Log desensitization method and device, electronic equipment and computer readable storage medium

Abstract

The invention relates to the technical field of financial science and technology, and provides a log desensitization method and device, electronic equipment and a computer readable storage medium, and the method comprises the steps: obtaining a to-be-desensitized log; analyzing and processing the effective mode of the to-be-desensitized log to obtain log effective mode information; determining to-be-desensitized information from the to-be-desensitized log according to the log effective mode information; analyzing and processing the type of the information to be desensitized to obtain type information of the information to be desensitized; and performing desensitization encryption processing on the to-be-desensitized information according to the type information and a preset desensitization encryption strategy. According to the technical scheme, the log desensitization step can be simplified, so that later system maintenance can be facilitated.

Description

Technical Field

[0001] The embodiments of the present application relate to but are not limited to the field of financial technology, and in particular to a log desensitization method, device, electronic device, and computer-readable storage medium. Background Art

[0002] With the continuous development of social economy and the continuous advancement of science and technology, various application systems have been increasingly used in the financial industry to process various businesses. In the process of using various application systems to intelligently process various business personnel, corresponding logs are often generated. However, the logs generally contain sensitive information of users. In order to prevent the leakage of sensitive information, it is often necessary to desensitize the sensitive information. However, the current desensitization process of sensitive information in logs requires manual multi-step encryption operations. The whole process is relatively complicated, which is not conducive to the subsequent maintenance and processing of sensitive information. Summary of the invention

[0003] The following is a summary of the subject matter described in detail herein. This summary is not intended to limit the scope of the claims.

[0004] In order to solve the problems mentioned in the above background technology, the embodiments of the present application provide a log desensitization method, device, electronic device and computer-readable storage medium, which can simplify the steps of log desensitization, thereby facilitating subsequent system maintenance.

[0005] In a first aspect, an embodiment of the present application provides a log desensitization method, comprising:

[0006] Get the logs to be desensitized;

[0007] Analyze and process the effectiveness mode of the log to be desensitized to obtain log effectiveness mode information;

[0008] Determining the information to be desensitized from the log to be desensitized according to the log validation mode information;

[0009] Analyze and process the type of the information to be desensitized to obtain type information of the information to be desensitized;

[0010] The information to be desensitized is desensitized and encrypted according to the type information and a preset desensitization encryption strategy.

[0011] According to some embodiments of the present application, the analyzing and processing of the effectiveness mode of the log to be desensitized to obtain log effectiveness mode information includes:

[0012] Identifying desensitized annotation information from the log to be desensitized;

[0013] Determine the log validation mode information according to the desensitized annotation information;

[0014] The log validation mode information includes class validation mode information and / or method validation mode information.

[0015] According to some embodiments of the present application, determining the information to be desensitized from the log to be desensitized according to the log validation mode information includes one of the following:

[0016] In a case where the log validation mode information is the class validation mode information, extracting first information to be desensitized from the log to be desensitized according to the class validation mode information;

[0017] In a case where the log validation mode information is the method validation mode information, the second information to be desensitized is extracted from the log to be desensitized according to the method validation mode information.

[0018] According to some embodiments of the present application, the analyzing and processing the type of the information to be desensitized to obtain the type information of the information to be desensitized includes:

[0019] Performing information splitting processing on the information to be desensitized to obtain multiple information blocks;

[0020] Performing semantic recognition processing on each of the information blocks to obtain corresponding semantic information;

[0021] The semantic information is matched with a preset type library to obtain type information of the information to be desensitized.

[0022] According to some embodiments of the present application, the desensitizing and encrypting the information to be desensitized according to the type information and a preset desensitizing and encryption strategy includes at least one of the following:

[0023] In the case where the type information indicates that the information to be desensitized is user name information, desensitizing and encrypting the user name information according to a preset name desensitization strategy;

[0024] In the case where the type information indicates that the information to be desensitized is number information, desensitizing and encrypting the number information according to a preset number desensitization strategy;

[0025] In the case where the type information indicates that the information to be desensitized is identity tag information, desensitizing and encrypting the identity tag information according to a preset identity tag desensitization strategy;

[0026] In the case where the type information indicates that the information to be desensitized is address information, desensitization and encryption processing is performed on the address information according to a preset address desensitization strategy.

[0027] According to some embodiments of the present application, after performing desensitizing and encrypting the information to be desensitized according to the type information and a preset desensitizing and encryption strategy, the method further includes:

[0028] The desensitized information obtained after the desensitization process is transmitted back to the log to be desensitized, so as to update the log to be desensitized to obtain a desensitized operation log.

[0029] According to some embodiments of the present application, after the desensitized information obtained after the desensitization process is transmitted back to the log to be desensitized, so as to update the log to be desensitized to obtain a desensitized operation log, the method further includes:

[0030] Performing sensitive information verification processing on the desensitized operation log;

[0031] If the inspection conditions are met, the desensitized operation log will be displayed.

[0032] In a second aspect, an embodiment of the present application further provides a log desensitization device, the device comprising:

[0033] The first processing module is used to obtain the logs to be desensitized;

[0034] The second processing module is used to analyze and process the effectiveness mode of the log to be desensitized to obtain log effectiveness mode information;

[0035] A third processing module is used to determine the information to be desensitized from the log to be desensitized according to the log validation mode information;

[0036] A fourth processing module is used to analyze and process the type of the information to be desensitized to obtain type information of the information to be desensitized;

[0037] The fifth processing module is used to perform desensitizing and encryption processing on the information to be desensitized according to the type information and a preset desensitizing and encryption strategy.

[0038] In a third aspect, an embodiment of the present application further provides an electronic device, comprising: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the computer program, the log desensitization method as described in the first aspect above is implemented.

[0039] In a fourth aspect, an embodiment of the present application further provides a computer-readable storage medium storing computer-executable instructions, wherein the computer-executable instructions are used to execute the log desensitization method described in the first aspect above.

[0040] The log desensitization method according to the embodiment provided by the present application has at least the following beneficial effects: in the process of log desensitization processing, first obtain the log to be desensitized; then analyze and process the effectiveness mode of the log to be desensitized, and obtain the log effectiveness mode information; then determine the information to be desensitized from the log to be desensitized according to the log effectiveness mode information; then analyze and process the type of the information to be desensitized, and obtain the type information of the information to be desensitized; finally, desensitize and encrypt the desensitized information according to the type information and the preset desensitization encryption strategy; through the above technical scheme, the log can be desensitized in an intelligent way, which greatly simplifies the log desensitization process, thereby facilitating the subsequent system maintenance. BRIEF DESCRIPTION OF THE DRAWINGS

[0041] The accompanying drawings are used to provide further understanding of the technical solution of the present application and constitute a part of the specification. Together with the embodiments of the present application, they are used to explain the technical solution of the present application and do not constitute a limitation on the technical solution of the present application.

[0042] Figure 1 This is a flow chart of a log desensitization method provided by an embodiment of the present application;

[0043] Figure 2 is a specific flow chart of step S200 provided in one embodiment of the present application;

[0044] Figure 3 is a specific flow chart of step S300 provided in one embodiment of the present application;

[0045] Figure 4 is a specific flow chart of step S400 provided in one embodiment of the present application;

[0046] Figure 5 is a specific flow chart of step S500 provided in one embodiment of the present application;

[0047] Figure 6 is a flow chart of a log desensitization method provided by another embodiment of the present application;

[0048] Figure 7 is a flow chart of a log desensitization method provided by another embodiment of the present application;

[0049] Figure 8 is a schematic diagram of a log desensitization device provided by an embodiment of the present application;

[0050] Fig. 9 It is a schematic diagram of an electronic device provided by an embodiment of the present application. DETAILED DESCRIPTION

[0051] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0052] It should be noted that although the functional modules are divided in the device schematic diagram and the logical order is shown in the flowchart, in some cases, the steps shown or described may be performed in a different order than the module division in the device or the order in the flowchart. The terms "first", "second", etc. in the specification and claims and the above drawings are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence.

[0053] It should be noted that, unless otherwise defined, all technical and scientific terms used herein have the same meaning as those commonly understood by those skilled in the art to which this application belongs. The terms used herein are only for the purpose of describing the embodiments of this application and are not intended to limit this application.

[0054] The embodiments of the present application can acquire and process relevant data based on artificial intelligence technology. Artificial Intelligence (AI) is the theory, method, technology and application system that uses digital computers or machines controlled by digital computers to simulate, extend and expand human intelligence, perceive the environment, acquire knowledge and use knowledge to obtain the best results.

[0055] AI is a new technical science that studies and develops theories, methods, technologies and application systems for simulating, extending and expanding human intelligence. Artificial intelligence is a branch of computer science. Artificial intelligence attempts to understand the essence of intelligence and produce a new intelligent machine that can respond in a similar way to human intelligence. Research in this field includes robots, language recognition, image recognition, natural language processing and expert systems. Artificial intelligence can simulate the information process of human consciousness and thinking. Artificial intelligence is also a theory, method, technology and application system that uses digital computers or machines controlled by digital computers to simulate, extend and expand human intelligence, perceive the environment, acquire knowledge and use knowledge to obtain the best results.

[0056] AI basic technologies generally include sensors, dedicated AI chips, cloud computing, distributed storage, big data processing technology, operation / interaction systems, mechatronics, etc. AI software technologies mainly include computer vision technology, robotics technology, biometrics technology, speech processing technology, natural language processing technology, and machine learning / deep learning.

[0057] Artificial intelligence is AI. AI is the theory, method, technology and application system that uses digital computers or machines controlled by digital computers to simulate, extend and expand human intelligence, perceive the environment, acquire knowledge and use knowledge to obtain the best results.

[0058] The servers involved in artificial intelligence technology can be independent servers or cloud servers that provide basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, content delivery networks (CDN), as well as big data and artificial intelligence platforms.

[0059] The present application provides a log desensitization method, device, electronic device and computer-readable storage medium. In the process of log desensitization processing, the log to be desensitized is first obtained; then, the effectiveness mode of the log to be desensitized is analyzed and processed to obtain the log effectiveness mode information; then, the information to be desensitized is determined from the log to be desensitized according to the log effectiveness mode information; then, the type of the information to be desensitized is analyzed and processed to obtain the type information of the information to be desensitized; finally, the desensitized information can be desensitized and encrypted according to the type information and a preset desensitization encryption strategy; through the above technical solution, the log can be desensitized in an intelligent way, which greatly simplifies the log desensitization process, thereby facilitating the subsequent system maintenance.

[0060] The log desensitization method provided in the embodiment of the present application relates to the field of financial technology. The log desensitization method provided in the embodiment of the present application can be applied to the terminal, can also be applied to the server side, and can also be software running in the terminal or the server side. In some embodiments, the terminal can be a smart phone, a tablet computer, a laptop computer, a desktop computer, etc.; the server side can be configured as an independent physical server, or it can be configured as a server cluster or distributed system composed of multiple physical servers, and can also be configured to provide cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, CDN, and big data and artificial intelligence platforms and other basic cloud computing services. Cloud servers; software can be applications that implement log desensitization methods, etc., but are not limited to the above forms.

[0061] The present application can be used in many general or special computer system environments or configurations. For example: personal computers, server computers, handheld or portable devices, tablet devices, multiprocessor systems, microprocessor-based systems, set-top boxes, programmable consumer electronics, network PCs, minicomputers, mainframe computers, distributed computing environments including any of the above systems or devices, etc. The present application can be described in the general context of computer-executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform specific tasks or implement specific abstract data types. The present application can also be practiced in distributed computing environments, in which tasks are performed by remote processing devices connected through a communication network. In a distributed computing environment, program modules can be located in local and remote computer storage media including storage devices.

[0062] It should be noted that in each specific implementation of the present application, when it comes to the need to perform relevant processing based on data related to user identity or characteristics such as user information, user behavior data, user historical data, and user location information, the user's permission or consent will be obtained first, and the collection, use, and processing of these data will comply with relevant laws, regulations, and standards. In addition, when the embodiment of the present application needs to obtain the user's sensitive personal information, the user's separate permission or consent will be obtained through a pop-up window or by jumping to a confirmation page. After clearly obtaining the user's separate permission or consent, the necessary user-related data for the normal operation of the embodiment of the present application will be obtained.

[0063] The embodiments of the present application are further described below in conjunction with the accompanying drawings.

[0064] like Figure 1 As shown, Figure 1 It is a flowchart of a log desensitization method provided by an embodiment of the present application, and the log desensitization method includes but is not limited to steps S100 to S500.

[0065] Step S100, obtaining the log to be desensitized;

[0066] Step S200, analyzing and processing the effectiveness mode of the log to be desensitized to obtain log effectiveness mode information;

[0067] Step S300, determining the information to be desensitized from the log to be desensitized according to the log validation mode information;

[0068] Step S400, analyzing and processing the type of the information to be desensitized to obtain type information of the information to be desensitized;

[0069] Step S500, desensitizing and encrypting the information to be desensitized according to the type information and the preset desensitizing and encryption strategy.

[0070] It should be noted that in the process of log desensitization, the log to be desensitized is first obtained; then the effectiveness method of the log to be desensitized is analyzed and processed to obtain the log effectiveness method information; then the information to be desensitized is determined from the log to be desensitized according to the log effectiveness method information; then the type of the information to be desensitized is analyzed and processed to obtain the type information of the information to be desensitized; finally, the desensitized information can be desensitized and encrypted according to the type information and the preset desensitization encryption strategy; through the above technical scheme, the log can be desensitized in an intelligent way, which greatly simplifies the log desensitization process, thereby facilitating the subsequent system maintenance.

[0071] It should be noted that log desensitization refers to processing the sensitive information contained in the log data to protect personal privacy and company secrets. This usually involves the following steps: Identify sensitive information. First, you need to determine which information is sensitive, such as personal information (name, address, phone number, email address, etc.), financial information, user passwords, internal company information, etc. Replace or delete. For the identified sensitive information, desensitization can be carried out by replacement or deletion. Replacement usually uses some placeholders (such as asterisks, etc.) to replace part or all of the sensitive information. Encryption. For some particularly sensitive information, encryption technology can be used to ensure that only authorized users can access it.

[0072] It is worth noting that in the financial industry, various application systems have been increasingly used to handle various businesses in the financial industry. In the process of using the application system, some log information is inevitably generated; however, these log information generally contain user names and user numbers. For the security of information, these personal sensitive information generally needs to be desensitized to prevent information leakage; however, traditional methods require manual operation of multiple steps, which makes the log desensitization process more complicated. Based on the technical solution of the embodiment of the present application, automated log desensitization operations can be implemented, which simplifies the log desensitization steps, and is more conducive to subsequent system maintenance, bringing operational convenience to operation and maintenance personnel.

[0073] It is worth noting that in the process of desensitizing the logs, the effectiveness mode of the logs to be desensitized is first analyzed and processed to obtain the log effectiveness mode information; wherein, the log effectiveness mode information includes class effectiveness mode and / or method effectiveness mode information; for different log effectiveness mode information, different information to be desensitized can be determined from the logs to be desensitized; then, the obtained information to be desensitized is analyzed and processed to obtain the type information of the information to be desensitized; finally, the information to be desensitized can be desensitized and encrypted according to the type information and the pre-set desensitizing encryption strategy.

[0074] It is worth noting that the embodiments of the present application will obtain the user's permission or consent before obtaining the log to be desensitized, and the collection, use and processing of these data will comply with relevant laws, regulations and standards. In addition, when the embodiments of the present application need to obtain the user's sensitive personal information, the user's separate permission or consent will be obtained through a pop-up window or jump to a confirmation page. After the user's separate permission or consent is clearly obtained, the necessary user-related data for the normal operation of the embodiments of the present application will be obtained.

[0075] It is worth noting that the desensitized information in the logs usually includes the following categories of content: personal identity information, health information, financial information, login credentials, communication content, geographic location information, and network information. Among them, personal identity information includes name, address, telephone number, email address, social security number / ID number, passport number, driver's license number, bank account or credit card information; health information includes medical records, health insurance information, and medical record number; financial information includes bank account number, credit card number transaction records, and financial statements; login credentials include user name, password, token, key; communication content includes email body, instant message, and chat history. The purpose of desensitizing the above information is to protect personal privacy, comply with data protection regulations, and prevent the risks that may be caused by data leakage; in actual operations, desensitization methods may include but are not limited to data masking, data replacement, data encryption and other technical means.

[0076] It is worth noting that the preset desensitization encryption strategy in the embodiment of the present application is a pre-set desensitization encryption strategy. In the process of desensitizing and encrypting the desensitized information, the desensitization encryption methods include but are not limited to data masking, data replacement, data disturbance, data encryption and data shielding. And each method has its applicable scenarios and advantages and disadvantages. The selection of a suitable desensitization encryption method needs to be determined according to specific data protection requirements, compliance requirements and business scenarios.

[0077] In some embodiments, Figure 2As shown, the above step S200 may include but is not limited to steps S210 to S220.

[0078] Step S210, identifying desensitized annotation information from the log to be desensitized;

[0079] Step S220: determine the log validation mode information according to the desensitized annotation information.

[0080] It should be noted that in the process of analyzing and processing the effectiveness mode of the desensitized log to obtain the log effectiveness mode information, the desensitized annotation information is first identified from the desensitized log; then the log effectiveness mode information is determined based on the desensitized annotation information, where the log effectiveness mode information includes class effectiveness mode information and / or method effectiveness mode information. Subsequently, the information to be desensitized can be determined from the desensitized log based on the log effectiveness mode information, and then the determined information to be desensitized can be desensitized and encrypted.

[0081] It is worth noting that in the process of determining the log validation mode information according to the desensitized annotation information, the desensitized annotation information can be parsed to obtain the corresponding log validation mode information.

[0082] In some embodiments, Figure 3 As shown, the above step S300 may also include but is not limited to step S310 and step S320.

[0083] Step S310, when the log validation mode information is class validation mode information, extracting first information to be desensitized from the log to be desensitized according to the class validation mode information;

[0084] Step S320: When the log validation mode information is method validation mode information, extract the second information to be desensitized from the log to be desensitized according to the method validation mode information.

[0085] It should be noted that in the process of determining the information to be desensitized from the log to be desensitized according to the log effectiveness mode information, when the log effectiveness mode information is the class effectiveness mode information, the first information to be desensitized can be extracted from the log to be desensitized according to the class effectiveness mode information; when the log effectiveness mode information is the method effectiveness mode information, the second information to be desensitized can be extracted from the log to be desensitized according to the method effectiveness mode information; subsequently, analysis and processing can be performed based on the type of the obtained information to be desensitized, and then the type information of the information to be desensitized can be obtained, and finally, the information to be desensitized can be desensitized and encrypted according to the type information and the pre-set desensitizing encryption strategy.

[0086] It is worth noting that according to different log effectiveness information, different information to be desensitized can be extracted from the log to be desensitized. Subsequently, the corresponding log effectiveness information can be desensitized and encrypted according to the pre-set desensitization encryption strategy. The whole process is simple and convenient, which brings great convenience to operation and maintenance personnel.

[0087] In some embodiments, Figure 4 As shown, the above step S400 may also include but is not limited to steps S410 to S430.

[0088] Step S410, splitting the information to be desensitized to obtain multiple information blocks;

[0089] Step S420, performing semantic recognition processing on each information block to obtain corresponding semantic information;

[0090] Step S430, matching the semantic information with a preset type library to obtain type information of the information to be desensitized.

[0091] It should be noted that in the process of analyzing and processing the type of information to be desensitized to obtain the type information of the information to be desensitized, the information to be desensitized can be split to obtain multiple information blocks; then each information block is semantically recognized to obtain the corresponding semantic information; finally, the semantic information is matched with the preset type library to obtain the type information of the information to be desensitized, and then the corresponding type of information to be desensitized can be desensitized and encrypted according to the preset desensitizing encryption strategy, so that different types of information to be desensitized can be well desensitized and encrypted, so that the desensitizing and encryption process can be more intelligent and standardized.

[0092] Exemplarily, in the desensitized log of the insurance application system, the information to be desensitized is determined to be "user mobile phone number", and the information to be desensitized is split to obtain three information blocks of "user", "mobile phone" and "number"; then, semantic recognition is performed on the above three information blocks to obtain the semantic information of the three information blocks; then, the semantic information of the three information blocks is matched with a pre-set type library, and it can be determined that the type information of the information to be desensitized is the number information in the type library, and subsequently the number information can be desensitized and encrypted according to the desensitizing encryption strategy corresponding to the number information.

[0093] In some embodiments, Figure 5 As shown, the above step S500 may also include but is not limited to steps S510 to S540.

[0094] Step S510: when the type information indicates that the information to be desensitized is user name information, desensitizing and encrypting the user name information according to a preset name desensitization strategy;

[0095] Step S520: When the type information indicates that the information to be desensitized is number information, desensitizing and encrypting the number information according to a preset number desensitization strategy;

[0096] Step S530, when the type information indicates that the information to be desensitized is identity tag information, desensitizing and encrypting the identity tag information according to a preset identity tag desensitization strategy;

[0097] Step S540: When the type information indicates that the information to be desensitized is address information, desensitizing and encrypting the address information is performed according to a preset address desensitizing strategy.

[0098] It should be noted that, in the process of desensitizing and encrypting the information to be desensitized according to the type information and the preset desensitizing and encryption strategy, when the type information indicates that the information to be desensitized is user name information, the user name information can be desensitized and encrypted according to the preset name desensitization strategy; when the type information indicates that the information to be desensitized is number information, the number information can be desensitized and encrypted according to the preset number desensitization strategy; when the type information indicates that the information to be desensitized is identity mark information, the identity mark information can be desensitized and encrypted according to the preset identity mark desensitization strategy; when the type information indicates that the information to be desensitized is address information, the address information can be desensitized and encrypted according to the preset address desensitization strategy; through the above technical scheme, according to different type information, different desensitization strategies are used to perform desensitization operations on the corresponding information to be desensitized, so that the desensitization and encryption process can be more intelligent and standardized.

[0099] For example, in the process of desensitizing and encrypting the network log of the insurance system, when the type information indicates that the information to be desensitized is number information, the first 3 digits and the last 4 digits of the number can be retained, and the remaining digits can be replaced with "*" to achieve desensitizing and encryption of the number.

[0100] In some embodiments, Figure 6 As shown, after executing the above step S500, it may also include but not limited to step S600.

[0101] Step S600, the desensitized information obtained after the desensitization process is transmitted back to the log to be desensitized, so as to update the log to be desensitized to obtain a desensitized operation log.

[0102] It should be noted that after the desensitized information is desensitized and encrypted according to the type information and the preset desensitizing encryption strategy, the desensitized information obtained after the desensitization processing can also be transmitted back to the log to be desensitized, and the log to be desensitized can be updated to obtain the desensitized operation log; subsequent maintenance personnel with relevant permissions can only view the desensitized operation log after the information to be desensitized has been desensitized and encrypted, thereby effectively preventing the sensitive information in the network log from being leaked, maintaining the privacy of users and improving security.

[0103] For example, the original network log contains user number information. After desensitizing this sensitive information, the user number with a certain number of digits blocked can be obtained, and then transmitted back to the original network log, so that the original network log is updated and processed to obtain a desensitized operation log. When subsequent relevant personnel view the log, they will not be able to fully see the original user number, thereby effectively protecting the user's privacy and improving security.

[0104] In some embodiments, Figure 7 As shown, after executing the above step S600, it may also include but not limited to step S610 and step S620.

[0105] Step S610, performing sensitive information verification processing on the desensitized operation log;

[0106] Step S620: If the verification conditions are met, the desensitized operation log is displayed.

[0107] It should be noted that after the desensitized information obtained after the desensitizing process is returned to the log to be desensitized, and the desensitized log is updated to obtain the desensitized operation log, it is still necessary to perform sensitive information verification on the desensitized operation log. Only when the verification conditions are met will the desensitized operation log be displayed. Through the above technical solution, security can be further improved and information security can be well guaranteed.

[0108] It is worth noting that after obtaining the desensitized operation log, the sensitive information in the desensitized operation log needs to be checked and matched. Only when no sensitive information is matched will the desensitized operation log be displayed to greatly improve the security of the information and further prevent information leakage.

[0109] In addition, if Figure 8 As shown, an embodiment of the present application further provides a log desensitization device 10, comprising:

[0110] The first processing module 100 is used to obtain the log to be desensitized;

[0111] The second processing module 200 is used to analyze and process the effectiveness mode of the log to be desensitized to obtain log effectiveness mode information;

[0112] The third processing module 300 is used to determine the information to be desensitized from the log to be desensitized according to the log validation mode information;

[0113] The fourth processing module 400 is used to analyze and process the type of the information to be desensitized to obtain type information of the information to be desensitized;

[0114] The fifth processing module 500 is used to perform desensitizing and encryption processing on the information to be desensitized according to the type information and a preset desensitizing and encryption strategy.

[0115] It should be noted that in the process of log desensitization, the log to be desensitized is first obtained; then the effectiveness method of the log to be desensitized is analyzed and processed to obtain the log effectiveness method information; then the information to be desensitized is determined from the log to be desensitized according to the log effectiveness method information; then the type of the information to be desensitized is analyzed and processed to obtain the type information of the information to be desensitized; finally, the desensitized information can be desensitized and encrypted according to the type information and the preset desensitization encryption strategy; through the above technical scheme, the log can be desensitized in an intelligent way, which greatly simplifies the log desensitization process, thereby facilitating the subsequent system maintenance.

[0116] It should be noted that log desensitization refers to processing the sensitive information contained in the log data to protect personal privacy and company secrets. This usually involves the following steps: Identify sensitive information. First, you need to determine which information is sensitive, such as personal information (name, address, phone number, email address, etc.), financial information, user passwords, internal company information, etc. Replace or delete. For the identified sensitive information, desensitization can be carried out by replacement or deletion. Replacement usually uses some placeholders (such as asterisks, etc.) to replace part or all of the sensitive information. Encryption. For some particularly sensitive information, encryption technology can be used to ensure that only authorized users can access it.

[0117] It is worth noting that in the process of desensitizing the logs, the effectiveness mode of the logs to be desensitized is first analyzed and processed to obtain the log effectiveness mode information; wherein, the log effectiveness mode information includes class effectiveness mode and / or method effectiveness mode information; for different log effectiveness mode information, different information to be desensitized can be determined from the logs to be desensitized; then, the obtained information to be desensitized is analyzed and processed to obtain the type information of the information to be desensitized; finally, the information to be desensitized can be desensitized and encrypted according to the type information and the pre-set desensitizing encryption strategy.

[0118] It is worth noting that the embodiments of the present application will obtain the user's permission or consent before obtaining the log to be desensitized, and the collection, use and processing of these data will comply with relevant laws, regulations and standards. In addition, when the embodiments of the present application need to obtain the user's sensitive personal information, the user's separate permission or consent will be obtained through a pop-up window or jump to a confirmation page. After the user's separate permission or consent is clearly obtained, the necessary user-related data for the normal operation of the embodiments of the present application will be obtained.

[0119] It is worth noting that the desensitized information in the logs usually includes the following categories of content: personal identity information, health information, financial information, login credentials, communication content, geographic location information, and network information. Among them, personal identity information includes name, address, telephone number, email address, social security number / ID number, passport number, driver's license number, bank account or credit card information; health information includes medical records, health insurance information, and medical record number; financial information includes bank account number, credit card number transaction records, and financial statements; login credentials include user name, password, token, key; communication content includes email body, instant message, and chat history. The purpose of desensitizing the above information is to protect personal privacy, comply with data protection regulations, and prevent the risks that may be caused by data leakage; in actual operations, desensitization methods may include but are not limited to data masking, data replacement, data encryption and other technical means.

[0120] It is worth noting that the preset desensitization encryption strategy in the embodiment of the present application is a pre-set desensitization encryption strategy. In the process of desensitizing and encrypting the desensitized information, the desensitization encryption methods include but are not limited to data masking, data replacement, data disturbance, data encryption and data shielding. And each method has its applicable scenarios and advantages and disadvantages. The selection of a suitable desensitization encryption method needs to be determined according to specific data protection requirements, compliance requirements and business scenarios.

[0121] The specific implementation of the log desensitization device 10 is basically the same as the specific implementation of the above-mentioned log desensitization method, and will not be repeated here.

[0122] In addition, if Fig. 9 As shown, an embodiment of the present application further provides an electronic device 700 , which includes: a memory 720 , a processor 710 , and a computer program stored in the memory 720 and executable on the processor 710 .

[0123] The processor 710 and the memory 720 may be connected via a bus or in other ways.

[0124] The non-transient software program and instructions required to implement the log desensitization method of the above embodiment are stored in the memory 720. When executed by the processor 710, the log desensitization method of each embodiment is executed, for example, the log desensitization method described above is executed. Figure 1 Steps S100 to S500 of the method, Figure 2 Steps S210 to S220 of the method, Figure 3 Steps S310 to S320 of the method, Figure 4 Steps S410 to S430 of the method, Figure 5 Steps S510 to S540 of the method, Figure 6 In the method step S600 and Figure 7 Method steps S610 to S620 in.

[0125] The device embodiments described above are merely illustrative, and the units described as separate components may or may not be physically separated, that is, they may be located in one place or distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0126] In addition, an embodiment of the present application further provides a computer-readable storage medium, which stores computer-executable instructions, which are executed by a processor 710 or a controller, for example, by a processor 710 in the above-mentioned device embodiment, so that the above-mentioned processor 710 can execute the log desensitization method in the above-mentioned embodiment, for example, execute the above-mentioned Figure 1 Steps S100 to S500 of the method, Figure 2 Steps S210 to S220 of the method, Figure 3 Steps S310 to S320 of the method, Figure 4 Steps S410 to S430 of the method, Figure 5 Steps S510 to S540 of the method, Figure 6 In the method step S600 and Figure 7 Method steps S610 to S620 in.

[0127] The above embodiments may be used in combination, and modules with the same name in different embodiments may be the same or different.

[0128] The above describes specific embodiments of the present application, and other embodiments are within the scope of the appended claims. In some cases, the actions or steps recorded in the claims can be performed in an order different from that in the embodiments and still achieve the desired results. In addition, the processes depicted in the accompanying drawings do not necessarily have to be performed in the specific order or continuous order shown to achieve the desired results. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.

[0129] Each embodiment in this application is described in a progressive manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the device, equipment, and computer-readable storage medium embodiments, since they are basically similar to the method embodiments, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiments.

[0130] The apparatus, device, computer-readable storage medium and method provided in the embodiments of the present application correspond to each other. Therefore, the apparatus, device and non-volatile computer storage medium also have similar beneficial technical effects as the corresponding methods. Since the beneficial technical effects of the methods have been described in detail above, the beneficial technical effects of the corresponding apparatus, device and computer storage medium will not be repeated here.

[0131] In the 1990s, it was very clear whether the improvement of a technology was hardware improvement (for example, improvement of the circuit structure of diodes, transistors, switches, etc.) or software improvement (improvement of the method flow). However, with the development of technology, many improvements of the method flow today can be regarded as direct improvements of the hardware circuit structure. Designers almost always obtain the corresponding hardware circuit structure by programming the improved method flow into the hardware circuit. Therefore, it cannot be said that the improvement of a method flow cannot be implemented with a hardware entity module. For example, a programmable logic device (PLD) (such as a field programmable gate array (FPGA)) is such an integrated circuit whose logical function is determined by the user's programming of the device. Designers can "integrate" a digital system on a PLD by programming it themselves, without having to ask chip manufacturers to design and produce dedicated integrated circuit chips. Moreover, nowadays, instead of manually making integrated circuit chips, this kind of programming is mostly implemented by "logic compiler" software, which is similar to the software compiler used when developing and writing programs. The original code before compilation must also be written in a specific programming language, which is called Hardware Description Language (HDL). There is not only one kind of HDL, but many kinds, such as ABEL (Advanced Basic Expression Language), AHDL (Altera Hardware Description Language), Confluence, CUPL (Cornell University Programming Language), HDCall, JHDL (Java Hardware Description Language), Lava, Lola, MyHDL, PALASM, RHDL (Ruby Hardware Description Language), etc. The most commonly used one is VHDL (Very-High-Speed ​​Integrated Circuit Hardware Description Language). Those skilled in the art should also be aware that by programming the method flow in the above-mentioned hardware description languages ​​and programming it into an integrated circuit, a hardware circuit for implementing the logic method flow can be easily obtained.

[0132] The controller can be implemented in any appropriate manner. For example, the controller can take the form of a microprocessor or processor and a computer-readable medium storing a computer-readable program code (such as software or firmware) that can be executed by the (micro)processor, a logic gate, a switch, an application-specific integrated circuit (ASIC), a programmable logic controller, and an embedded microcontroller. Examples of controllers include, but are not limited to, the following microcontrollers: ARC 625D, Atmel AT91SAM, Microchip PIC18F26K20, and Silicon Labs C8051F320. The memory controller can also be implemented as part of the control logic of the memory. Those skilled in the art also know that in addition to implementing the controller in a purely computer-readable program code manner, the controller can be implemented in the form of a logic gate, a switch, an application-specific integrated circuit, a programmable logic controller, and an embedded microcontroller by logically programming the method steps. Therefore, this controller can be considered as a hardware component, and the devices included therein for implementing various functions can also be regarded as structures within the hardware component. Or even, the means for realizing various functions may be regarded as both a software module for realizing the method and a structure within a hardware component.

[0133] The systems, devices, modules or units described in the above embodiments may be implemented by computer chips or entities, or by products with certain functions. A typical implementation device is a computer. Specifically, the computer may be, for example, a personal computer, a laptop computer, a cellular phone, a camera phone, a smart phone, a personal digital assistant, a media player, a navigation device, an email device, a game console, a tablet computer, a wearable device, or a combination of any of these devices.

[0134] For the convenience of description, the above devices are described in terms of functions and are divided into various units. Of course, when implementing the embodiments of the present application, the functions of each unit can be implemented in the same or multiple software and / or hardware.

[0135] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the embodiments of the present application may adopt the form of complete hardware embodiments, complete software embodiments, or embodiments in combination with software and hardware. Moreover, the embodiments of the present application may adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that contain computer-usable program code.

[0136] This specification is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0137] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0138] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0139] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0140] The memory may include non-permanent storage in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash memory (Flash RAM). The memory is an example of a computer-readable medium.

[0141] Computer readable media include permanent and non-permanent, removable and non-removable media that can be used to store information by any method or technology. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disc read-only memory (CD-ROM), digital versatile disc (DVD) or other optical storage, magnetic cassettes, magnetic disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer readable media does not include temporary computer readable media (Transitory Med ia), such as modulated data signals and carrier waves.

[0142] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

[0143] In the embodiments of the present application, "at least one" refers to one or more, and "more than one" refers to two or more. "And / or" describes the association relationship of associated objects, indicating that three relationships may exist. For example, A and / or B can represent the existence of A alone, the existence of A and B at the same time, and the existence of B alone. Among them, A and B can be singular or plural. The character " / " generally indicates that the previous and next associated objects are in an "or" relationship. "At least one of the following" and similar expressions refer to any combination of these items, including any combination of single or plural items. For example, at least one of a, b and c can be represented by: a, b, c, a and b, a and c, b and c, or a and b and c, where a, b, c can be single or multiple.

[0144] Embodiments of the present application may be described in the general context of computer executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform specific tasks or implement specific abstract data types. Embodiments of the present application may also be practiced in distributed computing environments, where tasks are performed by remote processing devices connected via a communication network. In a distributed computing environment, program modules may be located in local and remote computer storage media, including storage devices.

[0145] Each embodiment in this application is described in a progressive manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0146] The above is only an embodiment of the present application and is not intended to limit the present application. For those skilled in the art, the present application may have various changes and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application should be included in the scope of the claims of the present application.

Claims

1. A log desensitization method, characterized in that: include: Get the logs to be desensitized; Analyze and process the effectiveness mode of the log to be desensitized to obtain log effectiveness mode information; Determining the information to be desensitized from the log to be desensitized according to the log validation mode information; Analyze and process the type of the information to be desensitized to obtain type information of the information to be desensitized; The information to be desensitized is desensitized and encrypted according to the type information and a preset desensitization encryption strategy.

2. The log desensitization method according to claim 1, characterized in that: The analyzing and processing of the effectiveness mode of the log to be desensitized to obtain log effectiveness mode information includes: Identifying desensitized annotation information from the log to be desensitized; Determine the log validation mode information according to the desensitized annotation information; The log validation mode information includes class validation mode information and / or method validation mode information.

3. The log desensitization method according to claim 2, characterized in that: The determining the information to be desensitized from the log to be desensitized according to the log validation mode information includes one of the following: In a case where the log validation mode information is the class validation mode information, extracting first information to be desensitized from the log to be desensitized according to the class validation mode information; In a case where the log validation mode information is the method validation mode information, the second information to be desensitized is extracted from the log to be desensitized according to the method validation mode information.

4. The log desensitization method according to claim 1, characterized in that: The analyzing and processing the type of the information to be desensitized to obtain the type information of the information to be desensitized includes: Performing information splitting processing on the information to be desensitized to obtain multiple information blocks; Performing semantic recognition processing on each of the information blocks to obtain corresponding semantic information; The semantic information is matched with a preset type library to obtain type information of the information to be desensitized.

5. The log desensitization method according to claim 1, characterized in that: The desensitizing and encrypting the information to be desensitized according to the type information and the preset desensitizing and encryption strategy includes at least one of the following: In the case where the type information indicates that the information to be desensitized is user name information, desensitizing and encrypting the user name information according to a preset name desensitization strategy; In the case where the type information indicates that the information to be desensitized is number information, desensitizing and encrypting the number information according to a preset number desensitization strategy; In the case where the type information indicates that the information to be desensitized is identity tag information, desensitizing and encrypting the identity tag information according to a preset identity tag desensitization strategy; In the case where the type information indicates that the information to be desensitized is address information, desensitization and encryption processing is performed on the address information according to a preset address desensitization strategy.

6. The log desensitization method according to claim 1, characterized in that: After performing desensitizing and encrypting the information to be desensitized according to the type information and the preset desensitizing and encryption strategy, the method further includes: The desensitized information obtained after the desensitization process is transmitted back to the log to be desensitized, so as to update the log to be desensitized to obtain a desensitized operation log.

7. The log desensitization method according to claim 6, characterized in that: After the desensitized information obtained after the desensitization process is transmitted back to the log to be desensitized, so as to update the log to be desensitized to obtain a desensitized operation log, the method further includes: Performing sensitive information verification processing on the desensitized operation log; If the inspection conditions are met, the desensitized operation log will be displayed.

8. A log desensitization device, characterized in that: include: The first processing module is used to obtain the logs to be desensitized; The second processing module is used to analyze and process the effectiveness mode of the log to be desensitized to obtain log effectiveness mode information; A third processing module is used to determine the information to be desensitized from the log to be desensitized according to the log validation mode information; A fourth processing module is used to analyze and process the type of the information to be desensitized to obtain type information of the information to be desensitized; The fifth processing module is used to perform desensitizing and encryption processing on the information to be desensitized according to the type information and a preset desensitizing and encryption strategy.

9. An electronic device, comprising: A memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the log desensitization method as described in any one of claims 1 to 7 when executing the computer program.

10. A computer-readable storage medium storing computer-executable instructions, characterized in that: The computer executable instructions are used to execute the log desensitization method described in any one of claims 1 to 7.

Images