Sensitive information desensitization method and system, electronic equipment and storage medium
By determining the standard sensitive field model of sensitive fields in the request message and selecting the target desensitization processing method, using JAVA regular expression or SQL statement for desensitization, the problem of inconsistent desensitization logic in the existing technology is solved, and the problem of inconsistent desensitization logic of different fields is realized. Efficient and accurate desensitization of sensitive information and reduce maintenance costs.
Patent Information
- Application Number
- CN202411204569.X
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-08-30
- Publication Date
- 2025-01-07
AI Technical Summary
Existing data desensitization technology is used to desensitize fields one by one at the database level or using open source APIs, resulting in inconsistent desensitization logic in different fields in the same system, difficult to integrate functions, low resource utilization and high maintenance costs.
By determining the standard sensitive field model of sensitive fields in the request message, and selecting the target desensitization processing method based on the field information, using JAVA regular expressions or SQL statements for desensitization, the automated classification and desensitization of sensitive information is achieved.
Improves the efficiency and accuracy of desensitization treatment, reduces development and maintenance costs, and ensures consistency and flexibility of desensitization treatment.
Smart Images

Figure CN119272319A_ABST
Abstract
Description
Background Art
[0002] Currently, data desensitization technologies on the market are mainly concentrated at the database level or use open source APIs to desensitize each field. Traditional implementations use an on-demand desensitization method, that is, adding desensitization functions to corresponding functions based on whether the functions involve sensitive information. Traditional methods may lead to inconsistent desensitization logic for different fields in the same system, making functional integration difficult, and requiring multiple development and testing of each function. These problems bring about the disadvantages of low resource utilization and high maintenance costs.
[0003] Therefore, it is urgent to provide a technical solution to solve the above problems. Summary of the invention
[0004] In order to solve the above technical problems, the present invention provides a sensitive information desensitization method, system, electronic device and storage medium.
[0005] In a first aspect, the present invention provides a method for desensitizing sensitive information, and the technical solution of the method is as follows:
[0006] When the field corresponding to the request message includes a sensitive field, determining a standard sensitive field model corresponding to the sensitive field;
[0007] In the desensitization processing method corresponding to the standard sensitive field model, a target desensitization processing method corresponding to the sensitive field is determined, and the sensitive field is desensitized using the target desensitization processing method.
[0008] The beneficial effects of a sensitive information desensitization method of the present invention are as follows:
[0009] The method of the present invention realizes the automatic classification and desensitization processing of sensitive information, thereby improving the efficiency and accuracy of the desensitization processing, and also reducing the development and maintenance costs.
[0010] Based on the above scheme, a sensitive information desensitization method of the present invention can also be improved as follows.
[0011] In an optional manner, the step of determining the standard sensitive field model corresponding to the sensitive field includes: determining a field identifier of the sensitive field in a non-standard sensitive field model, and determining the standard sensitive field model corresponding to the sensitive field based on the field identifier.
[0012] In the above optional method, by determining the field identifier of the sensitive field in the non-standard sensitive field model and mapping it to the standard sensitive field model based on the field identifier, this improvement solves the mapping problem between non-standard fields and standard models, ensuring that sensitive fields can be accurately classified into the corresponding standard models, thereby improving the accuracy and consistency of the desensitization processing.
[0013] In an optional manner, in the desensitization processing method corresponding to the standard sensitive field model, the step of determining a target desensitization processing method corresponding to the sensitive field includes: determining, according to field information of the sensitive field, a target desensitization processing method corresponding to the sensitive field in the desensitization processing method corresponding to the standard sensitive field model.
[0014] In an optional manner, the field information is: field value, field value type or character string length.
[0015] In the above optional methods, the target desensitization processing method is determined according to the field information of the sensitive field (such as field value, field value type or string length), realizing the refined selection of the desensitization processing method. By considering the specific information of the field, the system can select the most appropriate desensitization method, thereby further improving the efficiency and accuracy of the desensitization processing.
[0016] In an optional manner, the step of performing desensitization processing on the sensitive field using the target desensitization processing method includes: determining a JAVA regular expression or SQL statement corresponding to the target desensitization processing method, and performing desensitization processing on the sensitive field using the JAVA regular expression or the SQL statement.
[0017] In the above optional method, by using JAVA regular expressions or SQL statements to implement desensitization processing, the desensitization logic is combined with the specific implementation technology, which improves the flexibility and scalability of the desensitization processing. At the same time, using regular expressions or SQL statements for desensitization processing also facilitates subsequent maintenance and modification, reducing maintenance costs.
[0018] In a second aspect, the present invention provides a sensitive information desensitization system, the technical solution of which is as follows:
[0019] The sensitive information desensitization system includes: an identification module and a processing module.
[0020] The identification module is used to: when the field corresponding to the request message contains a sensitive field, determine the standard sensitive field model corresponding to the sensitive field.
[0021] The processing module is used to: determine a target desensitization processing method corresponding to the sensitive field in the desensitization processing method corresponding to the standard sensitive field model, and perform desensitization processing on the sensitive field using the target desensitization processing method.
[0022] The beneficial effects of a sensitive information desensitization system of the present invention are as follows:
[0023] The system of the present invention realizes the automatic classification and desensitization processing of sensitive information, thereby improving the efficiency and accuracy of the desensitization processing, and also reducing the development and maintenance costs.
[0024] Based on the above scheme, the sensitive information desensitization system of the present invention can also be improved as follows.
[0025] In an optional manner, the identification module is specifically used to: determine a field identifier of the sensitive field in a non-standard sensitive field model, and determine a standard sensitive field model corresponding to the sensitive field based on the field identifier.
[0026] In the above optional method, by determining the field identifier of the sensitive field in the non-standard sensitive field model and mapping it to the standard sensitive field model based on the field identifier, this improvement solves the mapping problem between non-standard fields and standard models, ensuring that sensitive fields can be accurately classified into the corresponding standard models, thereby improving the accuracy and consistency of the desensitization processing.
[0027] In an optional manner, the processing module is specifically used to: determine, according to the field information of the sensitive field, a target desensitization processing method corresponding to the sensitive field in the desensitization processing method corresponding to the standard sensitive field model.
[0028] In the above optional methods, the target desensitization processing method is determined according to the field information of the sensitive field (such as field value, field value type or string length), realizing the refined selection of the desensitization processing method. By considering the specific information of the field, the system can select the most appropriate desensitization method, thereby further improving the efficiency and accuracy of the desensitization processing.
[0029] In a third aspect, a technical solution of an electronic device of the present invention is as follows:
[0030] It includes a memory, a processor, and a program stored in the memory and running on the processor. When the processor executes the program, the steps of the sensitive information desensitization method of the present invention are implemented.
[0031] In a fourth aspect, the present invention provides a computer-readable storage medium having the following technical solution:
[0032] Instructions are stored in the computer-readable storage medium. When the computer-readable storage medium reads the instructions, the computer-readable storage medium executes the steps of the sensitive information desensitization method of the present invention.
[0033] The above description is only an overview of the technical solution of the present invention. In order to more clearly understand the technical means of the present invention, it can be implemented according to the contents of the specification. In order to make the above and other purposes, features and advantages of the present invention more obvious and easy to understand, the specific implementation methods of the present invention are listed below. BRIEF DESCRIPTION OF THE DRAWINGS
[0034] The accompanying drawings are only used to illustrate the embodiments and are not to be considered as limiting the present invention. In addition, the same reference symbols are used to represent the same components throughout the accompanying drawings. In the accompanying drawings:
[0035] Figure 1 A schematic diagram of a process of an embodiment of a sensitive information desensitization method of the present invention;
[0036] Figure 2 It is an overall flow chart of a sensitive information desensitization method of the present invention;
[0037] Figure 3 It is a structural schematic diagram of an embodiment of a sensitive information desensitization system of the present invention;
[0038] Figure 4 The figure is a schematic structural diagram of an embodiment of an electronic device of the present invention. DETAILED DESCRIPTION
[0039] Exemplary embodiments of the present invention will be described in more detail below with reference to the accompanying drawings. Although exemplary embodiments of the present invention are shown in the drawings, it should be understood that the present invention can be implemented in various forms and should not be limited to the embodiments set forth herein.
[0040] Figure 1 FIG. 1 is a flow chart showing an embodiment of a method for desensitizing sensitive information provided by the present invention, and the method is executed by a controller. Figure 1 As shown, the following steps are included:
[0041] S1. When the field corresponding to the request message contains a sensitive field, determine the standard sensitive field model corresponding to the sensitive field. In S1:
[0042] 1) A request message is a data packet of request information sent by the client to the controller. The request message contains information such as the data that the client needs the controller to process, the request type (such as GET, POST, etc.), and the requested resource path. As a carrier of data transmission, the request message enables the client to communicate with the controller and request specific services or data.
[0043] 2) The fields in the request message refer to the various data items contained in the message, such as user ID, name, address, etc. Each field has a specific name and field value. The field is the basic component unit of the request message, which is used to transmit specific data information. At the same time, the field is also the basic unit for identifying and processing sensitive information.
[0044] 3) Sensitive fields refer to fields in request messages that contain sensitive information, such as the user's name, ID number, bank account, password, etc. If sensitive information is leaked, it may cause risks such as privacy leakage and property loss to users. In the process of data desensitization, identifying and processing sensitive fields is the key to protecting user privacy and data security.
[0045] 4) The standard sensitive field model is a template or framework for describing and classifying sensitive fields. The standard sensitive field model defines the identification criteria, classification methods, and desensitization processing methods of sensitive fields, such as the "name model", "email model", and "ID number model". The standard sensitive field model provides unified specifications and guidance for data desensitization, making the identification and processing of sensitive information more standardized and automated. At the same time, the standard sensitive field model also helps to improve the efficiency and accuracy of desensitization processing.
[0046] Specifically, when the fields corresponding to the request message include a sensitive field, the controller determines a standard sensitive field model corresponding to the sensitive field.
[0047] S2. In the desensitization processing method corresponding to the standard sensitive field model, determine the target desensitization processing method corresponding to the sensitive field, and use the target desensitization processing method to desensitize the sensitive field. In S2:
[0048] 1) The desensitization processing method corresponding to the standard sensitive field model refers to one or more specific desensitization methods or strategies specified for different types of standard sensitive field models, ensuring that the normal use of data is not affected while protecting sensitive information. The desensitization processing method is the core of data desensitization and determines how to convert or process sensitive fields to eliminate their sensitivity. By choosing the appropriate desensitization processing method, you can meet the compliance and availability requirements of data while protecting privacy.
[0049] 2) Target desensitization processing method refers to the final desensitization processing method selected based on the specific information of the field (such as field value, field value type or string length) after the sensitive field and its corresponding standard sensitive field model are determined. The target desensitization processing method is the desensitization processing method corresponding to the field information actually applied to the sensitive field, which directly determines the data form and security after desensitization. By accurately matching and selecting the target desensitization processing method, sensitive information can be effectively protected.
[0050] Specifically, the controller further determines the target desensitization processing method corresponding to the sensitive field in the desensitization processing method corresponding to the standard sensitive field model, and uses the target desensitization processing method to desensitize the sensitive field, thereby obtaining the desensitization result of the sensitive field and returning the desensitization result of the sensitive field to the client.
[0051] The technical solution of this embodiment realizes the automatic classification and desensitization processing of sensitive information, thereby improving the efficiency and accuracy of the desensitization processing, and also reducing the development and maintenance costs.
[0052] In an optional manner, the step of determining a standard sensitive field model corresponding to a sensitive field includes:
[0053] Determine the field identifier of the sensitive field in the non-standard sensitive field model, and determine the standard sensitive field model corresponding to the sensitive field based on the field identifier.
[0054] like Figure 2 As shown, after receiving the request message, when the field corresponding to the request message contains a sensitive field, the controller attempts to find the corresponding field identifier in the non-standard sensitive information model and classify different field identifiers. Subsequently, the corresponding field identifier is mapped to the corresponding model category in the standard sensitive information model to determine the standard sensitive field model corresponding to the sensitive field.
[0055] It should be noted that field identifiers such as name, appName, insName, insuredName, etc., all represent specific sensitive information, i.e., the name of the policyholder or the insured, and multiple field identifiers are unique and come from all functional query results in the system, and are collectively referred to as "non-standard sensitive field models". Similarly, English fields such as email, appEmail, insEmail, insuredEmail, etc., represent the specific sensitive information of the policyholder or the insured's email address; and fields such as idNo, appIdNo, insIdNo, insuredIdNo, etc., represent the specific sensitive information of the policyholder or the insured's ID number.
[0056] In addition, the specific English field represented by the name of the policyholder or the insured will be uniformly mapped to the "name model" in the standard sensitive field model; similarly, the specific English field represented by the email address of the policyholder or the insured will be uniformly mapped to the "email model"; and the specific English field represented by the ID number of the policyholder or the insured should be uniformly mapped to the "ID number model". In addition, the standard sensitive field model also includes a variety of other models, including but not limited to: "mobile phone number model", "URL link model" and "address model".
[0057] Specifically, the controller further determines a field identifier of the sensitive field in the non-standard sensitive field model, and determines a standard sensitive field model corresponding to the sensitive field according to the field identifier.
[0058] In an optional manner, in the desensitization processing method corresponding to the standard sensitive field model, the step of determining the target desensitization processing method corresponding to the sensitive field includes:
[0059] According to the field information of the sensitive field, determine the target desensitization processing method corresponding to the sensitive field in the desensitization processing method corresponding to the standard sensitive field model.
[0060] In an optional manner, the field information is: field value, field value type or string length.
[0061] like Figure 2 As shown, according to the field information of the sensitive field (field value, field value type or string length), the dynamic adapter will dynamically adapt the desensitization processing method corresponding to the field information, thereby determining the target desensitization processing method corresponding to the sensitive field, so as to run the desensitization process subsequently.
[0062] It should be noted that when the field information is name information, if the string length is 2, the first character is retained and the second character is replaced by a specific symbol; if the string length is greater than or equal to 3, the first and last characters are retained, and the characters in the middle are replaced by specific symbols. It can be seen that names of different string lengths correspond to different desensitization processing methods. JAVA regular expressions are very suitable for desensitization processing methods with fixed string lengths. Therefore, in the "Name Model" in the rule library, two JAVA regular expression desensitization processing methods are set: one is specifically used to process desensitization when the string length is 2 (the model is coded as "XM01"), and the other is used to process desensitization when the string length is greater than or equal to 3 (the model is coded as "XM02").
[0063] When the field information is email information, the desensitization processing method of the email field is: take out the characters before "@", keep the first half of the characters according to the length, and replace the second half with "*". It can be seen that the desensitization logic of the email box is relatively complex, and it is necessary to index the "@" keyword and process strings of variable length. Since JAVA regular expressions are more suitable for processing desensitization logic with fixed string lengths, SQL statement types can be used for processing at this time. Therefore, in the "Email Model" in the rule library, a desensitization processing method for 1 SQL statement will be set: used to process the desensitization of the email field (the model code is "YX01").
[0064] When the field information is the document number information, the desensitization processing method of the document number field varies according to the document type: when the document type is an ID card, the first four digits and the last four digits are retained, and the middle is replaced by "*"; when the document type is a passport or a birth certificate, the first five digits are retained, and the remaining numbers are replaced by "*". It can be seen that different document types correspond to different desensitization processing methods. JAVA regular expressions are very suitable for this type of fixed string length desensitization processing method. Therefore, in the "Document Number Model" in the rule library, three JAVA regular expression desensitization processing methods are set: the first one is used to process the desensitization of the document type as an ID card (model code "ZJH01"), the second one is used to process the desensitization of the document type as a passport (model code "ZJH02"), and the third one is used to process the desensitization of the document type as a birth certificate (model code "ZJH03").
[0065] Specifically, the controller further determines the target desensitization processing method corresponding to the sensitive field in the desensitization processing method corresponding to the standard sensitive field model based on the field information of the sensitive field.
[0066] In an optional manner, the step of desensitizing the sensitive field by using the target desensitization processing method includes:
[0067] Determine the JAVA regular expression or SQL statement corresponding to the target desensitization processing method, and use the JAVA regular expression or SQL statement to desensitize the sensitive fields.
[0068] It should be noted that JAVA stands for JAVA regular expressions, while SQL stands for SQL statements. In practical applications, JAVA regular expressions are used for rule configuration and implementation in most cases, while SQL is used only in a few specific cases. Since executing database SQL requires connecting to the database from the application layer, this process will increase the execution time of the program and occupy database resources. Therefore, when JAVA regular expressions can meet the needs, JAVA regular expressions are preferred.
[0069] Specifically, the controller further determines a JAVA regular expression or SQL statement corresponding to the target desensitization processing method, and uses the JAVA regular expression or SQL statement to desensitize the sensitive field.
[0070] In this embodiment, the query result is the name of the insured, the name field value is "Zhang San", and the string length is 2, the field identifier is "appName", then the name field is identified as "appName" in the "non-standard sensitive field model". Subsequently, "appName" is mapped with the "name model" in the "standard sensitive field model". In the "name model", since the string length of the insured "Zhang San" is 2, the dynamic adapter will select the "XM01" rule accordingly. Then, the "XM01" rule will locate the corresponding regular expression. By running Java's replaceAll method: name.replaceAll(regex,""), and passing in the insured's name field "Zhang San" as name and the corresponding regular expression as regex, the desensitization operation of sensitive information is completed, and the desensitized result "Zhang*" is output.
[0071] In another embodiment, the query result is the insured's email address, the email field value is "12389011@qq.com", and the field identifier is "email", then the email field is identified as "email" in the "non-standard sensitive field model". Subsequently, "email" is mapped to the "email model" in the "standard sensitive field model". In the "email model", there is only one desensitization processing method, and the "YX01" rule will locate the corresponding SQL statement. By executing SQL through the database and passing in the insured's email field value "12389011@qq.com" as a parameter, the desensitized result "1238****@qq.com" can be output.
[0072] In another embodiment, the query result is the insured's ID number, the ID number field value is "110101190001060433", and the ID type is identity card, the field identifier is "appIdNo", then the ID number field is identified as "appIdNo" in the "non-standard sensitive field model". Subsequently, "appIdNo" is mapped to the "ID number model" in the "standard sensitive field model". In the "ID number model", the desensitization condition is the ID type, and the dynamic adapter will pass in the insured's ID type of the query result, and the dynamic adapter will select the "ZJH01" rule accordingly. Then, the "ZJH01" rule will locate the corresponding regular expression. By running Java's replaceAll method: idNo.replaceAll(regex,""), and passing in the policyholder's ID number field value "110101190001060433" as idNo and the corresponding regular expression as regex, the desensitized result "1101**********0433" can be output.
[0073] Figure 3FIG. 2 is a schematic diagram showing a structure of an embodiment of a sensitive information desensitization system 200 provided by the present invention. Figure 3 As shown, the system 200 includes: an identification module 210 and a processing module 220 .
[0074] The identification module 210 is used to: when the field corresponding to the request message contains a sensitive field, determine a standard sensitive field model corresponding to the sensitive field;
[0075] The processing module 220 is used to: determine a target desensitization processing method corresponding to a sensitive field in the desensitization processing method corresponding to a standard sensitive field model, and perform desensitization processing on the sensitive field using the target desensitization processing method.
[0076] In an optional manner, the identification module is specifically used to: determine a field identifier of a sensitive field in a non-standard sensitive field model, and determine a standard sensitive field model corresponding to the sensitive field based on the field identifier.
[0077] In an optional manner, the processing module is specifically used to: determine, according to field information of the sensitive field, a target desensitization processing method corresponding to the sensitive field in a desensitization processing method corresponding to a standard sensitive field model.
[0078] The technical solution of this embodiment realizes the automatic classification and desensitization processing of sensitive information, thereby improving the efficiency and accuracy of the desensitization processing, and also reducing the development and maintenance costs.
[0079] The above-mentioned parameters and steps for each module to implement corresponding functions in the sensitive information desensitization system 200 of this embodiment can refer to the parameters and steps in the embodiment of the sensitive information desensitization method above, and will not be repeated here.
[0080] like Figure 4 As shown, an electronic device 300 of an embodiment of the present invention includes a processor 320, the processor 320 is coupled to a memory 310, and the memory 310 stores at least one computer program 330, and the at least one computer program 330 is loaded and executed by the processor 320, so that the electronic device 300 implements any of the above-mentioned sensitive information desensitization methods, specifically:
[0081] The electronic device 300 may have relatively large differences due to different configurations or performances, and may include one or more processors 320 (Central Processing Units, CPU) and one or more memories 310, wherein the one or more memories 310 store at least one computer program 330, and the at least one computer program 330 is loaded and executed by the one or more processors 320, so that the electronic device 300 implements any sensitive information desensitization method provided in the above embodiments. Of course, the electronic device 300 may also have components such as a wired or wireless network interface, a keyboard, and an input and output interface for input and output, and the electronic device 300 may also include other components for implementing device functions, which will not be repeated here.
[0082] A computer-readable storage medium according to an embodiment of the present invention stores at least one computer program, and the at least one computer program is loaded and executed by a processor so that the computer implements any of the above-mentioned sensitive information desensitization methods.
[0083] Optionally, the computer-readable storage medium may be a read-only memory (ROM), a random access memory (RAM), a compact disc (CD-ROM), a magnetic tape, a floppy disk, an optical data storage device, and the like.
[0084] In an exemplary embodiment, a computer program product or a computer program is also provided, the computer program product or the computer program comprising computer instructions, the computer instructions being stored in a computer-readable storage medium. A processor of an electronic device reads the computer instructions from the computer-readable storage medium, and the processor executes the computer instructions, so that the electronic device performs any of the above-mentioned sensitive information desensitization methods.
[0085] It should be noted that the terms "first", "second", etc. in the specification and claims of the present application are used to distinguish similar objects and represent the definition of a specific order or sequence. The order of use of similar objects can be interchanged where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than the order shown or described.
[0086] Those skilled in the art know that the present invention can be implemented as a system, method or computer program product. Therefore, the present disclosure can be specifically implemented in the following forms, namely: it can be complete hardware, it can be complete software (including firmware, resident software, microcode, etc.), or it can be a combination of hardware and software, which is generally referred to as "circuit", "module" or "system" herein. In addition, in some embodiments, the present invention can also be implemented in the form of a computer program product in one or more computer-readable media, and the computer-readable medium contains computer-readable program code.
[0087] Any combination of one or more computer-readable media may be used. A computer-readable medium may be a computer-readable signal medium or a computer-readable storage medium. A computer-readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device, or device, or any combination thereof. More specific examples (a non-exhaustive list) of computer-readable storage media include: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination thereof. In the present application, a computer-readable storage medium may be any tangible medium containing or storing a program that may be used by or in conjunction with an instruction execution system, device, or device.
[0088] Although the embodiments of the present invention have been shown and described above, it is to be understood that the above embodiments are exemplary and are not to be construed as limitations of the present invention. A person skilled in the art may change, modify, replace and vary the above embodiments within the scope of the present invention.
Claims
1. A method for desensitizing sensitive information, characterized in that: include: When the field corresponding to the request message includes a sensitive field, determining a standard sensitive field model corresponding to the sensitive field; In the desensitization processing method corresponding to the standard sensitive field model, a target desensitization processing method corresponding to the sensitive field is determined, and the sensitive field is desensitized using the target desensitization processing method.
2. The sensitive information desensitization method according to claim 1, characterized in that: The step of determining a standard sensitive field model corresponding to the sensitive field comprises: Determine a field identifier of the sensitive field in the non-standard sensitive field model, and determine a standard sensitive field model corresponding to the sensitive field based on the field identifier.
3. The sensitive information desensitization method according to claim 1, characterized in that: In the desensitization processing method corresponding to the standard sensitive field model, the step of determining a target desensitization processing method corresponding to the sensitive field includes: According to the field information of the sensitive field, a target desensitization processing method corresponding to the sensitive field is determined in the desensitization processing method corresponding to the standard sensitive field model.
4. The sensitive information desensitization method according to claim 3, characterized in that: The field information includes: field value, field value type or string length.
5. The sensitive information desensitization method according to claim 1, characterized in that: The step of performing desensitization processing on the sensitive field by using the target desensitization processing method includes: Determine the JAVA regular expression or SQL statement corresponding to the target desensitization processing method, and use the JAVA regular expression or the SQL statement to desensitize the sensitive field.
6. A sensitive information desensitization system, characterized in that: include: Identification module and processing module; The identification module is used to: when the field corresponding to the request message contains a sensitive field, determine the standard sensitive field model corresponding to the sensitive field; The processing module is used to: determine a target desensitization processing method corresponding to the sensitive field in the desensitization processing method corresponding to the standard sensitive field model, and perform desensitization processing on the sensitive field using the target desensitization processing method.
7. The sensitive information desensitization system according to claim 6, characterized in that: The identification module is specifically used for: Determine a field identifier of the sensitive field in the non-standard sensitive field model, and determine a standard sensitive field model corresponding to the sensitive field based on the field identifier.
8. The sensitive information desensitization system according to claim 6, characterized in that: The processing module is specifically used for: According to the field information of the sensitive field, a target desensitization processing method corresponding to the sensitive field is determined in the desensitization processing method corresponding to the standard sensitive field model.
9. An electronic device, characterized in that: The electronic device includes a processor, the processor is coupled to a memory, the memory stores at least one computer program, and the at least one computer program is loaded and executed by the processor so that the electronic device implements the sensitive information desensitization method as described in any one of claims 1 to 5.
10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores at least one computer program, and the at least one computer program is loaded and executed by a processor so that the computer-readable storage medium implements the sensitive information desensitization method as described in any one of claims 1 to 5.