Sensitive information processing method and device, electronic equipment and storage medium

Abstract

The invention provides a sensitive information processing method and device, electronic equipment and a storage medium, and relates to the technical field of data security, and the method comprises the steps: intercepting a display request of a to-be-displayed page through a desensitization aspect program; wherein the display request comprises first attribute information of a to-be-displayed page; determining whether the to-be-displayed page needs to be desensitized or not according to the first attribute information; in response to the situation that the to-be-displayed page needs to be subjected to desensitization processing, obtaining a to-be-displayed field in the to-be-displayed page; determining a target field needing to be desensitized in the field to be displayed; and performing desensitization processing on the sensitive information corresponding to the target field according to the second attribute information of the target field to obtain desensitized information. According to the method, global unified processing of page desensitization is achieved through the desensitization section program, and the method is simple and convenient.

Description

Technical Field

[0001] The present application relates to the field of data security technology, and in particular to a sensitive information processing method, device, electronic device and storage medium. Background Art

[0002] With the rapid development of the Internet, the leakage and abuse of sensitive network information has become increasingly prominent. In related technologies, the information to be returned can be desensitized by directly using tool classes in the code. However, this hard-coding method requires writing code for desensitization every time desensitization occurs, which is cumbersome. Summary of the invention

[0003] The present application aims to solve one of the technical problems in the related art at least to some extent.

[0004] To this end, the first purpose of this application is to propose a sensitive information processing method to achieve global unified processing of page desensitization through a desensitization section program.

[0005] The second objective of this application is to provide a sensitive information processing device.

[0006] The third objective of the present application is to provide an electronic device.

[0007] A fourth objective of the present application is to provide a computer-readable storage medium.

[0008] A fifth object of the present application is to provide a computer program product.

[0009] To achieve the above objectives, the first embodiment of the present application proposes a sensitive information processing method, including:

[0010] Intercepting a display request of a page to be displayed through a desensitizing aspect program; wherein the display request includes first attribute information of the page to be displayed;

[0011] Determining whether the page to be displayed needs to be desensitized according to the first attribute information;

[0012] In response to the page to be displayed needing to be desensitized, obtaining a field to be displayed in the page to be displayed;

[0013] Determine the target field that needs to be desensitized among the fields to be displayed;

[0014] According to the second attribute information of the target field, the sensitive information corresponding to the target field is desensitized to obtain desensitized information.

[0015] To achieve the above-mentioned purpose, the second embodiment of the present application proposes a sensitive information processing device, including:

[0016] An interception module, used to intercept a display request of a page to be displayed through a desensitizing aspect program; wherein the display request includes first attribute information of the page to be displayed;

[0017] A first determination module, used to determine whether the to-be-displayed page needs to be desensitized according to the first attribute information;

[0018] A first acquisition module, configured to acquire a field to be displayed in the page to be displayed in response to the page to be displayed needing to be desensitized;

[0019] A second determination module is used to determine a target field that needs to be desensitized among the fields to be displayed;

[0020] The desensitization processing module is used to desensitize the sensitive information corresponding to the target field according to the second attribute information of the target field to obtain desensitized information.

[0021] To achieve the above-mentioned purpose, the third aspect of the present application provides an electronic device, including: a processor, and a memory communicatively connected to the processor;

[0022] The memory stores computer-executable instructions;

[0023] The processor executes the computer-executable instructions stored in the memory to implement the method as described in the embodiment of the first aspect.

[0024] To achieve the above-mentioned purpose, the fourth aspect embodiment of the present application proposes a computer-readable storage medium, in which computer execution instructions are stored. When the computer execution instructions are executed by a processor, they are used to implement the method described in the first aspect embodiment.

[0025] To achieve the above-mentioned purpose, the fifth aspect of the present application proposes a computer program product, including a computer program, which implements the method described in the first aspect when executed by a processor.

[0026] The sensitive information processing method, device, electronic device and storage medium provided by the present application intercept the display request of the page to be displayed through the desensitizing aspect program, and determine whether the page to be displayed needs to be desensitized according to the first attribute information of the page to be displayed in the display request. If desensitization is required, the field to be displayed in the page to be displayed is obtained, and the target field to be desensitized is determined, and then the sensitive information corresponding to the target field is desensitized according to the first attribute information of the target field, so as to achieve desensitization of the sensitive information in the page to be displayed. Thus, the page to be desensitized can be desensitized by the desensitizing aspect program, and there is no need to desensitize by writing code every time a field to be desensitized appears, so that the global unified processing of page desensitization is achieved through the desensitizing aspect program, which is relatively simple and convenient, and determines whether the page to be displayed needs to be desensitized according to the attribute information of the page to be displayed, thereby improving the accuracy of page screening, and in addition, the sensitive information is desensitized according to the attribute information of the target field, which can improve the accuracy of desensitization, thereby improving the security of sensitive information.

[0027] Additional aspects and advantages of the present application will be given in part in the description below, and in part will become apparent from the description below, or will be learned through the practice of the present application. BRIEF DESCRIPTION OF THE DRAWINGS

[0028] The above and / or additional aspects and advantages of the present application will become apparent and easily understood from the following description of the embodiments in conjunction with the accompanying drawings, in which:

[0029] Figure 1 A flowchart of a sensitive information processing method provided in an embodiment of the present application;

[0030] Figure 2 A flowchart of another sensitive information processing method provided in an embodiment of the present application;

[0031] Figure 3 A flowchart of another sensitive information processing method provided in an embodiment of the present application;

[0032] Figure 4 A schematic diagram of a page desensitization rule list display interface provided in an embodiment of the present application;

[0033] Figure 5 A flowchart of another sensitive information processing method provided in an embodiment of the present application;

[0034] Figure 6 A schematic diagram of the structure of a sensitive information processing device provided in an embodiment of the present application;

[0035] Figure 7It is a schematic diagram of the structure of an electronic device shown in an exemplary embodiment of the present application. DETAILED DESCRIPTION

[0036] Embodiments of the present application are described in detail below, and examples of the embodiments are shown in the accompanying drawings, wherein the same or similar reference numerals throughout represent the same or similar elements or elements having the same or similar functions. The embodiments described below with reference to the accompanying drawings are exemplary and are intended to be used to explain the present application, and should not be construed as limiting the present application.

[0037] It should be noted that the information (including but not limited to user device information, user personal information, etc.), data (including but not limited to data used for analysis, stored data, displayed data, etc.) and signals involved in this application are all authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with relevant laws, regulations and standards of relevant countries and regions.

[0038] The data acquisition, transmission, storage, use, and processing in the technical solution of this application are in compliance with the provisions of national laws and regulations.

[0039] It should be noted that in the embodiments of the present application, certain software, components, models and other existing solutions in the industry may be mentioned, and they should be regarded as exemplary. Their purpose is only to illustrate the feasibility of implementing the technical solution of the present application, but it does not mean that the applicant has or will necessarily use the solution.

[0040] The following describes the sensitive information processing method and device of the embodiments of the present application with reference to the accompanying drawings.

[0041] Figure 1 A flowchart of a sensitive information processing method provided in an embodiment of the present application.

[0042] In the related art, the information to be returned can be desensitized by directly using a tool class in the code. However, this hard-coding method requires writing code for desensitization every time desensitization occurs, which is cumbersome.

[0043] To address this problem, the present application provides a sensitive information processing method, which implements global unified processing of page desensitization through a desensitization section program, such as Figure 1 As shown, the sensitive information processing method includes the following steps:

[0044] Step 101: intercept the display request of the page to be displayed through the desensitizing section program.

[0045] Aspect programming refers to the process of abstracting certain functions that span multiple components, such as logging, performance monitoring, and permission control, into an independent program module in software development.

[0046] In this application, the desensitizing aspect program is a aspect program used to desensitize sensitive information in a page.

[0047] In this application, when a user wants to browse a page on the client, the client can send a display request of the page to be displayed to the server, and the server can intercept the display request of the page to be displayed through the desensitized aspect program. Among them, the display request may include the first attribute information of the page to be displayed, and the first attribute information may include but is not limited to the first page identifier of the page to be displayed, the name of the page to be displayed, the application programming interface (API) name of the page to be displayed, the business type to which the page to be displayed belongs, etc.

[0048] For example, if you want to view product transaction information within the last three days, you can use the desensitizing aspect program to intercept the display request of the transaction information display page.

[0049] Exemplarily, the first page identifier of the page to be displayed may be a Uniform Resource Locator (URL), or a page title, or a hash value of the page content, or a page identifier, etc.

[0050] Step 102: Determine whether the page to be displayed needs to be desensitized based on the first attribute information.

[0051] As a possible implementation, the first attribute information may include a first page identifier of the page to be displayed, and whether the page to be displayed needs to be desensitized can be determined based on the first page identifier of the page to be displayed. Exemplarily, whether the page to be displayed needs to be desensitized can be determined by judging whether the first page identifier is a preset page identifier that needs to be desensitized.

[0052] As another possible implementation, the first attribute information may include the business type of the page to be displayed, and whether the page to be displayed needs to be desensitized can be determined based on the business type of the page to be displayed. Exemplarily, by judging the sensitivity of the business type of the page to be displayed, it is determined whether the page to be displayed needs to be desensitized. Taking personal sensitive information as an example, the sensitivity of the business type is used to characterize the sensitivity of the business type. The higher the sensitivity of a business type, the higher the security requirements of the business type for personal sensitive information.

[0053] Step 103, in response to the page to be displayed needing to be desensitized, obtaining a field to be displayed in the page to be displayed.

[0054] In the present application, the page to be displayed may include at least one field to be displayed, such as a name field, a date of birth field, a mobile phone number field, a bank account field, etc. Each field to be displayed has a corresponding field value.

[0055] Step 104: determine the target field that needs to be desensitized among the fields to be displayed.

[0056] Some of the fields to be displayed may not need to be desensitized, while some may not need to be desensitized. For example, the name does not need to be desensitized, but the mobile phone number needs to be desensitized. Therefore, you can first determine the target fields that need to be desensitized among the fields to be displayed.

[0057] For example, according to the security requirements of each field of the business type to which the page to be displayed belongs, fields with higher security requirements can be screened out as target fields that need to be desensitized.

[0058] Exemplarily, the field to be displayed may be matched with a field in a preset desensitized field set, and the field to be displayed that matches the field in the desensitized field set may be determined as a target field that needs to be desensitized.

[0059] Step 105: Desensitize the sensitive information corresponding to the target field according to the second attribute information of the target field to obtain desensitized information.

[0060] The second attribute information may include an identifier of the target field, a name of the target field, a field type of the target field, sensitivity of the target field, etc. The sensitivity of the target field may be used to characterize the sensitivity or importance of the target field.

[0061] Exemplarily, multiple desensitization strategies can be set for the same field. For example, for a mobile phone number, the desensitization strategy may include hiding some numbers, replacing them with placeholders, encryption, etc., and one of the desensitization strategies can be selected to desensitize sensitive information.

[0062] Exemplarily, the second attribute information may include the field type of the target field, and the desensitizing policy corresponding to the field type of the target field can be searched from the preset desensitizing policies for each field type. According to the desensitizing policy corresponding to the field type of the target field, the sensitive information corresponding to the target field is desensitized to obtain the desensitized information.

[0063] For example, if the field name of a target field is trueName and the field type of the target field is name, the field value of the name field can be desensitized according to the desensitization strategy corresponding to the name.

[0064] In an embodiment of the present application, a display request of a page to be displayed is intercepted by a desensitizing aspect program, and according to the first attribute information of the page to be displayed in the display request, it is determined whether the page to be displayed needs to be desensitized. If desensitization is required, the field to be displayed in the page to be displayed is obtained, and the target field to be desensitized is determined, and then the sensitive information corresponding to the target field is desensitized according to the first attribute information of the target field, so as to achieve desensitization of the sensitive information in the page to be displayed. Thus, the page to be desensitized can be desensitized by the desensitizing aspect program, and there is no need to desensitize by writing code every time a field to be desensitized appears, so that the global unified processing of page desensitization is achieved through the desensitizing aspect program, which is relatively simple and convenient, and according to the attribute information of the page to be displayed, it is determined whether the page to be displayed needs to be desensitized, which improves the accuracy of page screening, and in addition, according to the attribute information of the target field, the sensitive information is desensitized, which can improve the accuracy of desensitization, thereby improving the security of sensitive information.

[0065] Figure 2 A flowchart of another sensitive information processing method provided in an embodiment of the present application.

[0066] like Figure 2 As shown, the sensitive information processing method may include the following steps:

[0067] Step 201: intercept the display request of the page to be displayed through the desensitizing section program.

[0068] In the present application, step 201 can be implemented in any of the embodiments of the present application, so it will not be described in detail here.

[0069] Step 202: Search the page desensitization rule cache to see whether there is a page identifier that matches the first page identifier.

[0070] In the present application, the page desensitization rule cache is used to cache the desensitization rules of at least one target page, and the desensitization rules of the target page may include the identifier of the desensitization rule, the page identifier of the target page, the API of the target page, the name of the desensitized field in the target page, the field type of the desensitized field, the desensitization strategy corresponding to the desensitized field, etc. Among them, the target page may refer to a page that needs to be desensitized.

[0071] In the present application, the desensitization rules of the target page can be pre-set. When the target page is desensitized for the first time, the desensitization rules of the target page can be cached in the page desensitization rule cache. Exemplarily, the first attribute information of the page to be displayed can include the first page identifier of the page to be displayed. After the display request of the page to be displayed is intercepted by the desensitization aspect program, the page desensitization rule cache can be searched to see whether there is a page identifier that matches the first page identifier.

[0072] For example, the first page identifier is the URL of the page to be displayed, and the URL of the target page in each desensitization rule in the page desensitization rule cache can be compared with the URL of the page to be displayed.

[0073] Step 203: In response to the presence of a page identifier matching the first page identifier in the page desensitization rule cache, it is determined that the page to be displayed needs to be desensitized.

[0074] In the present application, if there is a page identifier matching the first page identifier in the page desensitization rule cache, it means that the page desensitization rule cache has cached the desensitization rules for the page to be displayed, and it can be determined that the page to be displayed needs to be desensitized.

[0075] Step 204 , in response to the fact that there is no page identifier matching the first page identifier in the page desensitization rule cache, it is determined whether the page to be displayed needs to be desensitized based on the configured page desensitization rule list.

[0076] In the present application, if there is no page identifier matching the first page identifier in the page desensitization rule cache, it means that the page to be displayed has not been desensitized before, and there is no desensitization rule for the page to be displayed in the page desensitization rule cache. Then, based on the configuration page desensitization rule list, it is determined whether the page to be displayed needs to be desensitized.

[0077] The page desensitization rule list includes the desensitization rules of all configured target pages.

[0078] Exemplarily, it is possible to search in the page desensitization rule list whether there is a page identifier that matches the first page identifier. If there is a page identifier that matches the first page identifier in the page desensitization rule list, it can be determined that the page to be displayed needs to be desensitized. If there is no page identifier that matches the first page identifier in the desensitization rule list, it can be determined that the page to be displayed does not need to be desensitized.

[0079] Step 205: in response to the page to be displayed needing to be desensitized, obtaining the fields to be displayed in the page to be displayed.

[0080] In the present application, step 205 can be implemented in any of the embodiments of the present application, so it will not be described in detail here.

[0081] Step 206: determine the target field that needs to be desensitized among the fields to be displayed.

[0082] In the present application, step 206 can be implemented in any of the embodiments of the present application, so it will not be described in detail here.

[0083] Step 207: Desensitize the sensitive information corresponding to the target field according to the second attribute information of the target field to obtain desensitized information.

[0084] In the present application, step 207 can be implemented in any of the embodiments of the present application, so it will not be described in detail here.

[0085] For the same field, different business scenarios have different sensitivity requirements for the field. In this application, the field can be desensitized to different degrees according to the sensitivity of the field, and the higher the desensitization degree, the higher the security. For example, for the mobile phone number field, the sensitivity of the mobile phone number field in business scenario 1 is greater than the sensitivity of the mobile phone number in business scenario 2. In business scenario 1, the middle 3 digits of the mobile phone number can be masked, and in business scenario 2, the middle 5 digits of the mobile phone number can be masked.

[0086] Exemplarily, the second attribute information of the target field may include the sensitivity of the target field. The desensitization degree of the target field can be determined according to the sensitivity of the target field and the mapping relationship between the preset field sensitivity and the field desensitization degree. According to the desensitization degree of the target field, the sensitive information corresponding to the target field is desensitized to obtain the desensitized information. Thus, the desensitization degree is determined based on the sensitivity of the target field, and then the sensitive information is desensitized based on the desensitization degree, which improves the accuracy of the desensitization process and can meet the desensitization requirements of different business scenarios.

[0087] Exemplarily, desensitization strategies corresponding to each desensitization degree of the field can be pre-set, and the desensitization strategy corresponding to the desensitization degree of the target field can be determined according to the desensitization degree of the target field, so that the desensitization strategy can be used to desensitize the sensitive information corresponding to the target field to obtain the desensitized sensitive information.

[0088] Among them, the degree of desensitization can be expressed by a desensitization level, and the higher the desensitization level, the higher the degree of desensitization.

[0089] For example, the mobile phone number field has three desensitization levels, in descending order: desensitization level A, desensitization level B, and desensitization level C. In a certain page, the desensitization level of the mobile phone number field is A, and the desensitization strategy corresponding to desensitization level A is to encrypt using encryption algorithm a. Then, encryption algorithm a can be used to encrypt the mobile phone number in the page.

[0090] In an embodiment of the present application, it is possible to first search in the page desensitization rule cache whether there is a page identifier that matches the page identifier of the page to be displayed, so as to determine whether the page to be displayed needs to be desensitized. If not found, it is determined based on the configured page desensitization rule list whether the page to be displayed needs to be desensitized. This can improve the efficiency of page desensitization processing, and save the desensitization rules in the cache, which can avoid the situation where the desensitization-related processing logic is slow due to frequent database reading, thereby causing a delay in the response to the display request.

[0091] Figure 3 A flowchart of another sensitive information processing method provided in an embodiment of the present application.

[0092] like Figure 3 As shown, the sensitive information processing method may include the following steps:

[0093] Step 301: intercept the display request of the page to be displayed through the desensitizing aspect program.

[0094] In the present application, step 301 can be implemented in any of the embodiments of the present application, so it will not be described in detail here.

[0095] Step 302: Obtain a preset page identifier set.

[0096] The second page identifier in the page identifier set is an identifier of a page having sensitive information, or it can also be understood that the second page identifier in the page identifier set is an identifier of a page that needs to be desensitized.

[0097] In the present application, the page identification set may be pre-set or obtained by processing other information, and this is not limited.

[0098] In this application, users can customize the desensitization rules of the configuration page and add the user-configured desensitization rules to the page desensitization rule list.

[0099] Taking the page to be displayed as an example, the user can configure the desensitization rules of the page to be displayed in the desensitization rule configuration page. After configuring the desensitization rules, the submission control can be triggered. If the server detects the submission operation of the desensitization rules for the page to be displayed on the desensitization rule configuration page, the desensitization rules of the page to be displayed are obtained. Among them, the desensitization rules of the page to be displayed include but are not limited to the identifier of the desensitization rules of the page to be displayed, the page identifier of the page to be displayed, the field type of the desensitized field in the page to be displayed, and the desensitization strategy corresponding to the desensitized field.

[0100] It should be noted that the desensitized field may refer to a field whose field value needs to be desensitized, and the desensitized field in the to-be-displayed page may be one or more, and this is not limited. In addition, each desensitized field may have a corresponding desensitization strategy.

[0101] For ease of understanding, the following Figure 4 To explain, Figure 4 A schematic diagram of a page desensitization rule list display interface provided in an embodiment of the present application.

[0102] like Figure 4 As shown, when the user triggers the "Add" control, the page desensitization rule configuration interface can be displayed. On the page desensitization rule configuration interface, you can configure the desensitization rule ID, URL, API name, desensitization field name, desensitization strategy, desensitization field type, etc. After the configuration, you can trigger the submission control.

[0103] exist Figure 4 In the interface shown, you can also enter the desensitization rule ID and desensitization field to search.

[0104] Therefore, users can customize the desensitization rules according to their needs and make the desensitization rules configurable. After configuring the desensitization rules, they can intercept the corresponding display requests and perform desensitization on the desensitized fields therein, so that the desensitization rules can take effect in a timely manner, reducing new risks and regression testing costs brought about by going online.

[0105] Exemplarily, the server can obtain a configured page desensitization rule list through a desensitization aspect program, and the page desensitization rule list may include at least one desensitization rule for a target page. By traversing the page desensitization rule list, the second page identifier is obtained from the desensitization rule of each target page. The second page identifiers of these pages form a page identifier set.

[0106] Thus, by extracting the second page identifier from the page desensitization rule list, a page identifier set is obtained, so that it is convenient to directly use the page identifier set to determine whether the page to be displayed needs to be desensitized, thereby improving the efficiency of desensitization processing. In addition, the desensitization is globally unified through the desensitization aspect program. On the premise of simplifying the desensitization code writing through common components, the commonly used hard coding is converted into a method that can be flexibly configured and adjusted by business personnel in the system background, and the desensitization rules are effective in real time, thereby improving the flexibility of page desensitization.

[0107] Step 303: Match the first page identifier with the second page identifier in the page identifier set.

[0108] In this application, the first page identifier of the page to be displayed can be matched with the second page identifier in the page identifier set to determine whether the page to be displayed is a page that needs to be desensitized. In other words, the first page identifier can be matched with the identifiers of all configured pages that need to be desensitized.

[0109] For example, the page identifier may be the URL of the page, and then the first URL of the page to be displayed may be matched with the second URL in the page set.

[0110] Step 304: In response to the first page identifier matching any second page identifier in the page identifier set, it is determined that the page to be displayed needs to be desensitized.

[0111] In the present application, if the first page identifier matches any second page identifier in the page identifier set, it can be determined that the page to be displayed is a page that needs to be desensitized.

[0112] Step 305: in response to the page to be displayed needing to be desensitized, obtaining the fields to be displayed in the page to be displayed.

[0113] In the present application, step 305 can be implemented in any of the embodiments of the present application, so it will not be described in detail here.

[0114] Step 306: determine the target field that needs to be desensitized among the fields to be displayed.

[0115] In the present application, step 306 can be implemented in any of the embodiments of the present application, so it will not be described in detail here.

[0116] Exemplarily, the desensitization rules of the page to be displayed can be obtained, the desensitization rules include at least one desensitized field, the fields to be displayed are traversed, and each field to be displayed is matched with the desensitized field. If the field to be displayed matches any desensitized field, the field to be displayed can be determined to be the target field. Thus, by matching the fields to be displayed in the page to be displayed with the desensitized fields configured for the page, the fields to be desensitized in the page to be displayed can be identified, thereby improving the accuracy of field screening.

[0117] The desensitization rules of the page to be displayed may be obtained from a page desensitization rule cache or from a page desensitization rule list, and there is no limitation on this.

[0118] Exemplarily, you can first check whether there are desensitization rules for the page to be displayed from the page desensitization rule cache. If there are desensitization rules for the page to be displayed, then obtain the desensitization rules for the page to be displayed from the page desensitization rule cache. If the page desensitization rule cache does not cache the desensitization rules for the page to be displayed, then obtain the desensitization rules for the page to be displayed from the page desensitization rule list. Thus, obtaining the desensitization rules for the page to be displayed from the page desensitization rule cache can improve the efficiency of page desensitization processing and improve the response speed to display requests.

[0119] Step 307: Desensitize the sensitive information corresponding to the target field according to the second attribute information of the target field to obtain desensitized information.

[0120] In the present application, step 307 can be implemented in any of the embodiments of the present application, so it will not be described in detail here.

[0121] For example, the desensitization policy corresponding to the field type of the target field can be found from the desensitization rules of the page to be displayed, and the sensitive information can be desensitized according to the desensitization policy corresponding to the field type of the target field to obtain the desensitized information. Thus, based on the desensitization policy corresponding to the field type of the target field, the sensitive information corresponding to the target field is desensitized, which can improve the accuracy of field desensitization.

[0122] In an embodiment of the present application, if the first attribute information of the page to be displayed includes the first page identifier of the page to be displayed, by matching the page identifier of the page to be displayed with the page identifiers in the page set, it can be determined whether the page to be displayed needs to be desensitized. The judgment method is simple and convenient, and the processing efficiency is improved.

[0123] Figure 5 A flowchart of another sensitive information processing method provided in an embodiment of the present application.

[0124] like Figure 5 As shown, the sensitive information processing method may include the following steps:

[0125] Step 501: intercept the display request of the page to be displayed through the desensitizing section program.

[0126] In the present application, step 501 can be implemented in any of the embodiments of the present application, so it will not be described in detail here.

[0127] Step 502: Determine whether the page to be displayed needs to be desensitized based on the first attribute information.

[0128] In the present application, step 502 can be implemented in any of the embodiments of the present application, so it will not be described in detail here.

[0129] Step 503: In response to the page to be displayed needing to be desensitized, a field to be displayed in the page to be displayed is obtained.

[0130] Step 504: Obtain a mapping relationship between business types and field sensitivities.

[0131] For the same field, different business types may have different sensitivity requirements for the field. In this application, a mapping relationship between business types and field sensitivities may be preset, wherein the mapping relationship may include business types, fields under the business type, field sensitivity, and the like.

[0132] Step 505: query the mapping relationship according to the business type to determine the sensitivity of the field to be displayed.

[0133] In the present application, if the first attribute information of the page to be displayed includes the business type of the page to be displayed, the business type of the page to be displayed can be matched with the business type in the mapping relationship to determine the fields corresponding to the business type of the page to be displayed, and the fields to be displayed can be searched from these fields, so that the sensitivity of the fields to be displayed can be determined.

[0134] Step 506: determine the to-be-displayed fields whose sensitivity is greater than a preset threshold as target fields.

[0135] In the present application, the sensitivity of the field to be displayed can be compared with a preset threshold. If the sensitivity is greater than the preset threshold, the field to be displayed can be considered to be more important, and the field to be displayed can be determined as the target field, thereby determining the target field that needs to be desensitized from the field to be displayed based on the sensitivity.

[0136] Step 507: Desensitize the sensitive information corresponding to the target field according to the second attribute information of the target field to obtain desensitized information.

[0137] In the present application, step 507 can be implemented in any of the embodiments of the present application, so it will not be described in detail here.

[0138] In an embodiment of the present application, if the first attribute information of the page to be displayed includes the business type of the page to be displayed, the target field to be desensitized in the page to be displayed can be determined based on the mapping relationship between the business type and the field sensitivity, according to the business type of the page to be displayed, and then the sensitive information corresponding to the target field is desensitized. Thus, based on the sensitivity of the field corresponding to the business type of the page, the fields to be desensitized in the page are screened, which can improve the accuracy of the screening results, and the sensitivity of the same field in different business types may be different, so targeted desensitization is performed for different business types, which can improve the accuracy of the page desensitization and meet the desensitization requirements of different business scenarios.

[0139] In order to implement the above embodiments, the present application also proposes a sensitive information processing device. Figure 6 A schematic diagram of the structure of a sensitive information processing device provided in an embodiment of the present application.

[0140] like Figure 6 As shown, the sensitive information processing device 600 includes:

[0141] The interception module 610 is used to intercept the display request of the page to be displayed through the desensitization section program; wherein the display request includes the first attribute information of the page to be displayed;

[0142] A first determination module 620 is used to determine whether the to-be-displayed page needs to be desensitized according to the first attribute information;

[0143] A first acquisition module 630 is used for acquiring a field to be displayed in the page to be displayed in response to the page to be displayed needing to be desensitized;

[0144] A second determination module 640 is used to determine a target field that needs to be desensitized among the fields to be displayed;

[0145] The desensitization processing module 650 is used to perform desensitization processing on the sensitive information corresponding to the target field according to the second attribute information of the target field to obtain desensitized information.

[0146] In a possible implementation of the embodiment of the present application, the first attribute information includes a first page identifier of the page to be displayed, and the first determination module 620 is used to:

[0147] Searching in the page desensitization rule cache whether there is a page identifier that matches the first page identifier;

[0148] In response to the presence of a page identifier matching the first page identifier in the page desensitization rule cache, determining that the to-be-displayed page needs to be desensitized;

[0149] In response to the absence of a page identifier matching the first page identifier in the page desensitization rule cache, it is determined whether the to-be-displayed page needs to be desensitized based on a configured page desensitization rule list.

[0150] In a possible implementation of the embodiment of the present application, the first attribute information includes a first page identifier of the page to be displayed, and the first determination module 620 is used to:

[0151] Obtaining a preset page identification set; wherein the second page identification in the page identification set is an identification of a page having sensitive information;

[0152] Matching the first page identifier with a second page identifier in the page identifier set;

[0153] In response to the first page identifier matching any second page identifier in the page identifier set, it is determined that the to-be-displayed page needs to be desensitized.

[0154] In a possible implementation of the embodiment of the present application, the first determining module 620 is configured to:

[0155] Obtain a configured page desensitization rule list; wherein the page desensitization rule list includes at least one desensitization rule of a target page;

[0156] Traversing the page desensitization rule list, and obtaining the second page identifier from the desensitization rule of each target page;

[0157] According to the second page identifier, the page identifier set is acquired.

[0158] In a possible implementation of the embodiment of the present application, the second determining module 640 is configured to:

[0159] Obtaining a desensitization rule for the page to be displayed; wherein the desensitization rule for the page to be displayed includes at least one desensitization field;

[0160] Traversing the fields to be displayed, and matching the fields to be displayed with the desensitized fields;

[0161] In response to the field to be displayed matching any desensitized field, the field to be displayed is determined to be a target field.

[0162] In a possible implementation of the embodiment of the present application, the first attribute information includes the business type of the page to be displayed, and the second determination module 640 is used to:

[0163] Get the mapping relationship between business type and field sensitivity;

[0164] According to the business type, query the mapping relationship to determine the sensitivity of the field to be displayed;

[0165] The field to be displayed whose sensitivity is greater than a preset threshold is determined as the target field.

[0166] In a possible implementation manner of the embodiment of the present application, the second attribute information includes the sensitivity of the target field, and the desensitization processing module 650 is used to:

[0167] Determining the desensitization degree of the target field according to the sensitivity;

[0168] The sensitive information is desensitized according to the desensitization degree to obtain the desensitized information.

[0169] In a possible implementation manner of the embodiment of the present application, the second attribute information includes the field type of the target field, and the desensitization processing module 650 is used to:

[0170] Searching for a desensitization policy corresponding to the field type from the desensitization rules of the page to be displayed;

[0171] According to the desensitization strategy, the sensitive information is desensitized to obtain the desensitized information.

[0172] In a possible implementation of the embodiment of the present application, the device further includes:

[0173] In response to detecting a submission operation of the desensitization rule for the page to be displayed on the desensitization rule configuration interface, obtaining the desensitization rule for the page to be displayed;

[0174] Among them, the desensitization rule of the page to be displayed includes at least one of the following: the identifier of the desensitization rule of the page to be displayed, the page identifier of the page to be displayed, the field type of the desensitized field in the page to be displayed, and the desensitization strategy corresponding to the desensitized field.

[0175] It should be noted that the above explanation of the sensitive information processing method embodiment is also applicable to the sensitive information processing device of this embodiment, and will not be repeated here.

[0176] In an embodiment of the present application, a display request of a page to be displayed is intercepted by a desensitizing aspect program, and according to the first attribute information of the page to be displayed in the display request, it is determined whether the page to be displayed needs to be desensitized. If desensitization is required, the field to be displayed in the page to be displayed is obtained, and the target field to be desensitized is determined, and then the sensitive information corresponding to the target field is desensitized according to the first attribute information of the target field, so as to achieve desensitization of the sensitive information in the page to be displayed. Thus, the page to be desensitized can be desensitized by the desensitizing aspect program, and there is no need to desensitize by writing code every time a field to be desensitized appears, so that the global unified processing of page desensitization is achieved through the desensitizing aspect program, which is relatively simple and convenient, and according to the attribute information of the page to be displayed, it is determined whether the page to be displayed needs to be desensitized, which improves the accuracy of page screening, and in addition, according to the attribute information of the target field, the sensitive information is desensitized, which can improve the accuracy of desensitization, thereby improving the security of sensitive information.

[0177] In order to implement the above embodiments, the present application also proposes an electronic device, comprising: a processor, and a memory communicatively connected to the processor; the memory stores computer-executable instructions; the processor executes the computer-executable instructions stored in the memory to implement the method provided by the above embodiments.

[0178] In order to implement the above embodiments, the present application also proposes an electronic device, comprising: a processor, and a memory communicatively connected to the processor; the memory stores computer-executable instructions; the processor executes the computer-executable instructions stored in the memory to implement the method provided by the above embodiments.

[0179] As an example, Figure 7 is a schematic diagram of the structure of an electronic device shown in an exemplary embodiment of the present application, such as Figure 7 As shown, the electronic device 700 may further include:

[0180] The memory 710 and the processor 720, a bus 730 connecting different components (including the memory 710 and the processor 720), the memory 710 stores a computer program, and when the processor 720 executes the program, the sensitive information processing method described in the embodiment of the present application is implemented.

[0181] Bus 730 represents one or more of several types of bus structures, including a memory bus or memory controller, a peripheral bus, an accelerated graphics port, a processor or a local bus using any of a variety of bus architectures. For example, these architectures include but are not limited to Industry Standard Architecture (ISA) bus, Micro Channel Architecture (MAC) bus, Enhanced ISA bus, Video Electronics Standards Association (VESA) local bus and Peripheral Component Interconnect (PCI) bus.

[0182] The electronic device 700 typically includes a variety of electronic device readable media. These media can be any available media that can be accessed by the electronic device 700, including volatile and non-volatile media, removable and non-removable media.

[0183] The memory 710 may also include computer system readable media in the form of volatile memory, such as random access memory (RAM) 740 and / or cache memory 750. The electronic device 700 may further include other removable / non-removable, volatile / non-volatile computer system storage media. By way of example only, the storage system 760 may be used to read and write non-removable, non-volatile magnetic media ( Figure 7 not shown, usually called a "hard drive"). Although Figure 7Not shown, a disk drive for reading and writing to a removable non-volatile disk (e.g., a "floppy disk"), and an optical drive for reading and writing to a removable non-volatile optical disk (e.g., a CD-ROM, a DVD-ROM, or other optical medium) may be provided. In these cases, each drive may be connected to bus 730 via one or more data medium interfaces. Memory 710 may include at least one program product having a set (e.g., at least one) of program modules that are configured to perform the functions of the various embodiments of the present application.

[0184] A program / utility 780 having a set (at least one) of program modules 770 may be stored, for example, in the memory 710, such program modules 770 including, but not limited to, an operating system, one or more application programs, other program modules, and program data, each of which or some combination may include an implementation of a network environment. The program modules 770 generally perform the functions and / or methods of the embodiments described herein.

[0185] The electronic device 700 may also communicate with one or more external devices 790 (e.g., keyboard, pointing device, display 791, etc.), may also communicate with one or more devices that enable a user to interact with the electronic device 700, and / or communicate with any device that enables the electronic device 700 to communicate with one or more other computing devices (e.g., network card, modem, etc.). Such communication may be performed through an input / output (I / O) interface 792. Furthermore, the electronic device 700 may also communicate with one or more networks (e.g., local area network (LAN), wide area network (WAN) and / or public network, such as the Internet) through a network adapter 793. As shown, the network adapter 793 communicates with other modules of the electronic device 700 through a bus 730. It should be understood that, although not shown in the figure, other hardware and / or software modules may be used in conjunction with the electronic device 700, including but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives, and data backup storage systems.

[0186] The processor 720 executes various functional applications and data processing by running the programs stored in the memory 710 .

[0187] In order to implement the above embodiments, the present application also proposes a computer-readable storage medium, in which computer-executable instructions are stored. When the computer-executable instructions are executed by a processor, they are used to implement the methods provided by the above embodiments.

[0188] In order to implement the above embodiments, the present application also proposes a computer program product, including a computer program, which implements the methods provided by the above embodiments when executed by a processor.

[0189] The collection, storage, use, processing, transmission, provision and disclosure of user personal information involved in this application are in compliance with relevant laws and regulations and do not violate public order and good morals.

[0190] It should be noted that personal information from users should be collected for legitimate and reasonable purposes and should not be shared or sold outside of these legitimate uses. In addition, such collection / sharing should be carried out after receiving the user's informed consent, including but not limited to notifying the user to read the user agreement / user notice and sign the agreement / authorization including authorization of relevant user information before the user uses the function. In addition, any necessary steps should be taken to protect and safeguard access to such personal information data and ensure that others who have access to personal information data comply with its privacy policy and procedures.

[0191] This application is expected to provide an implementation scheme for users to selectively block the use or access of personal information data. That is, this application is expected to provide hardware and / or software to prevent or block access to such personal information data. Once the personal information data is no longer needed, risks can be minimized by limiting data collection and deleting data. In addition, when applicable, personal identifiers are removed from such personal information to protect the privacy of users.

[0192] In the description of the aforementioned embodiments, the description with reference to the terms "one embodiment", "some embodiments", "example", "specific example", or "some examples" etc. means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present application. In this specification, the schematic representations of the above terms do not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described may be combined in any one or more embodiments or examples in a suitable manner. In addition, those skilled in the art may combine and combine the different embodiments or examples described in this specification and the features of the different embodiments or examples, without contradiction.

[0193] In addition, the terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Therefore, the features defined as "first" and "second" may explicitly or implicitly include at least one of the features. In the description of this application, the meaning of "plurality" is at least two, such as two, three, etc., unless otherwise clearly and specifically defined.

[0194] Any process or method description in a flowchart or otherwise described herein may be understood to represent a module, fragment or portion of code comprising one or more executable instructions for implementing the steps of a custom logical function or process, and the scope of the preferred embodiments of the present application includes alternative implementations in which functions may not be performed in the order shown or discussed, including performing functions in a substantially simultaneous manner or in the reverse order depending on the functions involved, which should be understood by technicians in the technical field to which the embodiments of the present application belong.

[0195] The logic and / or steps represented in the flowchart or otherwise described herein, for example, can be considered as an ordered list of executable instructions for implementing logical functions, and can be embodied in any computer-readable medium for use by an instruction execution system, device or apparatus (such as a computer-based system, a system including a processor, or other system that can fetch instructions from an instruction execution system, device or apparatus and execute the instructions), or in combination with these instruction execution systems, devices or apparatuses. For the purpose of this specification, "computer-readable medium" can be any device that can contain, store, communicate, propagate or transmit a program for use by an instruction execution system, device or apparatus, or in combination with these instruction execution systems, devices or apparatuses. More specific examples of computer-readable media (a non-exhaustive list) include the following: an electrical connection with one or more wires (electronic device), a portable computer disk box (magnetic device), a random access memory (RAM), a read-only memory (ROM), an erasable and programmable read-only memory (EPROM or flash memory), a fiber optic device, and a portable compact disk read-only memory (CDROM). In addition, the computer-readable medium may even be paper or other suitable medium on which the program is printed, since the program may be obtained electronically, for example, by optically scanning the paper or other medium and then editing, interpreting or processing in other suitable ways if necessary, and then stored in a computer memory.

[0196] It should be understood that the various parts of the present application can be implemented by hardware, software, firmware or a combination thereof. In the above-mentioned embodiments, multiple steps or methods can be implemented by software or firmware stored in a memory and executed by a suitable instruction execution system. For example, if implemented by hardware, as in another embodiment, it can be implemented by any one of the following technologies known in the art or their combination: a discrete logic circuit having a logic gate circuit for implementing a logic function for a data signal, a dedicated integrated circuit having a suitable combination of logic gate circuits, a programmable gate array (PGA), a field programmable gate array (FPGA), etc.

[0197] A person skilled in the art may understand that all or part of the steps in the method for implementing the above-mentioned embodiment may be completed by instructing related hardware through a program, and the program may be stored in a computer-readable storage medium, which, when executed, includes one or a combination of the steps of the method embodiment.

[0198] In addition, each functional unit in each embodiment of the present application may be integrated into a processing module, or each unit may exist physically separately, or two or more units may be integrated into one module. The above-mentioned integrated module may be implemented in the form of hardware or in the form of a software functional module. If the integrated module is implemented in the form of a software functional module and sold or used as an independent product, it may also be stored in a computer-readable storage medium.

[0199] The storage medium mentioned above may be a read-only memory, a magnetic disk or an optical disk, etc. Although the embodiments of the present application have been shown and described above, it can be understood that the above embodiments are exemplary and cannot be understood as limiting the present application. A person of ordinary skill in the art may change, modify, replace and modify the above embodiments within the scope of the present application.

Claims

1. A sensitive information processing method, characterized in that: The method comprises the following steps: Intercepting a display request of a page to be displayed through a desensitizing aspect program; wherein the display request includes first attribute information of the page to be displayed; Determining whether the page to be displayed needs to be desensitized according to the first attribute information; In response to the page to be displayed needing to be desensitized, obtaining a field to be displayed in the page to be displayed; Determine the target field that needs to be desensitized among the fields to be displayed; According to the second attribute information of the target field, the sensitive information corresponding to the target field is desensitized to obtain desensitized information.

2. The method according to claim 1, characterized in that The first attribute information includes a first page identifier of the page to be displayed, and determining whether the page to be displayed needs to be desensitized according to the first attribute information includes: Searching in the page desensitization rule cache whether there is a page identifier that matches the first page identifier; In response to the presence of a page identifier matching the first page identifier in the page desensitization rule cache, determining that the to-be-displayed page needs to be desensitized; In response to the absence of a page identifier matching the first page identifier in the page desensitization rule cache, it is determined whether the to-be-displayed page needs to be desensitized based on a configured page desensitization rule list.

3. The method according to claim 1, characterized in that The first attribute information includes a first page identifier of the page to be displayed, and the determining whether the page to be displayed needs to be desensitized according to the first attribute information includes: Obtaining a preset page identification set; wherein the second page identification in the page identification set is an identification of a page having sensitive information; Matching the first page identifier with a second page identifier in the page identifier set; In response to the first page identifier matching any second page identifier in the page identifier set, it is determined that the to-be-displayed page needs to be desensitized.

4. The method according to claim 3, characterized in that The obtaining of a preset page identifier set includes: Obtain a configured page desensitization rule list; wherein the page desensitization rule list includes at least one desensitization rule of a target page; Traversing the page desensitization rule list, and obtaining the second page identifier from the desensitization rule of each target page; According to the second page identifier, the page identifier set is acquired.

5. The method according to claim 1, characterized in that The determining of the target field that needs to be desensitized in the to-be-displayed fields includes: Obtaining a desensitization rule for the page to be displayed; wherein the desensitization rule for the page to be displayed includes at least one desensitization field; Traversing the fields to be displayed, and matching the fields to be displayed with the desensitized fields; In response to the field to be displayed matching any desensitized field, the field to be displayed is determined to be a target field.

6. The method according to claim 1, characterized in that The first attribute information includes the business type of the page to be displayed, and the determining of the target field to be desensitized in the field to be displayed includes: Get the mapping relationship between business type and field sensitivity; According to the business type, query the mapping relationship to determine the sensitivity of the field to be displayed; The field to be displayed whose sensitivity is greater than a preset threshold is determined as the target field.

7. The method of claim 1, wherein: The second attribute information includes the sensitivity of the target field, and the desensitizing the sensitive information corresponding to the target field according to the second attribute information of the target field to obtain desensitized information includes: Determining the desensitization degree of the target field according to the sensitivity; The sensitive information is desensitized according to the desensitization degree to obtain the desensitized information.

8. The method of claim 1, wherein: The second attribute information includes a field type of the target field, and the desensitizing the sensitive information corresponding to the target field according to the second attribute information of the target field to obtain desensitized information includes: Searching for a desensitization policy corresponding to the field type from the desensitization rules of the page to be displayed; According to the desensitization strategy, the sensitive information is desensitized to obtain the desensitized information.

9. The method according to any one of claims 1 to 8, further comprising: In response to detecting a submission operation of the desensitization rule for the page to be displayed on the desensitization rule configuration interface, obtaining the desensitization rule for the page to be displayed; Among them, the desensitization rule of the page to be displayed includes at least one of the following: the identifier of the desensitization rule of the page to be displayed, the page identifier of the page to be displayed, the field type of the desensitized field in the page to be displayed, and the desensitization strategy corresponding to the desensitized field.

10. A sensitive information processing device, characterized in that: include: An interception module, used to intercept a display request of a page to be displayed through a desensitizing aspect program; wherein the display request includes first attribute information of the page to be displayed; A first determination module, used to determine whether the to-be-displayed page needs to be desensitized according to the first attribute information; A first acquisition module, configured to acquire a field to be displayed in the page to be displayed in response to the page to be displayed needing to be desensitized; A second determination module is used to determine a target field that needs to be desensitized among the fields to be displayed; The desensitization processing module is used to desensitize the sensitive information corresponding to the target field according to the second attribute information of the target field to obtain desensitized information.

11. An electronic device, characterized in that: include: A processor, and a memory communicatively connected to the processor; The memory stores computer-executable instructions; The processor executes the computer-executable instructions stored in the memory to implement the method according to any one of claims 1 to 9.

12. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer-executable instructions, which are used to implement the method according to any one of claims 1 to 9 when executed by a processor.

13. A computer program product, characterized in that The invention comprises a computer program, which implements the method according to any one of claims 1 to 9 when being executed by a processor.

Images