network IP address accesses when the user applies for access using the wireless network and the number of successful geographical location accesses when the user applies for access without using the wireless network.

[0016] Furthermore, when determining the user's authentication method, it includes:

[0017] Determine the personal identity of the authenticated user based on the comparison result that the user's access level is greater than or equal to the accessed data level;

[0018] The access rights of the authenticated user are determined based on the comparison result that the user's access level is less than the accessed data level.

[0019] Further, the step of determining to update the stored data in the information platform includes:

[0020] Obtain user access efficiency;

[0021] Compare the user's access efficiency with the preset access efficiency;

[0022] According to the comparison result that the user's access efficiency is less than the preset access efficiency, it is determined that the stored data in the information platform is updated.

[0023] Furthermore, when updating the stored data in the information platform, the step of determining the useless data includes:

[0024] Obtaining the number of times the data has been accessed and the storage time of the data;

[0025] The access times and storage time are compared with corresponding preset values ​​respectively;

[0026] Determine whether the data is useless data according to the comparison result, wherein:

[0027] If the number of accesses to the data is less than a preset number of accesses, and the storage time of the data is greater than or equal to the preset storage time, the data is determined to be useless data.

[0028] Furthermore, the access efficiency is determined according to the ratio of the amount of data requested for access by the user to the access duration.

[0029] Furthermore, when analyzing the data on the information platform, the adjustment amount of the judgment parameters for useless data in the data governance process and the judgment parameters for the user access level are determined based on the comparison result of the user's access qualification evaluation value after deleting useless data and the preset qualification evaluation value, wherein the judgment parameters for useless data include a preset success rate and a preset security level, and the judgment parameters for the user access level include a preset access efficiency.

[0030] Furthermore, the adjustment amount of the useless data determination parameter is positively correlated with the frequency of information outflow;

[0031] The adjustment amount of the determination parameter of the user access level is negatively correlated with the frequency of information outflow;

[0032] The information outflow frequency is determined according to the ratio of the number of data outflows of the information platform to the preset operation time of the platform.

[0033] Furthermore, a system for the data governance method applied to the information platform is characterized by comprising:

[0034] Data acquisition module, which is used to obtain user personal data, platform data and user access data;

[0035] A data analysis module, which is connected to the data acquisition module and is used to determine the user's access level based on the user's access success rate and the security level of the network environment in which the user is located when applying for access;

[0036] An authentication module, which is connected to the data analysis module and is used to determine an authentication method according to the user's access level and the data level that the user applies to access, wherein the authentication method includes authenticating the user's personal identity or authenticating the user's access rights;

[0037] An information cycle management module, which is connected to the authentication module, and is used to determine whether to update the stored data in the information platform according to the access efficiency of the user who currently applies to access the data on the information platform, the number of accesses to the data in the information platform, and the storage time of the data in the information platform, wherein the update includes deleting useless data;

[0038] The adjustment module is connected to the information cycle management module and is used to determine the adjustment amount of the judgment parameters of useless data in the data governance process and the judgment parameters of the user access level according to the user's access qualification evaluation value after deleting useless data.

[0039] Compared with the prior art, the beneficial effect of the present invention lies in that the present invention determines the user's access level by the user's access success rate. When the user's access success rate is less than the preset access success rate, it means that the user's trustworthiness is low, so the user's access level is set to the first access level. When the user's access success rate is greater than or equal to the preset access success rate, the user's access level is determined according to the security level of the user's network environment. The above method improves the accuracy of the user's access level analysis and avoids the phenomenon of data outflow caused by excessive granting of user permissions.

[0040] Furthermore, the present invention determines the data level by the desensitizing processing ratio and data volume of the data on the information platform. When the desensitizing processing ratio of the data is greater than or equal to the preset ratio, it means that the amount of encrypted information is large, so the data level is the third level. When the desensitizing processing ratio of the data is less than the preset ratio, the data level is determined according to the comparison result between the data volume and the preset data volume. The above method can avoid the phenomenon of data outflow caused by users easily accessing the data due to setting the access level of data with a small data volume but a large desensitizing processing ratio too low, thereby improving the accuracy of data analysis in the platform information.

[0041] Furthermore, the present invention determines the authentication method for the user based on the comparison between the user's access level and the data level for which access is requested. When the access level is greater than or equal to the data level, only the user identity needs to be authenticated. When the access level is less than the data level, it is necessary to authenticate whether the user has the administrator's permission. The above method improves the accuracy of the user access level and data level analysis, thereby avoiding the occurrence of data outflow.

[0042] Furthermore, the present invention determines whether to delete useless data in the information platform based on the comparison result between the user's access efficiency and the preset access efficiency. When the user's access efficiency is less than the preset access efficiency, it means that the information platform stores too much data, resulting in slow operation and reducing the user's access efficiency. The present invention determines whether the data is useless data based on the number of times the data is accessed and the storage time of the data. The above method avoids the phenomenon of low user access efficiency due to the long storage time of data on the information platform and the small number of accesses, thereby occupying space, thereby improving the accuracy of user access level and data level analysis.

[0043] Furthermore, the present invention determines the user's access eligibility based on the difference in the amount of data accessed by the user before and after deleting useless data and the number of times the user is forcibly disconnected by the platform, thereby avoiding the phenomenon of accidental deletion of the user's access data when deleting useless data and misjudgment of the user's access level leading to information leakage.

[0044] Furthermore, the present invention determines an adjustment method for the data governance process based on a comparison result between the information outflow frequency and a preset outflow frequency. When the outflow frequency is greater than or equal to the preset outflow frequency, it indicates that the user leaks the accessed data to other platforms. At this time, the judgment parameter of the user's access level is increased by the first adjustment coefficient, thereby increasing the difficulty of increasing the user's access level to reduce the data outflow frequency. When the outflow frequency is less than the preset outflow frequency, it indicates that the data accessed by the user is incomplete. At this time, the judgment parameter for deleting useless data is reduced by the second adjustment coefficient to improve the integrity of the data. The above method improves the accuracy of data governance process control. BRIEF DESCRIPTION OF THE DRAWINGS

[0045] Figure 1 This is a workflow diagram of a data governance method for an information platform according to an embodiment of the present invention;

[0046] Figure 2 A workflow diagram for determining an authentication method for a data governance method of an information platform according to an embodiment of the present invention;

[0047] Figure 3 A workflow diagram for determining the update of stored data in the information platform for the data governance method of the information platform according to the embodiment of the present invention;

[0048] Figure 4It is a structural diagram of the data governance system of the information platform according to an embodiment of the present invention. DETAILED DESCRIPTION

[0049] In order to make the objects and advantages of the present invention more clearly understood, the present invention is further described below in conjunction with embodiments; it should be understood that the specific embodiments described herein are only used to explain the present invention and are not used to limit the present invention.

[0050] The preferred embodiments of the present invention are described below with reference to the accompanying drawings. It should be understood by those skilled in the art that these embodiments are only used to explain the technical principles of the present invention and are not intended to limit the protection scope of the present invention.

[0051] It should be noted that, in the description of the present invention, terms such as "up", "down", "left", "right", "inside" and "outside" indicating directions or positional relationships are based on the directions or positional relationships shown in the drawings. This is merely for the convenience of description and does not indicate or imply that the device or element must have a specific orientation, be constructed and operated in a specific orientation. Therefore, it cannot be understood as a limitation on the present invention.

[0052] In addition, it should be noted that in the description of the present invention, unless otherwise clearly specified and limited, the terms "installed", "connected", and "connected" should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection, or it can be indirectly connected through an intermediate medium, or it can be the internal communication of two components. For those skilled in the art, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0053] See also Figure 1-Figure 3 As shown, Figure 1 This is a workflow diagram of a data governance method for an information platform according to an embodiment of the present invention; Figure 2 A workflow diagram for determining an authentication method for a data governance method of an information platform according to an embodiment of the present invention; Figure 3 A workflow diagram for updating stored data in an information platform is determined for the data governance method of the information platform according to an embodiment of the present invention.

[0054] The data governance method of the information platform according to the embodiment of the present invention includes:

[0055] Step S1, when a user applies to the information platform for access to data, the user's access level is determined based on the user's access success rate and the security level of the network environment in which the user is located when applying for access;

[0056] Step S2, determining the data level according to the amount of accessed data and the desensitization processing ratio of the accessed data;

[0057] Step S3, determining an authentication method according to the user's access level and the level of the data the user applies to access, wherein the authentication method includes authenticating the user's personal identity or authenticating the user's access rights;

[0058] Step S4, determining to update the stored data in the information platform according to the access efficiency of the user who currently applies to access the data on the information platform, the number of accesses to the data in the information platform, and the storage time of the data in the information platform, wherein the updating includes deleting useless data;

[0059] Step S5, periodically obtain the amount of data obtained when the user applies for access before deleting useless data, the amount of data obtained when the user applies for access after deleting useless data, and the number of times the user is forcibly disconnected during the access process, and analyze the data of the information platform; determine the adjustment amount of the judgment parameters for useless data in the data governance process and the judgment parameters for the user access level according to the user's access qualification evaluation value after deleting useless data.

[0060] Specifically, in step S1, when determining the access level of a user, the access level of the user is determined according to the comparison result of the user's access success rate B with the preset success rate B0, including:

[0061] Determine the user's access level as a first access level according to a first comparison result of the user's historical access success rate B and a preset success rate B0;

[0062] Determine the user's access level as the second level according to a second comparison result of the user's historical access success rate B and the preset success rate B0 and a first comparison result of the security level G of the network environment in which the user is located when applying for access and the preset security level G0;

[0063] The user's access level is determined to be the third level based on a second comparison result of the user's historical access success rate B and a preset success rate B0 and a second comparison result of the security level G of the network environment in which the user applies for access and a preset security level G0.

[0064] In a specific embodiment, it is set that:

[0065] B<B0 is the first comparison result between the user's historical access success rate and the preset success rate;

[0066] B≥B0 is the second comparison result between the user's historical access success rate and the preset success rate;

[0067] G<G0 is the first comparison result between the security level of the network environment where the user applies for access and the preset security level;

[0068] G≥G0 is the second comparison result between the security level of the network environment where the user applies for access and the preset security level;

[0069] In a specific embodiment, when B<B0, the access level of the user is determined to be the first access level;

[0070] When B ≥ B0, a second determination is made on the access level of the determined user;

[0071] The preset success rate B0 is set to an average value of access success rates of several users, but the above value is not limited thereto, and those skilled in the art may also adjust the value according to actual needs.

[0072] The access success rate in the embodiment of the present invention is the ratio of the number of successful user accesses to the number of historical user accesses. For example, the number of historical user access applications is 55 times, and the number of successful user accesses is 44 times, then the access success rate is 0.8. The value range of the preset success rate is set to 0.5-0.9, and the value of the preset success rate is preferably 0.7.

[0073] Specifically, when the secondary determination is made on the access level of the determined user, the access level of the user is determined according to the comparison result between the security level G of the network environment in which the user applies for access and the preset security level G0;

[0074] When G<G0, determining the access level of the user as the second access level;

[0075] When G≥G0, the access level of the user is determined to be the third access level.

[0076] Specifically, the security level of the network environment where the user applies for access is determined based on the number of successful network IP address accesses when the user applies for access using the wireless network and the number of successful geographical location accesses when the user applies for access without using the wireless network.

[0077] In implementation, the safety level G is calculated by the following formula:

[0078]

[0079] Among them, N represents the number of successful accesses to the network IP address when the user applies for access using the wireless network, N0 represents the first preset number of successful accesses, α represents the influence coefficient of the number of successful accesses to the network IP address used on the security level, and its value is set to 0.46, Y represents the number of successful accesses to the geographical location when the user applies for access without using the wireless network, Y0 represents the second preset number of successful accesses, and β represents the influence coefficient of the number of successful accesses to the geographical location when the wireless network is not used on the security level, and its value is set to 0.56.

[0080] In the embodiment of the present invention, the value of the preset security level G0 is the value of the security level calculated when N=N0 and Y=Y0. The first preset number of successful accesses is the number of successful accesses with the largest number of network IP addresses when the user historically applies for access using the wireless network. For example, the number of successful accesses by the user using the first IP address is 5, the number of successful accesses by the user using the second IP address is 8, and the number of successful accesses by the user using the third IP address is 10, then the first preset number of successful accesses is 10; the second preset number of successful accesses is the number of successful accesses with the largest number of geographical locations where the user historically applies for access without using the wireless network. For example, the number of successful accesses by the user at home is 10, and the number of successful accesses by the user at the company is 15, then the second preset number of successful accesses is 15.

[0081] The present invention determines the user's access level by the user's access success rate. When the user's access success rate is less than the preset access success rate, it means that the user's trustworthiness is low, so the user's access level is set to the first access level. When the user's access success rate is greater than or equal to the preset access success rate, the user's access level is determined according to the security level of the user's network environment. The above method improves the accuracy of user access level analysis and avoids the phenomenon of data outflow caused by excessive granting of user permissions.

[0082] Specifically, in step S2, when determining the data level, the data level is determined according to the comparison result of the desensitization processing ratio C of the accessed data and the preset ratio C0;

[0083] When C≥C0, determining that the data level is the third level;

[0084] When C<C0, a secondary determination is made to determine the data level.

[0085] The desensitizing processing ratio in the embodiment of the present invention is the ratio of the amount of desensitized data to the total amount of accessed data, and the value of the preset ratio is the ratio of the amount of desensitized data in the information platform to the total amount of data in the information platform, but the above value is not limited to this, and technical personnel in this field can also adjust the value according to actual needs.

[0086] Specifically, when the data level is determined for the second time, the data level is determined according to the comparison result between the data volume X of the accessed data and the preset data volume X0;

[0087] When X≥X0, determining that the data level is the second level;

[0088] When X<X0, the data level is determined to be the first level;

[0089] Among them, the value of the preset data amount X0 is half of the sum of the maximum data amount and the minimum data amount of the data applied for by the user to access the data. For example, the maximum data amount of the data applied for access by all users on the information platform is 16540 bytes, and the minimum data amount of the data applied for access by the user is 5640 bytes. Then the value of the preset data amount is 11090 bytes, but the above value is not limited to this. Technical personnel in this field can also adjust the value according to actual needs.

[0090] Specifically, the present invention determines the data level by the desensitizing processing ratio and data volume of the data on the information platform. When the desensitizing processing ratio of the data is greater than or equal to the preset ratio, it means that the amount of encrypted information is large, so the data level is the third level. When the desensitizing processing ratio of the data is less than the preset ratio, the data level is determined according to the comparison result between the data volume and the preset data volume. The above method can avoid the phenomenon of data outflow caused by users easily accessing the data due to setting the access level of data with a small data volume but a large desensitizing processing ratio too low, thereby improving the accuracy of data analysis in the platform information.

[0091] Specifically, in step S3, when determining the authentication method of the user, the authentication method is determined according to the comparison result of the user's access level D and the accessed data level D0;

[0092] When D ≥ D0, the personal identity of the authenticated user is determined;

[0093] When D<D0, the access authority of the authenticated user is determined.

[0094] The personal identity of the authenticated user in the embodiment of the present invention includes but is not limited to "face recognition, sending a verification code to the user's bound mobile phone number, and entering an account password", and the access rights of the authenticated user include but are not limited to "entering the administrator's management password to obtain permissions and sending a request to the administrator to obtain consent".

[0095] The present invention determines the authentication method for the user based on the comparison between the user's access level and the data level for which access is requested. When the access level is greater than or equal to the data level, only the user identity needs to be authenticated. When the access level is less than the data level, it is necessary to authenticate whether the user has the administrator's permission. The above method improves the accuracy of the user access level and data level analysis, thereby avoiding the occurrence of data outflow.

[0096] Specifically, in step S4, the step of determining to update the stored data in the information platform includes:

[0097] Step S41, obtaining the user's access efficiency;

[0098] Step S42, comparing the user's access efficiency with a preset access efficiency;

[0099] Step S43, determining to update the stored data in the information platform according to the comparison result that the user's access efficiency is less than the preset access efficiency.

[0100] Specifically, in step S43, it is determined to update the stored data in the information platform according to the comparison result between the user's access efficiency R and the preset access efficiency R0;

[0101] When R≥R0, it is determined that there is no need to update the stored data in the information platform;

[0102] When R<R0, it is determined to update the stored data in the information platform;

[0103] The preset access efficiency R0 is an average value of the access efficiency when several users apply to access similar data volumes, but the above value is not limited thereto, and those skilled in the art may also adjust the value according to actual needs.

[0104] The access efficiency of the user in the embodiment of the present invention is the ratio of the amount of data that the user applies for access in a single time to the corresponding single access time. For example, the amount of data that the user applies for access in a single time is 6890 bytes, and the corresponding single access time is 12562 seconds, then the preset access efficiency is 0.56, and the similar data amount includes data amounts that differ by no more than 10%, for example, a data amount of 12130 bytes and a data amount of 11545 bytes are similar data, and a data amount of 6458 bytes and a data amount of 5852 bytes are not similar data amounts. The value range of the preset access efficiency is set to 0.4-0.8, and the preset access efficiency is preferably 0.6, but the above value is not limited thereto, and those skilled in the art may also adjust the value according to actual needs.

[0105] Specifically, in step S43, when determining to update the stored data in the information platform, the step of determining the useless data includes:

[0106] Step S431, obtaining the number of accesses to the data and the storage time of the data;

[0107] Step S432, comparing the access times and storage time with corresponding preset values ​​respectively;

[0108] Step S433, determining whether the data is useless data according to the comparison result, wherein:

[0109] If the number of accesses to the data is less than the preset number of accesses, and the storage time of the data is greater than or equal to the preset storage time, the data is determined to be useless data;

[0110] If the number of accesses to the data is greater than or equal to the preset number of accesses, or the storage time of the data is less than the preset storage time, the data is determined to be used data;

[0111] Specifically, in step S433, it is determined whether the data is useless data according to the comparison result of the access times W of the data and the preset access times W0;

[0112] When W≥W0, the data is determined to be useful data;

[0113] When W<W0, a second determination is made as to whether the determined data is useless data;

[0114] Its value, the preset access count W0 is the average of the access counts of several data segments whose storage time exceeds the preset storage time in the information platform. For example, the access count of the first data segment whose storage time exceeds the preset storage time is 5, the access count of the second data segment whose storage time exceeds the preset storage time is 3, and the access count of the third data segment whose storage time exceeds the preset storage time is 1, then the preset access count is 3, but the above value is not limited to this, and technical personnel in this field can also adjust the value according to actual needs.

[0115] Specifically, in step S433, when a second determination is made as to whether the data is useless data, the data is determined to be useless data according to a comparison result between the storage time T of the data and the preset storage time T0;

[0116] When T≥T0, the data is determined to be useless data;

[0117] When T<T0, determining that the data is useful data;

[0118] Among them, the value of the preset storage time T0 is four fifths of the maximum storage time of the data in the information platform, but the above value is not limited to this, and technical personnel in this field can also adjust the value according to actual needs.

[0119] The present invention determines whether to delete useless data in the information platform based on the comparison result of the user's access efficiency with the preset access efficiency. When the user's access efficiency is less than the preset access efficiency, it means that the information platform stores too much data, resulting in slow operation speed and reducing the user's access efficiency. The present invention determines whether the data is useless data based on the number of times the data is accessed and the storage time of the data. The above method avoids the phenomenon of low user access efficiency caused by the long storage time of information on the information platform and the small number of accesses, thereby occupying space, thereby improving the accuracy of user access level and data level analysis.

[0120] Specifically, in step S5, when analyzing the data on the information platform, the adjustment amount of the judgment parameter for useless data in the data governance process and the judgment parameter for the user access level are determined according to the comparison result of the user's access qualification evaluation value after deleting useless data and the preset qualification evaluation value;

[0121] The determination parameters of useless data include a preset success rate and a preset security level, and the determination parameters of user access level include a preset access efficiency.

[0122] Specifically, in step S5, the adjustment amount of the judgment parameter for useless data and the judgment parameter for the user access level is determined according to the comparison result of the user's access qualification evaluation value H after deleting useless data and the preset qualification evaluation value H0;

[0123] When H≥H0, it is determined that there is no need to adjust the judgment parameters;

[0124] When H<H0, it is determined that the judgment parameter needs to be adjusted.

[0125] Specifically, the access qualification evaluation value G is calculated by the following formula:

[0126]

[0127] Among them, D0 represents the amount of data obtained when the user applies for access before deleting useless data, D represents the amount of data obtained when the user applies for access after deleting useless data, U represents the number of times the user is forcibly disconnected during the access process, and U0 represents the preset number of forced disconnections, whose value is the historical average number of times the user is forcibly disconnected after deleting useless data, but the above values ​​are not limited to this, and technical personnel in this field can also adjust the values ​​according to actual needs.

[0128] Specifically, the present invention determines the user's access eligibility based on the difference in the amount of data accessed by the user before and after deleting useless data and the number of times the user is forcibly disconnected by the platform, thereby avoiding the phenomenon of accidental deletion of the user's access data when deleting useless data and misjudgment of the user's access level leading to information leakage.

[0129] Specifically, in step S5, when it is determined that the judgment parameter needs to be adjusted, the adjustment method is determined according to the comparison result between the information outflow frequency L and the preset outflow frequency L0;

[0130] When L≥L0, determining to adjust the preset success rate and the preset safety level by a first adjustment coefficient K1;

[0131] When L<L0, determine to adjust the preset access efficiency by a second adjustment coefficient K2;

[0132] Among them, the value of the preset outflow frequency L0 is the ratio of the number of data outflows from the information platform within a period to the period length. For example, if the number of data outflows from the information platform within the period is 3 times and the period length is 30 days, the outflow frequency is 0.1. The value range of the preset outflow frequency in the embodiment of the present invention is set to 0-0.25, and the preset outflow frequency is preferably 0.1, but the above value is not limited to this, and technical personnel in this field can also adjust the value according to actual needs.

[0133] Specifically, the first adjustment coefficient K1 is calculated and set by the following formula:

[0134] K1=1+log2(L-L0+1.05);

[0135] The second adjustment coefficient K2 is calculated and set by the following formula:

[0136] K2 = log2 (L0 - L + 1.6);

[0137] The adjusted preset success rate B0' is set to B0'=K1×B0;

[0138] The adjusted preset safety level G0' is set to G0'=K1×G0;

[0139] The adjusted preset access efficiency R0' is set to R0'=K2×R0.

[0140] The present invention determines the adjustment method for the data governance process according to the comparison result of the information outflow frequency and the preset outflow frequency. When the outflow frequency is greater than or equal to the preset outflow frequency, it means that the user leaks the accessed data to other platforms. At this time, the judgment parameter of the user's access level is increased by the first adjustment coefficient, which increases the difficulty of improving the user's access level to reduce the data outflow frequency. When the outflow frequency is less than the preset outflow frequency, it means that the data accessed by the user is incomplete. At this time, the judgment parameter for deleting useless data is reduced by the second adjustment coefficient to improve the integrity of the data. The above method improves the accuracy of data governance process control.

[0141] See also Figure 4 As shown, Figure 4 It is a structural diagram of the data governance system of the information platform according to an embodiment of the present invention.

[0142] The embodiment of the present invention further provides a system for the data governance method applied to the information platform, which is used to execute the data governance method of the information platform, and the system includes:

[0143] Data acquisition module, which is used to obtain user personal data, platform data and user access data;

[0144] A data analysis module, which is connected to the data acquisition module and is used to determine the user's access level based on the user's access success rate and the security level of the network environment in which the user is located when applying for access;

[0145] An authentication module, which is connected to the data analysis module and is used to determine an authentication method according to the user's access level and the data level that the user applies to access, wherein the authentication method includes authenticating the user's personal identity or authenticating the user's access rights;

[0146] An information cycle management module, which is connected to the authentication module, and is used to determine whether to update the stored data in the information platform according to the access efficiency of the user who currently applies to access the data on the information platform, the number of accesses to the data in the information platform, and the storage time of the data in the information platform, wherein the update includes deleting useless data;

[0147] The adjustment module is connected to the information cycle management module and is used to determine the adjustment amount of the judgment parameters of useless data in the data governance process and the judgment parameters of the user access level according to the user's access qualification evaluation value after deleting useless data.

[0148] The user personal information in the embodiment of the present invention includes but is not limited to "user account, password and bound mobile phone number", the platform information includes but is not limited to "platform information, number of platform information accesses and platform running time", and the user access information includes but is not limited to "number of user accesses, user access success rate and user access efficiency".

[0149] So far, the technical solutions of the present invention have been described in conjunction with the preferred embodiments shown in the accompanying drawings. However, it is easy for those skilled in the art to understand that the protection scope of the present invention is obviously not limited to these specific embodiments. Without departing from the principle of the present invention, those skilled in the art can make equivalent changes or substitutions to the relevant technical features, and the technical solutions after these changes or substitutions will fall within the protection scope of the present invention.

[0150] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A data governance method for an information platform, characterized in that: include: When a user applies to the information platform for access to data, the user's access level is determined based on the user's access success rate and the security level of the network environment in which the user is located when applying for access; Determine the data level based on the amount of accessed data and the desensitization ratio of the accessed data; Determine the authentication method according to the user's access level and the data level that the user applies to access, wherein the authentication method includes authenticating the user's personal identity or authenticating the user's access rights; Determining to update the stored data in the information platform according to the access efficiency of the user who currently applies to access the data on the information platform, the number of accesses to the data in the information platform, and the storage time of the data in the information platform, wherein the updating includes deleting useless data; Periodically obtain the amount of data obtained when users apply for access before deleting useless data, the amount of data obtained when users apply for access after deleting useless data, and the number of times users are forcibly disconnected during access, and analyze the data on the information platform. According to the user's access qualification evaluation value after deleting useless data, determine the adjustment amount of the judgment parameters for useless data in the data governance process and the judgment parameters for user access levels; When determining a user's access level, include: Determine the user's access level based on a comparison result of the user's historical access success rate and a preset success rate; Determine the user's access level based on the comparison result of the user's historical access success rate with the preset success rate and the comparison result of the security level of the network environment in which the user is located when applying for access with the preset security level; The security level of the network environment in which the user is located when applying for access is determined based on the number of successful accesses to the network IP address when the user applies for access using the wireless network and the number of successful accesses to the geographical location in which the user is located when applying for access without using the wireless network; When determining the user's authentication method, include: Determine the personal identity of the authenticated user based on the comparison result that the user's access level is greater than or equal to the accessed data level; Determine the access rights of the authenticated user based on the comparison result that the user's access level is less than the accessed data level; The steps of determining to update the stored data in the information platform include: Obtain user access efficiency; Compare the user's access efficiency with the preset access efficiency; Determining to update the stored data in the information platform according to the comparison result that the user's access efficiency is less than the preset access efficiency; When updating the stored data in the information platform, the step of determining the useless data includes: Obtaining the number of times the data has been accessed and the storage time of the data; The access times and storage time are compared with corresponding preset values ​​respectively; Determine whether the data is useless data according to the comparison result, wherein: If the number of accesses to the data is less than the preset number of accesses, and the storage time of the data is greater than or equal to the preset storage time, the data is determined to be useless data; The access efficiency is determined according to the ratio of the amount of data requested for access by the user to the access duration.

2. The data governance method of the information platform according to claim 1 is characterized in that: When analyzing the data on the information platform, the adjustment amount of the judgment parameters for useless data in the data governance process and the judgment parameters for the user access level are determined based on the comparison result of the user's access qualification evaluation value after deleting useless data and the preset qualification evaluation value, wherein the judgment parameters for useless data include a preset success rate and a preset security level, and the judgment parameters for the user access level include a preset access efficiency.

3. The data governance method of the information platform according to claim 2 is characterized in that: The adjustment amount of the useless data determination parameter is positively correlated with the frequency of information outflow; The adjustment amount of the determination parameter of the user access level is negatively correlated with the frequency of information outflow; The information outflow frequency is determined according to the ratio of the number of data outflows from the information platform to the cycle length.

4. A system for the data governance method of the information platform according to any one of claims 1 to 3, characterized in that: include: Data acquisition module, which is used to obtain user personal data, platform data and user access data; A data analysis module, which is connected to the data acquisition module and is used to determine the user's access level based on the user's access success rate and the security level of the network environment in which the user is located when applying for access; An authentication module, which is connected to the data analysis module and is used to determine an authentication method according to the user's access level and the data level that the user applies to access, wherein the authentication method includes authenticating the user's personal identity or authenticating the user's access rights; An information cycle management module, which is connected to the authentication module, and is used to determine whether to update the stored data in the information platform according to the access efficiency of the user who currently applies to access the data on the information platform, the number of accesses to the data in the information platform, and the storage time of the data in the information platform, wherein the update includes deleting useless data; The adjustment module is connected to the information cycle management module and is used to determine the adjustment amount of the judgment parameters of useless data in the data governance process and the judgment parameters of the user access level according to the user's access qualification evaluation value after deleting useless data.

Images