Business data processing method and device, computer equipment, readable storage medium and program product

Abstract

The invention relates to a business data processing method and device, computer equipment, a computer readable storage medium and a computer program product. The method comprises the following steps: acquiring to-be-processed business data and a corresponding personal information label; according to the personal information label and a preset multi-dimensional judgment condition, a sensitivity level corresponding to the to-be-processed business data is determined, and the multi-dimensional judgment condition comprises a first target label associated with the target content category and a second target label associated with the target business scene; under the condition that the sensitivity level reaches a target sensitivity level, performing desensitization processing on the to-be-processed business data; wherein the target sensitivity level is used for determining that the sensitivity level corresponding to the business data reaches the target sensitivity level under the condition that the personal information label corresponding to the business data belongs to the first target label and / or the second target label. By adopting the method, the personal information in the business data can be quickly and accurately protected.

Description

Technical Field

[0001] The present application relates to the field of data processing technology, and in particular to a method, apparatus, computer equipment, computer-readable storage medium and computer program product for processing business data. Background Art

[0002] With the development of the Internet, the security of personal information has received more and more attention. In actual situations, public information obtained from the Internet may contain personal information, and sensitive personal information can easily affect the rights and interests of the subject of personal information. Therefore, it is necessary to process business data in a timely manner and pay special attention to personal information that may cause impact.

[0003] However, the volume of business data is huge, the distribution of personal information in business data is relatively scattered, and there are many types of personal information, which makes it difficult to achieve comprehensive protection of personal information. Therefore, there is an urgent need for a business data processing method that can quickly and accurately identify personal information in business data that may have an impact and protect it. Summary of the invention

[0004] Based on this, it is necessary to provide a business data processing method, apparatus, computer equipment, computer-readable storage medium and computer program product that can quickly and accurately protect personal information in business data in response to the above-mentioned technical problems.

[0005] In a first aspect, the present application provides a method for processing business data, the method comprising:

[0006] Obtain the business data to be processed and the corresponding personal information tags;

[0007] Determine the sensitivity level corresponding to the business data to be processed according to the personal information tag and a preset multi-dimensional determination condition, wherein the multi-dimensional determination condition includes a first target tag associated with a target content category and a second target tag associated with a target business scenario;

[0008] When the sensitivity level reaches the target sensitivity level, the business data to be processed is desensitized; wherein, the target sensitivity level is used to determine that the sensitivity level corresponding to the business data reaches the target sensitivity level when the personal information tag corresponding to the business data belongs to the first target tag and / or the second target tag.

[0009] In one embodiment, when the sensitivity level reaches the target sensitivity level, desensitizing the business data to be processed includes:

[0010] Acquire multiple pieces of to-be-processed business data whose sensitivity levels reach the target sensitivity level, and obtain a set of to-be-processed business data;

[0011] Based on a preset recognition rule, the business data set is scanned to obtain a target text;

[0012] The target text in the business data set is desensitized.

[0013] In one embodiment, the multi-dimensional determination condition further includes a first association relationship between the authorization status and the sensitivity level, and the determining, based on the personal information tag and the preset multi-dimensional determination condition, the sensitivity level corresponding to the business data to be processed includes:

[0014] Obtaining the authorization status of the business data to be processed, where the authorization status includes an authorized status / an unauthorized status;

[0015] Determine the sensitivity level of the business data to be processed according to the personal information label, the preset multi-dimensional determination condition and the authorization status;

[0016] When the sensitivity level reaches the target sensitivity level, desensitizing the business data to be processed includes:

[0017] When the sensitivity level reaches the first target sensitivity level / the second target sensitivity level, the business data to be processed is desensitized; wherein the first association relationship includes the association relationship between the authorized state and the first target sensitivity level, and the association relationship between the unauthorized state and the second target sensitivity level, and the risk level of the second target sensitivity level is higher than the risk level of the first target sensitivity level.

[0018] In one of the embodiments, when the sensitivity level reaches the first target sensitivity level / the second target sensitivity level, desensitizing the service data to be processed includes:

[0019] When the sensitivity level reaches the first target sensitivity level, the business data to be processed is desensitized and then stored, and a role-based access control mechanism is set for the business data to be processed;

[0020] When the sensitivity level reaches the second target sensitivity level, the business data to be processed is desensitized in real time.

[0021] In one embodiment, the multi-dimensional determination condition further includes a second association between the desensitization processing state and the sensitivity level, and the determination of the sensitivity level corresponding to the business data to be processed according to the personal information tag and the preset multi-dimensional determination condition includes:

[0022] Obtaining a desensitization processing status of the business data to be processed, wherein the desensitization processing status includes a desensitized processing status / a non-desensitized processing status;

[0023] Determine the sensitivity level of the business data to be processed according to the personal information label, the preset multi-dimensional determination condition and the desensitization processing status;

[0024] The method further comprises:

[0025] When the sensitivity level reaches the non-target sensitivity level, the business data to be processed is monitored; wherein, the non-target sensitivity level is used to determine that the sensitivity level corresponding to the business data has reached the non-target sensitivity level when the personal information tag corresponding to the business data does not belong to the first target tag and does not belong to the second target tag, or the desensitizing processing status is the desensitized processing status.

[0026] In one embodiment, the method further comprises:

[0027] Obtain user feedback information on business data, and adjust the multi-dimensional determination conditions according to the feedback information.

[0028] In a second aspect, the present application also provides a device for processing business data, including:

[0029] An acquisition module is used to obtain the business data to be processed and the corresponding personal information tags;

[0030] A level determination module, used to determine the sensitivity level corresponding to the business data to be processed according to the personal information tag and a preset multi-dimensional determination condition, wherein the multi-dimensional determination condition includes a first target tag associated with a target content category and a second target tag associated with a target business scenario;

[0031] The first processing module is used to desensitize the business data to be processed when the sensitivity level reaches the target sensitivity level; wherein the target sensitivity level is used to determine that the sensitivity level corresponding to the business data reaches the target sensitivity level when the personal information tag corresponding to the business data belongs to the first target tag and / or the second target tag.

[0032] In a third aspect, the present application further provides a computer device, including a memory and a processor, wherein the memory stores a computer program, and the processor implements the steps of any of the above-described methods when executing the computer program.

[0033] In a fourth aspect, the present application further provides a computer-readable storage medium having a computer program stored thereon, wherein the computer program implements the steps of any of the methods described above when executed by a processor.

[0034] In a fifth aspect, the present application also provides a computer program product, including a computer program, which implements the steps of any of the methods described above when executed by a processor.

[0035] The above-mentioned business data processing method, device, computer equipment, computer-readable storage medium and computer program product, by pre-classifying the content categories based on the content of personal information, determine the target content categories of personal information that are sensitive or unnecessary to disclose, and evaluate the impact of personal information on the rights and interests of the subject of personal information in a specific business scenario, thereby identifying personal information that may be at risk in a specific business scenario, and can achieve multi-dimensional determination of whether business data needs to be desensitized, thereby improving the comprehensiveness of the determination. Furthermore, through the combination of multi-dimensional determination results and the corresponding relationship between sensitivity levels, desensitization processing is performed when the business data to be processed reaches the target sensitivity level, which can achieve rapid and accurate protection of personal information in business data. BRIEF DESCRIPTION OF THE DRAWINGS

[0036] In order to more clearly illustrate the technical solutions in the embodiments of the present application or related technologies, the drawings required for use in the embodiments of the present application or related technical descriptions will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0037] Figure 1 An application environment diagram of a method for processing business data in one embodiment;

[0038] Figure 2 A flowchart of a method for processing business data in one embodiment;

[0039] Figure 3 is a flow chart of step S206 in one embodiment;

[0040] Figure 4 A flowchart of a method for processing business data in another embodiment;

[0041] Figure 5 is a flow chart of step S2061 in one embodiment;

[0042] Figure 6 A flowchart of a method for processing business data in another embodiment;

[0043] Figure 7 A flowchart of a method for processing business data in another embodiment;

[0044] Figure 8 is a structural block diagram of a device for processing business data in one embodiment;

[0045] Fig. 9 FIG. 4 is a diagram showing the internal structure of a computer device in one embodiment. DETAILED DESCRIPTION

[0046] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0047] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all public information and data authorized by the user or have been made public, and the collection, use and processing of relevant data must comply with relevant regulations.

[0048] The method for processing business data provided in the embodiment of the present application can be applied to Figure 1 In the application environment shown. Among them, the terminal 102 communicates with the server 104 through the network. The data storage system can store the data that the server 104 needs to process. The data storage system can be integrated on the server 104, or it can be placed on the cloud or other network servers. Among them, the terminal 102 can be, but is not limited to, various personal computers, laptops, smart phones, tablets, Internet of Things devices and portable wearable devices. The Internet of Things devices can be smart speakers, smart TVs, smart air conditioners, smart car devices, projection devices, etc. Portable wearable devices can be smart watches, smart bracelets, head-mounted devices, etc. The head-mounted device can be a virtual reality (VR) device, an augmented reality (AR) device, smart glasses, etc. The server 104 can be an independent physical server, a server cluster or distributed system composed of multiple physical servers, or a cloud server that provides cloud computing services.

[0049] In an exemplary embodiment, Figure 2 As shown, a method for processing business data is provided, and the method is applied to Figure 1 The server 104 in the example is used as an example to illustrate the method, which includes the following steps S202 to S206. Among them:

[0050] Step S202, obtaining the business data to be processed and the corresponding personal information tags.

[0051] The business data to be processed is used for data analysis or display in business scenarios. In the case where the business data to be processed includes personal information, the business data to be processed has a corresponding personal information tag. Personal information tags may include name, birthday, gender, etc. Data processing tools can be used to parse the business data to be processed and extract the corresponding personal information tags. For example, in the case where the business data to be processed includes "Zhang San", it can be determined that the corresponding personal information tag includes the name.

[0052] Step S204, determining the sensitivity level corresponding to the business data to be processed based on the personal information tag and preset multi-dimensional judgment conditions, where the multi-dimensional judgment conditions include a first target tag associated with the target content category and a second target tag associated with the target business scenario.

[0053] Exemplarily, the personal information label corresponding to the business data to be processed can be judged based on the preset multi-dimensional judgment conditions to obtain a combination of multi-dimensional judgment results; according to the correlation between the combination of multi-dimensional judgment results and the sensitivity level, the sensitivity level corresponding to the business data to be processed is determined. Among them, the dimensions in the multi-dimensional judgment conditions may include content dimension, business scenario dimension, authorization status dimension, desensitization processing status dimension, data source dimension, user role dimension, etc. In one embodiment, the business data to be processed may contain multiple types of personal information corresponding to two or more sensitivity levels. In this case, the higher level of sensitivity level can be used as the sensitivity level corresponding to the business data to be processed.

[0054] In a possible implementation, the association between personal information tags and content categories can be predetermined according to laws and regulations. For example, content categories can include: personal basic information, personal identity information, personal health and physiological information, personal education and work information, personal property information, other personal information and other categories. Personal information tags associated with personal basic information categories can include: personal name, birthday, gender, family relationship, etc.; personal information tags associated with personal identity information categories can include: identity card, driver's license, work permit, access permit, etc.; personal information tags associated with personal health and physiological information categories can include: identity card, driver's license, work permit, access permit, etc.; personal information tags associated with personal education and work information categories can include: personal occupation, position, work unit, education, degree, education experience, work experience, training records, etc.; personal information tags associated with personal property information categories can include: bank account, identification information, deposit information, real estate information, credit record, credit information, transaction and consumption records, flow records, etc.; personal information tags associated with other personal information categories can include: marriage history, etc. The first target tag associated with the target content category may correspond to sensitive personal information. For example, the target content category may include the above-mentioned personal identity information category, personal health and physiological information category, personal property information category, and other personal information categories. Alternatively, the first target tag associated with the target content category may also correspond to personal information that is assessed to not meet the necessity requirements. It should be noted that the same personal information tag may be associated with multiple content categories.

[0055] In a possible implementation, the association between personal information tags and business scenarios can be predetermined based on the business characteristics of the enterprise. The second target tag associated with the target business scenario can include a certain personal information tag (e.g., personal name), or a personal information tag associated with a certain content category (e.g., personal identity information category, personal property information category, and other personal information category). Among them, the target business scenario can include a scenario where business data needs to be displayed. In this case, different desensitization measures can be used for the business data to be processed in different business scenarios.

[0056] Step S206, when the sensitivity level reaches the target sensitivity level, desensitizing the business data to be processed; wherein, the target sensitivity level is used to determine that the sensitivity level corresponding to the business data reaches the target sensitivity level when the personal information tag corresponding to the business data belongs to the first target tag and / or the second target tag.

[0057] Exemplarily, the methods of desensitizing the business data to be processed may include, but are not limited to: reducing the sensitivity of the data through transformations such as replacement and distortion, while retaining certain usability and statistical characteristics, which may be rearrangement, format-retaining encryption, data replacement, symmetric encryption, average processing, and offset rounding, etc.; converting the original data into an unreadable format, and subsequently decrypting and restoring the original data through a key, which may be symmetric encryption or asymmetric encryption, depending on the application scenario and security requirements; removing or replacing information in the data that can directly identify an individual, such as name, ID number, etc., to reduce the recognition of personal information in the data set, so that it is impossible to identify a specific natural person without the aid of additional information, and specifically, statistical technology, cryptographic technology, suppression technology, pseudonymization technology, generalization technology, randomization technology and other de-identification technologies may be used.

[0058] In the above-mentioned business data processing method, by pre-dividing the content categories based on the content of personal information, determining the target content categories of personal information that are sensitive or unnecessary to disclose, and evaluating the impact of personal information on the rights and interests of the subject of personal information in a specific business scenario, personal information that may be at risk in a specific business scenario can be identified, and a multi-dimensional determination of whether business data needs to be desensitized can be achieved, thereby improving the comprehensiveness of the determination. Furthermore, through the combination of multi-dimensional determination results and the corresponding relationship between sensitivity levels, desensitization processing is performed when the business data to be processed reaches the target sensitivity level, which can achieve rapid and accurate protection of personal information in business data.

[0059] In an exemplary embodiment, Figure 3 As shown, the above step S206 may include:

[0060] Step S2061, obtaining a plurality of pieces of to-be-processed business data whose sensitivity levels reach the target sensitivity level, and obtaining a set of to-be-processed business data.

[0061] Exemplarily, the acquired business data to be processed may be aggregated.

[0062] Step S2062, based on the preset recognition rules, scan the business data set to obtain the target text.

[0063] For example, regular expressions can be used to establish recognition rules, conduct centralized scanning of business data to be processed, and identify target texts that need to be desensitized. A regular expression (regex) is a pattern used to match character combinations in a string. A regular expression uses a single string to describe and match a series of strings that conform to a certain syntactic rule. In programming and text processing, regular expressions are widely used to perform various string search, replacement, segmentation, and verification operations.

[0064] Step S2063, desensitizing the target text in the business data set.

[0065] Optionally, after desensitizing, sensitive personal information monitoring indicators can be established to conduct automated long-term monitoring of personal information in business data.

[0066] In this embodiment, by centrally scanning and processing massive business data, it is possible to effectively manage massive business data, quickly find personal information that needs to be protected, and perform necessary desensitization processing.

[0067] In an exemplary embodiment, the dimension in the multi-dimensional determination condition may include an authorization status dimension. Specifically, the multi-dimensional determination condition also includes a first association relationship between the authorization status and the sensitivity level, such as Figure 4 As shown, the above step S204 may include:

[0068] Step S2041, obtaining the authorization status of the business data to be processed, where the authorization status includes an authorized status and an unauthorized status.

[0069] Step S2042, determine the sensitivity level corresponding to the business data to be processed based on the personal information label, the preset multi-dimensional judgment conditions and the authorization status.

[0070] Exemplarily, the first target sensitivity level can be used to determine that the sensitivity level corresponding to the business data reaches the first target sensitivity level when the personal information tag corresponding to the business data belongs to the first target tag and the authorization status of the business data is authorized. The second target sensitivity level can be used to determine that the sensitivity level corresponding to the business data reaches the second target sensitivity level when the personal information tag corresponding to the business data belongs to the first target tag and the authorization status of the business data is unauthorized.

[0071] Furthermore, the above step S206 may include:

[0072] Step S2061, when the sensitivity level reaches the first target sensitivity level / the second target sensitivity level, the business data to be processed is desensitized; wherein the first association relationship includes the association relationship between the authorized state and the first target sensitivity level, and the association relationship between the unauthorized state and the second target sensitivity level, and the risk level of the second target sensitivity level is higher than the risk level of the first target sensitivity level.

[0073] At this time, the risk level of the business data to be processed is high, and it is necessary to prevent the leakage and tampering of sensitive personal information, and avoid disputes over the rights and interests of the personal information subject.

[0074] Optionally, when the acquired business data to be processed does not contain personal information and does not require personal authorization, it is necessary to prevent data leakage, tampering, loss, etc. Specifically, these data can be managed within the scope of data security instead of being specially managed as personal information.

[0075] In this embodiment, by comprehensively analyzing the authorization status and personal information tags of the business data to be processed, the accuracy of determining whether the business data needs to be desensitized can be further improved.

[0076] In an exemplary embodiment, Figure 5 As shown, the above step S2061 may include:

[0077] Step A1, when the sensitivity level reaches the first target sensitivity level, the business data to be processed is desensitized and then stored, and a role-based access control mechanism is set for the business data to be processed.

[0078] Exemplarily, when the personal information tag corresponding to the business data to be processed belongs to the first target tag and the authorization status of the business data is authorized, the business data to be processed can be stored after being desensitized to prevent data leakage, tampering, loss, etc.; the management of data access and operation permissions can be strengthened to allow only specific and necessary personnel to access such data; and a complete emergency plan can be prepared for sudden personal information security incidents.

[0079] Furthermore, we can continue to pay attention to data supplementation and updating. When the newly added / updated data contains sensitive personal information for which no individual authorization has been obtained, the corresponding sensitivity level should be adjusted to the second target sensitivity level.

[0080] Step A2: When the sensitivity level reaches the second target sensitivity level, the business data to be processed is desensitized in real time.

[0081] Exemplarily, when the personal information tag corresponding to the business data to be processed belongs to the first target tag and the authorization status of the business data is unauthorized, the business data to be processed does not meet the necessity requirements after evaluation, or the personal information tag corresponding to the business data to be processed belongs to the second target tag, these data can be immediately desensitized or required to stop using after being identified; a complete emergency plan can be prepared for sudden personal information security incidents; and when necessary, an evaluation can be conducted on data that may affect the rights and interests of personal information subjects in specific business scenarios.

[0082] Furthermore, corresponding recognition rules can be established through regular expression technology to conduct long-term automatic monitoring of this level of information in the data.

[0083] In this embodiment, the security of the processed business data is ensured by further hierarchical division of protection strategies for higher risk sensitivity levels and further improving the protection strategies.

[0084] In an exemplary embodiment, Figure 6 As shown, the dimension in the multi-dimensional determination condition may include a desensitization processing state dimension. Specifically, the multi-dimensional determination condition also includes a second association relationship between the desensitization processing state and the sensitivity level. The above step S204 may include:

[0085] Step S2043, obtaining the desensitizing status of the business data to be processed, where the desensitizing status includes desensitized status / non-desensitized status.

[0086] Step S2044, determine the sensitivity level corresponding to the business data to be processed based on the personal information label, the preset multi-dimensional judgment conditions and the desensitization processing status.

[0087] Furthermore, the above-mentioned method for processing business data may also include:

[0088] Step S208, when the sensitivity level reaches the non-target sensitivity level, monitor the business data to be processed; wherein the non-target sensitivity level is used to determine that the sensitivity level corresponding to the business data has reached the non-target sensitivity level when the personal information tag corresponding to the business data does not belong to the first target tag and does not belong to the second target tag, or the desensitization processing status is the desensitized processing status.

[0089] At this time, the risk level of the business data to be processed is relatively low, and it is necessary to prevent data leakage, tampering, loss, etc. Specifically, we can continue to pay attention to changes in the business scenarios in which the data is used and data supplementation and updating. When the business scenario changes are evaluated or endanger the rights and interests of the personal information subject or the newly added / updated data contains sensitive personal information, the corresponding sensitivity level should be adjusted to the first target sensitivity level.

[0090] In this embodiment, by comprehensively analyzing the desensitization status of the business data to be processed and the personal information label, the accuracy of determining whether the business data needs to be desensitized can be further improved.

[0091] In an exemplary embodiment, Figure 7 As shown, the above-mentioned method for processing business data may also include:

[0092] Step S210: obtaining user feedback information on business data, and adjusting the multi-dimensional determination conditions according to the feedback information.

[0093] For example, in response to user feedback on business data, the data being fed back can be deleted immediately, and the feedback information can be regularly integrated for analysis, and the protection measure can be adjusted according to the analysis results. For example, personal information tags with a high feedback frequency can be added to the target content category.

[0094] In this embodiment, by feeding back external customer complaints to internal investigation and processing results, the efficiency and quality of personal information compliance management can be further improved.

[0095] In summary, the above-mentioned business data processing method pre-classifies content categories based on the content of personal information, determines the target content categories of personal information that are sensitive or unnecessary to disclose, and evaluates the impact of personal information on the rights and interests of the subject of personal information in specific business scenarios, thereby identifying personal information that may be at risk in specific business scenarios, and can achieve multi-dimensional judgment on whether business data needs to be desensitized, thereby improving the comprehensiveness of the judgment. Furthermore, through the combination of multi-dimensional judgment results and the corresponding relationship between sensitivity levels, desensitization processing is performed when the business data to be processed reaches the target sensitivity level, which can achieve rapid and accurate protection of personal information in business data.

[0096] It should be understood that, although the various steps in the flowcharts involved in the above-mentioned embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps does not have a strict order restriction, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above-mentioned embodiments can include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily to be carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0097] Based on the same inventive concept, the embodiment of the present application also provides a device for processing business data for implementing the method for processing business data involved above. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme recorded in the above method, so the specific limitations in the one or more embodiments of the device for processing business data provided below can refer to the limitations of the method for processing business data above, and will not be repeated here.

[0098] In an exemplary embodiment, Figure 8 As shown, a device 300 for processing business data is provided, comprising: an acquisition module 301, a level determination module 302 and a first processing module 303, wherein:

[0099] The acquisition module 301 is used to acquire the business data to be processed and the corresponding personal information tags.

[0100] The level determination module 302 is used to determine the sensitivity level corresponding to the business data to be processed based on the personal information label and preset multi-dimensional judgment conditions. The multi-dimensional judgment conditions include a first target label associated with the target content category and a second target label associated with the target business scenario.

[0101] The first processing module 303 is used to desensitize the business data to be processed when the sensitivity level reaches the target sensitivity level; wherein the target sensitivity level is used to determine that the sensitivity level corresponding to the business data reaches the target sensitivity level when the personal information tag corresponding to the business data belongs to the first target tag and / or the second target tag.

[0102] In an exemplary embodiment, the first processing module 303 is further configured to:

[0103] Acquire multiple pieces of business data to be processed whose sensitivity levels reach the target sensitivity level, and obtain a set of business data to be processed.

[0104] Based on the preset recognition rules, the business data set is scanned to obtain the target text.

[0105] Desensitize the target text in the business data set.

[0106] In an exemplary embodiment, the multi-dimensional determination condition further includes a first association relationship between the authorization status and the sensitivity level, and the level determination module 302 is further configured to:

[0107] Get the authorization status of the business data to be processed, which includes authorized status and unauthorized status;

[0108] Determine the sensitivity level of the business data to be processed based on personal information labels, preset multi-dimensional judgment conditions and authorization status;

[0109] Furthermore, the first processing module 303 is also used for:

[0110] When the sensitivity level reaches the first target sensitivity level / the second target sensitivity level, the business data to be processed is desensitized; wherein the first association relationship includes the association relationship between the authorized state and the first target sensitivity level, and the association relationship between the unauthorized state and the second target sensitivity level, and the risk level of the second target sensitivity level is higher than the risk level of the first target sensitivity level.

[0111] In an exemplary embodiment, the first processing module 303 is further configured to:

[0112] When the sensitivity level reaches the first target sensitivity level, the business data to be processed is stored after being desensitized, and a role-based access control mechanism is set for the business data to be processed;

[0113] When the sensitivity level reaches the second target sensitivity level, the business data to be processed is desensitized in real time.

[0114] In an exemplary embodiment, the multi-dimensional determination condition further includes a second association relationship between the desensitization processing state and the sensitivity level, and the level determination module 302 is further used to:

[0115] Obtain the desensitization status of the business data to be processed, which includes desensitized status / non-desensitized status;

[0116] Determine the sensitivity level of the business data to be processed based on the personal information label, the preset multi-dimensional judgment conditions and the desensitization processing status;

[0117] Furthermore, the service data processing device 300 further includes:

[0118] The second processing module is used to monitor the business data to be processed when the sensitivity level reaches the non-target sensitivity level; wherein the non-target sensitivity level is used to determine that the sensitivity level corresponding to the business data has reached the non-target sensitivity level when the personal information tag corresponding to the business data does not belong to the first target tag and does not belong to the second target tag, or the desensitization processing status is the desensitized processing status.

[0119] In an exemplary embodiment, the service data processing device 300 further includes:

[0120] The feedback processing module is used to obtain user feedback information on business data and adjust multi-dimensional judgment conditions based on the feedback information.

[0121] Each module in the above-mentioned business data processing device can be implemented in whole or in part by software, hardware, or a combination thereof. Each of the above-mentioned modules can be embedded in or independent of a processor in a computer device in the form of hardware, or can be stored in a memory in a computer device in the form of software, so that the processor can call and execute operations corresponding to each of the above modules.

[0122] In an exemplary embodiment, a computer device is provided. The computer device may be a server, and its internal structure diagram may be as shown in FIG. Fig. 9 As shown. The computer device includes a processor, a memory, an input / output interface (Input / Output, referred to as I / O) and a communication interface. The processor, the memory and the input / output interface are connected through a system bus, and the communication interface is connected to the system bus through the input / output interface. The processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the computer device is used to store data. The input / output interface of the computer device is used to exchange information between the processor and an external device. The communication interface of the computer device is used to communicate with an external terminal through a network connection. When the computer program is executed by the processor, a method for processing business data is implemented.

[0123] Those skilled in the art will understand that Fig. 9 The structure shown in the figure is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0124] In an exemplary embodiment, a computer device is provided, including a memory and a processor, wherein a computer program is stored in the memory, and the processor implements the steps in the above-mentioned method embodiments when executing the computer program.

[0125] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the steps in the above-mentioned method embodiments are implemented.

[0126] In one embodiment, a computer program product is provided, including a computer program, which implements the steps in the above method embodiments when executed by a processor.

[0127] A person of ordinary skill in the art can understand that all or part of the processes in the above-mentioned embodiment method can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in the present application can include at least one of non-volatile memory and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, an artificial intelligence (AI) processor, etc., but are not limited to this.

[0128] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this application.

[0129] The above-described embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A method for processing business data, characterized in that: The method comprises: Obtain the business data to be processed and the corresponding personal information tags; Determine the sensitivity level corresponding to the business data to be processed according to the personal information tag and a preset multi-dimensional determination condition, wherein the multi-dimensional determination condition includes a first target tag associated with a target content category and a second target tag associated with a target business scenario; When the sensitivity level reaches the target sensitivity level, the business data to be processed is desensitized; wherein, the target sensitivity level is used to determine that the sensitivity level corresponding to the business data reaches the target sensitivity level when the personal information tag corresponding to the business data belongs to the first target tag and / or the second target tag.

2. The method according to claim 1, characterized in that When the sensitivity level reaches the target sensitivity level, desensitizing the business data to be processed includes: Acquire multiple pieces of to-be-processed business data whose sensitivity levels reach the target sensitivity level, and obtain a set of to-be-processed business data; Based on a preset recognition rule, the business data set is scanned to obtain a target text; The target text in the business data set is desensitized.

3. The method according to claim 1, characterized in that The multi-dimensional determination condition further includes a first association relationship between the authorization status and the sensitivity level. The determining, based on the personal information tag and the preset multi-dimensional determination condition, of the sensitivity level corresponding to the business data to be processed includes: Obtaining the authorization status of the business data to be processed, where the authorization status includes an authorized status / an unauthorized status; Determine the sensitivity level of the business data to be processed according to the personal information label, the preset multi-dimensional determination condition and the authorization status; When the sensitivity level reaches the target sensitivity level, desensitizing the business data to be processed includes: When the sensitivity level reaches the first target sensitivity level / the second target sensitivity level, the business data to be processed is desensitized; wherein the first association relationship includes the association relationship between the authorized state and the first target sensitivity level, and the association relationship between the unauthorized state and the second target sensitivity level, and the risk level of the second target sensitivity level is higher than the risk level of the first target sensitivity level.

4. The method according to claim 1, characterized in that: When the sensitivity level reaches the first target sensitivity level / the second target sensitivity level, desensitizing the service data to be processed includes: When the sensitivity level reaches the first target sensitivity level, the business data to be processed is desensitized and then stored, and a role-based access control mechanism is set for the business data to be processed; When the sensitivity level reaches the second target sensitivity level, the business data to be processed is desensitized in real time.

5. The method according to claim 1, characterized in that The multi-dimensional determination condition further includes a second association between the desensitization processing state and the sensitivity level. The determining, based on the personal information tag and the preset multi-dimensional determination condition, of the sensitivity level corresponding to the business data to be processed includes: Obtaining a desensitization processing status of the business data to be processed, wherein the desensitization processing status includes a desensitized processing status / a non-desensitized processing status; Determine the sensitivity level of the business data to be processed according to the personal information label, the preset multi-dimensional determination condition and the desensitization processing status; The method further comprises: When the sensitivity level reaches the non-target sensitivity level, the business data to be processed is monitored; wherein, the non-target sensitivity level is used to determine that the sensitivity level corresponding to the business data has reached the non-target sensitivity level when the personal information tag corresponding to the business data does not belong to the first target tag and does not belong to the second target tag, or the desensitizing processing status is the desensitized processing status.

6. The method according to claim 1, characterized in that The method further comprises: Obtain user feedback information on business data, and adjust the multi-dimensional determination conditions according to the feedback information.

7. A device for processing business data, characterized in that: The device comprises: An acquisition module is used to obtain the business data to be processed and the corresponding personal information tags; A level determination module, used to determine the sensitivity level corresponding to the business data to be processed according to the personal information tag and a preset multi-dimensional determination condition, wherein the multi-dimensional determination condition includes a first target tag associated with a target content category and a second target tag associated with a target business scenario; The first processing module is used to desensitize the business data to be processed when the sensitivity level reaches the target sensitivity level; wherein the target sensitivity level is used to determine that the sensitivity level corresponding to the business data reaches the target sensitivity level when the personal information tag corresponding to the business data belongs to the first target tag and / or the second target tag.

8. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 6 are implemented.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

10. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

Images