A data desensitization method, system, device and medium based on metadata

Abstract

The present invention relates to a data desensitization method, system, device and medium based on metadata, the method comprising the following steps: collecting exposure surface information through a business party system, obtaining an exposure surface list consisting of metadata according to the exposure surface information and submitting it to an administrator; wherein the metadata includes the path of the exposure surface and a response message, and the response message contains a field that needs to be desensitized; the administrator uploads the exposure surface list to a security control center to parse the metadata information, and configures data desensitization rules according to the metadata; after the business interface receives a call request from an external caller, the request is intercepted according to a desensitizing interceptor plug-in; the desensitizing interceptor plug-in sends a request to the security control center to obtain the exposure surface data desensitization rule configuration, desensitizes the data according to the exposure surface data desensitization rule configuration, and returns the data to the external caller after desensitization is completed, so as to realize the data desensitization function.

Description

Technical Field

[0001] The present invention relates to a metadata-based data desensitization method, system, equipment and medium, and belongs to the field of data security. Background Art

[0002] With the rapid development of information technology and the advent of the big data era, data has become an important asset for enterprises and organizations. However, the widespread collection, storage, transmission and use of data have also brought unprecedented privacy and security challenges. In order to protect personal privacy, business secrets and comply with relevant laws and regulations, data desensitization technology has emerged and has become an important tool in the field of data security. In traditional desensitization technology, static desensitization usually pre-processes sensitive data, replaces the original data with the processed data and stores it in storage media such as databases. Once desensitization is completed in this way, the data cannot be restored to its original state, which may affect the accuracy and integrity of the data. In contrast, dynamic desensitization usually processes from the dimension of the entire network interface, ignoring the differences in permissions between different users.

[0003] Prior art, such as a Chinese patent with patent number "CN113761565B", discloses a data desensitization method and device. The method comprises the following steps: obtaining the data to be processed, and determining whether there are data items to be desensitized in the data to be processed; if there are data items to be desensitized in the data to be processed, querying a mapping table according to the original assigned characters of the data items to be desensitized to obtain the desensitized characters corresponding thereto; wherein the mapping table includes a mapping relationship between the original assigned characters and the desensitized characters; replacing the original assigned characters of the data items to be desensitized in the data to be processed with the desensitized characters to obtain the desensitized data.

[0004] The problem with the above-mentioned prior art is that the desensitization process is highly dependent on the accuracy and completeness of the mapping table. If the mapping table does not cover all the data items or characters that need to be desensitized, the desensitization effect will be greatly reduced. In addition, the generation and update of the mapping table also require regular maintenance, which increases additional management costs. If the mapping table is obtained or tampered with by a malicious attacker, the desensitized data may still leak sensitive information. In addition, if the design of the mapping table is not reasonable or the update is not timely, it may also lead to poor desensitization effect. Summary of the invention

[0005] In order to solve the above problems existing in the prior art, the present invention proposes a metadata-based data desensitization method, system, device and medium.

[0006] The technical solution of the present invention is as follows:

[0007] On the one hand, the present invention proposes a data desensitization method based on metadata, comprising the following steps:

[0008] The exposed surface information is collected through the business system, and an exposed surface list consisting of metadata is obtained based on the exposed surface information and submitted to the administrator; the metadata includes the path of the exposed surface and the response message, and the response message contains the fields that need to be desensitized;

[0009] The administrator uploads the exposed surface list to the security control center to parse the metadata information and configure data desensitization rules based on the metadata;

[0010] After the business interface receives a call request from an external caller, it intercepts the request based on the desensitizing interceptor plug-in;

[0011] The desensitizing interceptor plug-in sends a request to the security control center to obtain the desensitizing rule configuration of the exposed surface data, desensitizes the data according to the desensitizing rule configuration of the exposed surface data, and returns the data to the external caller after desensitization is completed.

[0012] As a preferred implementation, the specific method for configuring the data desensitization rules is:

[0013] The security control center parses the sensitive field list of the response message of each interface in the metadata, and obtains the sensitive word label according to the sensitive field list of the field;

[0014] If the security control center identifies that the sensitive word label does not exist in the security control center, the label is saved in the security control center;

[0015] Configure data desensitization rules based on sensitive word labels in the security control center;

[0016] Data desensitization rules include desensitization methods and applicable roles:

[0017] Among them, the optional desensitization methods include:

[0018] (1) The data retains the first n bits and the last m bits;

[0019] (2) Keep the positions from x to y;

[0020] (3) Cover the first n and last m bits;

[0021] (4) Mask from x to y;

[0022] Applicable roles are obtained by calling the business party's query request role interface through SPI technology. The business party customizes role information according to its own system user role; role information includes user, administrator, and super administrator;

[0023] After the data desensitization rule configuration is completed, a mapping relationship between the data desensitization rule configuration and the exposure surface is generated to form the exposure surface data desensitization rule configuration.

[0024] As a preferred implementation, the specific method for implementing the desensitizing interceptor plug-in is:

[0025] The desensitization interceptor plug-in includes a data desensitization rule configuration loader, a response body parser, and a response body desensitization tool;

[0026] When the business system starts, the Spring Boot framework starts to load and assemble the desensitizing interceptor plug-in and registers the desensitizing interceptor plug-in to the request interception link;

[0027] The desensitization interceptor plug-in starts intercepting all requests for non-whitelist paths, and checks whether there is an exposed data desensitization rule configuration matching the request in the cache based on the intercepted request; if not, the data desensitization rule configuration loader sends an HTTP request to the security control center based on the requested path to obtain the exposed data desensitization rule configuration.

[0028] The desensitization rule configuration of the exposed surface data obtained from the security control center will be cached for a preset time;

[0029] Desensitization will be performed only if the exposed surface has data desensitization rules, otherwise it will be released directly.

[0030] As a preferred implementation, the specific process of data desensitization is:

[0031] After receiving the HTTP request, the security control center queries the data desensitization rule configuration of the exposed surface according to the exposed surface context path of the request, and calls the query request role interface of the business party to query the role of the current request;

[0032] Based on these roles, the exposed data desensitization rule configuration is filtered to retain the exposed data desensitization rules that match the role of the request;

[0033] Return the desensitization rule configuration of the exposed surface data that meets the conditions to the desensitization interceptor plug-in;

[0034] The response body parser parses the response body according to the desensitization rule configuration of the queried exposed surface data, converts the response body data into a JSON tree in JSON format, and uses a stack to perform a depth-first traversal of the JSON tree. The specific traversal process is as follows:

[0035] Starting from the starting node, follow a branch all the way to the deepest node, then backtrack to the nearest branch node and continue exploring other unvisited branches until all nodes have been visited;

[0036] Check whether each object node and array node has fields that need to be desensitized. If there are fields that need to be desensitized, the response body desensitization tool calls the desensitization method according to the exposure surface data desensitization rule configuration to replace the value of the field with a mask or partially retain it, and then writes it back to the JSON tree.

[0037] After the traversal is completed, the anonymized JSON tree is converted into a JSON string and returned to the external caller as the response body.

[0038] On the other hand, the present invention also provides a metadata-based data desensitization system, comprising:

[0039] The exposed surface information collection module collects the exposed surface information through the business system, obtains the exposed surface list consisting of metadata based on the exposed surface information, and submits it to the administrator; the metadata includes the path of the exposed surface and the response message, and the response message contains the fields that need to be desensitized;

[0040] Data desensitization rule configuration module: the administrator uploads the exposed surface list to the security control center to parse the metadata information and configure the data desensitization rules based on the metadata;

[0041] The desensitizing interceptor plug-in implementation module intercepts the request according to the desensitizing interceptor plug-in after the business interface receives the call request from the external caller;

[0042] The data desensitization module and the desensitization interceptor plug-in send a request to the security control center to obtain the desensitization rule configuration of the exposed surface data, desensitize the data according to the desensitization rule configuration of the exposed surface data, and return the data to the external caller after desensitization is completed.

[0043] On the other hand, the present invention further provides an electronic device having a computer program stored thereon, wherein when the computer program is executed by a processor, a metadata-based data desensitization method as described in any embodiment of the present invention is implemented.

[0044] On the other hand, the present invention also provides a computer-readable medium for storing one or more programs, which, when executed by the one or more processors, enables the one or more processors to implement a metadata-based data desensitization method as described in any embodiment of the present invention.

[0045] The present invention has the following beneficial effects:

[0046] The present invention directly collects exposure surface information through the business party system, and can more accurately identify which data interfaces, paths and functions are at risk of sensitive information exposure. According to the specific information in the exposure surface list (such as exposure surface path, function, interface input parameter and response message), the administrator can design more sophisticated and targeted data desensitization rules. This customized data desensitization rule can better adapt to the needs of different business scenarios and improve the desensitization effect. When the business interface receives an external call request, the desensitization interceptor plug-in can obtain the exposure surface data desensitization rule configuration from the security control center in real time, and desensitize the data according to the rules. This real-time desensitization method can ensure the security of sensitive data during transmission and use. The design of the present invention takes into account the needs of future business development and can easily expand new exposure surface identification and data desensitization rule design functions. BRIEF DESCRIPTION OF THE DRAWINGS

[0047] Figure 1 The figure is a flow chart of a method according to an embodiment of the present invention. DETAILED DESCRIPTION

[0048] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0049] It should be understood that the step numbers used in this document are only for convenience of description and are not intended to limit the order in which the steps are executed.

[0050] It should be understood that the terms used in the present specification are only for the purpose of describing specific embodiments and are not intended to limit the present invention. As used in the present specification and the appended claims, unless the context clearly indicates otherwise, the singular forms "a", "an" and "the" are intended to include plural forms.

[0051] The terms “include” and “comprising” indicate the presence of described features, integers, steps, operations, elements and / or components, but do not exclude the presence or addition of one or more other features, integers, steps, operations, elements, components and / or combinations thereof.

[0052] The term "and / or" means and includes any and all possible combinations of one or more of the associated listed items.

[0053] Embodiment 1:

[0054] See also Figure 1On the one hand, the present invention proposes a data desensitization method based on metadata, comprising the following steps:

[0055] The exposed surface information is collected through the business system, and an exposed surface list consisting of metadata is obtained based on the exposed surface information and submitted to the administrator; the metadata includes the path of the exposed surface and the response message, and the response message contains the fields that need to be desensitized;

[0056] Exposure refers to the scope and manner in which a system, application, or network can be attacked on the Internet. It represents all possible entry points and vulnerabilities that potential attackers can exploit. In this patent, it mainly refers to the definition of the external interface of the business system, including the request path and response message.

[0057] The administrator uploads the exposed surface list to the security control center to parse the metadata information and configure data desensitization rules based on the metadata;

[0058] After the business interface receives a call request from an external caller, it intercepts the request based on the desensitizing interceptor plug-in;

[0059] The desensitizing interceptor plug-in sends a request to the security control center to obtain the desensitizing rule configuration of the exposed surface data, desensitizes the data according to the desensitizing rule configuration of the exposed surface data, and returns the data to the external caller after desensitization is completed.

[0060] As a preferred implementation, the specific method for configuring the data desensitization rules is:

[0061] The security control center parses the sensitive field list of the response message of each interface in the metadata, and obtains the sensitive word label according to the sensitive field list of the field;

[0062] If the security control center identifies that the sensitive word label does not exist in the security control center, the label is saved in the security control center;

[0063] Configure data desensitization rules based on sensitive word labels in the security control center;

[0064] Data desensitization rules include desensitization methods and applicable roles:

[0065] Among them, the optional desensitization methods include:

[0066] (1) The data retains the first n bits and the last m bits;

[0067] (2) Keep the positions from x to y;

[0068] (3) Cover the first n and last m bits;

[0069] (4) Mask from x to y;

[0070] Applicable roles are obtained by calling the business party's query request role interface through SPI technology. The business party customizes role information according to its own system user role; role information includes user, administrator, and super administrator;

[0071] After the data desensitization rule configuration is completed, a mapping relationship between the data desensitization rule configuration and the exposure surface is generated to form the exposure surface data desensitization rule configuration.

[0072] As a preferred implementation, the specific method for implementing the desensitizing interceptor plug-in is:

[0073] The desensitization interceptor plug-in includes a data desensitization rule configuration loader, a response body parser, and a response body desensitization tool;

[0074] When the business system starts, the Spring Boot framework starts to load and assemble the desensitizing interceptor plug-in and registers the desensitizing interceptor plug-in to the request interception link;

[0075] The desensitization interceptor plug-in starts intercepting all requests for non-whitelist paths, and checks whether there is an exposed data desensitization rule configuration matching the request in the cache based on the intercepted request; if not, the data desensitization rule configuration loader sends an HTTP request to the security control center based on the requested path to obtain the exposed data desensitization rule configuration.

[0076] The desensitization rule configuration of the exposed surface data obtained from the security control center will be cached for a preset time;

[0077] Desensitization will be performed only if the exposed surface has data desensitization rules, otherwise it will be released directly.

[0078] As a preferred implementation, the specific process of data desensitization is:

[0079] After receiving the HTTP request, the security control center queries the data desensitization rule configuration of the exposed surface according to the exposed surface context path of the request, and calls the query request role interface of the business party to query the role of the current request;

[0080] Based on these roles, the exposed data desensitization rule configuration is filtered to retain the exposed data desensitization rules that match the role of the request;

[0081] Return the desensitization rule configuration of the exposed surface data that meets the conditions to the desensitization interceptor plug-in;

[0082] The response body parser parses the response body according to the desensitization rule configuration of the queried exposed surface data, converts the response body data into a JSON tree in JSON format, and uses a stack to perform a depth-first traversal of the JSON tree. The specific traversal process is as follows:

[0083] Starting from the starting node, follow a branch all the way to the deepest node, then backtrack to the nearest branch node and continue exploring other unvisited branches until all nodes have been visited;

[0084] Check whether each object node and array node has fields that need to be desensitized. If there are fields that need to be desensitized, the response body desensitization tool calls the desensitization method according to the exposure surface data desensitization rule configuration to replace the value of the field with a mask or partially retain it, and then writes it back to the JSON tree.

[0085] After the traversal is completed, the anonymized JSON tree is converted into a JSON string and returned to the external caller as the response body.

[0086] Embodiment 2:

[0087] This embodiment provides a metadata-based data desensitization system, including:

[0088] The exposed surface information is collected through the business system, and an exposed surface list consisting of metadata is obtained based on the exposed surface information and submitted to the administrator; the metadata includes the path of the exposed surface and the response message, and the response message contains the fields that need to be desensitized;

[0089] Data desensitization rule configuration module: the administrator uploads the exposed surface list to the security control center to parse the metadata information and configure the data desensitization rules based on the metadata;

[0090] The desensitizing interceptor plug-in implementation module intercepts the request according to the desensitizing interceptor plug-in after the business interface receives the call request from the external caller;

[0091] The data desensitization module and the desensitization interceptor plug-in send a request to the security control center to obtain the desensitization rule configuration of the exposed surface data, desensitize the data according to the desensitization rule configuration of the exposed surface data, and return the data to the external caller after desensitization is completed.

[0092] Embodiment three:

[0093] This embodiment provides an electronic device having a computer program stored thereon, wherein when the computer program is executed by a processor, a metadata-based data desensitization method as described in any embodiment of the present invention is implemented.

[0094] Embodiment 4:

[0095] This embodiment provides a computer-readable medium for storing one or more programs. When the one or more programs are executed by the one or more processors, the one or more processors implement a metadata-based data desensitization method as described in any embodiment of the present invention.

[0096] In the embodiments of the present application, "at least one" refers to one or more, and "more than one" refers to two or more. "And / or" describes the association relationship of associated objects, indicating that three relationships may exist. For example, A and / or B can represent the existence of A alone, the existence of A and B at the same time, and the existence of B alone. Among them, A and B can be singular or plural. The character " / " generally indicates that the previous and next associated objects are in an "or" relationship. "At least one of the following" and similar expressions refer to any combination of these items, including any combination of single or plural items. For example, at least one of a, b and c can be represented by: a, b, c, a and b, a and c, b and c, or a and b and c, where a, b, c can be single or multiple.

[0097] Those of ordinary skill in the art will appreciate that the various units and algorithm steps described in the embodiments disclosed herein can be implemented in a combination of electronic hardware, computer software, and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0098] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0099] In several embodiments provided in the present application, if any function is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art or the part of the technical solution, can be embodied in the form of a software product, which is stored in a storage medium and includes several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (Read-Only Memory; hereinafter referred to as: ROM), random access memory (Random Access Memory; hereinafter referred to as: RAM), disk or optical disk, and other media that can store program codes.

[0100] The above descriptions are merely embodiments of the present invention and are not intended to limit the patent scope of the present invention. Any equivalent structure or equivalent process transformation made using the contents of the present invention specification and drawings, or directly or indirectly applied in other related technical fields, are also included in the patent protection scope of the present invention.

Claims

1. A data desensitization method based on metadata, characterized in that: The following steps are involved: The exposed surface information is collected through the business system, and an exposed surface list consisting of metadata is obtained based on the exposed surface information and submitted to the administrator; the metadata includes the path of the exposed surface and the response message, and the response message contains the fields that need to be desensitized; The administrator uploads the exposed surface list to the security control center to parse the metadata information and configure data desensitization rules based on the metadata; After the business interface receives a call request from an external caller, it intercepts the request based on the desensitizing interceptor plug-in; The desensitizing interceptor plug-in sends a request to the security control center to obtain the desensitizing rule configuration of the exposed surface data, desensitizes the data according to the desensitizing rule configuration of the exposed surface data, and returns the data to the external caller after desensitization is completed; The specific method for configuring the data desensitization rule is: The security control center parses the sensitive field list of the response message of each interface in the metadata, and obtains the sensitive word label according to the sensitive field list of the field; If the security control center identifies that the sensitive word label does not exist in the security control center, the label is saved in the security control center; Configure data desensitization rules based on sensitive word labels in the security control center; Data desensitization rules include desensitization methods and applicable roles: Among them, desensitization methods include: (1) The data retains the first n bits and the last m bits; (2) Keep the positions from x to y; (3) Cover the first n and last m bits; (4) Mask from x to y; Applicable roles are obtained by calling the business party's query request role interface through SPI technology. The business party customizes role information according to its own system user role; Among them, role information includes user, administrator, and super administrator; After the data desensitization rule configuration is completed, a mapping relationship between the data desensitization rule configuration and the exposure surface is generated to form the exposure surface data desensitization rule configuration; The specific method for implementing the desensitizing interceptor plug-in is: The desensitization interceptor plug-in includes a data desensitization rule configuration loader, a response body parser, and a response body desensitization tool; When the business system starts, the Spring Boot framework starts to load and assemble the desensitizing interceptor plug-in and registers the desensitizing interceptor plug-in to the request interception link; The desensitization interceptor plug-in starts intercepting all requests for non-whitelist paths, and checks whether there is an exposed surface data desensitization rule configuration matching the request in the cache based on the intercepted request; if not, the data desensitization rule configuration loader sends an HTTP request to the security control center based on the requested path to obtain the exposed surface data desensitization rule configuration; The desensitization rule configuration of the exposed surface data obtained from the security control center will be cached for a preset time; Desensitization is performed only if the exposed surface has data desensitization rules, otherwise it is directly released; The specific process of data desensitization is as follows: After receiving the HTTP request, the security control center queries the data desensitization rule configuration of the exposed surface according to the exposed surface context path of the request, and calls the query request role interface of the business party to query the role of the current request; Based on these roles, the exposed data desensitization rule configuration is filtered to retain the exposed data desensitization rules that match the role of the request; Return the desensitization rule configuration of the exposed surface data that meets the conditions to the desensitization interceptor plug-in; The response body parser parses the response body according to the desensitization rule configuration of the queried exposed surface data, converts the response body data into a JSON tree in JSON format, and uses a stack to perform a depth-first traversal of the JSON tree. The specific traversal process is as follows: Starting from the starting node, follow a branch all the way to the deepest node, then backtrack to the nearest branch node and continue exploring other unvisited branches until all nodes have been visited; Check whether each object node and array node has fields that need to be desensitized. If there are fields that need to be desensitized, the response body desensitization tool calls the desensitization method according to the exposure surface data desensitization rule configuration to replace the value of the field with a mask or partially retain it, and then writes it back to the JSON tree. After the traversal is completed, the anonymized JSON tree is converted into a JSON string and returned to the external caller as the response body.

2. A metadata-based data desensitization system, characterized in that: include: The exposed surface information is collected through the business system, and an exposed surface list consisting of metadata is obtained based on the exposed surface information and submitted to the administrator; the metadata includes the path of the exposed surface and the response message, and the response message contains the fields that need to be desensitized; Data desensitization rule configuration module: the administrator uploads the exposed surface list to the security control center to parse the metadata information and configure the data desensitization rules based on the metadata; The desensitizing interceptor plug-in implementation module intercepts the request according to the desensitizing interceptor plug-in after the business interface receives the call request from the external caller; Data desensitization module: The desensitization interceptor plug-in sends a request to the security control center to obtain the desensitization rule configuration of the exposed surface data, desensitizes the data according to the desensitization rule configuration of the exposed surface data, and returns the data to the external caller after desensitization is completed; The data desensitization rule configuration module configures the data desensitization rule in the following specific method: The security control center parses the sensitive field list of the response message of each interface in the metadata, and obtains the sensitive word label according to the sensitive field list of the field; If the security control center identifies that the sensitive word label does not exist in the security control center, the label is saved in the security control center; Configure data desensitization rules based on sensitive word labels in the security control center; Data desensitization rules include desensitization methods and applicable roles: Among them, desensitization methods include: (1) The data retains the first n bits and the last m bits; (2) Keep the positions from x to y; (3) Cover the first n and last m bits; (4) Mask from x to y; Applicable roles are obtained by calling the business party's query request role interface through SPI technology. The business party customizes role information according to its own system user role; role information includes user, administrator, and super administrator; After the data desensitization rule configuration is completed, a mapping relationship between the data desensitization rule configuration and the exposure surface is generated to form the exposure surface data desensitization rule configuration; The desensitizing interceptor plug-in implementation module, the specific method of implementing the desensitizing interceptor plug-in is: The desensitization interceptor plug-in includes a data desensitization rule configuration loader, a response body parser, and a response body desensitization tool; When the business system starts, the Spring Boot framework starts to load and assemble the desensitizing interceptor plug-in and registers the desensitizing interceptor plug-in to the request interception link; The desensitization interceptor plug-in starts intercepting all requests for non-whitelist paths, and checks whether there is an exposed data desensitization rule configuration matching the request in the cache based on the intercepted request; if not, the data desensitization rule configuration loader sends an HTTP request to the security control center based on the requested path to obtain the exposed data desensitization rule configuration. The desensitization rule configuration of the exposed surface data obtained from the security control center will be cached for a preset time; Desensitization is performed only if the exposed surface has data desensitization rules, otherwise it is directly released; The data desensitization module has the following specific process: After receiving the HTTP request, the security control center queries the data desensitization rule configuration of the exposed surface according to the exposed surface context path of the request, and calls the query request role interface of the business party to query the role of the current request; Based on these roles, the exposed data desensitization rule configuration is filtered to retain the exposed data desensitization rules that match the role of the request; Return the desensitization rule configuration of the exposed surface data that meets the conditions to the desensitization interceptor plug-in; The response body parser parses the response body according to the desensitization rule configuration of the queried exposed surface data, converts the response body data into a JSON tree in JSON format, and uses a stack to perform a depth-first traversal of the JSON tree. The specific traversal process is as follows: Starting from the starting node, follow a branch all the way to the deepest node, then backtrack to the nearest branch node and continue exploring other unvisited branches until all nodes have been visited; Check whether each object node and array node has fields that need to be desensitized. If there are fields that need to be desensitized, the response body desensitization tool calls the desensitization method according to the exposure surface data desensitization rule configuration to replace the value of the field with a mask or partially retain it, and then writes it back to the JSON tree. After the traversal is completed, the anonymized JSON tree is converted into a JSON string and returned to the external caller as the response body.

3. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the program, the metadata-based data desensitization method as described in claim 1 is implemented.

4. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, a metadata-based data desensitization method as described in claim 1 is implemented.

Images