A method for analyzing leakage points in trade secret protection

Abstract

The present invention discloses a method for analyzing leakage points of trade secret protection, comprising the following steps: investigating and obtaining data assets involved in employees of each department; putting data of the data assets into a database; investigating the data asset circulation rules of the departments, integrating the data of employees of different departments into basic data tables, adding labels to each data table, and performing replacement processing on the data; performing association processing on the data tables according to the circulation rules to obtain different data association tables; extracting data from different data association tables, and performing difference analysis with each secret protection unit; making a leakage point analysis report; through the analysis method of the present invention, with the help of conventional tools, many leakage risk points hidden in seemingly reasonable business processes can be excavated to achieve comprehensive trade secret protection; through data replacement, with the help of conventional analysis tools, the leakage prevention of trade secrets in the analysis and processing process can be achieved.

Description

Technical Field

[0001] The invention belongs to the technical field of digital information security, and in particular relates to a method for analyzing leakage points for protecting trade secrets. Background Art

[0002] Today is the era of big data. Data has become an important asset for enterprises and plays an increasingly critical role. Major countries around the world have recognized its importance and have launched their own big data strategies to fully utilize the potential of data to promote economic growth and innovation, including trade secret data assets.

[0003] Trade secret data assets are the core assets of an enterprise and can generally be divided into two categories: technical information trade secrets and business information trade secrets. The protection of trade secrets is the protection of an enterprise’s core competitiveness.

[0004] At present, the protection of trade secret data assets still adopts the traditional model. Since the protection of trade secrets must prevent internal theft and external invasion, generally, security access control technology and security management systems are set up. Although this can play a certain preventive effect, it lacks a comprehensive basic analysis of the protection of trade secrets, and cannot clearly analyze all internal leakage points, let alone dig out the many leakage risk points hidden in seemingly reasonable business processes, making it difficult to achieve comprehensive trade secret protection. Summary of the invention

[0005] The present invention provides a method for analyzing leakage points of trade secrets protection. By using conventional tools, numerous leakage risk points hidden in seemingly reasonable business processes can be unearthed, thereby achieving comprehensive trade secret protection. By replacing data, conventional analysis tools can be used while ensuring the leakage prevention of trade secrets during the analysis and processing process, thereby solving the problems raised in the above-mentioned background technology.

[0006] To achieve the above object, the present invention provides the following technical solutions:

[0007] A method for analyzing a trade secret protection leakage point comprises the following steps:

[0008] S1: Investigate and obtain the data assets involved by employees in each department;

[0009] S2: put the data of data assets into the database;

[0010] S3: Investigate the data asset transfer rules of the department, integrate the employee data of different departments into basic data tables, add labels to each data table, and replace the data;

[0011] S4: according to the circulation rules, the data tables are associated with each other to obtain different data association tables;

[0012] S5: extracting data from different data association tables in S4 and performing difference analysis with each secret protection unit;

[0013] S6: Make a leak point analysis report.

[0014] Preferably, S2 includes converting data assets into executable data; the data assets include structured data and unstructured data, and the data is converted into structured data in a unified format.

[0015] Preferably, when S3 investigates the department's data asset transfer rules, it also needs to investigate the current security status.

[0016] Preferably, the investigation of the security status includes an investigation of security access control technology.

[0017] Preferably, the investigation of the current safety situation includes an investigation of the safety management system.

[0018] Preferably, the flow rule investigation in S3 needs to investigate the detailed business processes of each business department.

[0019] Preferably, the secret protection unit in S5 is obtained by performing a replacement process corresponding to S3 on the secret library containing all the trade secrets.

[0020] Preferably, the analysis and comparison tool in S6 adopts the FineBI analysis tool.

[0021] Compared with the prior art, the present invention has the following beneficial effects:

[0022] 1. Through the analysis method of the present invention, with the help of conventional tools, many leakage risk points hidden in seemingly reasonable business processes can be unearthed, so as to achieve comprehensive protection of trade secrets.

[0023] 2. The analysis method of the present invention can prevent the leakage of commercial secrets during the analysis process by replacing data and using conventional analysis tools.

[0024] 3. Through the analysis method of the present invention, by converting the department employee data flow rules into the associated combination of data tables, it is possible to achieve convenient and efficient associated combination of data assets with high efficiency.

[0025] 4. Through the analysis method of the present invention, through a comprehensive data investigation, the comprehensiveness of data analysis can be achieved. BRIEF DESCRIPTION OF THE DRAWINGS

[0026] Figure 1 is a flow chart of the analysis method of the present invention;

[0027] Figure 2 It is a data conversion flow chart of the present invention;

[0028] Figure 3 A flowchart for investigating the security access control technology of the present invention;

[0029] Figure 4 A flow chart for investigating the safety management system of the present invention;

[0030] Figure 5 A flowchart for investigating the business process of the present invention;

[0031] Figure 6 It is a data analysis flow chart of the present invention. DETAILED DESCRIPTION

[0032] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0033] See also Figure 1 The present invention provides a method for analyzing a trade secret protection leakage point, comprising the following steps:

[0034] S1: Investigate the data assets involved in each department’s employees; investigate and analyze the scope of the company’s trade secret protection, including data asset investigation and knowledge scope investigation; first investigate each department of the company, collect and analyze the outline of each department’s trade secret data assets, and then collect and analyze the data from each employee’s computer terminal and all business systems to form a detailed list of the company’s trade secret data assets; finally, based on this detailed list of trade secret data assets, investigate the leaders of the company’s confidentiality-related departments to clarify the scope of knowledge of these data assets.

[0035] S2: Put the data of data assets into the database to facilitate the subsequent data table association processing.

[0036] S3: Investigate the data asset flow rules of the department, integrate the employee data of different departments into basic data tables, add labels to each data table, and replace the data; the data circulation between different departments often involves the circulation of multiple data at the same time. For example, when one department provides a purchase list to another department, it will be accompanied by customer data, purchase product data, etc. These data that employees of each department need to provide at the same time are combined into a data table. Employees of the same department provide different data combinations to different departments, which are recorded as different data tables. The data table is convenient for all data to be associated together when related information is added later; the replacement of data is based on the particularity of trade secrets. The corresponding data replacement is performed on the premise that the technical effect can be achieved, such as replacing customer A with customer B, data C with data D, component E with component F, etc. It is necessary to ensure that the same data association effect can be achieved and to ensure the leakage prevention of trade secrets during the analysis and processing process; label the data of employees from different departments for subsequent identification.

[0037] S4: According to the circulation rules, the data tables are associated with each other to obtain different data association tables. The circulation rules mean that the employees of one department provide the data in their data tables to another department, and the data tables are cross-associated with each other in the corresponding steps according to the circulation rules, and the association results of each step are recorded. In order to obtain different data association tables, a variety of association technologies can be used during data analysis, such as joint association technology, to process the data stored in different tables, connect multiple data tables, and form association tables for data analysis.

[0038] S5: Extract data from different data association tables in S4 and perform differential analysis on the data from each secret protection unit. Conventional extraction technologies available on the market can be used to extract data from data association tables, such as structured query language (SQL) technology, to extract data, and use big data analysis and comparison tools to perform differential analysis on the extracted data and the data from each secret protection unit.

[0039] S6: Make a leakage point analysis report; conduct a hazard analysis and risk assessment of corporate trade secrets. If a difference result is inferred, find the corresponding data combination according to the label and judge it as a leakage point; if a difference result cannot be inferred, it is judged as a non-leakage point.

[0040] See also Figure 2As a further embodiment, S2 includes converting data assets into executable data; the data assets include structured data and unstructured data, and the data is converted into structured data in a unified format. Different tools can be used according to different needs; if voice information and text data are involved, natural language processing (NLP) is used for data processing and corresponding format conversion is performed; if image information is involved, computer vision technology is used to convert it into structured data by identifying objects, scenes, faces and other information in the image and converting it into a structured data form; if audio and video data is involved, audio and video processing technology is used to convert it into structured data by extracting voice content in the audio and image information in the video and converting them into a structured data form.

[0041] See also Figure 3-Figure 4 As a further embodiment, when S3 investigates the data asset transfer rules of the department, it is also necessary to investigate the security status. When there is a lack of corresponding security protection, the corresponding data table to be transferred must also add the unprotected data and transfer it to the departments that can be involved.

[0042] See also Figure 3 As a further embodiment, the investigation of the security status includes an investigation of security access control technology, such as an investigation of network security equipment, data security products, and specific implemented security policies.

[0043] See also Figure 4 As a further embodiment, the investigation of the security status includes an investigation of security management systems, such as confidentiality agreements, non-competition agreements, electronic data security management systems, trade secret protection and punishment systems, and trade secret incident emergency management systems.

[0044] See also Figure 5 As a further embodiment, the flow rule investigation in S3 needs to investigate the detailed business processes of each business department, such as the commercial secret data assets required for the detailed links of R&D, production, sales and other businesses.

[0045] See also Figure 1 As a further embodiment, the secret protection unit in S5 is obtained by replacing the secret library containing all the trade secrets with the corresponding S3. Since data replacement is performed in S3, the replaced data will form a new secret library, that is, the secret library is replaced accordingly to increase confidentiality; trade secrets often contain multiple protection units, and the leakage of one protection unit is considered as a trade secret leakage.

[0046] See also Figure 6As a further embodiment, the analysis and comparison tool in S6 adopts the FineBI analysis tool to learn the corresponding data association table in S4 through big data, and then infers the difference results based on the combination of each associated data in the data association table to perform result analysis.

[0047] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. A method for analyzing trade secret protection leakage points, characterized in that: The following steps are included: S1: Investigate and obtain the data assets involved by employees in each department; S2: put the data of data assets into the database; S3: Investigate the data asset transfer rules of the department, integrate the employee data of different departments into basic data tables, add labels to each data table, and replace the data; S4: according to the circulation rules, the data tables are associated with each other to obtain different data association tables; S5: extracting data from different data association tables in S4 and performing difference analysis with each secret protection unit; S6: Make a leak point analysis report.

2. A method for analyzing trade secret protection leakage points according to claim 1, characterized in that: S2 includes converting data assets into operational data; data assets include structured data and unstructured data, and converting data into structured data in a unified format.

3. The method for analyzing the leakage points of trade secret protection according to claim 1, characterized in that: When S3 investigates the department’s data asset transfer rules, it also needs to investigate the current security status.

4. A method for analyzing trade secret protection leakage points according to claim 3, characterized in that: Survey on current security situation including survey on security access control technology.

5. The method for analyzing the leakage points of trade secret protection according to claim 3, characterized in that: Investigation of current safety situation includes investigation of safety management system.

6. The method for analyzing the leakage points of trade secret protection according to claim 1, characterized in that: The research on circulation rules in S3 requires research on the detailed business processes of each business department.

7. The method for analyzing the leakage points of trade secret protection according to claim 1, characterized in that: The secret protection unit in S5 is obtained by performing a replacement process corresponding to S3 on the secret library containing all the business secrets.

8. The method for analyzing the leakage points of trade secret protection according to claim 1, characterized in that: The analysis and comparison tool in S6 uses the FineBI analysis tool.

Images