Risk identification and monitoring system for sensitive content and method thereof

Abstract

The present disclosure relates to a risk identification and monitoring system for sensitive content and a method thereof, and belongs to the technical field of information management. The system includes a data sending terminal, a server and a data receiving terminal, and the server is configured to: receive first information sent by the data sending terminal and a sending request indicating that the first information is sent to the data receiving terminal; extract a first part of the first information according to information features of the first information in response to the sending request; input the first part into a corresponding recognition model according to a preset mapping relationship to obtain sensitive content in the first part; determine a first object matching the sensitive content through a preset content library; determine a first risk level set by the data receiving terminal for the first object; and when the first risk level is less than a first set threshold, encrypt the first part of the first information and send the encrypted first information to the data receiving terminal.

Description

Technical Field

[0001] The embodiments of the present disclosure relate to the technical field of information management, and more specifically, to a risk identification and monitoring system for sensitive content and a method thereof. Background Art

[0002] With the rapid development of science and technology, enterprise information security is particularly important. At present, for enterprise information security, enterprise staff can usually configure communication software on the smart terminals they use to communicate through the enterprise intranet, and staff can send photos, videos or text and other information through the communication software. Because some information needs to be kept confidential for staff in some departments, staff need to determine whether the information is confidential when communicating with other staff, which affects the work efficiency of staff. Summary of the invention

[0003] One purpose of the embodiments of the present disclosure is to provide a new technical solution for risk identification and monitoring of sensitive content.

[0004] According to a first aspect of the present disclosure, there is provided a risk identification and monitoring system for sensitive content, the system comprising a data sending terminal, a server and a data receiving terminal, the server being communicatively connected to the data sending terminal and the data receiving terminal respectively;

[0005] The server is configured to: receive the first information sent by the data sending terminal and a sending request indicating that the first information is sent to the data receiving terminal; in response to the sending request, extract the first part of the first information according to the information characteristics of the first information; input the first part into the corresponding recognition model according to a preset mapping relationship to obtain the sensitive content in the first part; wherein different parts correspond to different recognition models; determine the first object matching the sensitive content through a preset content library; determine the first risk level set by the data receiving terminal for the first object; when the first risk level is less than a first set threshold, encrypt the first part of the first information and send the encrypted first information to the data receiving terminal.

[0006] Optionally, the server is further configured to: when the first risk level is greater than or equal to the first set threshold, determine a first area in the first part corresponding to the first object, establish a first link between the parameter information about the first object in the content library and the first area; and send the first information and the first link to the data receiving terminal;

[0007] The data receiving terminal is configured to: receive the first information and the first link; in response to a triggering operation on the first area, obtain parameter information of the first object according to the first link; and display the parameter information of the first object.

[0008] Optionally, the sending request further indicates a sending time of sending the first information to the data receiving terminal;

[0009] In which, the server is configured to: obtain a first user identifier associated with the data receiving terminal; determine a risk level set corresponding to the first user identifier; wherein different risk levels in the risk level set correspond to different times; determine the risk level in the risk level set corresponding to the sending time, and use it as the first risk level.

[0010] Optionally, the system further comprises a data distribution terminal and a display device, and the server is communicatively connected to the data distribution terminal and the display device respectively;

[0011] The server is configured to: receive a first display task sent by the data publishing terminal; wherein the first display task is to instruct the second object to be displayed on the display device; determine the second parameter information of the second object through the content library; determine whether the first area identifier associated with the display device exists in the area identifier associated with the second object; if the first area identifier exists, determine the second risk level set by the data publishing terminal for the second object; when the second risk level is greater than or equal to a second set threshold, send the second parameter information to the display device so that the display device displays the second parameter information; when the second risk level is less than the second set threshold, determine the second part of the second parameter information that complies with the encryption matter corresponding to the second risk level, encrypt the second part of the second parameter information, and send the encrypted second parameter information to the display device.

[0012] According to a second aspect of the present disclosure, a method for risk identification and monitoring of sensitive content is further provided. The execution subject of the method is the server described in the first aspect, and the server is respectively connected to the data sending terminal and the data receiving terminal for communication. The method includes:

[0013] receiving first information sent by the data sending terminal and a sending request instructing the first information to be sent to the data receiving terminal;

[0014] In response to the sending request, extracting a first part of the first information according to information characteristics of the first information;

[0015] According to a preset mapping relationship, the first part is input into a corresponding recognition model to obtain sensitive content in the first part; wherein different parts correspond to different recognition models;

[0016] Determining, through a preset content library, a first object matching the sensitive content;

[0017] determining a first risk level set by the data receiving terminal for the first object;

[0018] When the first risk level is less than a first set threshold, the first part of the first information is encrypted, and the encrypted first information is sent to the data receiving terminal.

[0019] Optionally, after determining the first risk level set by the data receiving terminal for the first object, the method further includes:

[0020] When the first risk level is greater than or equal to the first set threshold, determining a first area in the first part corresponding to the first object, and establishing a first link between first parameter information about the first object in the content library and the first area;

[0021] The first information and the first link are sent to the data receiving terminal so that the data receiving terminal receives the first information and the first link; in response to a trigger operation on the first area, first parameter information of the first object is acquired according to the first link; and the first parameter information of the first object is displayed.

[0022] Optionally, the sending request further indicates a sending time of sending the first information to the data receiving terminal; and determining a first risk level set by the data receiving terminal for the first object includes:

[0023] Obtaining a user identifier associated with the data receiving terminal;

[0024] Determine a risk level set corresponding to the user identifier; wherein different risk levels in the risk level set correspond to different times;

[0025] A risk level in the risk level set corresponding to the sending time is determined and used as the first risk level.

[0026] Optionally, the server is communicatively connected to the data distribution terminal and the display device respectively, and the method further comprises:

[0027] receiving a first display task sent by the data publishing terminal; wherein the first display task is to instruct the second object to be displayed on the display device;

[0028] Determine the second parameter information of the second object through the content library; determine whether the first area identifier associated with the display device exists in the area identifier associated with the second object;

[0029] In the case where the first area identifier exists, determining a second risk level set by the data publishing terminal for the second object;

[0030] When the second risk level is greater than or equal to a second set threshold, sending the second parameter information to the display device so that the display device displays the second parameter information;

[0031] When the second risk level is less than the second set threshold, according to the encryption matter corresponding to the second risk level, the second part of the second parameter information that complies with the encryption matter is determined, the second part of the second parameter information is encrypted, and the encrypted second parameter information is sent to the display device.

[0032] According to a third aspect of the present disclosure, a risk identification and monitoring device for sensitive content is also provided, the device comprising:

[0033] a request receiving module, configured to receive first information sent by the data sending terminal and a sending request instructing the first information to be sent to the data receiving terminal;

[0034] an information extraction module, configured to extract, in response to the sending request, a first part of the first information according to information features of the first information;

[0035] A content obtaining module, used for inputting the first part into a corresponding recognition model according to a preset mapping relationship to obtain sensitive content in the first part; wherein different parts correspond to different recognition models;

[0036] An object determination module, configured to determine a first object matching the sensitive content through a preset content library;

[0037] a level determination module, configured to determine a first risk level set by the data receiving terminal for the first object;

[0038] The encryption processing module is used to encrypt the first part of the first information when the first risk level is less than a first set threshold, and send the encrypted first information to the data receiving terminal.

[0039] According to a fourth aspect of the present disclosure, a server is further provided, comprising a memory and a processor, wherein the memory is used to store a computer program; and the processor is used to execute the computer program to implement the method according to the second aspect of the present disclosure.

[0040] According to a fifth aspect of the present disclosure, a computer-readable storage medium is further provided, on which a computer program is stored. When the computer program is executed by a processor, the method according to the second aspect of the present disclosure is implemented.

[0041] According to a sixth aspect of the present disclosure, a computer program product is further provided, comprising a computer program, wherein when the computer program is executed by a processor, the method according to the second aspect of the present disclosure is implemented.

[0042] One beneficial effect of the disclosed embodiment is that the server of the risk identification and monitoring system for sensitive content provided by the present invention can identify the sensitive content in the first information of the data sending terminal and determine the first object that matches the sensitive content. When the first risk level of the data receiving terminal is less than the first set threshold, the first part of the first information can be encrypted so that the encrypted first information can be sent to the data receiving terminal without the need for the staff to identify whether the first information is confidential. Moreover, if the first information is confidential, the first information is encrypted and sent to other staff, which effectively improves the work efficiency of the staff.

[0043] Other features and advantages of the embodiments of the present disclosure will become apparent from the following detailed description of exemplary embodiments of the present disclosure with reference to the accompanying drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0044] The accompanying drawings, which are incorporated in and constitute a part of the specification, illustrate embodiments of the present disclosure and, together with the description, serve to explain the principles of the embodiments of the present disclosure.

[0045] Figure 1 is a schematic diagram of the structure of a risk identification and monitoring system for sensitive content according to an embodiment;

[0046] Figure 2 is a flowchart of a method for risk identification and monitoring of sensitive content according to an embodiment;

[0047] Figure 3 is a schematic diagram of first information according to an embodiment;

[0048] Figure 4 is a block diagram of a risk identification and monitoring device for sensitive content according to an embodiment;

[0049] Figure 5is a schematic diagram of the hardware structure of an electronic device according to an embodiment. DETAILED DESCRIPTION

[0050] Various exemplary embodiments of the present disclosure will now be described in detail with reference to the accompanying drawings. It should be noted that the relative arrangement of parts and steps, numerical expressions and numerical values ​​set forth in these embodiments do not limit the scope of the present invention unless otherwise specifically stated.

[0051] The following description of at least one exemplary embodiment is merely illustrative in nature and is in no way intended to limit the invention, its application, or uses.

[0052] Technologies, methods, and equipment known to ordinary technicians in the relevant art may not be discussed in detail, but where appropriate, the technologies, methods, and equipment should be considered as part of the specification.

[0053] In all examples shown and discussed herein, any specific values ​​should be interpreted as merely exemplary and not limiting. Therefore, other examples of the exemplary embodiments may have different values.

[0054] It should be noted that like reference numerals and letters refer to similar items in the following figures, and therefore, once an item is defined in one figure, it need not be further discussed in subsequent figures.

[0055] <System Embodiment>

[0056] Figure 1 FIG. 1 is a schematic diagram of the structure of a risk identification and monitoring system for sensitive content that can be applied according to an embodiment. Figure 1 As shown, the risk identification and monitoring system for sensitive content may include a data sending terminal 10, a server 20 and a data receiving terminal 30, and the server 20 is communicatively connected with the data sending terminal 10 and the data receiving terminal 30 respectively;

[0057] Among them, the server 20 is configured to: receive the first information sent by the data sending terminal 10 and the sending request indicating that the first information is sent to the data receiving terminal 30; in response to the sending request, extract the first part of the first information according to the information characteristics of the first information; according to the preset mapping relationship, input the first part into the corresponding recognition model to obtain the sensitive content in the first part; wherein different parts correspond to different recognition models; determine the first object matching the sensitive content through the preset content library; determine the first risk level set for the first object by the data receiving terminal 30; when the first risk level is less than the first set threshold, encrypt the first part of the first information and send the encrypted first information to the data receiving terminal 30.

[0058] In the present application, the data transmission terminal 10 is, for example, a mobile phone, a personal computer, or other device that can communicate with the server 20 through an intranet, which is not limited here. A user holding the data transmission terminal 10 can manipulate the data transmission terminal 10 to send the first information to the data receiving terminal 30 in the form of sending an email, sending a message in a chat box of a communication software, etc. After the data transmission terminal 10 sends the first information, the first information can be sent to the server 20 and indicate that the first signal needs to be sent to the data receiving terminal 30. The first information can include text, pictures, or videos, which is not limited here.

[0059] In the present application, information features can be divided into text features and image features. When some contents of the first information meet the text features, these contents are extracted and combined into a text part. When some contents of the first information meet the image features, these contents are extracted and combined into an image part. That is, the first part can be a text part and / or an image part.

[0060] In the present application, the recognition model may include a text recognition model and an image recognition model. The text recognition model can be trained based on a text sample set, and can recognize parameter information such as the size, operating temperature, operating voltage, and built-in logic code of the company's products, and basic information such as the staff's work number and name. The image recognition model can be trained based on an image sample set, and can recognize images of various company products, production equipment, and built-in logic codes.

[0061] In this application, the content library can store parameter information and images of specific enterprise products, where the specific enterprise product is the first object. For example, the sensitive content is a size of 8×3.2×2mm, and the parameter information of the specific enterprise product A is 8×2×3.2, then it can be determined that the sensitive content matches the specific enterprise product A. For another example, the sensitive content is an image of a "circular" bracket, and the image of the specific enterprise product B includes a "circular" bracket, then it can be determined that the sensitive content matches the specific enterprise product B.

[0062] In the present application, the data receiving terminal 30 is, for example, a mobile phone, a personal computer, or other device that can communicate with the server 20 through an intranet, and is not limited here.

[0063] In this application, different staff members hold corresponding terminals, different terminals can correspond to different user identifiers, and each user identifier can correspond to a different risk level. For example, for a specific enterprise product C, the risk level corresponding to staff member P1 in the first factory is 2, and the risk level corresponding to staff member P2 in the second factory is 1.

[0064] In some examples, the first object is a specific enterprise product D, the first set threshold is, for example, 2, and the first risk level is, for example, 1. Then, when the first part of the first information is a text part, the text of the first part can be replaced with the character "X", and the first information with the replaced character is sent to the data receiving terminal 30. When the first part of the first information is an image part, the image of the first part can be coded, and the coded first information is sent to the data receiving terminal 30.

[0065] In other words, when the first risk level of the data receiving terminal 30 is less than the first set threshold, the first part of the first information can be encrypted so that the encrypted first information can be sent to the data receiving terminal 30 without the need for staff to identify whether the first information is confidential. In addition, if the first information is confidential, the first information can be encrypted and sent to other staff members, which effectively improves the work efficiency of the staff.

[0066] In some embodiments, the server 20 is further configured to: when the first risk level is greater than or equal to a first set threshold, determine a first area corresponding to the first object in the first part, establish a first link between the parameter information about the first object in the content library and the first area; and send the first information and the first link to the data receiving terminal 30;

[0067] The data receiving terminal 30 is configured to: receive first information and a first link; in response to a trigger operation on the first area, obtain parameter information of the first object according to the first link; and display the parameter information of the first object.

[0068] In the present application, the content library stores parameter information about a specific enterprise product and images of the specific enterprise product.

[0069] In some examples, such as Figure 3 As shown, the first object is, for example, a specific enterprise product F, and the first area is area K1. The server 20 can establish a first link F1, so that the user can click on the label of area K1 or the first link F1, that is, the data receiving terminal 30 receives the trigger operation of the first area, and the parameter information about the product F can be displayed on the display interface of the data receiving terminal 30.

[0070] In other words, by setting the first link, the user holding the data receiving terminal 30 can obtain more detailed parameter information about the first object, thereby improving the user experience.

[0071] In some embodiments, the sending request also indicates the sending time of the first information to the data receiving terminal 30;

[0072] Among them, the server 20 is configured to: obtain the first user identifier associated with the data receiving terminal 30; determine the risk level set corresponding to the first user identifier; wherein different risk levels in the risk level set correspond to different times; determine the risk level corresponding to the sending time in the risk level set, and use it as the first risk level.

[0073] In some examples, the sending time is, for example, August 10, and the risk level set is, for example, [<8.1, 1; >8.1, 2]. The risk level set may indicate that the risk level corresponding to the first user identifier on and before August 1 is 1, and the risk level corresponding to after August 1 is 2.

[0074] In other words, since some specific enterprise products need to be encrypted before they are put on the market, after they are put on the market, the parameter information of these specific enterprise products can be viewed by the staff of each factory area. Therefore, by setting a risk level set, the confidentiality of enterprise products within the confidentiality period can be achieved.

[0075] In some embodiments, the system further includes a data distribution terminal 40 and a display device 50, and the server 20 is communicatively connected to the data distribution terminal and the display device 50 respectively;

[0076] Among them, the server 20 is configured to: receive a first display task sent by the data release terminal 40; wherein the first display task is to instruct the second object to be displayed on the display device 50; determine the second parameter information of the second object through the content library; determine whether the first area identifier associated with the display device 50 exists in the area identifier associated with the second object; when the first area identifier exists, determine the second risk level set for the second object by the data release terminal 40; when the second risk level is greater than or equal to the second set threshold, send the second parameter information to the display device 50, so that the display device 50 displays the second parameter information; when the second risk level is less than the second set threshold, determine the second part of the second parameter information that complies with the encryption matter corresponding to the second risk level, encrypt the second part of the second parameter information, and send the encrypted second parameter information to the display device 50.

[0077] In the present application, the data publishing terminal 40 is, for example, a mobile phone, a personal computer, or other device that can communicate with the server 20 through an intranet, and is not limited here.

[0078] In the present application, the display device 50 is, for example, a display screen, a projector, a personal computer, or other device that can communicate with the server 20 through an intranet, and is not limited here.

[0079] In some examples, the regional identifiers of plant areas 1 to 5 are identifiers M1-M5, the second object is a specific enterprise product G, product G is associated with identifiers M1, M3 and M5, the display device 50J is a display device 50 of a plant area, and the server 20 can pre-set the display device 50J to be associated with the identifier M1 of a plant area, that is, to determine that the identifier M1 associated with the display device 50J exists in the regional identifier associated with product G. Among them, the second risk level set by the data publishing terminal 40 for the second object can be pre-set, for example, the second risk level is 2, and the second set threshold is 2, then the server 20 can directly send the second parameter information to the display device 50J.

[0080] In other words, it is first determined whether the first area identifier associated with the display device 50 exists in the area identifier associated with the second object, and then whether the second risk level is less than the second set threshold, thereby effectively reducing the computing resources occupied by the server 20 for encryption processing.

[0081] As used in the embodiments of the present disclosure, the memory of the server 20 is used to store a computer program, which is used to control the processor of the server 20 to operate according to the risk identification and monitoring method of sensitive content in any embodiment. A technician can design a computer program according to the scheme of the embodiments of the present disclosure. How the computer program controls the processor to operate is well known in the art, so it will not be described in detail here.

[0082] <Method Example>

[0083] Figure 2 The present invention is a flowchart of a method for risk identification and monitoring of sensitive content according to an embodiment of the present invention. The implementation subject is a server.

[0084] like Figure 2 As shown, the risk identification and monitoring method for sensitive content in this embodiment may include the following steps S210 to S260:

[0085] Step S210: receiving first information sent by a data sending terminal and a sending request instructing the first information to be sent to a data receiving terminal.

[0086] Step S220, in response to the sending request, extracting the first part of the first information according to the information feature of the first information.

[0087] Step S230, according to a preset mapping relationship, input the first part into a corresponding recognition model to obtain sensitive content in the first part; wherein different parts correspond to different recognition models.

[0088] Step S240: Determine the first object matching the sensitive content through a preset content library.

[0089] Step S250: determining a first risk level set by the data receiving terminal for the first object.

[0090] In some embodiments, step S250 may include the following steps S2501 to S2503:

[0091] Step S2501: Acquire a user identifier associated with a data receiving terminal.

[0092] Step S2502, determining a risk level set corresponding to the user identifier; wherein different risk levels in the risk level set correspond to different times.

[0093] Step S2503: determine the risk level corresponding to the sending time in the risk level set and use it as the first risk level.

[0094] Step S260: When the first risk level is less than the first set threshold, encrypt the first part of the first information, and send the encrypted first information to the data receiving terminal.

[0095] In some embodiments, after step S250, the method further includes the following steps S270 and S280:

[0096] Step S270: When the first risk level is greater than or equal to the first set threshold, determine a first area corresponding to the first object in the first part, and establish a first link between first parameter information about the first object in the content library and the first area.

[0097] Step S280, sending the first information and the first link to the data receiving terminal, so that the data receiving terminal receives the first information and the first link; in response to the triggering operation on the first area, obtaining the first parameter information of the first object according to the first link; and displaying the first parameter information of the first object.

[0098] In some embodiments, the method further includes the following steps S310 to S350:

[0099] Step S310, receiving a first display task sent by a data publishing terminal; wherein the first display task is to instruct a second object to be displayed on a display device.

[0100] Step S320: determining second parameter information of the second object through the content library; and determining whether the first area identifier associated with the display device exists in the area identifier associated with the second object.

[0101] Step S330: When the first area identifier exists, determine the second risk level set by the data publishing terminal for the second object.

[0102] Step S340: When the second risk level is greater than or equal to the second set threshold, the second parameter information is sent to the display device so that the display device displays the second parameter information.

[0103] Step S350, when the second risk level is less than the second set threshold, determine the second part of the second parameter information that complies with the encryption matter according to the encryption matter corresponding to the second risk level, encrypt the second part of the second parameter information, and send the encrypted second parameter information to the display device.

[0104] <Equipment Example 1>

[0105] Figure 4 FIG. 1 is a block diagram of a device for risk identification and monitoring of sensitive content according to an embodiment. Figure 4 As shown, the risk identification and monitoring device 300 for sensitive content may include:

[0106] The request receiving module 310 is used to receive the first information sent by the data sending terminal and the sending request indicating that the first information is sent to the data receiving terminal;

[0107] The information extraction module 320 is used to extract the first part of the first information according to the information feature of the first information in response to the sending request;

[0108] The content obtaining module 330 is used to input the first part into the corresponding recognition model according to the preset mapping relationship to obtain the sensitive content in the first part; wherein different parts correspond to different recognition models;

[0109] The object determination module 340 is used to determine the first object matching the sensitive content through a preset content library;

[0110] The level determination module 350 is used to determine the first risk level set by the data receiving terminal for the first object;

[0111] The encryption processing module 360 ​​is used to encrypt the first part of the first information when the first risk level is less than the first set threshold, and send the encrypted first information to the data receiving terminal.

[0112] Optionally, the risk identification and monitoring device 300 for sensitive content also includes a link sending module, which is used to determine the first area corresponding to the first object in the first part when the first risk level is greater than or equal to a first set threshold, and establish a first link between the first parameter information about the first object in the content library and the first area; send the first information and the first link to the data receiving terminal, so that the data receiving terminal receives the first information and the first link; in response to a trigger operation on the first area, obtain the first parameter information of the first object according to the first link; and display the first parameter information of the first object.

[0113] Optionally, the level determination module 350 is also used to obtain a user identifier associated with the data receiving terminal; determine a risk level set corresponding to the user identifier; wherein different risk levels in the risk level set correspond to different times; determine the risk level corresponding to the sending time in the risk level set, and use it as the first risk level.

[0114] Optionally, the risk identification and monitoring device 300 for sensitive content also includes a task receiving module, which is used to receive a first display task sent by a data publishing terminal; wherein the first display task is to instruct the second object to be displayed on the display device; determine the second parameter information of the second object through the content library; determine whether the first area identifier associated with the display device exists in the area identifier associated with the second object; if the first area identifier exists, determine the second risk level set for the second object by the data publishing terminal; when the second risk level is greater than or equal to the second set threshold, send the second parameter information to the display device so that the display device displays the second parameter information; when the second risk level is less than the second set threshold, determine the second part of the second parameter information that complies with the encryption matter corresponding to the second risk level, encrypt the second part of the second parameter information, and send the encrypted second parameter information to the display device.

[0115] <Equipment Example 2>

[0116] Figure 5 is a schematic diagram of the hardware structure of an electronic device according to another embodiment.

[0117] like Figure 5 As shown, the electronic device 400 includes a processor 410 and a memory 420, wherein the memory 420 is used to store an executable computer program, and the processor 410 is used to execute a method such as any of the above method embodiments under the control of the computer program.

[0118] Each module of the above-mentioned risk identification and monitoring device 300 for sensitive content may be implemented by the processor 410 in this embodiment executing a computer program stored in the memory 420, or may be implemented by other structures, which are not limited here.

[0119] The present invention may be a system, a method and / or a computer program product. The computer program product may include a computer-readable storage medium carrying computer-readable program instructions for causing a processor to implement various aspects of the present invention.

[0120] A computer-readable storage medium may be a tangible device that can hold and store instructions used by an instruction execution device. A computer-readable storage medium may be, for example, but not limited to, an electrical storage device, a magnetic storage device, an optical storage device, an electromagnetic storage device, a semiconductor storage device, or any suitable combination of the above. More specific examples (a non-exhaustive list) of computer-readable storage media include: a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), a static random access memory (SRAM), a portable compact disk read-only memory (CD-ROM), a digital versatile disk (DVD), a memory stick, a floppy disk, a mechanical encoding device, such as a punch card or a raised structure in a groove on which instructions are stored, and any suitable combination of the above. The computer-readable storage medium used herein is not to be interpreted as a transient signal itself, such as a radio wave or other freely propagating electromagnetic wave, an electromagnetic wave propagating through a waveguide or other transmission medium (e.g., a light pulse through a fiber optic cable), or an electrical signal transmitted through a wire.

[0121] The computer-readable program instructions described herein can be downloaded from a computer-readable storage medium to each computing / processing device, or downloaded to an external computer or external storage device via a network, such as the Internet, a local area network, a wide area network, and / or a wireless network. The network can include copper transmission cables, optical fiber transmissions, wireless transmissions, routers, firewalls, switches, gateway computers, and / or edge servers. The network adapter card or network interface in each computing / processing device receives the computer-readable program instructions from the network and forwards the computer-readable program instructions for storage in the computer-readable storage medium in each computing / processing device.

[0122] The computer program instructions for performing the operation of the present invention may be assembly instructions, instruction set architecture (ISA) instructions, machine instructions, machine-dependent instructions, microcode, firmware instructions, state setting data, or source code or object code written in any combination of one or more programming languages, including object-oriented programming languages, such as Smalltalk, C++, etc., and conventional procedural programming languages, such as "C" language or similar programming languages. The computer-readable program instructions may be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer, partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., using an Internet service provider to connect through the Internet). In some embodiments, by using the state information of the computer-readable program instructions to personalize an electronic circuit, such as a programmable logic circuit, a field programmable gate array (FPGA), or a programmable logic array (PLA), the electronic circuit may execute the computer-readable program instructions, thereby implementing various aspects of the present invention.

[0123] Various aspects of the present invention are described herein with reference to the flowcharts and / or block diagrams of the methods, devices (systems) and computer program products according to embodiments of the present invention. It should be understood that each box of the flowchart and / or block diagram and the combination of the boxes in the flowchart and / or block diagram can be implemented by computer-readable program instructions.

[0124] These computer-readable program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, thereby producing a machine, so that when these instructions are executed by the processor of the computer or other programmable data processing device, a device that implements the functions / actions specified in one or more boxes in the flowchart and / or block diagram is generated. These computer-readable program instructions can also be stored in a computer-readable storage medium, and these instructions cause the computer, programmable data processing device, and / or other equipment to work in a specific manner, so that the computer-readable medium storing the instructions includes a manufactured product, which includes instructions for implementing various aspects of the functions / actions specified in one or more boxes in the flowchart and / or block diagram.

[0125] Computer-readable program instructions may also be loaded onto a computer, other programmable data processing apparatus, or other device so that a series of operating steps are performed on the computer, other programmable data processing apparatus, or other device to produce a computer-implemented process, thereby causing the instructions executed on the computer, other programmable data processing apparatus, or other device to implement the functions / actions specified in one or more boxes in the flowchart and / or block diagram.

[0126] The flow charts and block diagrams in the accompanying drawings show the possible architecture, functions and operations of the systems, methods and computer program products according to multiple embodiments of the present invention. In this regard, each box in the flow chart or block diagram can represent a part of a module, a program segment or an instruction, and a part of the module, a program segment or an instruction contains one or more executable instructions for realizing the specified logical function. In some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two consecutive boxes can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram and / or flow chart, and the combination of the boxes in the block diagram and / or flow chart can be implemented by a dedicated hardware-based system that performs the specified function or action, or can be implemented by a combination of dedicated hardware and computer instructions. It is well known to those skilled in the art that it is equivalent to implement it by hardware, implement it by software, and implement it by combining software and hardware.

[0127] Embodiments of the present invention have been described above, and the above description is exemplary, not exhaustive, and is not limited to the disclosed embodiments. Many modifications and variations will be apparent to those of ordinary skill in the art without departing from the scope and spirit of the described embodiments. The selection of terms used herein is intended to best explain the principles of the embodiments, practical applications, or technical improvements in the marketplace, or to enable other persons of ordinary skill in the art to understand the embodiments disclosed herein. The scope of the present invention is defined by the appended claims.

Claims

1. A risk identification and monitoring system for sensitive content, characterized in that: The system comprises a data sending terminal, a server and a data receiving terminal, wherein the server is communicatively connected with the data sending terminal and the data receiving terminal respectively; The server is configured to: receive the first information sent by the data sending terminal and a sending request indicating that the first information is sent to the data receiving terminal; in response to the sending request, extract the first part of the first information according to the information characteristics of the first information; input the first part into the corresponding recognition model according to a preset mapping relationship to obtain sensitive content in the first part; wherein different parts correspond to different recognition models; determine the first object matching the sensitive content through a preset content library; determine the first risk level set by the data receiving terminal for the first object; when the first risk level is less than a first set threshold, encrypt the first part of the first information and send the encrypted first information to the data receiving terminal; The server is further configured to: when the first risk level is greater than or equal to the first set threshold, determine a first area in the first part corresponding to the first object, establish a first link between the parameter information about the first object in the content library and the first area; and send the first information and the first link to the data receiving terminal; The sending request also indicates the sending time of the first information to the data receiving terminal; In which, the server is configured to: obtain a first user identifier associated with the data receiving terminal; determine a risk level set corresponding to the first user identifier; wherein different risk levels in the risk level set correspond to different times; determine the risk level in the risk level set corresponding to the sending time, and use it as the first risk level.

2. The system according to claim 1, characterized in that The data receiving terminal is configured to: receive the first information and the first link; in response to a triggering operation on the first area, obtain parameter information of the first object according to the first link; and display the parameter information of the first object.

3. The system according to claim 1, characterized in that The system further comprises a data publishing terminal and a display device, wherein the server is communicatively connected with the data publishing terminal and the display device respectively; The server is configured to: receive a first display task sent by the data publishing terminal; wherein the first display task is to instruct the second object to be displayed on the display device; determine the second parameter information of the second object through the content library; determine whether the first area identifier associated with the display device exists in the area identifier associated with the second object; if the first area identifier exists, determine the second risk level set by the data publishing terminal for the second object; when the second risk level is greater than or equal to a second set threshold, send the second parameter information to the display device so that the display device displays the second parameter information; when the second risk level is less than the second set threshold, determine the second part of the second parameter information that complies with the encryption matter corresponding to the second risk level, encrypt the second part of the second parameter information, and send the encrypted second parameter information to the display device.

4. A method for risk identification and monitoring of sensitive content, characterized in that: The method is performed by a server according to any one of claims 1 to 3, wherein the server is respectively connected to the data sending terminal and the data receiving terminal for communication, and the method comprises: receiving first information sent by the data sending terminal and a sending request instructing the first information to be sent to the data receiving terminal; In response to the sending request, extracting a first part of the first information according to information characteristics of the first information; According to a preset mapping relationship, the first part is input into a corresponding recognition model to obtain sensitive content in the first part; wherein different parts correspond to different recognition models; Determining, through a preset content library, a first object matching the sensitive content; Determining a first risk level set for the data receiving terminal corresponding to the first object; When the first risk level is less than a first set threshold, encrypting the first part of the first information, and sending the encrypted first information to the data receiving terminal; After determining the first risk level set for the data receiving terminal corresponding to the first object, the method further includes: When the first risk level is greater than or equal to the first set threshold, determining a first area in the first part corresponding to the first object, and establishing a first link between first parameter information about the first object in the content library and the first area; sending the first information and the first link to the data receiving terminal so that the data receiving terminal receives the first information and the first link; in response to a triggering operation on the first area, acquiring first parameter information of the first object according to the first link; and displaying the first parameter information of the first object; The sending request further indicates a sending time of sending the first information to the data receiving terminal; and the determining the first risk level set by the data receiving terminal corresponding to the first object includes: Obtaining a user identifier associated with the data receiving terminal; Determine a risk level set corresponding to the user identifier; wherein different risk levels in the risk level set correspond to different times; A risk level in the risk level set corresponding to the sending time is determined and used as the first risk level.

5. The method according to claim 4, characterized in that: The server is respectively connected to the data publishing terminal and the display device for communication, and the method further includes: receiving a first display task sent by the data publishing terminal; wherein the first display task is to instruct the second object to be displayed on the display device; Determine the second parameter information of the second object through the content library; determine whether the first area identifier associated with the display device exists in the area identifier associated with the second object; In the case where the first area identifier exists, determining a second risk level set by the data publishing terminal for the second object; When the second risk level is greater than or equal to a second set threshold, sending the second parameter information to the display device so that the display device displays the second parameter information; When the second risk level is less than the second set threshold, according to the encryption matter corresponding to the second risk level, the second part of the second parameter information that complies with the encryption matter is determined, the second part of the second parameter information is encrypted, and the encrypted second parameter information is sent to the display device.

6. A risk identification and monitoring device for sensitive content, characterized in that: The device comprises: A request receiving module, used for receiving first information sent by a data sending terminal and a sending request instructing the first information to be sent to the data receiving terminal; an information extraction module, configured to extract, in response to the sending request, a first part of the first information according to information features of the first information; A content obtaining module, used for inputting the first part into a corresponding recognition model according to a preset mapping relationship to obtain sensitive content in the first part; wherein different parts correspond to different recognition models; An object determination module, configured to determine a first object matching the sensitive content through a preset content library; A level determination module, used to determine a first risk level set by the data receiving terminal corresponding to the first object; an encryption processing module, configured to encrypt the first part of the first information when the first risk level is less than a first set threshold, and send the encrypted first information to the data receiving terminal; The device also includes a link sending module, which is used to determine a first area corresponding to a first object in the first part when the first risk level is greater than or equal to a first set threshold, establish a first link between first parameter information about the first object in the content library and the first area; send the first information and the first link to a data receiving terminal so that the data receiving terminal receives the first information and the first link; in response to a triggering operation on the first area, obtain first parameter information of the first object according to the first link; and display the first parameter information of the first object; The level determination module is also used to obtain a user identifier associated with a data receiving terminal; determine a risk level set corresponding to the user identifier; wherein different risk levels in the risk level set correspond to different times; determine the risk level in the risk level set corresponding to the sending time, and use it as the first risk level.

7. A server, characterized in that: The system comprises a memory and a processor, wherein the memory is used to store a computer program; and the processor is used to execute the computer program to implement the method according to claim 4 or 5.

Images