Sensitive data processing method and device

Abstract

The invention discloses a sensitive data processing method and device, relates to the technical field of data processing, and mainly aims to effectively identify and protect sensitive data existing in link nodes of a data processing link. According to the main technical scheme, the method comprises the steps of determining metadata corresponding to data to be desensitized in a link node; wherein the metadata is used for describing contents carried by the data to be desensitized; identifying sensitive data in the data to be desensitized based on the metadata and a sensitive data identification rule matched with the metadata; wherein the sensitive data identification rule is used for identifying description data corresponding to the sensitive data from contents carried by the matched metadata; and carrying out desensitization processing on the identified sensitive data.

Description

Technical Field

[0001] The present application relates to the field of data processing technology, and in particular to a sensitive data processing method and device. Background Art

[0002] With the explosive growth of data resources, in order to maximize the value of data resources, data is currently developed, applied and governed through data platform products such as data development platforms. Data platform products usually complete the development, application and governance of data through data processing links. In the process of processing data, the data processing link will apply or generate corresponding sensitive data. The leakage of sensitive data will bring serious harm to enterprises or individuals. Therefore, how to effectively discover and protect sensitive data in the data processing link has become an urgent problem to be solved. Summary of the invention

[0003] In view of this, the present application proposes a sensitive data processing method and device, the main purpose of which is to effectively identify and protect sensitive data existing in the link nodes of the data processing link.

[0004] In order to achieve the above objectives, this application mainly provides the following technical solutions:

[0005] In a first aspect, the present application provides a sensitive data processing method, the sensitive data processing method comprising:

[0006] Determine metadata corresponding to the data to be desensitized in the link node; wherein the metadata is used to describe the content carried by the data to be desensitized;

[0007] Based on the metadata and the sensitive data identification rule matching the metadata, identifying the sensitive data in the data to be desensitized; wherein the sensitive data identification rule is used to identify the description data corresponding to the sensitive data from the content carried by the matching metadata;

[0008] Desensitize the identified sensitive data.

[0009] In some embodiments of the present application, determining metadata corresponding to the data to be desensitized in a link node includes: determining empirical metadata corresponding to the link node that matches the data type of the data to be desensitized as metadata corresponding to the data to be desensitized; wherein the empirical metadata is obtained based on metadata corresponding to the data processed by the link node.

[0010] In some embodiments of the present application, determining metadata corresponding to the data to be desensitized in the link node includes: determining metadata possessed by the data to be desensitized itself as metadata corresponding to the data to be desensitized.

[0011] In some embodiments of the present application, the sensitive data processing method also includes: issuing a rule configuration prompt, wherein the rule configuration prompt is used to indicate the configuration of a sensitive data identification rule applicable to the metadata; if a sensitive data identification rule for the rule configuration prompt is obtained, the obtained sensitive data identification rule is determined as the sensitive data identification rule that matches the metadata.

[0012] In some embodiments of the present application, the sensitive data processing method also includes: determining the sensitive data identification rule that matches the data type of the metadata among the sensitive data identification rules corresponding to the link node as the sensitive data identification rule that matches the metadata.

[0013] In some embodiments of the present application, based on the metadata and sensitive data identification rules matching the metadata, sensitive data in the data to be desensitized is identified, including: identifying the metadata based on the sensitive data identification rules to obtain security metadata; wherein the security metadata is used to describe the sensitive fields corresponding to the sensitive data in the data to be desensitized and the positions of the sensitive fields in the data to be desensitized; based on the security metadata, the sensitive data in the data to be desensitized is located.

[0014] In some embodiments of the present application, the sensitive data identification rules include sensitive field types and sensitive field identification rules corresponding to the sensitive field types, and the metadata is identified based on the sensitive data identification rules to obtain security metadata, including: for each of the sensitive field types, the sensitive field corresponding to the sensitive field type is identified in the metadata based on the sensitive field identification rules corresponding to the sensitive field type; if the corresponding sensitive field is identified, descriptive data corresponding to the sensitive data is generated based on the identified sensitive field and the position of the identified sensitive field in the data to be desensitized; if all sensitive field types included in the sensitive data identification rules are identified, the generated descriptive data is integrated to obtain the security metadata.

[0015] In some embodiments of the present application, the sensitive data processing method also includes: if a corresponding sensitive field is identified, extracting sample data corresponding to the identified sensitive field from the data to be desensitized; if it is determined that the field type of the sample data matches the sensitive field type, executing the step of generating descriptive data corresponding to the sensitive data based on the identified sensitive field and the position of the identified sensitive field in the data to be desensitized; if it is determined that the field type of the sample data does not match the sensitive field type, issuing a prompt that the identification of the sensitive field type has failed.

[0016] In some embodiments of the present application, the sensitive data processing method also includes: if all sensitive field types included in the sensitive data identification rules are identified and there is no descriptive data corresponding to the sensitive data, a prompt is issued that there is no sensitive data in the data to be desensitized, and / or the data to be desensitized is transmitted to the next node adjacent to the link node.

[0017] In some embodiments of the present application, the identified sensitive data is desensitized, including: determining a desensitization rule that matches the data desensitization requirement; wherein the desensitization rule is used to indicate a desensitization processing method that matches the corresponding sensitive field; and desensitizing the sensitive data in the data to be desensitized based on the desensitization rule.

[0018] In some embodiments of the present application, a desensitization rule that matches the data desensitization requirement is determined, including: determining the data classification and data classification that matches each sensitive field in the identified sensitive data; wherein the data classification is used to indicate the sensitivity level of the corresponding sensitive field; the data classification is used to indicate the sensitive group of the corresponding sensitive field; based on the data classification and data classification that matches each of the sensitive fields, a matching desensitization processing method is determined for each of the sensitive fields; and the desensitization rule is formed based on the desensitization processing method that matches each sensitive field.

[0019] In some embodiments of the present application, based on the data classification and data classification matched by each of the sensitive fields, a matching desensitization processing method is determined for each of the sensitive fields, including: for sensitive fields whose application scenarios at the link node are human-computer interaction scenarios, a desensitization processing method suitable for dynamic desensitization is selected; for sensitive fields whose application scenarios at the link node are non-human-computer interaction scenarios, a desensitization processing method suitable for static desensitization is selected.

[0020] In some embodiments of the present application, before determining a matching desensitizing processing method for each sensitive field based on the data classification and data categorization that matches each sensitive field, the method also includes: determining the blood relationship between the sensitive fields in the identified sensitive data; and based on the determined blood relationship, correcting the data classification and data categorization corresponding to each sensitive field.

[0021] In some embodiments of the present application, the sensitive data processing method also includes: determining at least one risk dimension; wherein the risk dimension is used to indicate the corresponding data operation behavior characteristics; if it is determined that the sensitive data in the link node is operated, then based on the operation behavior data generated by the current operation and the attribute information of the operated sensitive data, determining the characteristic value corresponding to the at least one risk dimension; wherein the characteristic value is used to reflect the risk situation brought by the corresponding data operation behavior characteristics to the sensitive data with attribute information; based on the characteristic value corresponding to the at least one risk dimension, judging whether the current operation is legal.

[0022] In some embodiments of the present application, judging whether the current operation is legal is based on the characteristic value corresponding to the at least one risk dimension, including: determining the sensitive field corresponding to the sensitive data being operated; selecting a risk audit rule that matches the sensitive field and the link node; wherein the risk audit rule is used to indicate the normal characteristic value range, or the abnormal characteristic value range, corresponding to the at least one risk dimension; auditing whether the characteristic value corresponding to the at least one risk dimension falls into the corresponding normal characteristic value range or abnormal characteristic value range based on the risk audit rule; and determining whether the current operation has a risk based on the falling of the characteristic value corresponding to the at least one risk dimension.

[0023] In a second aspect, the present application provides a sensitive data processing device, the sensitive data processing device comprising:

[0024] A determination module, used to determine metadata corresponding to the data to be desensitized in the link node; wherein the metadata is used to describe the content carried by the data to be desensitized;

[0025] an identification module, configured to identify sensitive data in the data to be desensitized based on the metadata and a sensitive data identification rule matching the metadata; wherein the sensitive data identification rule is configured to identify description data corresponding to the sensitive data from the content carried by the matching metadata;

[0026] The processing module is used to desensitize the identified sensitive data.

[0027] In a third aspect, the present application provides a computer-readable storage medium, which includes a stored program, wherein when the program is running, the device where the storage medium is located is controlled to execute the sensitive data processing method of the first aspect.

[0028] In a fourth aspect, the present application provides an electronic device, comprising: a memory for storing a program; and a processor, coupled to the memory, for running the program to execute the sensitive data processing method of the first aspect.

[0029] The sensitive data processing method and device provided by the present application determine the metadata for describing the content carried by the data to be desensitized corresponding to the data to be desensitized in the link node of the data processing link. Then, based on the metadata and the sensitive data identification rules that match the metadata, the sensitive data in the data to be desensitized is identified, and the identified sensitive data is desensitized. It can be seen that before the data in the link node is passed to the next adjacent node, the data to be desensitized in the link node is desensitized, thereby realizing the protection of sensitive data in the data to be desensitized, so that the sensitive data can be effectively identified and protected at each link node throughout the entire life cycle from the data entering the data processing link to leaving the data processing link, thereby preventing the leakage of sensitive data.

[0030] The above description is only an overview of the technical solution of the present application. In order to more clearly understand the technical means of the present application, it can be implemented in accordance with the contents of the specification. In order to make the above and other purposes, features and advantages of the present application more obvious and easy to understand, the specific implementation methods of the present application are listed below. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0032] Figure 1 A flowchart of a sensitive data processing method provided by an embodiment of the present application is shown;

[0033] Figure 2 A schematic diagram of a sensitive data processing logic provided by an embodiment of the present application is shown;

[0034] Figure 3 A schematic diagram of the structure of a sensitive data processing device provided by an embodiment of the present application is shown;

[0035] Figure 4 A schematic structural diagram of a sensitive data processing device provided in another embodiment of the present application is shown. DETAILED DESCRIPTION

[0036] The exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. Although the exemplary embodiments of the present disclosure are shown in the accompanying drawings, it should be understood that the present disclosure can be implemented in various forms and should not be limited by the embodiments set forth herein. On the contrary, these embodiments are provided in order to enable a more thorough understanding of the present disclosure and to fully convey the scope of the present disclosure to those skilled in the art.

[0037] At present, data platform products such as data development platforms are usually used to develop, apply and govern data. Data platform products usually complete the development, application and governance of data through data processing links. Data processing links usually consist of multiple link nodes arranged in a preset order. The data to be processed passes through each link node in the data processing link in turn, so that the data processing link processes the data. The link node is used to process the data transmitted to it corresponding to its processing function. In the process of processing data by the data processing link, each link node usually applies or generates corresponding sensitive data, and the leakage of these sensitive data will cause serious harm to enterprises or individuals.

[0038] After research, the inventor found that in order to be able to effectively identify and protect sensitive data existing in link nodes in a data processing link, when processing data through a data processing link, the data obtained after the link node processes the data can be selected as data to be desensitized before being sent to the next link node. Then the metadata corresponding to the data to be desensitized in the link node is determined, and based on the metadata and the sensitive data identification rules that match the metadata, the sensitive data in the data to be desensitized is identified. Finally, the identified sensitive data is desensitized. In this way, sensitive data can be effectively identified and protected at each link node throughout the entire life cycle from the data entering the data processing link to leaving the data processing link, thereby preventing sensitive data leakage.

[0039] Based on the above considerations, the embodiments of the present application provide a sensitive data processing method and device. The sensitive data processing method and device provided in the embodiments of the present application can be applied to any data platform product, so that when the data processing link of the data platform product processes data, sensitive data can be effectively identified and protected at each link node during the entire life cycle from when the data enters the data processing link to when the data leaves the data processing link, thereby preventing sensitive data leakage.

[0040] The sensitive data processing method and device provided in the embodiments of the present application are described in detail below.

[0041] like Figure 1 As shown, the embodiment of the present application provides a sensitive data processing method, which mainly includes the following steps 101 to 103:

[0042] 101. Determine metadata corresponding to the data to be desensitized in the link node; wherein the metadata is used to describe the content carried by the data to be desensitized.

[0043] The data processing link is a link for the data platform to develop, apply and manage data, which is usually composed of multiple link nodes arranged in a preset order. The data to be processed passes through each link node in the data processing link in turn, so that the data processing link processes the data. Each link node is used to process the data passed into it corresponding to its processing function. The data platform and the data processing link can be set based on specific business needs, and this embodiment does not make specific limitations. Exemplarily, the data processing link is a link in the data development platform, which is responsible for the development, application and governance of data in the data development platform. It is composed of the following link nodes arranged in a preset order: acquisition node, access node, processing node, and warehouse node. The data entering the data development platform will pass through the link nodes in the data processing link in turn starting from the acquisition node, and will be provided to the data application party for use after being processed by the warehouse node.

[0044] In order to be able to identify and protect sensitive data throughout the entire life cycle from the time the data enters the data processing link to the time the data leaves the data processing link, each time the data arrives at a link node in the data processing link, the data will be processed by the link node, and the data obtained after processing by the link node and to be sent to the next link node is determined as data to be desensitized, so that the sensitive data in the data is transmitted to the next link node only after being processed by the desensitized data, thereby avoiding sensitive data leakage.

[0045] After determining the data to be desensitized in the link node, determine the metadata corresponding to the data to be desensitized in the link node. The method for determining the metadata corresponding to the data to be desensitized in the link node may include the following two methods:

[0046] First, the specific process of determining the metadata corresponding to the data to be desensitized in the link node may include the following steps: determining the empirical metadata corresponding to the link node that matches the data type of the data to be desensitized as the metadata corresponding to the data to be desensitized; wherein the empirical metadata is obtained based on the metadata corresponding to the data processed by the link node.

[0047] Each link node in the data processing link has corresponding experience metadata. The experience metadata has corresponding data types and is obtained based on metadata corresponding to data processed by the corresponding link node.

[0048] The empirical metadata corresponding to the link node that matches the data type of the data to be desensitized is determined as the metadata corresponding to the data to be desensitized. Since the empirical metadata is generated based on the metadata of the data that has been processed by the link node in the past and is consistent with the data type of the data to be desensitized, the metadata corresponding to the data to be desensitized selected based on the empirical metadata can not only accurately describe the content carried by the data to be desensitized, but also because it is obtained through regular processing of past metadata, it is more convenient to quickly identify sensitive data of the data to be desensitized.

[0049] For example, the link node is "node 1" and there is data A to be desensitized. The experience metadata corresponding to "node 1" includes experience metadata 1 and experience metadata 2.

[0050] The data type is user attribute information, and the data type corresponding to the experience metadata 2 is employee salary. The data type of the data A to be desensitized is user attribute information, so the experience metadata 1 is determined as the metadata corresponding to the data A to be desensitized.

[0051] Second, the specific process of determining the metadata corresponding to the data to be desensitized in the link node may include the following steps: determining the metadata of the data to be desensitized itself as the metadata corresponding to the data to be desensitized.

[0052] When the link node forms the data to be desensitized, it will also form metadata corresponding to the data to be desensitized. The metadata corresponding to the data to be desensitized is used to describe the content carried by the data to be desensitized. The metadata may include but is not limited to the name of the data to be desensitized, the fields included in the data to be desensitized and the location of the fields in the data to be desensitized, and the annotation content included in the data to be desensitized.

[0053] The metadata of the data to be desensitized itself can accurately describe the content carried by the data to be desensitized. Therefore, in order to improve the accuracy of determining sensitive data, the metadata of the data to be desensitized itself is determined as the metadata matching the data to be desensitized.

[0054] 102. Based on the metadata and sensitive data identification rules matching the metadata, identify sensitive data in the data to be desensitized; wherein the sensitive data identification rules are used to identify descriptive data corresponding to the sensitive data from the content carried by the matching metadata.

[0055] After the metadata is determined, the step of determining a sensitive data identification rule that matches the metadata is entered, and the sensitive data in the data to be desensitized is identified by the sensitive data identification rule that matches the metadata. The method of determining a sensitive data identification rule that matches the metadata may include the following two methods:

[0056] One is to issue a rule configuration prompt, wherein the rule configuration prompt is used to indicate the configuration of a sensitive data identification rule applicable to the metadata. If a sensitive data identification rule for the rule configuration prompt is obtained, the obtained sensitive data identification rule is determined as the sensitive data identification rule matched by the metadata.

[0057] In order to use targeted sensitive data identification rules to identify sensitive data in the data to be desensitized, a rule configuration prompt is issued to prompt business personnel to configure sensitive data identification rules applicable to metadata at the link node.

[0058] If a sensitive data identification rule is obtained for the rule configuration prompt, it means that the business personnel have configured a sensitive data identification rule applicable to metadata, and the obtained sensitive data identification rule is determined as the sensitive data identification rule matching the metadata.

[0059] If the sensitive data identification rule prompted for the rule configuration is not obtained, it means that the business personnel have not configured the sensitive data identification rule applicable to the metadata. In this case, if the link node has a corresponding preset sensitive data identification rule, and the preset sensitive data identification rule is applicable to the metadata, the preset sensitive data identification rule is determined as the sensitive data identification rule that matches the metadata. In this case, if it is determined that the link node does not have a corresponding preset sensitive data identification rule or an indication is received that no desensitization is required for the data to be desensitized, the data to be desensitized is transmitted to the next link node in the data processing link.

[0060] Another is to determine the sensitive data identification rule that matches the data type of the metadata among the sensitive data identification rules corresponding to the link node as the sensitive data identification rule that matches the metadata.

[0061] Each link node in the data processing link has a corresponding sensitive data identification rule. The sensitive data identification rule has a corresponding data type. The sensitive data identification rule that matches the data type of the metadata among the sensitive data identification rules corresponding to the link node is determined as the sensitive data identification rule that matches the metadata. In this way, the sensitive data identification rule can be directly selected without manual configuration, which can improve the efficiency of determining the sensitive data identification rule.

[0062] Exemplarily, there is data A to be desensitized in the link node "node 1", and its corresponding metadata is metadata A. The sensitive data identification rules corresponding to "node 1" include sensitive data identification rule 1 and sensitive data identification rule 2. The data type corresponding to sensitive data identification rule 1 is user attribute information, and the data type corresponding to sensitive data identification rule 2 is employee salary. The data type of metadata A is user attribute information, so sensitive data identification rule 1 is determined as the sensitive data identification rule matched by metadata A.

[0063] The sensitive data identification rules in the embodiments of the present application are used to identify the descriptive data corresponding to the sensitive data from the content carried by the matching metadata. Specifically, the sensitive data identification rules may include sensitive field types and sensitive field identification rules corresponding to the sensitive field types. Sensitive field types are set based on specific data classifications, and one sensitive field type may correspond to multiple sensitive field identification rules. The sensitive field identification rules corresponding to the sensitive field type are used to identify the sensitive fields corresponding to the sensitive field type from the corresponding metadata. It should be noted that if there are multiple matching sensitive field identification rules for a sensitive field type, the sensitive field identification rule with the highest priority is selected for the corresponding sensitive field identification.

[0064] Exemplarily, the sensitive data identification rule 1 matched by metadata A includes: the sensitive field type "ID card number" and the sensitive field identification rule 1 corresponding to the sensitive field type "ID card number".

[0065] After determining the sensitive data identification rule that matches the metadata, the sensitive data in the data to be desensitized is identified based on the metadata and the sensitive data identification rule that matches the metadata. The specific process of identifying the sensitive data in the data to be desensitized based on the metadata and the sensitive data identification rule that matches the metadata includes the following steps 102A to 102B:

[0066] 102A. Identify metadata based on sensitive data identification rules to obtain security metadata.

[0067] Security metadata is used to describe the sensitive fields corresponding to the sensitive data in the data to be desensitized and the locations of the sensitive fields in the data to be desensitized.

[0068] Sensitive data identification rules include sensitive field types and sensitive field identification rules corresponding to sensitive field types. Metadata is used to describe the content carried by the data to be desensitized. Metadata may include, but is not limited to, the name of the data to be desensitized, the fields included in the data to be desensitized, the location of the fields in the data to be desensitized, and the annotation content included in the data to be desensitized. The specific process of identifying metadata based on sensitive data identification rules and obtaining security metadata may include 102A1-102A2:

[0069] 102A1. For each sensitive field type, identify the sensitive field corresponding to the sensitive field type in the metadata based on the sensitive field identification rule corresponding to the sensitive field type; if the corresponding sensitive field is identified, generate description data corresponding to the sensitive data based on the identified sensitive field and the position of the identified sensitive field in the data to be desensitized.

[0070] The sensitive field identification rule corresponding to the sensitive field type may be a regular expression for identifying the sensitive field corresponding to the sensitive field type. If the corresponding sensitive field is identified in the metadata by the corresponding sensitive field identification rule, it means that there is sensitive data in the data to be desensitized, and the sensitive data is the data corresponding to the sensitive field. Therefore, based on the identified sensitive field and the position of the identified sensitive field in the data to be desensitized, the description data corresponding to the sensitive data is generated. When generating the description data, the position of the identified sensitive field in the data to be desensitized is used to more quickly identify the sensitive data in the data to be desensitized based on the position.

[0071] 102A2. If all sensitive field types included in the sensitive data identification rules are identified, the generated description data is integrated to obtain security metadata.

[0072] If all sensitive field types included in the sensitive data identification rules are identified, it means that the sensitive data identification has been completed for the data to be desensitized, and the description data used to identify the sensitive data already exists, so the generated description data is integrated to obtain security metadata. The integration process mentioned here is to establish a mapping relationship between sensitive fields and corresponding locations.

[0073] 102B. Based on the security metadata, locate the sensitive data in the data to be desensitized.

[0074] Security metadata describes the sensitive fields corresponding to the sensitive data in the data to be desensitized and the location of the sensitive fields in the data to be desensitized. Therefore, the sensitive data in the data to be desensitized can be located based on security metadata. The sensitive data here refers to the data corresponding to the sensitive fields.

[0075] Furthermore, in order to further improve the accuracy of sensitive data identification, after the step of "identifying the sensitive field corresponding to the sensitive field type in the metadata based on the sensitive field identification rule corresponding to the sensitive field type" involved in the above step 102A1, the following steps 1 to 3 may also be performed:

[0076] Step 1: If the corresponding sensitive field is identified, sample data corresponding to the identified sensitive field is extracted from the data to be desensitized.

[0077] After the corresponding sensitive fields are identified, sample data corresponding to the identified sensitive fields are extracted from the data to be desensitized to verify whether the sensitive fields involved in the sample data correspond to the sensitive field types. The method for extracting the sample data here can be: calling a data extraction tool, extracting data from the data to be desensitized through the identified sensitive fields, and obtaining data corresponding to the identified sensitive fields; and determining at least part of the data as sample data.

[0078] Step 2: If it is determined that the field type of the sample data matches the sensitive field type, the step of generating description data corresponding to the sensitive data based on the identified sensitive field and the position of the identified sensitive field in the data to be desensitized is executed.

[0079] If it is determined that the field type of the sample data matches the sensitive field type, it means that the sensitive field is identified accurately, and the process proceeds to execute the step of generating descriptive data corresponding to the sensitive data based on the identified sensitive field and the position of the identified sensitive field in the data to be desensitized.

[0080] Step three: if it is determined that the field type of the sample data does not match the sensitive field type, a prompt indicating that the sensitive field type identification failed is issued.

[0081] If it is determined that the field type of the sample data does not match the sensitive field type, indicating that the sensitive field recognition is abnormal, a prompt indicating that the sensitive field type recognition failed is issued, so that the business personnel can manually check and correct the sensitive field type and the sensitive field recognition rules corresponding to the sensitive field type based on the prompt.

[0082] Furthermore, after the above step 102A, if all sensitive field types included in the sensitive data identification rules are identified and there is no descriptive data corresponding to the sensitive data, a prompt is issued that there is no sensitive data in the data to be desensitized, and / or the data to be desensitized is transmitted to the next node adjacent to the link node.

[0083] If all sensitive field types included in sensitive data identification are identified, and there is no descriptive data corresponding to the sensitive data, it means that no sensitive fields are identified in the data to be desensitized, and the data to be desensitized most likely does not include sensitive data. Therefore, a prompt that there is no sensitive data in the data to be desensitized may be issued to let business personnel know the fact that there is no sensitive data in the data to be desensitized.

[0084] In addition, if all sensitive field types included in the sensitive data identification have been identified and there is no descriptive data corresponding to the sensitive data, then since it has been determined that there is no sensitive data in the data to be desensitized, the data to be desensitized can be transmitted to the next link node adjacent to the link node in the data processing link, so that the next node can continue to perform corresponding data processing.

[0085] 103. Desensitize the identified sensitive data.

[0086] The purpose of desensitizing the identified sensitive data is to protect the sensitive data and prevent the sensitive data from being leaked. The specific process of desensitizing the identified sensitive data includes the following steps 103A to 103B:

[0087] 103A. Determine a desensitization rule that matches the data desensitization requirement; wherein the desensitization rule is used to indicate a desensitization processing method that matches the corresponding sensitive field.

[0088] The desensitization rule is used to desensitize sensitive data in the data to be desensitized. The specific process of determining the desensitization rule that matches the data desensitization requirement includes the following steps 103A1 to 103A3:

[0089] 103A1. Determine the data classification and data classification that matches each sensitive field in the identified sensitive data.

[0090] Data classification is used to indicate the sensitivity level of the corresponding sensitive field. Data classification is used to indicate the sensitivity group of the corresponding sensitive field.

[0091] In order to clarify the sensitivity of each sensitive field, the data classification and data classification that matches each sensitive field in the identified sensitive data are determined. The data classification of sensitive fields can be determined in the following two ways: First, it is determined based on pre-set data classification rules, where the data classification rules pre-define the correspondence between data classification and sensitive fields. Second, the sensitive fields are displayed so that business personnel can manually configure matching data classifications for sensitive fields. The data classification of sensitive fields can also be determined in the following two ways: First, it is determined based on pre-set data classification rules, where the data classification rules pre-define the correspondence between data classification and sensitive fields. Second, the sensitive fields are displayed so that business personnel can manually configure matching data classifications for sensitive fields.

[0092] Data classification indicates the sensitivity level of the corresponding sensitive field, and is used to distinguish the sensitivity levels of sensitive fields. Exemplarily, data classification can be set based on industry standards or corporate standards, which may include but are not limited to the following: core commercial secrets, ordinary commercial secrets, internal data, public data, etc. Data classification is used to indicate the sensitive group of the corresponding sensitive field, which is used to define the business attributes of data in the security field and assist in distinguishing the sensitive groups of data. Sensitive groups have a parent-child relationship, and a parent group can have multiple subgroups. For example, a parent group includes the following subgroups: finance, customers, projects, and human resources.

[0093] Exemplarily, if the sensitive field is "ID number", the matching data is determined to be graded as "internal data" and the matching data is classified as "human resources".

[0094] Furthermore, in order to improve the accuracy of desensitization processing, before determining the matching desensitization processing method for each sensitive field based on the data classification and data classification matched by each sensitive field, the sensitive data processing method may also include the following steps: determining the blood relationship between the sensitive fields in the identified sensitive data. Based on the determined blood relationship, correcting the data classification and data classification corresponding to each sensitive field.

[0095] Based on the blood relationship between sensitive fields, the blood relationship between data levels and the blood relationship between data classifications can be depicted. In order to avoid desensitizing sensitive fields that do not match their data levels and data classifications, after determining the data level and data classification that each sensitive field matches, the blood relationship between the sensitive fields is determined, so as to assist in correcting sensitive fields with incorrect data classifications and data classifications through the blood relationship between sensitive fields.

[0096] Check whether the blood relationship between the data levels and the blood relationship between the data categories corresponding to each sensitive field is consistent with the blood relationship between the sensitive fields. If not, modify the data levels and data categories corresponding to the sensitive fields based on the blood relationship between the sensitive fields.

[0097] Exemplarily, it is determined that the data corresponding to sensitive field A is generated by the data corresponding to sensitive field B, and the blood relationship between sensitive field A and sensitive field B is that sensitive field A flows to sensitive field B. It is determined that the data classification of sensitive field A and sensitive field B should both be core commercial secrets. However, after detection, the data classification of sensitive field B is ordinary commercial secrets, and the data classification of sensitive field B is revised to core commercial secrets.

[0098] 103A2. Based on the data classification and data classification that matches each sensitive field, determine a matching desensitization processing method for each sensitive field.

[0099] The data classification and data category corresponding to the sensitive fields respectively represent the sensitivity level and sensitive group of the data corresponding to the sensitive fields. Therefore, a matching desensitization processing method can be selected based on the data classification and data category corresponding to the sensitive fields.

[0100] When selecting a matching desensitization processing method based on the data classification and data classification corresponding to the sensitive field, for sensitive fields in the link node application scenario of human-computer interaction, a desensitization processing method suitable for dynamic desensitization is selected. For sensitive fields in the link node application scenario of non-human-computer interaction, a desensitization processing method suitable for static desensitization is selected.

[0101] The application scenario of the link node is the sensitive field of the human-computer interaction scenario, which means that the data corresponding to the sensitive field will be subjected to ad hoc query or data preview and other operations at the link node. At this time, in order not to affect the underlying data, the selected desensitization processing method is suitable for dynamic desensitization.

[0102] Furthermore, for sensitive fields in human-computer interaction scenarios where the link node is used, if it is necessary to temporarily open the query rights of real data to some business personnel to complete the specified business goals, the sensitive fields involved in the specified business goals are determined, and the sensitive fields are added to the dynamic desensitization whitelist, so that when this part is provided to business personnel, the data corresponding to these sensitive fields will not be dynamically desensitized. The specified business goals can be set based on specific business needs. Exemplary, the specified business goals are: troubleshooting for data research and development, public data for a specific period of time, etc.

[0103] If the application scenario of the link node is a sensitive field in a non-human-computer interaction scenario, it means that the data corresponding to the sensitive field does not need to be displayed to the user. At this time, the sensitive data corresponding to the sensitive field is statically desensitized directly at the bottom layer. The selected desensitization processing method is suitable for static desensitization.

[0104] 103A3. Based on the desensitization processing method matched by each sensitive field, a desensitization rule is formed.

[0105] In the desensitization rules, sensitive fields are bound to desensitization processing methods one by one, and a matching desensitization processing method is set for each sensitive field identified. The desensitization processing method sets the protection method for sensitive data corresponding to the matching sensitive field. The desensitization processing method may include but is not limited to any of the following: masking desensitization and hashing desensitization.

[0106] 103B. Desensitize the sensitive data in the data to be desensitized based on the desensitization rules.

[0107] After the desensitization rules are determined, the following steps are performed for each sensitive field in the desensitization rules: identifying the sensitive data corresponding to the sensitive fields in the data to be desensitized; and desensitizing the sensitive data using the corresponding desensitization processing method, thereby completing the protection of the sensitive data.

[0108] The sensitive data processing method provided in the embodiment of the present application determines the metadata for describing the content carried by the data to be desensitized corresponding to the data to be desensitized in the link node of the data processing link. Then, based on the metadata and the sensitive data identification rules that match the metadata, the sensitive data in the data to be desensitized is identified, and the identified sensitive data is desensitized. It can be seen that before the data in the link node is passed to the next adjacent node, the data to be desensitized in the link node is desensitized, and the protection of the sensitive data in the data to be desensitized is achieved, so that the sensitive data can be effectively identified and protected in each link node from the data entering the data processing link to leaving the data processing link throughout the entire life cycle, thereby preventing the leakage of sensitive data.

[0109] In some embodiments of the present application, for any link node in the data processing link, the sensitive data included therein may be operated. In order to protect the sensitive data included in the link node, it is necessary to audit the operation behavior when the sensitive data is operated, so as to promptly identify and stop illegal operations. Therefore, the sensitive data processing method may also include the following steps 104 to 106:

[0110] 104. Determine at least one risk dimension; wherein the risk dimension is used to indicate corresponding data operation behavior characteristics.

[0111] In practical applications, based on specific application needs, determine at least one risk dimension required for auditing. The risk dimension is used to indicate the corresponding data operation behavior characteristics. For example, the risk dimension may include but is not limited to the time when the operation occurs, the user role, the number of times the operation occurs, and the sensitive field.

[0112] 105. If it is determined that sensitive data in the link node has been operated, determine the characteristic value corresponding to the at least one risk dimension based on the operation behavior data generated by the current operation and the attribute information of the operated sensitive data; wherein the characteristic value is used to reflect the risk situation brought by the corresponding data operation behavior characteristics to the sensitive data with attribute information.

[0113] For any link node in the data processing link, after sensitive data processing is performed on the data generated by it, the sensitive data will be marked in the data generated by it and stored by it. In some scenarios such as data query, the sensitive data in the link node may be operated by the user.

[0114] If it is determined that sensitive data at a link node has been manipulated, the following two types of data will be determined: one is the operation behavior data generated by the current operation, which describes the user's specific operation behavior on the data. For example, the user information of the operation behavior, the time when the operation occurred, and the specific action of the operation (for example, access, export, create, modify, delete, etc.). The other is the attribute information of the manipulated sensitive data, which is the data location corresponding to the manipulated sensitive data and the sensitive field corresponding to the manipulated sensitive data.

[0115] The characteristic value is used to reflect the risk situation brought by the corresponding data operation behavior characteristics to sensitive data with attribute information. A characteristic value can be determined based on a single risk dimension combined with attribute information, or based on two or more risk dimensions combined with attribute information.

[0116] Exemplarily, the risk dimension is user role. After analyzing the operation behavior data, it is determined that the user information is a human resources manager. The sensitive data described in the attribute information corresponding to the sensitive data being operated is salary. Then, the two information of human resources manager and salary are matched with the preset feature value assessment standard, and the corresponding feature value is 0.

[0117] Exemplarily, the risk dimensions are user roles and specific actions performed. After analyzing the operation behavior data, it is determined that the user information is an employee, the sensitive data described in the attribute information corresponding to the sensitive data being operated is salary, and the specific action for the sensitive data is deletion. Then, the three information of employee, salary and deletion are matched with the preset feature value assessment standard, and the corresponding feature value is 10.

[0118] 106. Determine whether the current operation is legal based on the characteristic value corresponding to the at least one risk dimension.

[0119] The characteristic value corresponding to the at least one risk dimension can reflect the risk level of the current operation, so whether the current operation is legal is determined by auditing the characteristic value corresponding to the at least one risk dimension. The specific process of judging whether the current operation is legal based on the characteristic value corresponding to the at least one risk dimension includes: determining the sensitive field corresponding to the operated sensitive data; selecting the risk audit rule that matches the sensitive field and the link node; wherein the risk audit rule is used to indicate the normal characteristic value range or the abnormal characteristic value range corresponding to the at least one risk dimension; auditing whether the characteristic value corresponding to the at least one risk dimension falls into the corresponding normal characteristic value range or abnormal characteristic value range based on the risk audit rule; and determining whether the current operation has a risk based on the falling situation of the characteristic value corresponding to the at least one risk dimension.

[0120] If the characteristic value corresponding to at least one of the risk dimensions does not fall into the corresponding normal characteristic value range or falls into the corresponding abnormal characteristic value range, it means that the current operation is an illegal operation. In this case, it is determined that the current operation is illegal, and the current operation needs to be intercepted and a prompt for illegal operation is issued.

[0121] If the characteristic value corresponding to the at least one risk dimension does not fall within the corresponding normal characteristic value range or falls within the corresponding abnormal characteristic value range, it means that the current operation is a legal operation and the current operation can continue to be monitored.

[0122] In some embodiments of the present application, the following Figure 2 The schematic diagram of the sensitive data processing logic shown is used to illustrate the sensitive data processing method provided in an embodiment of the present application.

[0123] According to the logical function Figure 2 The metadata module, data security module, data development module, data audit module and data security directory module are shown.

[0124] The data development module shows a data processing link, which includes an acquisition node, an access node, a processing node, and an exit node. The sensitive data in the data processed by each link node in the data processing link needs to be desensitized before it is passed to the next link node. Among them, the acquisition node is mainly used to receive the data source. The following uses the data to be transmitted from the access node to the processing node as the data to be desensitized to illustrate the sensitive data processing process.

[0125] After the data development module determines that the data to be transmitted from the access node to the processing node is the data to be desensitized, the metadata module determines that the metadata matching the data to be desensitized is the "data access metadata", and provides the "data access metadata" to the data security module, so that the data security module can identify the sensitive data in the data to be desensitized and desensitize the sensitive data. The sensitive data discovery unit in the data security module generates security metadata in the sensitive data calculation subunit based on the metadata "data access metadata" and the sensitive data identification rules matching the "data access metadata", and performs sensitive data identification on the data to be desensitized based on the security metadata. The security metadata will be provided to the data security directory module for users to retrieve the security metadata to understand which sensitive data is included in the data to be desensitized.

[0126] After identifying the sensitive data, the sensitive data discovery unit determines the matching desensitization rules based on the security metadata. The specific process of determining the matching desensitization rules based on the security metadata is: refer to the preset data classification definition and data classification definition to determine the data classification and data classification that match each sensitive field in the identified sensitive data. Based on the data classification and data classification that match each sensitive field, determine the matching desensitization processing method for each sensitive field. Based on the desensitization processing method that matches each sensitive field, form the desensitization rules. After defining the desensitization rules, the data development module references the desensitization rules and performs desensitization processing on the data to be desensitized at the access node. The access node transmits the desensitized data to the processing node.

[0127] It can be seen from the data development module that the data entering the data development module will pass through the link nodes in the data processing link in sequence starting from the acquisition node, and form compliant data after being processed by the outbound node, and the compliant data will be provided to the data application party for use.

[0128] When the user initiates data preview or ad hoc query operations related to data exploration to the data development module, the data audit module performs the following operations: the recording unit in the data audit module determines the operated link node and the sensitive data operated at the link node, and the operation behavior data generated by the current operation and the attribute information of the operated sensitive data. The audit unit in the data audit module determines at least one risk dimension, and determines the characteristic value corresponding to the at least one risk dimension based on the operation behavior data generated by the current operation and the attribute information of the operated sensitive data; wherein the characteristic value is used to reflect the risk situation brought by the corresponding data operation behavior characteristics to the sensitive data with attribute information; based on the characteristic value corresponding to the at least one risk dimension, it is judged whether the current operation is legal. The judgment of whether the current operation is legal based on the characteristic value corresponding to the at least one risk dimension is based on the risk audit rule, specifically: determining the sensitive field corresponding to the operated sensitive data, and selecting the risk audit rule matching the sensitive field and the link node. Based on the risk audit rule, it is audited whether the characteristic value corresponding to the at least one risk dimension falls into the corresponding normal characteristic value range or abnormal characteristic value range. Based on the falling situation of the characteristic value corresponding to the at least one risk dimension, it is determined whether the current operation has a risk.

[0129] Furthermore, an embodiment of the present application also provides a sensitive data processing device, such as Figure 3 As shown, the sensitive data processing device includes:

[0130] A determination module 21 is used to determine metadata corresponding to the data to be desensitized in the link node; wherein the metadata is used to describe the content carried by the data to be desensitized;

[0131] An identification module 22, configured to identify sensitive data in the data to be desensitized based on the metadata and a sensitive data identification rule matching the metadata; wherein the sensitive data identification rule is configured to identify description data corresponding to the sensitive data from the content carried by the matching metadata;

[0132] The processing module 23 is used to perform desensitization processing on the identified sensitive data.

[0133] The sensitive data processing device provided in the embodiment of the present application determines the metadata for describing the content carried by the data to be desensitized corresponding to the data to be desensitized in the link node of the data processing link. Then, based on the metadata and the sensitive data identification rules that match the metadata, the sensitive data in the data to be desensitized is identified, and the identified sensitive data is desensitized. It can be seen that before the data in the link node is passed to the next adjacent node, the data to be desensitized in the link node is desensitized, thereby realizing the protection of the sensitive data in the data to be desensitized, so that the sensitive data can be effectively identified and protected at each link node in the entire life cycle from the data entering the data processing link to leaving the data processing link, thereby preventing the leakage of sensitive data.

[0134] In some embodiments of the present application, Figure 4 As shown, the determination module 21 includes:

[0135] The first determination unit 211 is used to determine the empirical metadata corresponding to the link node that matches the data type of the data to be desensitized as the metadata corresponding to the data to be desensitized; wherein the empirical metadata is obtained based on the metadata corresponding to the data processed by the link node.

[0136] In some embodiments of the present application, Figure 4 As shown, the determination module 21 includes:

[0137] The second determining unit 212 is used to determine the metadata of the data to be desensitized as the metadata corresponding to the data to be desensitized.

[0138] In some embodiments of the present application, Figure 4 As shown, the identification module 22 includes:

[0139] The third determination unit 221 is used to issue a rule configuration prompt, wherein the rule configuration prompt is used to indicate the configuration of a sensitive data identification rule applicable to the metadata; if a sensitive data identification rule for the rule configuration prompt is obtained, the obtained sensitive data identification rule is determined as the sensitive data identification rule that matches the metadata.

[0140] In some embodiments of the present application, Figure 4As shown, the identification module 22 includes:

[0141] The fourth determination unit 222 is used to determine the sensitive data identification rule that matches the data type of the metadata among the sensitive data identification rules corresponding to the link node as the sensitive data identification rule that matches the metadata.

[0142] In some embodiments of the present application, Figure 4 As shown, the identification module 22 includes:

[0143] A generating unit 223 is used to identify the metadata based on the sensitive data identification rule to obtain security metadata; wherein the security metadata is used to describe the sensitive fields corresponding to the sensitive data in the data to be desensitized and the positions of the sensitive fields in the data to be desensitized;

[0144] The identification unit 224 is used to locate the sensitive data in the data to be desensitized based on the security metadata.

[0145] In some embodiments of the present application, Figure 4 As shown, the sensitive data identification rules include sensitive field types and sensitive field identification rules corresponding to the sensitive field types, and the generation unit 221 is specifically used to identify, for each of the sensitive field types, the sensitive field corresponding to the sensitive field type in the metadata based on the sensitive field identification rules corresponding to the sensitive field type; if the corresponding sensitive field is identified, based on the identified sensitive field and the position of the identified sensitive field in the data to be desensitized, generate description data corresponding to the sensitive data; if all sensitive field types included in the sensitive data identification rules are identified, integrate the generated description data to obtain the security metadata.

[0146] In some embodiments of the present application, Figure 4 As shown, the identification module 22 also includes:

[0147] The extraction unit 225 is used to extract sample data corresponding to the identified sensitive field from the data to be desensitized if the corresponding sensitive field is identified;

[0148] The determination unit 226 is used for, if it is determined that the field type of the sample data matches the sensitive field type, proceeding to execute the step of generating description data corresponding to the sensitive data based on the identified sensitive field and the position of the identified sensitive field in the data to be desensitized; if it is determined that the field type of the sample data does not match the sensitive field type, issuing a prompt that the identification of the sensitive field type fails.

[0149] In some embodiments of the present application, Figure 4As shown, the identification unit 224 is also used to issue a prompt that there is no sensitive data in the data to be desensitized if all sensitive field types included in the sensitive data identification rule are identified and there is no descriptive data corresponding to the sensitive data, and / or transmit the data to be desensitized to the next node adjacent to the link node.

[0150] In some embodiments of the present application, Figure 4 As shown, the processing module 23 includes:

[0151] The fifth determining unit 231 is used to determine a desensitization rule that matches the data desensitization requirement; wherein the desensitization rule is used to indicate a desensitization processing method that matches the corresponding sensitive field;

[0152] The processing unit 232 is used to perform desensitization processing on the sensitive data in the data to be desensitized based on the desensitization rule.

[0153] In some embodiments of the present application, Figure 4 As shown, the fifth determination unit 231 is specifically used to determine the data classification and data classification that matches each sensitive field in the identified sensitive data; wherein the data classification is used to indicate the sensitivity level of the corresponding sensitive field; the data classification is used to indicate the sensitive group of the corresponding sensitive field; based on the data classification and data classification that matches each of the sensitive fields, a matching desensitization processing method is determined for each of the sensitive fields; based on the desensitization processing method that matches each sensitive field, the desensitization rule is formed.

[0154] In some embodiments of the present application, Figure 4 As shown, the fifth determination unit 231 is specifically used to select a desensitization processing method suitable for dynamic desensitization for sensitive fields whose application scenario at the link node is a human-computer interaction scenario; and to select a desensitization processing method suitable for static desensitization for sensitive fields whose application scenario at the link node is a non-human-computer interaction scenario.

[0155] In some embodiments of the present application, Figure 4 As shown, the fifth determination unit 231 is also used to determine the blood relationship between the sensitive fields in the identified sensitive data; based on the determined blood relationship, correct the data classification and data classification corresponding to each sensitive field.

[0156] In some embodiments of the present application, Figure 4 As shown, the sensitive data processing device also includes:

[0157] The audit module 24 is used to determine at least one risk dimension; wherein the risk dimension is used to indicate the corresponding data operation behavior characteristics; if it is determined that the sensitive data in the link node is operated, then based on the operation behavior data generated by the current operation and the attribute information of the operated sensitive data, the characteristic value corresponding to the at least one risk dimension is determined; wherein the characteristic value is used to reflect the risk situation brought by the corresponding data operation behavior characteristics to the sensitive data with attribute information; based on the characteristic value corresponding to the at least one risk dimension, it is judged whether the current operation is legal.

[0158] In some embodiments of the present application, Figure 4 As shown, the audit module 24 is specifically used to determine the sensitive field corresponding to the operated sensitive data; select the risk audit rule that matches the sensitive field and the link node; wherein the risk audit rule is used to indicate the normal characteristic value range corresponding to the at least one risk dimension, or the abnormal characteristic value range; based on the risk audit rule, audit whether the characteristic value corresponding to the at least one risk dimension falls into the corresponding normal characteristic value range or abnormal characteristic value range; based on the falling of the characteristic value corresponding to the at least one risk dimension, determine whether the current operation has a risk.

[0159] In the sensitive data processing device provided in the embodiment of the present application, the detailed explanations used in the operation of each functional module can be found in the corresponding method detailed explanations of the above-mentioned sensitive data processing method embodiment, which will not be repeated here.

[0160] Furthermore, an embodiment of the present application also provides a computer-readable storage medium, wherein the storage medium includes a stored program, wherein when the program is executed, the device where the storage medium is located is controlled to execute the above-mentioned sensitive data processing method.

[0161] Furthermore, an embodiment of the present application also provides an electronic device, comprising: a memory for storing programs; and a processor, coupled to the memory, for running the program to execute the above-mentioned sensitive data processing method.

[0162] In the above embodiments, the description of each embodiment has its own emphasis. For parts that are not described in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0163] It is understandable that the related features in the above methods and devices can be referenced to each other. In addition, the "first", "second" and the like in the above embodiments are used to distinguish the embodiments, but do not represent the advantages and disadvantages of the embodiments.

[0164] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0165] The algorithm and display provided herein are not inherently related to any particular computer, virtual system or other device. Various general purpose systems can also be used together with the teachings based on this. According to the above description, it is obvious to construct the structure required for this type of system. In addition, the application is not directed to any specific programming language either. It should be understood that various programming languages ​​can be utilized to realize the content of the application described herein, and the description of the above specific language is to disclose the preferred embodiment of the application.

[0166] In addition, the memory may include non-permanent memory in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM, and the memory includes at least one memory chip.

[0167] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented in one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that include computer-usable program code.

[0168] The present application is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present application. It should be understood that the flowcharts can be implemented by computer program instructions.

[0169] Each process and / or box in the flowchart and / or block diagram, and the combination of the processes and / or boxes in the flowchart and / or block diagram. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor or other programmable data switching device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data switching device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0170] These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data switching device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce a manufactured product including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0171] These computer program instructions can also be loaded onto a computer or other programmable data transfer device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for executing on the computer or other programmable device to implement the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0172] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0173] The memory may include non-permanent memory in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM. The memory is an example of a computer-readable medium.

[0174] Computer readable media include permanent and non-permanent, removable and non-removable media that can be used to store information by any method or technology. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be operated by a computing device. As defined herein, computer readable media does not include temporary computer readable media (transitory media), such as modulated data signals and carrier waves.

[0175] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

[0176] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment or an embodiment in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that contain computer-usable program code.

[0177] The above are only embodiments of the present application and are not intended to limit the present application. For those skilled in the art, the present application may have various changes and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application should be included within the scope of the claims of the present application.

Claims

1. A sensitive data processing method, characterized in that: The method comprises: Determine metadata corresponding to the data to be desensitized in the link node; wherein the metadata is used to describe the content carried by the data to be desensitized; Based on the metadata and the sensitive data identification rule matching the metadata, identifying the sensitive data in the data to be desensitized; wherein the sensitive data identification rule is used to identify the description data corresponding to the sensitive data from the content carried by the matching metadata; Desensitize the identified sensitive data.

2. The method according to claim 1, characterized in that Determine the metadata corresponding to the data to be desensitized in the link node, including: The empirical metadata corresponding to the link node and matching the data type of the data to be desensitized is determined as the metadata corresponding to the data to be desensitized; wherein the empirical metadata is obtained based on the metadata corresponding to the data processed by the link node.

3. The method according to claim 1, characterized in that Determine the metadata corresponding to the data to be desensitized in the link node, including: The metadata of the data to be desensitized is determined as the metadata corresponding to the data to be desensitized.

4. The method according to claim 1, characterized in that: The method further comprises: issuing a rule configuration prompt, wherein the rule configuration prompt is used to indicate configuration of a sensitive data identification rule applicable to the metadata; If a sensitive data identification rule prompted by the rule configuration is obtained, the obtained sensitive data identification rule is determined as the sensitive data identification rule matched by the metadata.

5. The method according to claim 1, characterized in that: The method further comprises: The sensitive data identification rule corresponding to the link node that matches the data type of the metadata is determined as the sensitive data identification rule that matches the metadata.

6. The method according to any one of claims 1 to 5, characterized in that Based on the metadata and a sensitive data identification rule matching the metadata, identifying sensitive data in the data to be desensitized includes: The metadata is identified based on the sensitive data identification rule to obtain security metadata; wherein the security metadata is used to describe the sensitive fields corresponding to the sensitive data in the data to be desensitized and the positions of the sensitive fields in the data to be desensitized; Based on the security metadata, sensitive data in the data to be desensitized is located.

7. The method according to claim 6, characterized in that The sensitive data identification rule includes a sensitive field type and a sensitive field identification rule corresponding to the sensitive field type. The metadata is identified based on the sensitive data identification rule to obtain security metadata, including: For each of the sensitive field types, identifying the sensitive field corresponding to the sensitive field type in the metadata based on the sensitive field identification rule corresponding to the sensitive field type; if the corresponding sensitive field is identified, generating description data corresponding to the sensitive data based on the identified sensitive field and the position of the identified sensitive field in the data to be desensitized; If all sensitive field types included in the sensitive data identification rule are identified, the generated description data is integrated to obtain the security metadata.

8. The method according to claim 7, characterized in that The method further comprises: If a corresponding sensitive field is identified, sample data corresponding to the identified sensitive field is extracted from the data to be desensitized; If it is determined that the field type of the sample data matches the sensitive field type, proceeding to the step of generating description data corresponding to the sensitive data based on the identified sensitive field and the position of the identified sensitive field in the data to be desensitized; If it is determined that the field type of the sample data does not match the sensitive field type, a prompt is issued indicating that the sensitive field type identification has failed.

9. The method according to claim 7, characterized in that: The method further comprises: If all sensitive field types included in the sensitive data identification rules are identified and there is no descriptive data corresponding to the sensitive data, a prompt is issued that there is no sensitive data in the data to be desensitized, and / or the data to be desensitized is transmitted to the next node adjacent to the link node.

10. The method according to any one of claims 1 to 5, characterized in that Desensitize the identified sensitive data, including: Determine a desensitization rule that matches the data desensitization requirement; wherein the desensitization rule is used to indicate a desensitization processing method that matches the corresponding sensitive field; Desensitizing the sensitive data in the data to be desensitized based on the desensitization rules.

11. The method according to claim 10, characterized in that Determine the masking rules that match the data masking requirements, including: Determine the data classification and data category that matches each sensitive field in the identified sensitive data; wherein the data classification is used to indicate the sensitivity level of the corresponding sensitive field; and the data category is used to indicate the sensitivity group of the corresponding sensitive field; Based on the data classification and data classification matched by each of the sensitive fields, determine a matching desensitization processing method for each of the sensitive fields; The desensitization rules are formed based on the desensitization processing method matched by each sensitive field.

12. The method according to claim 11, characterized in that Based on the data classification and data classification matched by each sensitive field, a matching desensitization processing method is determined for each sensitive field, including: For sensitive fields whose application scenario of the link node is a human-computer interaction scenario, a desensitization processing method suitable for dynamic desensitization is selected; For sensitive fields whose application scenarios at the link nodes are non-human-computer interaction scenarios, a desensitization processing method suitable for static desensitization is selected.

13. The method according to claim 11, characterized in that Before determining a matching desensitization processing mode for each sensitive field based on the data classification and data classification matched by each sensitive field, the method further includes: Determine the relationship between sensitive fields in the identified sensitive data; Based on the determined blood relationship, the data classification and data classification corresponding to each sensitive field are modified.

14. The method according to any one of claims 1 to 5, characterized in that The method further comprises: Determine at least one risk dimension; wherein the risk dimension is used to indicate corresponding data operation behavior characteristics; If it is determined that the sensitive data in the link node has been operated, then based on the operation behavior data generated by the current operation and the attribute information of the operated sensitive data, a characteristic value corresponding to the at least one risk dimension is determined; wherein the characteristic value is used to reflect the risk situation brought by the corresponding data operation behavior characteristics to the sensitive data with attribute information; Whether the current operation is legal is determined based on the characteristic value corresponding to the at least one risk dimension.

15. The method according to claim 14, characterized in that Judging whether the current operation is legal based on the characteristic value corresponding to the at least one risk dimension includes: Determine the sensitive fields corresponding to the sensitive data being operated; Selecting a risk audit rule that matches the sensitive field and the link node; wherein the risk audit rule is used to indicate a normal feature value range or an abnormal feature value range corresponding to the at least one risk dimension; Auditing whether the characteristic value corresponding to the at least one risk dimension falls within the corresponding normal characteristic value range or abnormal characteristic value range based on the risk audit rule; Based on the occurrence of a characteristic value corresponding to the at least one risk dimension, it is determined whether a current operation has a risk.

16. A sensitive data processing device, characterized in that: The device comprises: A determination module, used to determine metadata corresponding to the data to be desensitized in the link node; wherein the metadata is used to describe the content carried by the data to be desensitized; an identification module, configured to identify sensitive data in the data to be desensitized based on the metadata and a sensitive data identification rule matching the metadata; wherein the sensitive data identification rule is configured to identify description data corresponding to the sensitive data from the content carried by the matching metadata; The processing module is used to desensitize the identified sensitive data.

17. A computer-readable storage medium, characterized in that: The storage medium includes a stored program, wherein when the program is running, the device where the storage medium is located is controlled to execute the sensitive data processing method described in any one of claims 1 to claim 15.

18. An electronic device, characterized in that: The electronic device comprises: Memory, used to store programs; A processor, coupled to the memory, is used to run the program to execute the sensitive data processing method described in any one of claims 1 to claim 15.

Images