Data processing method and device, equipment, medium and product

Abstract

The embodiment of the invention provides a data processing method and device, equipment, a medium and a product, and relates to the technical field of big data, the method is applied to a first system, and the method specifically comprises the steps that system access data of a second system is acquired, and the system access data comprises at least two pieces of index data; for each piece of index data in the at least two pieces of index data, determining an index score corresponding to the index data based on the index data and a preset scoring rule corresponding to the index data, and obtaining at least two index scores; based on the at least two index scores, a total score is determined, and the total score represents the data security degree of data transmission from the second system to the first system. According to the embodiment of the invention, the data security degree of data transmission from the second system to the first system can be accurately evaluated for the data interaction process between the first system and the second system.

Description

Technical Field

[0001] The present application belongs to the field of big data technology, and in particular relates to a data processing method, device, equipment, medium and product. Background Art

[0002] As a core platform connecting multiple participants such as financial institutions, suppliers, manufacturers, distributors and consumers, data security of the financial supply chain system is of vital importance.

[0003] However, in the process of conducting business, the financial supply chain system needs to connect to multiple third-party systems to ensure the smooth progress of the overall business. In this way, the financial supply chain system and the third-party systems will inevitably have a data interaction process. If the data security of the connected third-party system during the data transmission process is low, it will inevitably affect the data security of the financial supply chain system. Summary of the invention

[0004] The embodiments of the present application provide a data processing method, apparatus, device, medium and product, which can accurately evaluate the data security level of data transmitted from the second system to the first system during the data interaction process between the first system and the second system.

[0005] In a first aspect, an embodiment of the present application provides a data processing method, which is applied to a first system, and the method includes:

[0006] Acquire system access data of the second system, the system access data including at least two indicator data, the at least two indicator data including at least two of transmission message data, transmission channel data, code access data and access data;

[0007] For each indicator data of the at least two indicator data, based on the indicator data and the preset scoring rules corresponding to the indicator data, determine the indicator score corresponding to the indicator data, and obtain at least two indicator scores, the at least two indicator scores include at least two of a message security score, a transmission security score, a code security score, and an access score, the message security score represents the security level of the message transmitted by the second system to the first system; the transmission security score represents the security level of the transmission channel between the first system and the second system; the code security score represents the security level of the code data of the second system accessing the first system; the access score represents the convenience of the second system accessing the first system;

[0008] Based on the at least two indicator scores, a total score is determined, and the total score represents the data security level of data transmitted from the second system to the first system.

[0009] In an optional implementation of the first aspect, the indicator data includes at least one sub-indicator; the preset scoring rule corresponding to the indicator data includes a corresponding relationship between a preset sub-indicator and a score;

[0010] Based on the indicator data and the preset indicator scoring rules corresponding to the indicator data, the indicator score corresponding to the indicator data is determined, including:

[0011] For each sub-indicator of the at least one sub-indicator, the sub-indicators are matched based on a preset correspondence relationship between the sub-indicators and the scores, and the scores of the sub-indicators are determined to obtain the sub-scores corresponding to the at least one sub-indicator respectively;

[0012] Based on the sub-scores respectively corresponding to the at least one sub-indicator, an indicator score corresponding to the indicator data is determined.

[0013] In an optional implementation of the first aspect, determining the indicator score corresponding to the indicator data based on the sub-scores respectively corresponding to the at least one sub-indicator includes:

[0014] Obtaining an indicator score corresponding to the indicator data by accumulating the sub-scores corresponding to at least one sub-indicator respectively;

[0015] or,

[0016] Based on the second preset weight, weighted sum processing is performed on the sub-scores corresponding to the at least one sub-indicator to obtain the indicator score corresponding to the indicator data.

[0017] In an optional implementation of the first aspect, the indicator data is transmission message data, and at least one sub-indicator in the indicator data includes at least one of an encryption and signature indicator, a file transmission indicator, and a certificate indicator;

[0018] The sub-scores corresponding to the at least one sub-indicator include at least one of a first sub-score corresponding to the encryption and signing indicator, a second sub-score corresponding to the file transfer indicator, and a third sub-score corresponding to the certificate indicator;

[0019] The first sub-score represents the security level of message transmission from the second system to the first system, based on whether the transmitted message data is encrypted and signed; the second sub-score represents the security level of message transmission from the second system to the first system, based on whether the transmitted message data includes files; the third sub-score represents the security level of message transmission from the second system to the first system, based on whether the transmitted message data has a certificate.

[0020] In an optional implementation of the first aspect, the indicator data is transmission channel data, and at least one sub-indicator in the indicator data includes at least one of a transmission medium indicator, a transmission protocol indicator, and a transmission network indicator;

[0021] The sub-scores corresponding to the at least one sub-indicator include at least one of a fourth sub-score corresponding to the transmission medium indicator, a fifth sub-score corresponding to the transmission protocol indicator, and a sixth sub-score corresponding to the transmission network indicator;

[0022] The fourth sub-score represents the security level of the transmission channel between the first system and the second system from the perspective of the transmission medium, the fifth sub-score represents the security level of the transmission channel between the first system and the second system from the perspective of the transmission protocol, and the sixth sub-score represents the security level of the transmission channel between the first system and the second system from the perspective of the transmission network.

[0023] In an optional implementation of the first aspect, the indicator data is code access data, and at least one sub-indicator in the indicator data includes a code obfuscation indicator;

[0024] The sub-scores corresponding to the at least one sub-indicator include a seventh sub-score corresponding to the code obfuscation indicator, and the seventh sub-score represents the security level of the code data of the second system accessing the first system based on whether there is code obfuscation in the code data.

[0025] In an optional implementation of the first aspect, the indicator data is access data, and at least one sub-indicator in the indicator data includes at least one of an access management indicator, an access mode indicator, an access problem indicator, a message format indicator, and an access ease of use indicator;

[0026] The sub-scores corresponding to the at least one sub-indicator include at least one of an eighth sub-score corresponding to the access management indicator, a ninth sub-score corresponding to the access mode indicator, a tenth sub-score corresponding to the access problem indicator, an eleventh sub-score corresponding to the message format indicator, and a twelfth sub-score corresponding to the access ease of use indicator;

[0027] The eighth sub-score represents the convenience of the second system accessing the first system from the perspective of access management, the ninth sub-score represents the convenience of the second system accessing the first system from the perspective of access method, the tenth sub-score represents the convenience of the second system accessing the first system from the perspective of access problems, the eleventh sub-score represents the convenience of the second system accessing the first system from the perspective of message format, and the twelfth sub-score can evaluate the convenience of the second system accessing the first system from the perspective of access ease of use.

[0028] In an optional implementation of the first aspect, determining the total score based on at least two indicator scores includes:

[0029] The total score is obtained by accumulating the scores of at least two indicators;

[0030] or,

[0031] A weighted summation process is performed on at least two indicator scores based on a first preset weight to obtain a total score.

[0032] In an optional implementation of the first aspect, the method further includes:

[0033] Based on the mapping relationship between the preset score and the data security level, the total score is matched to obtain the data security level corresponding to the total score.

[0034] In a second aspect, a data processing device is provided, which is applied to a first system, and includes:

[0035] An acquisition module, used to acquire system access data of the second system, the system access data including at least two indicator data, the at least two indicator data including at least two of transmission message data, transmission channel data, code access data and access data;

[0036] A determination module, for determining, for each of the at least two indicator data, an indicator score corresponding to the indicator data based on the indicator data and a preset scoring rule corresponding to the indicator data, to obtain at least two indicator scores, wherein the at least two indicator scores include at least two of a message security score, a transmission security score, a code security score, and an access score, wherein the message security score represents the security level of the message transmitted by the second system to the first system; the transmission security score represents the security level of the transmission channel between the first system and the second system; the code security score represents the security level of the code data of the second system accessing the first system; and the access score represents the convenience level of the second system accessing the first system;

[0037] The determination module is further used to determine a total score based on at least two indicator scores, where the total score represents the data security level of data transmitted from the second system to the first system.

[0038] In a third aspect, an electronic device is provided, comprising: a memory for storing computer program instructions; and a processor for reading and running the computer program instructions stored in the memory to execute the data processing method provided in any optional implementation manner in the first aspect.

[0039] In a fourth aspect, a computer storage medium is provided, on which computer program instructions are stored, and when the computer program instructions are executed by a processor, the data processing method provided by any optional implementation in the first aspect is implemented.

[0040] In a fifth aspect, a computer program product is provided, the computer program product comprising a computer program, and when the computer program is executed by a processor, the data processing method provided by any optional implementation manner in the first aspect is implemented.

[0041] In an embodiment of the present application, the system access system of the second system can be obtained, and the system access data includes at least two indicator data, and then for each indicator data, the indicator score of the indicator data can be calculated to obtain at least two indicator scores. Since the at least two indicator data include at least two of the transmission message data, the transmission channel data, the code access data and the access data, correspondingly, the at least two indicator scores obtained include at least two of the message security score, the transmission security score, the code security score and the access score, and then the total score can be accurately determined. In this way, the security level of the message transmitted from the second system to the first system, the security level of the transmission channel between the first system and the second system, the security level of the code data of the second system accessing the first system, and the convenience of the second system accessing the first system in the data interaction process between the first system and the second system can be accurately evaluated. The high evaluation cost and difficult operation caused by the actual operation of the second system for data security evaluation can be avoided. BRIEF DESCRIPTION OF THE DRAWINGS

[0042] In order to more clearly illustrate the technical solution of the embodiments of the present application, the following is a brief introduction to the drawings required for use in the embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without any creative work.

[0043] Figure 1 This is one of the flowcharts of a data processing method provided in an embodiment of the present application;

[0044] Figure 2 This is a second flow chart of a data processing method provided in an embodiment of the present application;

[0045] Figure 3 This is a third flow chart of a data processing method provided in an embodiment of the present application;

[0046] Figure 4 is a structural schematic diagram of a data processing device provided in an embodiment of the present application;

[0047] Figure 5 It is a structural schematic diagram of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0048] The features and exemplary embodiments of various aspects of the present application will be described in detail below. In order to make the purpose, technical solutions and advantages of the present application clearer, the present application will be further described in detail below in conjunction with the accompanying drawings and specific embodiments. It should be understood that the specific embodiments described herein are intended only to explain the present application, rather than to limit the present application. For those skilled in the art, the present application can be implemented without the need for some of these specific details. The following description of the embodiments is only to provide a better understanding of the present application by showing examples of the present application. In addition, it should be noted that the acquisition, storage, use, and processing of data in the technical solution of the present application are in compliance with the relevant provisions of national laws and regulations. It should also be noted that in the embodiments of the present application, some existing solutions in the industry such as software, components, and models may be mentioned, and they should be considered as exemplary, and their purpose is only to illustrate the feasibility of the implementation of the technical solution of the present application, but it does not mean that the applicant has or must have used the solution.

[0049] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the statement "include..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.

[0050] The term "and / or" in this article is merely a description of the association relationship of associated objects, indicating that three relationships may exist. For example, A and / or B can mean: A exists alone, A and B exist at the same time, and B exists alone.

[0051] Since the financial supply chain system is a core platform connecting multiple participants such as financial institutions, suppliers, manufacturers, distributors and consumers, its data security is very important.

[0052] In the prior art, in order to improve the data security of the financial supply chain system, a security assessment is generally performed from the perspective of the financial supply chain system as a whole. For example, the data security of the financial supply chain system can be assessed based on relevant data on the hardware security, gateway security, user system, role authority system, and system anti-attack of the financial supply chain system, or based on the test reports obtained after various security tests on the financial supply chain system, to avoid situations where the system data security is low.

[0053] However, in order to ensure the smooth progress of the overall business, the financial supply chain system needs to connect to multiple third-party systems. Since the financial supply chain system and third-party systems will inevitably have data interaction processes, if the data security of the connected third-party systems during the data transmission process is low, it will affect the data security of the financial supply chain system.

[0054] Based on this, in the prior art, if a data security assessment is conducted on a third-party system to be connected to a financial supply chain system, the relevant technical personnel generally conduct security tests on the third-party system through actual operation to assess the data security of the third-party system. However, this method also conducts a security assessment on the system from the perspective of the system as a whole, and the personnel, time and other costs of conducting security tests on the third-party system are high, and the operation difficulty is also high.

[0055] In summary, in order to solve the problems existing in the prior art, the embodiments of the present application provide a data processing method, device, equipment, medium and product, which can obtain the system access system of the second system, and the system access data includes at least two indicator data, and then for each indicator data, the indicator score of the indicator data can be calculated to obtain at least two indicator scores. Since the at least two indicator data include at least two of the transmission message data, the transmission channel data, the code access data and the access data, correspondingly, the at least two indicator scores obtained include at least two of the message security score, the transmission security score, the code security score and the access score, and then the total score can be accurately determined. In this way, the security level of the message transmitted from the second system to the first system, the security level of the transmission channel between the first system and the second system, the security level of the code data of the second system accessing the first system, and the convenience of the second system accessing the first system in the data interaction process between the first system and the second system can be accurately evaluated. The data security level of the data transmitted from the second system to the first system is avoided, and the high evaluation cost and difficult operation caused by the actual operation of the second system for data security evaluation are avoided.

[0056] The data processing method provided in the embodiment of the present application is described in detail below through specific embodiments in conjunction with the accompanying drawings.

[0057] Figure 1 It is a flowchart of a data processing method provided in an embodiment of the present application.

[0058] like Figure 1 As shown, the execution subject of the method may be a first system, and the first system may be a related system that needs to interact with a third-party system for data. For example, the first system may be a financial supply chain system, which is not specifically limited here. Based on this, the method may include the following steps:

[0059] S110: Acquire system access data of the second system.

[0060] The second system may be a third-party system that needs to exchange data with the first system, which is not specifically limited here. In addition, the system access data may be relevant data of the second system applying for access to the first system.

[0061] In some embodiments, the system access data may include at least two indicator data. The at least two indicator data may include at least two of transmission message data, transmission channel data, code access data, and access data. Among them, the transmission message data may be data related to the message transmitted by the second system to the first system, the transmission channel data may be data related to the transmission channel between the first system and the second system, the code access data may be relevant code data required by the second system to apply for access to the first system, and the access data may be relevant data in the process of docking between the second system and the first system.

[0062] Specifically, when the second system needs to access the first system, the second system may send system access data to the first system, so that the first system may obtain the system access data of the second system by receiving the system access data sent by the second system.

[0063] S120, for each indicator data of the at least two indicator data, based on the indicator data and a preset scoring rule corresponding to the indicator data, determine an indicator score corresponding to the indicator data to obtain at least two indicator scores.

[0064] The preset scoring rules may be scoring rules pre-set based on actual experience or circumstances, and are not specifically limited here. It should be noted that if the indicator data is different, the corresponding preset scoring rules are also different, and no further elaboration is made here.

[0065] In addition, since the above-mentioned at least two indicator data may include at least two of the transmission message data, transmission channel data, code access data and access data, accordingly, the above-mentioned at least two indicator scores may include at least two of the message security score, the transmission security score, the code security score and the access score.

[0066] Among them, the above-mentioned message security score can characterize the security level of message transmission from the second system to the first system, the transmission security score can characterize the security level of the transmission channel between the first system and the second system, the code security score can characterize the security level of the code data of the second system accessing the first system, and the access score is used to characterize the convenience of the second system accessing the first system.

[0067] Specifically, after the first system obtains the system access data of the second system, the system access data may include at least two indicator data. In this way, the first system can determine the indicator score corresponding to each indicator data of the at least two indicator data based on the indicator data and the preset scoring rules corresponding to the indicator data, and then obtain the indicator scores corresponding to the at least two indicator data respectively, that is, at least two indicator scores can be obtained.

[0068] S130, determining a total score based on at least two indicator scores.

[0069] Among them, the total score represents the data security level of data transmitted from the second system to the first system. Specifically, if the total score is higher, it indicates that the data security level of data transmitted from the second system to the first system is higher; if the total score is lower, it indicates that the data security level of data transmitted from the second system to the first system is lower.

[0070] Specifically, after obtaining at least two indicator scores, the first system can determine a total score based on the at least two indicator scores to evaluate the data security level of data transmitted from the second system to the first system.

[0071] It should also be noted that if the total score is greater than a preset score threshold, the first system can send a notification message to the second system, which can indicate that the first system allows the second system to access, so as to enable the second system to access the first system. The preset score threshold can be based on actual conditions and is not specifically limited here.

[0072] In an embodiment of the present application, the system access system of the second system can be obtained, and the system access data includes at least two indicator data, and then for each indicator data, the indicator score of the indicator data can be calculated to obtain at least two indicator scores. Since the at least two indicator data include at least two of the transmission message data, the transmission channel data, the code access data and the access data, correspondingly, the at least two indicator scores obtained include at least two of the message security score, the transmission security score, the code security score and the access score, and then the total score can be accurately determined. In this way, the security level of the message transmitted from the second system to the first system, the security level of the transmission channel between the first system and the second system, the security level of the code data of the second system accessing the first system, and the convenience of the second system accessing the first system in the data interaction process between the first system and the second system can be accurately evaluated. The high evaluation cost and difficult operation caused by the actual operation of the second system for data security evaluation can be avoided.

[0073] In order to accurately determine the indicator score corresponding to the indicator data, so as to accurately calculate the total score later and accurately evaluate the data security degree of the second data transmitting the first data. In some embodiments, the indicator data may include at least one sub-indicator, and the preset scoring rule corresponding to the indicator data may include a preset correspondence between the sub-indicator and the score, and the preset correspondence between the sub-indicator and the score may be a preset correspondence based on actual experience or situation, which is not specifically limited here.

[0074] Based on this, Figure 2 As shown, the above-mentioned steps of determining the indicator score corresponding to the indicator data based on the indicator data and the preset indicator scoring rules corresponding to the indicator data may specifically include the following steps:

[0075] S210, for each sub-indicator in the at least one sub-indicator, matching the sub-indicators based on a preset correspondence relationship between the sub-indicators and the scores, determining the scores of the sub-indicators, and obtaining sub-scores corresponding to the at least one sub-indicator.

[0076] Specifically, since the above-mentioned indicator data may include at least one sub-indicator, and the preset scoring rule corresponding to the above-mentioned indicator data includes the corresponding relationship between the preset sub-indicator and the score, for each sub-indicator in at least one sub-indicator, the sub-indicator is matched based on the corresponding relationship between the preset sub-indicator and the score, the score of the sub-indicator is determined, and the sub-score corresponding to the at least one sub-indicator is obtained.

[0077] S220: Determine an indicator score corresponding to the indicator data based on the sub-scores corresponding to the at least one sub-indicator.

[0078] Specifically, the first system can obtain a sub-score corresponding to at least one sub-indicator, and can determine the indicator score corresponding to the indicator data based on the sub-score corresponding to the at least one sub-indicator.

[0079] In this embodiment, since each indicator data includes at least one sub-indicator, it is possible to more finely calculate the sub-score of each sub-indicator and thus accurately obtain the indicator score of the corresponding indicator data, thereby facilitating a subsequent more accurate evaluation of the data security level of data transmitted from the second system to the first system.

[0080] Based on this, in order to accurately obtain the indicator score of each indicator data so as to accurately evaluate the data security level of data transmitted from the second system to the first system later, in one embodiment, the above-mentioned S230 may specifically include the following steps:

[0081] Obtaining an indicator score corresponding to the indicator data by accumulating the sub-scores corresponding to at least one sub-indicator respectively;

[0082] or,

[0083] Based on the second preset weight, weighted sum is performed on the sub-scores corresponding to the at least one sub-indicator to obtain the indicator score corresponding to the indicator data.

[0084] The second preset weight may be a weight pre-set based on actual experience or circumstances, and is not specifically limited here.

[0085] Specifically, after obtaining the sub-scores corresponding to at least one sub-indicator, the first system can obtain the indicator score corresponding to the indicator data by accumulating the sub-scores corresponding to the at least one sub-indicator.

[0086] In addition, the first system may also obtain an indicator score corresponding to the indicator data by performing weighted sum processing on the sub-scores corresponding to the at least one sub-indicator respectively based on the second preset weight.

[0087] In this embodiment, the sub-scores corresponding to at least one sub-indicator can be processed by accumulation or weighted summation to accurately obtain the indicator score corresponding to the indicator data, so that the data security level of data transmitted from the second system to the first system can be accurately evaluated subsequently.

[0088] Since the at least two indicator data included in the system access data may include at least two of the transmission message data, the transmission channel data, the code access data, and the access data, different indicator data have different corresponding sub-indicators, and the evaluation angles of the sub-scores corresponding to the calculated sub-indicators will also be different. Based on this, the process of obtaining the indicator score for each indicator data involved in the embodiment of the present application is described in detail below in conjunction with specific embodiments.

[0089] First, in order to accurately obtain a message security score based on the transmission message data, so as to accurately evaluate the security level of the message transmission from the second system to the first system, based on this, in one embodiment, if the indicator data includes the transmission message data;

[0090] Considering that encrypting the transmission message data can protect the confidentiality of the transmission message data, and signing the transmission message data can protect the integrity of the transmission message data, the transmission message data can include an encryption and signing indicator;

[0091] Considering whether the transmission message data includes files, whether the files are encrypted and signed, and the size of the files, the security of the message transmission from the second system to the first system may be affected, so the transmission message data may also include encryption and signing indicators;

[0092] In addition, since the transmitted data has a certificate, it can not only ensure the security of the data, but also verify the integrity and credibility of the data. Therefore, whether the transmitted message data has a certificate, the specific certificate type of the transmitted message data, etc. will also affect the security level of the message transmitted from the second system to the first system, that is, the transmitted message data can include certificate indicators.

[0093] In summary, if the indicator data is transmission message data, at least one sub-indicator in the indicator data may include at least one of an encryption and signature indicator, a file transmission indicator, and a certificate indicator.

[0094] Correspondingly, the sub-scores corresponding to at least one sub-indicator include at least one of a first sub-score corresponding to the encryption and signing indicator, a second sub-score corresponding to the file transfer indicator, and a third sub-score corresponding to the certificate indicator.

[0095] The first sub-score can be used to evaluate the security of the message transmission from the second system to the first system based on whether the message data is encrypted and signed. The second sub-score can be used to evaluate the security of the message transmission from the second system to the first system based on whether the message data is a file. The third sub-score can be used to evaluate the security of the message transmission from the second system to the first system based on whether the message data has a certificate.

[0096] In this embodiment, if the indicator data includes transmitted message data, at least one sub-indicator in the indicator data includes at least one of an encryption and signing indicator, a file transfer indicator, and a certificate indicator. Accordingly, the sub-scores corresponding to the at least one sub-indicator include at least one of a first sub-score corresponding to the encryption and signing indicator, a second sub-score corresponding to the file transfer indicator, and a third sub-score corresponding to the certificate indicator. The message security score can then be accurately obtained. In this way, the security level of the message transmission from the second system to the first system can be accurately evaluated from aspects such as whether the transmitted message data is encrypted and signed, whether the transmitted message data includes files, and whether the transmitted message data has a certificate.

[0097] Secondly, in order to accurately obtain a transmission security score based on the transmission channel data, so as to accurately evaluate the security level of the transmission channel between the first system and the second system, based on this, in one embodiment, if the indicator data is transmission channel data, taking into account the differences in transmission channels, the corresponding security levels will also be different, and the transmission channel may include transmission media, transmission protocols, and transmission networks, etc. Therefore, when the indicator data is transmission channel data, at least one sub-indicator in the indicator data may include at least one of a transmission medium indicator, a transmission protocol indicator, and a transmission network indicator.

[0098] Correspondingly, the sub-scores respectively corresponding to the at least one sub-indicator may include at least one of a fourth sub-score corresponding to the transmission medium indicator, a fifth sub-score corresponding to the transmission protocol indicator, and a sixth sub-score corresponding to the transmission network indicator;

[0099] Among them, the above-mentioned fourth sub-score represents the security level of the transmission channel between the first system and the second system evaluated from the perspective of the transmission medium, the fifth sub-score represents the security level of the transmission channel between the first system and the second system evaluated from the perspective of the transmission protocol, and the sixth sub-score represents the security level of the transmission channel between the first system and the first system evaluated from the perspective of the transmission network.

[0100] In this embodiment, if the indicator data is transmission channel data, at least one sub-indicator in the indicator data includes at least one of a transmission medium indicator, a transmission protocol indicator, and a transmission network indicator. Correspondingly, the sub-scores corresponding to the at least one sub-indicator include at least one of a fourth sub-score corresponding to the transmission medium indicator, a fifth sub-score corresponding to the transmission protocol indicator, and a sixth sub-score corresponding to the transmission network indicator. The transmission security score corresponding to the transmission channel data can be accurately determined. In this way, the security level of the transmission channel between the first system and the second system can be accurately evaluated from transmission channels such as transmission media, transmission protocols, and transmission networks.

[0101] Furthermore, in order to accurately obtain the code security score based on the code access data so that the code security score can be accurately obtained later, in one embodiment, if the above indicator data is code access data, considering that the second system generally provides some demo, jar packages and other code data to facilitate access development during the docking process with the first system, these codes will involve the core logic of the transmission message of the second system, the message processing logic, etc. Code obfuscation is a way to convert the code of a computer program into a functionally equivalent but difficult to read and understand form, which can effectively ensure the security of the code data to a certain extent. Therefore, if the indicator data is code access data, at least one sub-indicator in the indicator data includes a code obfuscation indicator.

[0102] Correspondingly, the sub-scores corresponding to the at least one sub-indicator include a seventh sub-score corresponding to the code obfuscation indicator, wherein the seventh sub-score represents the security level of the code data of the second system accessing the first system based on whether there is code obfuscation in the code data.

[0103] In this embodiment, if the indicator data is code access data, at least one sub-indicator in the indicator data includes a code obfuscation indicator, and accordingly, the sub-scores corresponding to the at least one sub-indicator include a seventh sub-score corresponding to the code obfuscation indicator, and the code security score can be accurately obtained based on the seventh sub-score. In this way, the security level of the code data of the second system accessing the first system can be accurately evaluated based on whether there is code obfuscation in the code data.

[0104] Furthermore, in order to accurately obtain the access score based on the access data, the convenience of the second system accessing the first system can be accurately evaluated subsequently.

[0105] In one embodiment, if the above-mentioned indicator data is access data, considering that the second system connected to the first system is generally a third-party system that needs to provide certain capabilities or certain data, the second system's docking method, docking problems, message format, whether the docking is fast and easy to use will also affect the access workload, and thus affect the convenience of access.

[0106] Therefore, if the indicator data is access data, at least one sub-indicator in the indicator data includes at least one of an access management indicator, an access method indicator, an access problem indicator, a message format indicator, and an access ease of use indicator.

[0107] Correspondingly, the sub-scores corresponding to at least one sub-indicator include the eighth sub-score corresponding to the access management indicator, the ninth sub-score corresponding to the access method indicator, the tenth sub-score corresponding to the access problem indicator, the eleventh sub-score corresponding to the message format indicator, and at least one of the twelfth sub-score corresponding to the access ease of use indicator.

[0108] Among them, the eighth sub-score represents the convenience of the second system accessing the first system from the perspective of access management, the ninth sub-score represents the convenience of the second system accessing the first system from the perspective of access method, the tenth sub-score represents the convenience of the second system accessing the first system from the perspective of access problems, the eleventh sub-score represents the convenience of the second system accessing the first system from the perspective of message format, and the twelfth sub-score can evaluate the convenience of the second system accessing the first system from the perspective of access ease of use.

[0109] In this embodiment, if the indicator data is access indicator data, at least one sub-indicator in the indicator data includes at least one of an access management indicator, an access method indicator, an access problem indicator, a message format indicator, and an access ease of use indicator. Accordingly, the sub-scores corresponding to the at least one sub-indicator include at least one of an eighth sub-score corresponding to the access management indicator, a ninth sub-score corresponding to the access method indicator, a tenth sub-score corresponding to the access problem indicator, an eleventh sub-score corresponding to the message format indicator, and a twelfth sub-score corresponding to the access ease of use indicator, and thus the access score can be accurately obtained. In this way, the convenience of the second system accessing the first system can be accurately evaluated from aspects such as access management, access method, access problem, message format, and access ease of use.

[0110] In order to accurately determine the total score and accurately evaluate the data security level of data transmitted from the second system to the first system, in one embodiment, the above S130 may specifically include the following steps:

[0111] The total score is obtained by adding up the scores of at least two indicators.

[0112] or,

[0113] A weighted summation process is performed on at least two indicator scores based on a first preset weight to obtain a total score.

[0114] The first preset weight may be a weight pre-set based on actual experience or circumstances, and is not specifically limited here.

[0115] Specifically, the first system can calculate the indicator data corresponding to each indicator data of the at least two indicator data, and after obtaining at least two indicator scores, can obtain a total score by accumulating the at least two indicator scores.

[0116] In addition, the first system may also perform weighted sum processing on the at least two indicator scores obtained based on the first preset weight to obtain a total score.

[0117] In this embodiment, at least two indicator scores can be processed by accumulation or weighted summation to obtain an accurate total score, so that the data security level of data transmitted from the second system to the first system can be accurately evaluated based on the total score.

[0118] In order to describe the data processing method provided by the embodiment of the present application in detail, in one embodiment, the data processing method involved above may further include the following steps:

[0119] Based on the mapping relationship between the preset score and the data security level, the total score is matched to obtain the data security level corresponding to the total score.

[0120] Among them, the mapping relationship between the preset score and the data level can be set in advance based on actual experience or circumstances, as shown in Table 1. Among them, A level > B level > C level > D level > E level, and S1 < S2 < S3 < S4 < S5 < S6. Specifically, the higher the level, the higher the data security level when the second system transmits data to the first system. Conversely, the lower the level, the lower the data security level when the second system transmits data to the first system. No specific limitation is made here.

[0121] Table 1

[0122] grade Rating range A-level <![CDATA[(S5,S6]]]> B Level <![CDATA[(S4,S5]]]> C Level <![CDATA[(S3,S4]]]> D-level <![CDATA[(S2,S3]]]> E-level <![CDATA[[S1,S2]]]>

[0123] Specifically, after obtaining the total score, the first system can match the total score based on the mapping relationship between the preset score and the data level, and obtain the data security level corresponding to the total score.

[0124] It should be noted that if the data security level corresponding to the total score meets the preset data security level, the first system can send a notification message to the second system. This notification message can indicate that the first system allows the second system to access, so as to realize the access of the second system to the first system. Among them, the preset data security level can be set in advance based on experience or circumstances, and no specific limitation is made here.

[0125] In this embodiment, after obtaining the total score, based on the mapping relationship between the preset score and the data security level, the total score can be matched to obtain an accurate data security level, so as to more intuitively and clearly evaluate the data security level when the second system transmits data to the first system based on the data security level.

[0126] In order to be able to describe in detail the data processing method provided by the embodiments of the present application, in one embodiment, as Figure 3 shown, the data processing method provided by the embodiments of the present application may specifically include the following steps:

[0127] S301, obtain the system access data of the second system. The specific description of this step can be seen in the description at S110, and no more details are given here.

[0128] S302, for each of the at least two index data, based on the corresponding relationship between the preset sub-index and the score, match each sub-index in at least one sub-index of the index data to determine the score of each sub-index, and obtain the sub-scores corresponding to at least one sub-index respectively.

[0129] Since the system access data may include at least two indicator data, and each indicator data may include at least one sub-indicator, after acquiring the system access data of the second system, the first system can, for each indicator data in the at least two indicator data, match each sub-indicator in at least one sub-indicator in the indicator data based on the corresponding relationship between the preset sub-indicator corresponding to the indicator data and the score, determine the score of each sub-indicator, and further obtain the sub-score corresponding to at least one sub-indicator.

[0130] S303: Determine the indicator score corresponding to the indicator data based on the sub-scores respectively corresponding to the at least one sub-indicator, and obtain at least two indicator scores.

[0131] After obtaining the sub-score corresponding to at least one sub-indicator in the indicator data for each indicator data, the first system can determine the indicator score corresponding to the indicator data based on the sub-score corresponding to at least one sub-indicator in the indicator data, and thus can obtain at least two indicator scores.

[0132] S304: Determine a total score based on at least two indicator scores.

[0133] Specifically, after obtaining at least two indicator scores, the first system can perform corresponding processing on the at least two indicator scores based on the at least two indicator scores by accumulation or weighted summation to obtain a total score.

[0134] In an example, if the at least two indicator data included in the above-mentioned system access data include transmission message data, transmission channel data, code access data and access data, the correspondence between the sub-indicators and the scores under each indicator data can be shown in Table 2 below.

[0135] Table 2

[0136]

[0137] In this way, taking the indicator data as transmission message data as an example, if the transmission message data includes sub-indicators such as encryption and signature indicators, file transmission indicators, and certificate indicators, the message security score corresponding to the transmission message data is the sum of sub-scores F1, sub-scores F2, and sub-scores F3, or the message security score corresponding to the transmission message data can be the result value obtained by weighted summation of sub-scores F1, sub-scores F2, and sub-scores F3. Based on the same method, the transmission security score, code security score, and access score can be obtained, and then the above message security score, transmission security score, code security score, and access score can be processed by accumulation or weighted summation to obtain a total score.

[0138] It should be noted here that each sub-indicator has a different scoring standard. If the same sub-indicator meets different scoring standards, it will result in different sub-scores of the sub-indicator. That is, when determining the sub-score of each sub-indicator, the sub-score of each sub-indicator can be determined based on whether the system access data of the second system obtained by the first system meets the various scoring standards corresponding to the sub-indicator.

[0139] Specifically, when the indicator data is transmission message data, if the sub-indicator is an encryption and signing indicator, the scoring criteria can be determined based on whether the transmission message is encrypted and signed, the specific encryption method, the signing method and other information; if the sub-indicator is a file transmission indicator, the corresponding scoring criteria can be determined based on whether the transmission message carries a file, the file transmission method, the file processing method, the file information, etc.; if the sub-indicator is a certificate indicator, the scoring criteria can be determined based on the certificate type, and no specific limitation is made here.

[0140] When the indicator data is transmission channel data, if the sub-indicator is a transmission medium indicator, the scoring criteria can be determined by judging whether there is a medium; if the sub-indicator is a transmission protocol indicator, the scoring criteria can be determined according to the transmission protocol type; if the sub-indicator is a transmission network indicator, the scoring criteria can depend on the specific transmission network type.

[0141] In the case where the indicator data is code access data, if the sub-indicator is a code obfuscation indicator, the scoring standard can be determined by judging whether there is code obfuscation in the code access data.

[0142] When the indicator data is access data, if the sub-indicator is an access management indicator, the scoring criteria can be determined by judging whether there is a platform for management keys and parameter maintenance; if the sub-indicator is a docking method indicator, the scoring criteria can be determined based on the specific docking method; if the sub-indicator is an access ease of use indicator, the scoring criteria can be determined based on the specific calling method of the software development kit, whether the information is easy to understand, etc.; if the sub-indicator is a docking problem indicator, the scoring criteria can be determined based on the number of docking problems and whether the docking problems are easy to locate; if the sub-indicator is a message format indicator, the scoring criteria are determined based on the message format.

[0143] In an embodiment of the present application, system access data of the second system can be obtained. Since the system access data of the second system includes at least two indicator data, for each indicator data in the at least two indicator data, each sub-indicator in at least one sub-indicator in the indicator data is matched based on a corresponding relationship between a preset sub-indicator and a score, and a score for each sub-indicator is determined to obtain a sub-score corresponding to at least one sub-indicator, and based on the sub-score corresponding to the at least one sub-indicator, an indicator score corresponding to the indicator data is determined to obtain at least two indicator scores, and then the total score can be accurately obtained. In this way, the data security level of data transmitted from the second system to the first system can be accurately evaluated for the data interaction process between the first system and the second system, and the high evaluation cost and difficult operation caused by actually operating the second system to perform data security evaluation are avoided.

[0144] Based on the same inventive concept, the embodiment of the present application also provides a data processing device. The data processing device can be applied to the first system, specifically in combination with Figure 4 The data processing device provided in the embodiment of the present application is described in detail.

[0145] Figure 4 It is a structural diagram of a data processing device provided in an embodiment of the present application.

[0146] like Figure 4 As shown, the data processing device 400 may include:

[0147] An acquisition module 410 is used to acquire system access data of the second system, where the system access data includes at least two indicator data, and the at least two indicator data include at least two of transmission message data, transmission channel data, code access data, and access data;

[0148] The determination module 420 is used to determine, for each indicator data of the at least two indicator data, the indicator score corresponding to the indicator data based on the indicator data and the preset scoring rules corresponding to the indicator data, and obtain at least two indicator scores, wherein the at least two indicator scores include at least two of a message security score, a transmission security score, a code security score, and an access score, wherein the message security score represents the security level of the message transmitted by the second system to the first system; the transmission security score represents the security level of the transmission channel between the first system and the second system; the code security score represents the security level of the code data of the second system accessing the first system; and the access score represents the convenience level of the second system accessing the first system;

[0149] The determination module 420 is further configured to determine a total score based on at least two indicator scores, where the total score represents the data security level of data transmitted from the second system to the first system.

[0150] In some embodiments, the indicator data includes at least one sub-indicator; the preset scoring rule corresponding to the indicator data includes a corresponding relationship between the preset sub-indicator and the score;

[0151] Based on this, the above data processing device may further include a matching module.

[0152] The matching module is used to match the sub-indicators based on the preset correspondence between the sub-indicators and the scores for each sub-indicator in the at least one sub-indicator, determine the scores of the sub-indicators, and obtain the sub-scores corresponding to the at least one sub-indicator respectively;

[0153] The determination module is specifically used to determine the indicator score corresponding to the indicator data based on the sub-score corresponding to at least one sub-indicator.

[0154] In one embodiment, the above-mentioned data processing device may further include an accumulation module and a weighted summation module.

[0155] An accumulation module, used for accumulating the sub-scores corresponding to at least one sub-indicator to obtain the indicator score corresponding to the indicator data;

[0156] or,

[0157] The weighted summation module is used to perform weighted summation processing on the sub-scores corresponding to at least one sub-indicator based on the second preset weight to obtain the indicator score corresponding to the indicator data.

[0158] In some embodiments, if the indicator data is transmission message data, at least one sub-indicator in the indicator data includes at least one of an encryption signature indicator, a file transmission indicator, and a certificate indicator;

[0159] Accordingly, the sub-scores corresponding to the at least one sub-indicator include at least one of the first sub-score corresponding to the encryption and signing indicator, the second sub-score corresponding to the file transfer indicator, and the third sub-score corresponding to the certificate indicator;

[0160] Among them, the first sub-score represents the security level of message transmission from the second system to the first system based on whether the transmitted message data is encrypted and signed; the second sub-score represents the security level of message transmission from the second system to the first system based on whether the transmitted message data includes files; the third sub-score represents the security level of message transmission from the second system to the first system based on whether the transmitted message data has a certificate.

[0161] In some embodiments, if the indicator data is transmission channel data, at least one sub-indicator in the indicator data includes at least one of a transmission medium indicator, a transmission protocol indicator, and a transmission network indicator;

[0162] Accordingly, the sub-scores corresponding to the at least one sub-indicator respectively include at least one of the fourth sub-score corresponding to the transmission medium indicator, the fifth sub-score corresponding to the transmission protocol indicator, and the sixth sub-score corresponding to the transmission network indicator;

[0163] Among them, the fourth sub-score represents the security level of the transmission channel between the first system and the second system evaluated from the perspective of the transmission medium, the fifth sub-score represents the security level of the transmission channel between the first system and the second system evaluated from the perspective of the transmission protocol, and the sixth sub-score represents the security level of the transmission channel between the first system and the second system evaluated from the perspective of the transmission network.

[0164] In some embodiments, if the indicator data is code access data, at least one sub-indicator in the indicator data includes a code obfuscation indicator;

[0165] Accordingly, the sub-scores corresponding to the at least one sub-indicator respectively include a seventh sub-score corresponding to the code obfuscation indicator;

[0166] The seventh sub-score represents the security level of the code data of the second system accessing the first system based on whether there is code obfuscation in the code data.

[0167] In some embodiments, if the indicator data is access data, at least one sub-indicator in the indicator data includes at least one of an access management indicator, an access mode indicator, an access problem indicator, a message format indicator, and an access ease of use indicator;

[0168] Accordingly, the sub-scores corresponding to the at least one sub-indicator include at least one of an eighth sub-score corresponding to the access management indicator, a ninth sub-score corresponding to the access mode indicator, a tenth sub-score corresponding to the access problem indicator, an eleventh sub-score corresponding to the message format indicator, and a twelfth sub-score corresponding to the access ease of use indicator;

[0169] Among them, the eighth sub-score represents the convenience of the second system accessing the first system from the perspective of access management, the ninth sub-score represents the convenience of the second system accessing the first system from the perspective of access method, the tenth sub-score represents the convenience of the second system accessing the first system from the perspective of access problems, the eleventh sub-score represents the convenience of the second system accessing the first system from the perspective of message format, and the twelfth sub-score can evaluate the convenience of the second system accessing the first system from the perspective of access ease of use.

[0170] In some embodiments, the data processing device mentioned above may further include an accumulation module and a weighted summation module.

[0171] An accumulation module, used to obtain a total score by accumulating at least two indicator scores;

[0172] or,

[0173] The weighted summation module is used to perform weighted summation processing on at least two indicator scores based on a first preset weight to obtain a total score.

[0174] In one embodiment, the data processing device mentioned above may further include a matching module, which is used to match the total score based on a preset mapping relationship between the score and the data security level to obtain the data security level corresponding to the total score.

[0175] In an embodiment of the present application, the system access system of the second system can be obtained, and the system access data includes at least two indicator data, and then for each indicator data, the indicator score of the indicator data can be calculated to obtain at least two indicator scores. Since the at least two indicator data include at least two of the transmission message data, the transmission channel data, the code access data and the access data, correspondingly, the at least two indicator scores obtained include at least two of the message security score, the transmission security score, the code security score and the access score, and then the total score can be accurately determined. In this way, the security level of the message transmitted from the second system to the first system, the security level of the transmission channel between the first system and the second system, the security level of the code data of the second system accessing the first system, and the convenience of the second system accessing the first system in the data interaction process between the first system and the second system can be accurately evaluated. The high evaluation cost and difficult operation caused by the actual operation of the second system for data security evaluation can be avoided.

[0176] Each module in the resource management system provided in the embodiment of the present application can be implemented Figures 1 to 3 The method steps of any of the embodiments shown in the figure can achieve the corresponding technical effects, which will not be repeated here for the sake of brevity.

[0177] Figure 5 A schematic diagram of the hardware structure of an electronic device provided in an embodiment of the present application is shown.

[0178] The electronic device may include a processor 501 and a memory 502 storing computer program instructions.

[0179] Specifically, the processor 501 may include a central processing unit (CPU), or an application specific integrated circuit (ASIC), or may be configured to implement one or more integrated circuits of the embodiments of the present application.

[0180] The memory 502 may include a large capacity memory for data or instructions. By way of example and not limitation, the memory 502 may include a hard disk drive (HDD), a floppy disk drive, a flash memory, an optical disk, a magneto-optical disk, a magnetic tape, or a universal serial bus (USB) drive or a combination of two or more of these. In appropriate cases, the memory 502 may include a removable or non-removable (or fixed) medium. In appropriate cases, the memory 502 may be inside or outside the integrated gateway disaster recovery device. In a specific embodiment, the memory 502 is a non-volatile solid-state memory.

[0181] The memory may include read-only memory (ROM), random access memory (RAM), magnetic disk storage media devices, optical storage media devices, flash memory devices, electrical, optical or other physical / tangible memory storage devices. Thus, typically, the memory includes one or more tangible (non-transitory) computer-readable storage media (e.g., memory devices) encoded with software including computer-executable instructions, and when the software is executed (e.g., by one or more processors), it is operable to perform the operations described with reference to the method according to an aspect of the present disclosure.

[0182] The processor 501 implements any one of the data processing methods in the above embodiments by reading and executing computer program instructions stored in the memory 502 .

[0183] In one example, the electronic device may further include a communication interface 503 and a bus 510. Figure 5 As shown, the processor 501, the memory 502, and the communication interface 503 are connected via a bus 510 and communicate with each other.

[0184] The communication interface 503 is mainly used to implement communication between various modules, devices, units and / or equipment in the embodiments of the present application.

[0185] Bus 510 includes hardware, software or both, and the parts of online data flow billing equipment are coupled to each other. For example, but not limitation, bus may include accelerated graphics port (AGP) or other graphics bus, enhanced industrial standard architecture (EISA) bus, front-end bus (FSB), hypertransport (HT) interconnection, industrial standard architecture (ISA) bus, infinite bandwidth interconnection, low pin count (LPC) bus, memory bus, micro channel architecture (MCA) bus, peripheral component interconnection (PCI) bus, PCI-Express (PCI-X) bus, serial advanced technology attachment (SATA) bus, video electronics standard association local (VLB) bus or other suitable bus or two or more of these combinations. In appropriate cases, bus 510 may include one or more buses. Although the present application embodiment describes and shows a specific bus, the present application considers any suitable bus or interconnection.

[0186] In addition, in combination with the data processing method in the above embodiment, the embodiment of the present application can provide a computer storage medium for implementation. The computer storage medium stores computer program instructions; when the computer program instructions are executed by the processor, the data processing method provided in the embodiment of the present application is implemented.

[0187] An embodiment of the present application also provides a computer program product, which includes a computer program. When the computer program is executed by a processor, the electronic device executes the data processing method provided in the embodiment of the present application.

[0188] It should be clear that the present application is not limited to the specific configuration and processing described above and shown in the figures. For the sake of simplicity, a detailed description of the known method is omitted here. In the above embodiments, several specific steps are described and shown as examples. However, the method process of the present application is not limited to the specific steps described and shown, and those skilled in the art can make various changes, modifications and additions, or change the order between the steps after understanding the spirit of the present application.

[0189] The functional blocks shown in the above block diagram can be implemented as hardware, software, firmware or a combination thereof. When implemented in hardware, it can be, for example, an electronic circuit, an application specific integrated circuit (ASIC), appropriate firmware, a plug-in, a function card, etc. When implemented in software, the elements of the present application are programs or code segments that are used to perform the required tasks. The program or code segment can be stored in a machine-readable medium, or transmitted on a transmission medium or a communication link by a data signal carried in a carrier wave. "Machine-readable medium" can include any medium capable of storing or transmitting information. Examples of machine-readable media include electronic circuits, semiconductor memory devices, ROM, flash memory, erasable ROM (EROM), floppy disks, CD-ROMs, optical disks, hard disks, optical fiber media, radio frequency (RF) links, etc. The code segment can be downloaded via a computer network such as the Internet, an intranet, etc.

[0190] It should also be noted that the exemplary embodiments mentioned in this application describe some methods or systems based on a series of steps or devices. However, this application is not limited to the order of the above steps, that is, the steps can be performed in the order mentioned in the embodiment, or in a different order from the embodiment, or several steps can be performed simultaneously.

[0191] Aspects of the present disclosure are described above with reference to the flowcharts and / or block diagrams of the methods, devices (systems) and computer program products according to the embodiments of the present disclosure. It should be understood that each box in the flowchart and / or block diagram and the combination of each box in the flowchart and / or block diagram can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable resource management system to produce a machine so that these instructions executed by the processor of the computer or other programmable resource management system enable the implementation of the function / action specified in one or more boxes of the flowchart and / or block diagram. Such a processor can be, but is not limited to, a general-purpose processor, a special-purpose processor, a special application processor, or a field programmable logic circuit. It can also be understood that each box in the block diagram and / or flowchart and the combination of boxes in the block diagram and / or flowchart can also be implemented by dedicated hardware that performs a specified function or action, or can be implemented by a combination of dedicated hardware and computer instructions.

[0192] The above are only specific implementation methods of the present application. Those skilled in the art can clearly understand that for the convenience and simplicity of description, the specific working processes of the systems, modules and units described above can refer to the corresponding processes in the aforementioned method embodiments, and will not be repeated here. It should be understood that the protection scope of the present application is not limited to this. Any technician familiar with the technical field can easily think of various equivalent modifications or replacements within the technical scope disclosed in this application, and these modifications or replacements should be included in the protection scope of this application.

Claims

1. A data processing method, characterized in that: Applied to the first system, the method comprises: Acquire system access data of the second system, the system access data comprising at least two indicator data, the at least two indicator data comprising at least two of transmission message data, transmission channel data, code access data, and access data; For each of the at least two indicator data, based on the indicator data and the preset scoring rules corresponding to the indicator data, determine the indicator score corresponding to the indicator data to obtain at least two indicator scores, wherein the at least two indicator scores include at least two of a message security score, a transmission security score, a code security score, and an access score, wherein the message security score represents the security level of the message transmitted by the second system to the first system; the transmission security score represents the security level of the transmission channel between the first system and the second system; the code security score represents the security level of the code data of the second system accessing the first system; and the access score represents the convenience level of the second system accessing the first system; Based on the at least two indicator scores, a total score is determined, where the total score represents a data security level of data transmitted from the second system to the first system.

2. The method according to claim 1, characterized in that The indicator data includes at least one sub-indicator; the preset scoring rule corresponding to the indicator data includes a corresponding relationship between the preset sub-indicator and the score; The determining, based on the indicator data and a preset indicator scoring rule corresponding to the indicator data, an indicator score corresponding to the indicator data includes: For each sub-indicator of the at least one sub-indicator, matching the sub-indicator based on the correspondence between the preset sub-indicator and the score, determining the score of the sub-indicator, and obtaining the sub-score corresponding to each of the at least one sub-indicator; Based on the sub-scores respectively corresponding to the at least one sub-indicator, an indicator score corresponding to the indicator data is determined.

3. The method according to claim 2, characterized in that The determining the indicator score corresponding to the indicator data based on the sub-scores respectively corresponding to the at least one sub-indicator includes: Obtaining an indicator score corresponding to the indicator data by accumulating sub-scores corresponding to the at least one sub-indicator respectively; or, Based on the second preset weight, weighted sum processing is performed on the sub-scores corresponding to the at least one sub-indicator to obtain the indicator score corresponding to the indicator data.

4. The method according to claim 2 or 3, characterized in that: The indicator data is the transmission message data, and at least one sub-indicator in the indicator data includes at least one of an encryption and signature indicator, a file transmission indicator, and a certificate indicator; The sub-scores corresponding to the at least one sub-indicator include at least one of the first sub-score corresponding to the encryption and signing indicator, the second sub-score corresponding to the file transfer indicator, and the third sub-score corresponding to the certificate indicator; The first sub-score represents the security level of message transmission from the second system to the first system based on whether the transmitted message data is encrypted and signed; the second sub-score represents the security level of message transmission from the second system to the first system based on whether the transmitted message data includes files; the third sub-score represents the security level of message transmission from the second system to the first system based on whether the transmitted message data has a certificate.

5. The method according to claim 2 or 3, characterized in that: The indicator data is transmission channel data, and at least one sub-indicator in the indicator data includes at least one of a transmission medium indicator, a transmission protocol indicator, and a transmission network indicator; The sub-scores corresponding to the at least one sub-indicator include at least one of the fourth sub-score corresponding to the transmission medium indicator, the fifth sub-score corresponding to the transmission protocol indicator, and the sixth sub-score corresponding to the transmission network indicator; The fourth sub-score represents the security level of the transmission channel between the first system and the second system evaluated from the perspective of the transmission medium, the fifth sub-score represents the security level of the transmission channel between the first system and the second system evaluated from the perspective of the transmission protocol, and the sixth sub-score represents the security level of the transmission channel between the first system and the second system evaluated from the perspective of the transmission network.

6. The method according to claim 2 or 3, characterized in that: The indicator data is code access data, and at least one sub-indicator in the indicator data includes a code obfuscation indicator; The sub-scores corresponding to the at least one sub-indicator include a seventh sub-score corresponding to a code obfuscation indicator, and the seventh sub-score represents a security level of code data of the second system accessing the first system based on whether code obfuscation exists in the code data.

7. The method according to claim 2 or 3, characterized in that: The indicator data is access data, and at least one sub-indicator in the indicator data includes at least one of an access management indicator, an access mode indicator, an access problem indicator, a message format indicator, and an access ease of use indicator; The sub-scores corresponding to the at least one sub-indicator include at least one of an eighth sub-score corresponding to the access management indicator, a ninth sub-score corresponding to the access mode indicator, a tenth sub-score corresponding to the access problem indicator, an eleventh sub-score corresponding to the message format indicator, and a twelfth sub-score corresponding to the access ease of use indicator; The eighth sub-score represents the convenience of the second system accessing the first system from the perspective of access management, the ninth sub-score represents the convenience of the second system accessing the first system from the perspective of access method, the tenth sub-score represents the convenience of the second system accessing the first system from the perspective of access problems, the eleventh sub-score represents the convenience of the second system accessing the first system from the perspective of message format, and the twelfth sub-score can evaluate the convenience of the second system accessing the first system from the perspective of access ease.

8. The method according to claim 1, characterized in that The step of determining a total score based on the at least two indicator scores includes: Obtaining a total score by accumulating the scores of the at least two indicators; or, The at least two indicator scores are weighted and summed based on the first preset weight to obtain a total score.

9. The method according to any one of claims 1 to 3 and 8, characterized in that: The method further comprises: Based on the preset mapping relationship between the score and the data security level, the total score is matched to obtain the data security level corresponding to the total score.

10. A data processing device, characterized in that: Applied to the first system, the device comprises: An acquisition module, used to acquire system access data of the second system, wherein the system access data includes at least two indicator data, and the at least two indicator data include at least two of transmission message data, transmission channel data, code access data and access data; a determination module, configured to determine, for each of the at least two indicator data, an indicator score corresponding to the indicator data based on the indicator data and a preset scoring rule corresponding to the indicator data, to obtain at least two indicator scores, wherein the at least two indicator scores include at least two of a message security score, a transmission security score, a code security score, and an access score, wherein the message security score represents a security level of the message transmitted by the second system to the first system; the transmission security score represents a security level of the transmission channel between the first system and the second system; the code security score represents a security level of the code data of the second system accessing the first system; and the access score represents a convenience level of the second system accessing the first system; The determination module is further configured to determine a total score based on the at least two indicator scores, wherein the total score represents a data security level of data transmitted from the second system to the first system.

11. An electronic device, characterized in that: The device comprises: a processor and a memory storing computer program instructions; The processor reads and executes the computer program instructions to implement the data processing method according to any one of claims 1 to 9.

12. A computer storage medium, characterized in that: The computer storage medium stores computer program instructions, and when the computer program instructions are executed by a processor, the data processing method according to any one of claims 1 to 9 is implemented.

13. A computer program product, characterized in that The computer program product comprises a computer program, and when the computer program is executed by a processor, it is the data processing method according to any one of claims 1 to 9.

Images