Data display method and device, computer equipment, storage medium and program product

Abstract

The embodiment of the invention provides a data display method and device, computer equipment, a storage medium and a program product, relates to the field of data security, and can be applied to the financial field or other technical fields. The method comprises the steps of receiving a user reading request of a first target user, and obtaining a user permission level of the first target user; according to the user permission level, a desensitization label of a target field requested to be read in the user reading request is obtained, the desensitization label is used for indicating whether the field needs desensitization or not, and when desensitization is needed, the desensitization rule further comprises a desensitization rule corresponding to the field; and obtaining target data corresponding to the target field requested to be read in the user reading request, and processing and displaying the target data according to the desensitization tag. According to the method, the desensitization tag is added during data storage, the data is obtained based on the desensitization tag of the lookup field during lookup of the user, and dynamic desensitization can be realized without changing real storage data; and a proper desensitization rule is selected based on the user permission level, so that the data security is guaranteed.

Description

Technical Field

[0001] The present application relates to the field of data security, and in particular to a data display method, device, computer equipment, storage medium and program product. Background Art

[0002] Sensitive data refers to data that may cause serious harm to society or individuals after being leaked, including but not limited to name, ID number, address, telephone number, bank account number, email address, password, medical information, educational background, etc. Data security display technology refers to the technology of processing sensitive data through custom configured sensitive data desensitization rules to achieve sensitive data desensitization display. Desensitization does not change the real data storage content, and does not affect the complex calculation operations of sensitive data, ensuring that sensitive data desensitization is available, and can safely and effectively protect sensitive data.

[0003] For existing data privacy protection models built on deep learning, during the training of deep learning models, the data collection, preprocessing, and storage processes may leak data or leak sensitive features of data. In addition, deep learning models are usually black box models, and it is impossible to directly understand the internal working principles of the model, which makes it difficult to discover potential privacy leakage problems during training. Even if problems are found, they may be difficult to fix because the weights and structures inside the model are randomly initialized. Summary of the invention

[0004] The embodiments of the present application provide a data display method, apparatus, computer equipment, storage medium and program product to achieve high data security and flexible use.

[0005] In a first aspect, an embodiment of the present application provides a data display method, the method comprising:

[0006] Receiving a user read request from a first target user, and obtaining a user authority level of the first target user;

[0007] According to the user permission level, the desensitization label of the target field requested to be read in the user read request is obtained. The desensitization label is used to indicate whether the field needs to be desensitized and if desensitization is required, the desensitization rule also includes the desensitization rule corresponding to the field;

[0008] Get the target data corresponding to the target field requested to be read in the user's read request, process and display the target data according to the desensitizing label.

[0009] In a possible implementation, obtaining, according to the user authority level, a desensitizing label of a target field requested to be read in a user read request includes:

[0010] In a case where the user authority level is a first authority level indicating low security of the user, determining, according to a first corresponding relationship, a desensitizing label of a target field requested to be read in the user read request, wherein the first corresponding relationship is used to indicate a corresponding relationship between the user authority level, the field type, and the desensitizing label;

[0011] When the user authority level is the second authority level indicating high security of the user, the desensitization label of the target field requested to be read in the user read request is not obtained or the desensitization label of the target field requested to be read in the user read request is defaulted to be empty.

[0012] In a possible implementation, the target data is processed and displayed according to the desensitization label, including:

[0013] In a case where the user authority level is a first authority level indicating low security of the user, determining a desensitization rule in a desensitization tag of a target field requested to be read in a read request of the user;

[0014] The target data is processed based on the desensitization rules to obtain the desensitized data and display it.

[0015] In a possible implementation, the target data is desensitized and displayed according to the desensitization label, including:

[0016] In case the user authority level is the second authority level indicating high security of the user, the target data is directly displayed.

[0017] In a possible implementation, the method further includes:

[0018] Receive a user write request from a second target user, and obtain a target field requested to be written in the user write request;

[0019] Determine, according to the second correspondence, a desensitizing label of the target field requested to be written, where the second correspondence is used to indicate a correspondence between a field type in the source data and the desensitizing label;

[0020] Execute the write operation corresponding to the user write request according to the desensitizing label of the target field requested to be written.

[0021] In a possible implementation, performing a write operation corresponding to a user write request according to a desensitizing tag of a target field requested to be written includes:

[0022] For sensitive data requested to be written in the user's write request, the sensitive data is processed according to its corresponding desensitizing label and preset homomorphic encryption rules to obtain encrypted data and store it.

[0023] In a possible implementation, the desensitization rule includes a custom desensitization rule, and the custom desensitization rule is used to indicate a format for retaining the written sensitive data.

[0024] In a second aspect, an embodiment of the present application provides a data display device, characterized in that the device includes:

[0025] An information interaction module, configured to receive a user read request from a first target user and obtain a user authority level of the first target user;

[0026] A request processing module, used to obtain a desensitization label of a target field requested to be read in a user read request according to the user authority level, wherein the desensitization label is used to indicate whether the field needs to be desensitized and when desensitization is required, the desensitization rule also includes a desensitization rule corresponding to the field;

[0027] The data display module is used to obtain the target data corresponding to the target field requested to be read in the user's read request, and process and display the target data according to the desensitizing label.

[0028] In a third aspect, an embodiment of the present application provides a computer device, including: a memory, a processor;

[0029] Memory stores computer-executable instructions;

[0030] The processor executes the computer-executable instructions stored in the memory, so that the processor executes the above first aspect and / or various possible implementations of the first aspect.

[0031] In a fourth aspect, an embodiment of the present application provides a computer-readable storage medium, in which computer-executable instructions are stored. When the computer-executable instructions are executed by a processor, they are used to implement the first aspect above and / or various possible implementations of the first aspect.

[0032] In a fifth aspect, an embodiment of the present application provides a computer program product, including a computer program, which, when executed by a processor, implements the above first aspect and / or various possible implementation methods of the first aspect.

[0033] The embodiments of the present application provide a data display method, apparatus, computer equipment, storage medium and program product, the method comprising: receiving a user read request from a first target user, obtaining the user authority level of the first target user; obtaining a desensitizing label of a target field requested to be read in the user read request according to the user authority level, the desensitizing label being used to indicate whether the field needs to be desensitized and when desensitization is required, the desensitization rules also include desensitization rules corresponding to the field; obtaining target data corresponding to the target field requested to be read in the user read request, and processing and displaying the target data according to the desensitizing label. The present application adds a desensitizing label to the data when storing data, and obtains data based on the desensitizing label of the referenced field when the user views it, which can achieve dynamic desensitization without changing the actual stored data; and selects appropriate desensitizing rules based on the user authority level to ensure data security. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0035] Figure 1 A schematic diagram of an application scenario of a data display method provided in an embodiment;

[0036] Figure 2 The process of the data display method provided in one embodiment is as follows Figure 1 ;

[0037] Figure 3 A schematic diagram of processing a user read request provided in one embodiment;

[0038] Figure 4 The process of the data display method provided in one embodiment is as follows Figure 2 ;

[0039] Figure 5 The process of the data display method provided in one embodiment is as follows Figure 3 ;

[0040] Figure 6 A schematic diagram of processing a user write request provided in one embodiment;

[0041] Figure 7 A schematic diagram of the structure of a data display device provided in an embodiment;

[0042] Figure 8 FIG. 4 is a diagram showing the internal structure of a computer device in one embodiment.

[0043] The above drawings have shown clear embodiments of the present application, which will be described in more detail later. These drawings and text descriptions are not intended to limit the scope of the present application in any way, but to illustrate the concept of the present application to those skilled in the art by referring to specific embodiments. DETAILED DESCRIPTION

[0044] Exemplary embodiments will be described in detail herein, examples of which are shown in the accompanying drawings. When the following description refers to the drawings, the same numbers in different drawings represent the same or similar elements unless otherwise indicated. The implementations described in the following exemplary embodiments do not represent all implementations consistent with the present application. Instead, they are merely examples of devices and methods consistent with some aspects of the present application as detailed in the appended claims.

[0045] In the description of this application, the terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Thus, a feature defined as "first" or "second" may explicitly or implicitly include one or more of the features. In the description of this application, the meaning of "plurality" is two or more, unless otherwise clearly and specifically defined.

[0046] First, the terms involved in this application are explained:

[0047] Data desensitization technology: refers to the process of discovering sensitive data in storage devices by customizing the sensitive data rule base and using the sensitive field identification function, and then desensitizing the sensitive data according to the set desensitization policy.

[0048] Sensitive data identification: refers to the process of automatically detecting sensitive fields in source data, such as ID number, mobile phone number, email address, etc., and identifying them according to preset rules.

[0049] Desensitization strategy configuration: refers to setting corresponding desensitization strategies based on the identified sensitive fields, such as hash desensitization, masking desensitization, replacement desensitization, transformation desensitization, encryption desensitization or shuffling desensitization.

[0050] Data processing and storage devices: refers to hardware devices used to process and store data, such as servers, databases, etc. These devices usually have computing, storage, and communication functions, and can support the implementation and application of data desensitization technology.

[0051] Front-end display: refers to the process of presenting the processed data to the user in the form of a user interface. This can be achieved in various ways, such as web pages, mobile applications, etc. The purpose of front-end display is to allow users to intuitively understand and access the desensitized data.

[0052] Sensitive data refers to data that may cause serious harm to society or individuals after being leaked, including but not limited to name, ID number, address, telephone number, bank account number, email address, password, medical information, educational background, etc. Data security display technology refers to the technology of processing sensitive data through custom configured sensitive data desensitization rules to achieve sensitive data desensitization display. Desensitization does not change the real data storage content, and does not affect the complex calculation operations of sensitive data, ensuring that sensitive data desensitization is available, and can safely and effectively protect sensitive data.

[0053] For existing data privacy protection models built on deep learning, during the training of deep learning models, the data collection, preprocessing, and storage processes may leak data or leak sensitive features of data. In addition, deep learning models are usually black box models, and it is impossible to directly understand the internal working principles of the model, which makes it difficult to discover potential privacy leakage problems during training. Even if problems are found, they may be difficult to fix because the weights and structures inside the model are randomly initialized.

[0054] Based on the above technical problems, the present application embodiment provides a data display method that can realize dynamic desensitization and display desensitized data. The method provided in the present application embodiment can be applied to Figure 1 In the application environment shown, the application environment includes a terminal 102 and a processing device 104. The terminal 102 can be a display, a computer, a smart phone, a tablet computer or a portable computer, etc. The processing device 104 can be a server, or a server cluster consisting of several servers, or other computer devices. The terminal 102 establishes wired or wireless communication with the processing device 104.

[0055] The terminal 102 is used as the front end to display data to the user, and to access user input instructions and data to achieve interaction with the user; the processing device 104 is used as the background to interact with the front end and perform data processing in the data source, such as display after desensitization. Exemplarily, a client, script or browser can be installed in the terminal 102 to realize the functions of the front end. The user interface of the corresponding terminal 102 can be displayed in the form of a client interface, a terminal interface or a browser corresponding web page. In the subsequent embodiments, the processing device 104 displays a certain data, which means that the processing device 104 displays the data through the user interface. In one implementation, the aforementioned application environment is a bare metal computing system, and the processing device 104 is a bare metal storage device, which stores a data source, and the data source can be used for calculation. In another implementation, the aforementioned application environment is a data analysis system. The application environment may also include a data analysis device, which is used to analyze the data in the data source. Optionally, the data analysis device can be integrated in the processing device, and the processing device can provide the data source displayed after desensitization to the data analysis device. In another implementation, the aforementioned application environment is a data sharing system. If there are multiple terminals in the application environment, the processing device can share the desensitized and processed data source with one or more other terminals when triggered by the user of one terminal.

[0056] In one embodiment, Figure 2 As shown, a data display method is provided, which is applied to Figure 1 Taking the processing device 104 in the example as an example, the method includes the following steps:

[0057] Step 202, receiving a user read request from a first target user, and obtaining a user authority level of the first target user;

[0058] Step 204: Obtain a desensitization tag of the target field requested to be read in the user read request according to the user authority level. The desensitization tag is used to indicate whether the field needs to be desensitized and if desensitization is required, the desensitization rule also includes a desensitization rule corresponding to the field.

[0059] Step 206, obtaining target data corresponding to the target field requested to be read in the user read request, and processing and displaying the target data according to the desensitizing label.

[0060] First of all, it should be explained that the processing device 104 includes a storage layer, in which real original data is stored. The target user triggers a data request instruction to the processing device 104 through the terminal 102, and 104 completes the data display method provided in the embodiment of the present application, and sends the data queried by the target user to the terminal 102 for display.

[0061] The first target user refers to a user who logs in to the terminal 102 based on the user identity information and triggers the data request instruction on the terminal 102. It can be understood that the identity information of each user is unique, so the user's unique identity identifier is generated by the identity information of each user, and the identifier is sent to the processing device 104 along with the triggered data request instruction. The user authority level of the user is obtained according to the unique identity identifier of the first target user. Specifically, the user authority level of the first target user can be obtained through the authority correspondence table stored in the processing device 104.

[0062] A user read request is a type of data request instruction used to request data reading. The user read request includes the target fields that need to be read and displayed, such as identity information, mobile phone number, and address. After receiving the user read request, the user read request is parsed, the target fields included therein are extracted, and the corresponding desensitization labels are obtained based on the target fields.

[0063] The user authority level is used to indicate the user's security level. Similarly, it is also used to indicate the user's access rights to data. For some customers with lower security levels, when they request to access data, the data needs to be desensitized to protect the security of private data. It can be understood that the higher the user's security level, the higher the corresponding user authority level.

[0064] According to the desensitization label of the target field, the read operation request is rewritten, and the rewritten read operation request is used to submit to the storage space in a step-by-step concurrent manner to extract the target data, and the data is desensitized and displayed according to the desensitization label corresponding to the target field. Figure 3 As shown, the processing device 104 includes a presentation layer, a computing layer and a storage layer. The computing layer includes a security engine and a computing engine, and the storage layer stores real original data and desensitized labels. The data presentation method provided in this embodiment includes:

[0065] 1. A security user initiates a user read request: the current user is a security user, and sensitive data needs to be desensitized for display; read operations initiated by this type of account;

[0066] 2. Initiate a request: Establish a connection through the security engines of the presentation layer and the computing layer, and issue a specific read operation;

[0067] 3. Get the returned field desensitization label: The security engine parses the read operation request, extracts the target field, and obtains the corresponding desensitization label from the storage layer;

[0068] 4. Send the returned field desensitization label and read request: The security engine adds the target field and the corresponding desensitization label;

[0069] 5. Send rewritten read operations: The computing engine rewrites the read operation request based on the target field and corresponding desensitization label provided by the security engine, and submits the request to the storage layer in a step-by-step and concurrent manner to extract the target data.

[0070] 6. Return the desensitized set: Obtain the target data from the storage layer, desensitize it through the computing engine of the computing layer, form a streaming set, and gradually push it back to the security engine;

[0071] 7. Return collection: The security engine adds the identifier of the desensitized field, and forwards it to the presentation layer in a streaming manner;

[0072] 8. Get the desensitized set: The presentation layer presents the target data to the first target user of the terminal and informs the user which specific fields have been desensitized.

[0073] Among them, a secure user refers to a user who has passed identity security authentication. If the user's identity has not passed security authentication, any data request instructions sent by the user will not be responded to.

[0074] In the method provided in the above embodiment, a user read request of the first target user is received, and the user authority level of the first target user is obtained; based on the user authority level, a desensitization label of the target field requested to be read in the user read request is obtained, and the desensitization label is used to indicate whether the field needs to be desensitized and when desensitization is required, the desensitization rules also include the corresponding desensitization rules of the field; the target data corresponding to the target field requested to be read in the user read request is obtained, and the target data is processed and displayed based on the desensitization label. The present application adds a desensitization label to the data when storing data, and obtains data based on the desensitization label of the reference field when the user queries it, which can achieve dynamic desensitization without changing the actual stored data; and selects appropriate desensitization rules based on the user authority level to ensure data security.

[0075] In one embodiment, if Figure 4 As shown, according to the user's permission level, the desensitized label of the target field requested to be read in the user's read request is obtained, including:

[0076] Step 402: when the user authority level is a first authority level indicating low security of the user, determine a desensitizing label of a target field requested to be read in the user read request according to a first corresponding relationship, wherein the first corresponding relationship is used to indicate a corresponding relationship between the user authority level, the field type, and the desensitizing label;

[0077] Step 404: when the user authority level is the second authority level indicating high security of the user, the desensitization label of the target field requested to be read in the user read request is not obtained or the desensitization label of the target field requested to be read in the user read request is assumed to be empty.

[0078] Among them, the level of the first permission level is lower than the second permission level, the security of users with the first permission level is lower than that of users with the second permission level, and in this embodiment, users are only divided into low-security users and high-security users. When the data request instruction sent by the target user is a user read request, for the target user with the first permission level, due to its low security, the presented data needs to be desensitized. Through the first corresponding relationship, the desensitization label corresponding to the target field requested to be read by the target user with the first permission level is searched, and it is determined whether the data of each target field needs to be desensitized. When the target field has a desensitization label, the target data corresponding to the target field is desensitized according to the corresponding desensitization rules. For the target user with the second permission level, due to its high security, the data requested to be read can be directly displayed without desensitization.

[0079] It should be noted that not obtaining the desensitizing label of the target field requested to be read in the user read request or assuming that the desensitizing label of the target field requested to be read in the user read request is empty means that there is no need to obtain the desensitizing label of the target field, and desensitization is not required by default.

[0080] In the method provided in the above embodiment, the desensitization rules are determined by the user's permission level, which can prevent unauthorized access and utilization, help protect the security of sensitive information, prevent information leakage or malicious use, and improve data security.

[0081] In one embodiment, the target data is processed and displayed according to the desensitization label, including:

[0082] In a case where the user authority level is a first authority level indicating low security of the user, determining a desensitization rule in a desensitization tag of a target field requested to be read in a read request of the user;

[0083] The target data is processed based on the desensitization rules to obtain the desensitized data and display it.

[0084] In this embodiment, sensitive data rules are sorted out with reference to various sensitive data, such as the content characteristics of sensitive data such as ID cards, mobile phone numbers, and email addresses; the ID card recognition method determines that the data length is 15 or 18 digits, the first 6 digits are the identification numbers of each area, 18 digits 7-14 are the date, 15 digits 7-12 are the date, the last digit of the 18 digits is a value or an "X" character, and the remaining digits are all values; the email recognition method determines that the data content contains "@" in the middle, and the character string after "@" contains at least one "." separator character content, and the length does not exceed 100 ; Mobile phone number recognition method, starting with 13, 14, 15, 16, 17, 18, the data length is 11 digits, and all the content is digital. At the same time, the phone number determines the area code, such as 010, 021, 0551, 0565, etc.; Chinese name recognition, preset sensitive word library, word segmentation processing through natural language processing technology, built-in surname identification judgment, if the recognition degree of the entire field exceeds 50%, it is considered that the content meets the classification of sensitive words. For example, a field has 100 data, of which more than 50 data hit the name rule.

[0085] Desensitization rules are used to process sensitive data determined based on the above sensitive data rules to achieve desensitization. For example, desensitization strategies are configured for fields in the rule base according to hash desensitization, masking desensitization, replacement desensitization, transformation desensitization, encryption desensitization, or shuffle desensitization. For ID card desensitization strategies, the middle birth date and the last digit are all *-displayed and masked, such as "342622********139*"; mobile phone number deformation strategy, the first three digits are deformed to 199, and the last 8 are replaced, such as "19955518748"; name desensitization strategy, deformation through Chinese character library mapping, no mapping value is assigned to the default character, such as "Zhang San" is replaced with "Li Si"; email desensitization strategy, the "@" symbol is mapped and deformed into English and numbers, and no mapping value is assigned to the default character, such as "zhangsan@qq.com" is replaced with "lisi@163.com".

[0086] Based on the identification of the above sensitive fields and the corresponding desensitization rules, the policy configuration of the source sensitive data fields is performed in batches in the storage device. In this embodiment, only the source data is desensitized, and the desensitization rules are implemented for downstream inheritance and transmission. The batch data service system has a layered feature. Data desensitization only needs to be performed on the source data. The downstream data generates the same desensitization rules according to the desensitization rules of the source data to achieve transmission desensitization, eliminating the operation of formulating desensitization strategies for sensitive data in the entire link, saving unnecessary computing resource consumption.

[0087] In this embodiment, for the desensitization of complex processing result sets, data desensitization transmission not only supports one-to-one mapping insertion transmission, but also supports inheritance transmission after complex logic processing, such as system functions (trim, sum, replace, etc.), join, copy to table, etc. The transmission process has the ability to pollute: (1) If multiple source data are inserted into the same target field, a single desensitization rule exists for a certain source data, and all the data in the corresponding field of the inserted target inherit the desensitization rule; (2) If there are multiple data sources and multiple data desensitization rules, different desensitization rules have priorities, and the target field only inherits the high-priority desensitization rule. When multiple different desensitization rules have the same priority, the target field directly pollutes and inherits the desensitization rule that covers the pollution; (3) If the source field has multiple desensitization rules and has complex system functions (trim, sum, replace, etc.), join, copy to table processing, the target field directly pollutes and inherits the full data desensitization rule that covers the pollution.

[0088] Based on the desensitization rules, the data flow in the process of processing the target data relies on the inherited capability to transfer the desensitization rules. When the user authority level is the second authority level indicating the user's high security, the target data can be displayed directly without desensitization.

[0089] In the method provided in the above embodiment, data access is performed through different data access channels, and whether the sensitive data desensitization rules are effective is selectively set. Users with the first permission level access and display desensitized data, and users with the second permission level access and display real data. The desensitized display capability can be granted and revoked in the form of permissions.

[0090] In one embodiment, if Figure 5 As shown, the method also includes:

[0091] Step 502, receiving a user write request from a second target user, and obtaining a target field requested to be written in the user write request;

[0092] Step 504: Determine the desensitization label of the target field requested to be written according to the second correspondence relationship, where the second correspondence relationship is used to indicate the correspondence relationship between the field type in the source data and the desensitization label;

[0093] Step 506: Execute the write operation corresponding to the user write request according to the desensitizing label of the target field requested to be written.

[0094] Among them, the user write request is a type of data request instruction, which is used to complete the data write operation. The target user submits a user write request to the port of the processing device. For the target field in the user write request, it is checked whether there is a setting of a desensitization rule in the source data; that is, it is checked whether the target field has a desensitization label, and the write request is directly sent to the database engine to complete the data writing according to the desensitization label. If the target field has a desensitization label in table A, it means that there is a corresponding desensitization rule, and the data of the corresponding field in table B also has a desensitization label.

[0095] like Figure 6 As shown in FIG. 1 , for a processing device having a storage layer, a computing layer, and a presentation layer, the processing process of a user write request is as follows:

[0096] 1. Write operation request: a write request triggered by the user;

[0097] 2. Initiate a request: The client presentation layer initiates a user write request to the security engine of the computing layer;

[0098] 3. Obtain source data desensitization labels: The security engine extracts the desensitization labels of the target fields in the associated source data from the desensitization labels of the storage layer, and uses the security engine to asynchronously output the desensitization labels of the target fields;

[0099] 4. Sending write requests: Sending write operation requests synchronously through the computing engine to meet business write operations without causing additional blocking;

[0100] 5. Write success: The storage layer responds that the real processed data is written successfully, and the computing engine feeds back to the security engine;

[0101] 6. Additional desensitization of target fields: The security engine informs the storage layer which specific target fields need to have additional desensitization attributes added, so as to form a desensitization label delivery implementation;

[0102] 7. Request success: After the real write operation and the desensitization mark are successful, the security engine feedback front-end presentation layer request success;

[0103] 8. Request success: The external user obtains the write operation execution success, but does not need to worry about the desensitizing tag transmission process.

[0104] In the method provided in the above embodiment, when the current user is parsed as a write operation, whether the target inherits the source desensitization rule is determined based on whether there is a predefined desensitization rule in the data source. When there is no desensitization mark, there is no desensitization rule transmission inheritance. Through the desensitization rule inheritance, the operation of formulating desensitization rules for sensitive data in the whole link is omitted, saving unnecessary computing resource consumption. .

[0105] In one embodiment, performing a write operation corresponding to a user write request according to a desensitizing tag of a target field requested to be written includes:

[0106] For sensitive data requested to be written in the user's write request, the sensitive data is processed according to its corresponding desensitizing label and preset homomorphic encryption rules to obtain encrypted data and store it.

[0107] Based on the security engine built into the processing device, the sensitive data is homomorphically encrypted. Assuming that A and B are sensitive data and Enc is the encryption rule, according to its homomorphism (Enc(A)°Enc(B)=Enc(A*B)), after the user submits the task of two plaintext data, the operation performed on the ciphertext is Enc(A)°Enc(B). Using homomorphic encryption, the data can still perform basic operations such as calculations, statistics, analysis, and retrieval in the ciphertext domain, and is presented to the end user after processing, so that the data is available and the user is fully informed, reducing the cost of data analysis.

[0108] In one of the embodiments, the masking rules include custom masking rules, and the custom masking rules are used to indicate a format for retaining the written sensitive data.

[0109] Based on the computing engine built into the processing device, the existing desensitization rules are used to mark data and add attributes. In addition, a custom desensitization rule called "Format-Preserving Encryption (FPE)" is introduced, that is, when the entered sensitive data contains Chinese characters, the encrypted output is still Chinese, the encrypted output is still numbers, and the encrypted output is still letters. This format-preserving encryption uses the session number generated when the client connects as the key, which ensures the consistency of the encryption behavior of the previous and subsequent requests within the same connection session, and also ensures the difference between different session connections and the demand for anti-brute force cracking. Format-preserving encryption introduces the Feistel network and cryptographic pseudo-random function of the FFX (Format-Preserving Encryption Feistel-based mode) mode to achieve irreversible encryption of data and preserve the data format.

[0110] The data display method mentioned in the above embodiment also includes:

[0111] Data anonymization: By anonymizing sensitive data, some information can be removed or replaced, making it impossible to identify a specific individual from the original data. This method is suitable for protecting personal privacy information.

[0112] Data encryption storage: By encrypting and storing sensitive data, data access and control can be achieved without leaking the original data. This method is suitable for scenarios with high requirements for the confidentiality of sensitive information.

[0113] Data obfuscation: By obfuscating sensitive data, its original structure and characteristics can be changed, making it difficult to identify and extract. This method is suitable for scenarios where the confidentiality of sensitive information is required to be high.

[0114] Rule-based data desensitization: According to pre-set rules and conditions, source data is filtered, replaced or deleted to achieve desensitization of sensitive data. This method is suitable for scenarios with clear requirements for desensitization strategies.

[0115] Multi-dimensional desensitization technology: Combining multiple desensitization technologies, such as data desensitization, anonymization, encrypted storage, etc., to achieve more comprehensive and effective sensitive data processing. This method is suitable for scenarios where sensitive information needs to be protected at different levels.

[0116] It should be understood that, although the steps in the flowcharts involved in the above embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps is not strictly limited in order, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above embodiments may include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0117] Based on the same inventive concept, an embodiment of the present application also provides an abnormal transaction data monitoring device. The implementation solution for solving the problem provided by the device is similar to the implementation solution recorded in the above method. Therefore, the specific limitations in one or more abnormal transaction data monitoring device embodiments provided below can be referred to the limitations on the abnormal transaction data monitoring method above, and will not be repeated here.

[0118] In one embodiment, Figure 7 As shown, a data display device 700 is provided, including an information interaction module 701, a request processing module 702 and a data display module 703, wherein:

[0119] The information interaction module 701 is used to receive a user read request from a first target user and obtain a user authority level of the first target user;

[0120] The request processing module 702 is used to obtain the desensitization label of the target field requested to be read in the user read request according to the user authority level, and the desensitization label is used to indicate whether the field needs to be desensitized and the desensitization rule also includes the desensitization rule corresponding to the field when desensitization is required;

[0121] The data display module 703 is used to obtain the target data corresponding to the target field requested to be read in the user's read request, and process and display the target data according to the desensitization label.

[0122] In one embodiment, the request processing module 702 is further configured to:

[0123] In a case where the user authority level is a first authority level indicating low security of the user, determining, according to a first corresponding relationship, a desensitizing label of a target field requested to be read in the user read request, wherein the first corresponding relationship is used to indicate a corresponding relationship between the user authority level, the field type, and the desensitizing label;

[0124] When the user authority level is the second authority level indicating high security of the user, the desensitization label of the target field requested to be read in the user read request is not obtained or the desensitization label of the target field requested to be read in the user read request is defaulted to be empty.

[0125] In one embodiment, the data display module 703 is further used to:

[0126] In a case where the user authority level is a first authority level indicating low security of the user, determining a desensitization rule in a desensitization tag of a target field requested to be read in a read request of the user;

[0127] The target data is processed based on the desensitization rules to obtain the desensitized data and display it.

[0128] In one embodiment, the data display module 703 is further used to:

[0129] In case the user authority level is the second authority level indicating high security of the user, the target data is directly displayed.

[0130] In one embodiment, the information interaction module 701 is further used to:

[0131] Receive a user write request from a second target user, and obtain a target field requested to be written in the user write request;

[0132] Determine, according to the second correspondence, a desensitizing label of the target field requested to be written, where the second correspondence is used to indicate a correspondence between a field type in the source data and the desensitizing label;

[0133] Execute the write operation corresponding to the user write request according to the desensitizing label of the target field requested to be written.

[0134] In one embodiment, the information interaction module 701 is further used to:

[0135] For sensitive data requested to be written in the user's write request, the sensitive data is processed according to its corresponding desensitizing label and preset homomorphic encryption rules to obtain encrypted data and store it.

[0136] Each module in the above data display device can be implemented in whole or in part by software, hardware, or a combination thereof. Each module can be embedded in or independent of a processor in a computer device in the form of hardware, or can be stored in a memory in a computer device in the form of software, so that the processor can call and execute operations corresponding to each module.

[0137] The data display device provided in this embodiment can execute the method provided in the above method embodiment. Its implementation principle and technical effect are similar, and this embodiment will not be described in detail here.

[0138] Figure 8 This is a schematic diagram of the structure of the computer device provided in this application. Figure 8 As shown, the electronic device 80 provided in this embodiment includes: at least one processor 801 and a memory 802. Optionally, the device 80 also includes a communication component 803. The processor 801, the memory 802 and the communication component 803 are connected via a bus 804.

[0139] In a specific implementation process, at least one processor 801 executes the computer-executable instructions stored in the memory 802, so that at least one processor 801 executes the above method.

[0140] The specific implementation process of the processor 801 can be found in the above method embodiment, and its implementation principle and technical effect are similar, so this embodiment will not be repeated here.

[0141] In the above embodiments, it should be understood that the processor can be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), etc. A general-purpose processor can be a microprocessor or any conventional processor. The steps of the method disclosed in the invention can be directly implemented as a hardware processor, or can be implemented by a combination of hardware and software modules in the processor.

[0142] The memory may include a high-speed memory (Random Access Memory, RAM), and may also include a non-volatile memory (NVM), such as at least one disk storage.

[0143] The bus can be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus, or an Extended Industry Standard Architecture (EISA) bus, etc. The bus can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, the bus in the drawings of this application is not limited to only one bus or one type of bus.

[0144] The present application also provides a computer program product, including a computer program, which implements the above method when executed by a processor.

[0145] The present application also provides a computer-readable storage medium, in which computer-executable instructions are stored. When a processor executes the computer-executable instructions, the above method is implemented.

[0146] The above-mentioned readable storage medium can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic memory, flash memory, magnetic disk or optical disk. The readable storage medium can be any available medium that can be accessed by a general or special-purpose computer.

[0147] An exemplary readable storage medium is coupled to a processor so that the processor can read information from the readable storage medium and write information to the readable storage medium. Of course, the readable storage medium can also be a component of the processor. The processor and the readable storage medium can be located in an application specific integrated circuit (Application Specific Integrated Circuits, referred to as: ASIC). Of course, the processor and the readable storage medium can also exist in the device as discrete components.

[0148] The division of units is only a logical function division, and there may be other divisions in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be an indirect coupling or communication connection through some interface, device or unit, which can be electrical, mechanical or other forms.

[0149] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0150] In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0151] If the function is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art, or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium, including several instructions for a computer device (which can be a personal computer, server, or network device, etc.) to perform all or part of the steps of the methods of each embodiment of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk, etc. Various media that can store program codes.

[0152] Those skilled in the art can understand that all or part of the steps of implementing the above-mentioned method embodiments can be completed by hardware related to program instructions. The aforementioned program can be stored in a computer-readable storage medium. When the program is executed, the steps of the above-mentioned method embodiments are executed; and the aforementioned storage medium includes: ROM, RAM, disk or optical disk and other media that can store program codes.

[0153] Finally, it should be noted that those skilled in the art will readily conceive of other embodiments of the present invention after considering the specification and practicing the invention disclosed herein. The present invention is intended to cover any variations, uses or adaptations of the present invention, which follow the general principles of the present invention and include common knowledge or customary technical means in the art not disclosed by the present invention, are not limited to the precise structure described above and shown in the drawings, and may be modified and changed in various ways without departing from the scope thereof. The scope of the present invention is limited only by the appended claims.

Claims

1. A data display method, characterized in that: The method comprises: Receiving a user read request from a first target user, and obtaining a user authority level of the first target user; According to the user authority level, obtaining a desensitization label of the target field requested to be read in the user read request, wherein the desensitization label is used to indicate whether the field needs to be desensitized and when desensitization is required, the desensitization rule also includes a desensitization rule corresponding to the field; The target data corresponding to the target field requested to be read in the user read request is obtained, and the target data is processed and displayed according to the desensitizing label.

2. The method according to claim 1, characterized in that The acquiring, according to the user authority level, a desensitizing label of a target field requested to be read in the user read request includes: In a case where the user authority level is a first authority level indicating low security of the user, determining a desensitizing label of a target field requested to be read in the user read request according to a first corresponding relationship, wherein the first corresponding relationship is used to indicate a corresponding relationship between the user authority level, the field type, and the desensitizing label; When the user authority level is the second authority level indicating high security of the user, the desensitizing label of the target field requested to be read in the user read request is not obtained or the desensitizing label of the target field requested to be read in the user read request is defaulted to be empty.

3. The method according to claim 2, characterized in that The processing and displaying of the target data according to the desensitizing label includes: In a case where the user authority level is a first authority level indicating low security of the user, determining a desensitization rule in a desensitization tag of a target field requested to be read in the user read request; The target data is processed based on the desensitization rules to obtain desensitized data and display it.

4. The method according to claim 2, characterized in that: The desensitizing and displaying the target data according to the desensitizing label includes: In a case where the user authority level is a second authority level indicating high security of the user, the target data is directly displayed.

5. The method according to claim 1, characterized in that The method further comprises: Receive a user write request from a second target user, and obtain a target field requested to be written in the user write request; Determine, according to a second correspondence, a desensitizing label of the target field of the request to write, wherein the second correspondence is used to indicate a correspondence between a field type in the source data and the desensitizing label; The write operation corresponding to the user write request is performed according to the desensitizing label of the target field of the request to be written.

6. The method according to claim 5, characterized in that The performing a write operation corresponding to the user write request according to the desensitizing label of the target field requested to be written includes: For the sensitive data requested to be written in the user write request, the sensitive data is processed according to its corresponding desensitizing label and preset homomorphic encryption rules to obtain encrypted data and store it.

7. A data display device, characterized in that: The device comprises: An information interaction module, configured to receive a user read request from a first target user and obtain a user authority level of the first target user; A request processing module, used for obtaining, according to the user authority level, a desensitization label of a target field requested to be read in the user read request, wherein the desensitization label is used to indicate whether the field needs to be desensitized and when desensitization is required, the desensitization rule also includes a desensitization rule corresponding to the field; The data display module is used to obtain the target data corresponding to the target field requested to be read in the user read request, and process and display the target data according to the desensitizing label.

8. A computer device, characterized in that: include: Memory, processor; The memory stores computer-executable instructions; The processor executes the computer-executable instructions stored in the memory, so that the processor performs the method according to any one of claims 1 to 6.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer-executable instructions, which are used to implement the method according to any one of claims 1 to 6 when executed by a processor.

10. A computer program product, characterized in that The invention comprises a computer program, which implements the method according to any one of claims 1 to 6 when being executed by a processor.

Images