Customer information security protection method and system

Abstract

The invention discloses a customer information security protection method and system. The method comprises the following steps: S1, acquiring customer information to be stored; s2, dividing to-be-stored customer information into important information and non-important information, and performing isolated storage on the important information and the non-important information; the important information comprises integrated information for integrating important information and non-important information into to-be-stored customer information; s3, after an information access request is received, obtaining an access level of an information access requester, and making a corresponding response to the information access requester according to the access level; if the access authority level is zero, the information access requester is forbidden to access any information; if the access permission level is I level, allowing the information access requester to access unimportant information; and if the access permission level is level II, allowing the information access requester to access the important information and the non-important information. Therefore, access requests of all information access requesters can be met, and the reliability and safety of client information storage are greatly improved.

Description

Technical Field

[0001] The present invention relates to the field of information security technology, and in particular to a method and system for protecting customer information security. Background Art

[0002] In the related art, the customer information is usually directly stored in the information storage unit. When accessing the customer information, the information access requester only needs to meet the information access conditions to access all the customer information.

[0003] However, under normal circumstances, not all information accessors who meet the information access conditions can access all customer information, and some important information can only be opened to key personnel. Therefore, the above customer information storage method is not reliable and has low security. Summary of the invention

[0004] In order to solve the above technical problems, the present invention provides a customer information security protection method, which divides the customer information to be stored into important information and non-important information for isolated storage, thereby being able to meet the access requests of all information access requesters, greatly improving the reliability and security of customer information storage.

[0005] The technical solution adopted by the present invention is as follows:

[0006] A method for protecting customer information security comprises the following steps: S1, obtaining customer information to be saved; S2, dividing the customer information to be saved into important information and unimportant information and saving them in isolation; wherein the important information includes integrated information that integrates the important information and the unimportant information into the customer information to be saved; S3, after receiving an information access request, obtaining the access level of the information access requester, and making a corresponding response to the information access requester according to the access level; wherein, if the access permission level is level zero, the information access requester is prohibited from accessing any information; if the access permission level is level I, the information access requester is allowed to access the unimportant information; if the access permission level is level II, the information access requester is allowed to access the important information and the unimportant information.

[0007] In one embodiment of the present invention, step S2 specifically includes the following steps: S21, obtaining the information type of the customer information to be saved, and confirming the information type code of the customer information to be saved according to the information type; wherein, before saving various customer information, each customer information type is encoded, and the important information of each customer information is confirmed, and a corresponding important information statistical table is generated; S22, comparing the important information statistical table according to the information type code of the customer information to be saved, and obtaining the corresponding important information and the non-important information from the customer information to be saved; S23, isolating the important information and the non-important information for storage, wherein, when saving the important information, the important information is processed, and the corresponding integrated information is obtained during the information processing.

[0008] In one embodiment of the present invention, step S23 specifically includes the following steps: S231, randomly generating a set of ciphertext information; S232, inserting the ciphertext information into any position of the important information, repeating the insertion N times, and recording the position information of each insertion, the ciphertext information, and the information types of the important information and the non-important information to generate the integrated information.

[0009] In one embodiment of the present invention, step S3 specifically includes the following steps: S31, obtaining the position information, years of service information and the correlation coefficient with the customer information requested for access of the information access requester; S32, calculating the accessibility score of the information access requester based on the position information, the years of service information and the correlation coefficient; S33, obtaining the access level based on the accessibility score; wherein, if the accessibility score is less than a first preset value, the access level is level zero; if the accessibility score is greater than or equal to the first preset value and less than a second preset value, the access level is level I; if the accessibility score is greater than or equal to the second preset value, the access level is level II.

[0010] In one embodiment of the present invention, the job information includes the job level of the information access requester, and step S32 specifically includes calculating the accessibility score by the following formula:

[0011]

[0012] Among them, p is the accessibility score, α1 is the first weight coefficient, x1 is the position level, α2 is the second weight coefficient, x2 is the years of service information, α3 is the third weight coefficient, k is a constant greater than zero, and x3 is the association coefficient.

[0013] A customer information security protection system comprises: a first acquisition module, the first acquisition module is used to acquire customer information to be saved; an information saving module, the information saving module is used to divide the customer information to be saved into important information and non-important information and save them in isolation; wherein the important information includes integrated information that integrates the important information and the non-important information into the customer information to be saved; a second acquisition module, the second acquisition module is used to acquire the access level of the information access requester after receiving an information access request, and make a corresponding response to the information access requester according to the access level; wherein, if the access permission level is level zero, the information access requester is prohibited from accessing any information; if the access permission level is level I, the information access requester is allowed to access the non-important information; if the access permission level is level II, the information access requester is allowed to access the important information and the non-important information.

[0014] A computer device includes a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, the above-mentioned method for protecting customer information security is implemented.

[0015] A non-temporary computer-readable storage medium stores a computer program, which implements the above-mentioned customer information security protection method when executed by a processor.

[0016] Beneficial effects of the present invention:

[0017] The present invention divides the customer information to be stored into important information and non-important information for isolated storage, thereby being able to meet the access requests of all information access requesters and greatly improving the reliability and security of customer information storage. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] Figure 1 A flowchart of a method for protecting customer information security according to an embodiment of the present invention;

[0019] Figure 2 A block diagram of a customer information security protection system according to an embodiment of the present invention. DETAILED DESCRIPTION

[0020] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0021] like Figure 1As shown, the customer information security protection method of the embodiment of the present invention may include the following steps:

[0022] S1, obtain the customer information to be saved.

[0023] S2, dividing the customer information to be saved into important information and non-important information and saving them separately. The important information includes integrated information that integrates the important information and non-important information into the customer information to be saved.

[0024] In one embodiment of the present invention, step S2 specifically includes the following steps:

[0025] S21, obtaining the information type of the customer information to be stored, and confirming the information type code of the customer information to be stored according to the information type.

[0026] It should be noted that before saving various types of customer information, each type of customer information is coded, and the important information of each type of customer information is confirmed, and a corresponding important information statistical table is generated. In other words, the important information statistical table records the important information corresponding to each information type (information type coding). Therefore, after obtaining the information type of the customer information to be saved and confirming the information type coding of the customer information to be saved according to the information type, the following step S22 can be executed.

[0027] S22, comparing the important information statistics table according to the information type code of the customer information to be saved, and obtaining corresponding important information and non-important information from the customer information to be saved.

[0028] S23, separate and save the important information and the non-important information, wherein when saving the important information, the important information is processed, and corresponding integrated information is obtained during the information processing.

[0029] In one embodiment of the present invention, step S23 specifically includes the following steps:

[0030] S231, randomly generate a set of ciphertext information.

[0031] The method of randomly generating ciphertext information may be implemented using existing technologies. For example, a set of ciphertext information may be generated using a random generation function, which is not limited here.

[0032] S232, inserting the ciphertext information into any position of the important information, repeating the insertion N times, and recording the position information, ciphertext information, and information types of the important information and non-important information each time to generate integrated information.

[0033] Specifically, after obtaining the ciphertext information, the ciphertext information can be repeatedly inserted into any position of the important information N times, wherein each time the ciphertext information is inserted into any position of the important information, the position information of each insertion is recorded. Finally, the integrated information is generated according to the position information of each insertion, the ciphertext information, and the types of important information and non-important information. Among them, N is a positive integer and can be calibrated according to the actual situation.

[0034] S3, after receiving the information access request, obtaining the access level of the information access requester, and making a corresponding response to the information access requester according to the access level.

[0035] In one embodiment of the present invention, step S3 specifically includes the following steps:

[0036] S31, obtaining the position information, years of service information and correlation coefficient with the customer information requested for access of the information access requester.

[0037] It should be noted that the position information may include the position level of the information access requester, wherein the higher the position of the information access requester, the higher the position level. For example, if the position of the information access requester is an ordinary employee, the corresponding position level is 1; if the position of the information access requester is a team leader, the corresponding position level is 2; if the position of the information access requester is a supervisor, the corresponding position level is 3.

[0038] The correlation coefficient with the customer information requested for access indicates the degree of correlation between the information access requester and the customer information requested for access, wherein the higher the correlation between the information access requester and the customer information requested for access, the greater the corresponding correlation coefficient with the customer information requested for access. For example, if the information access requester is the direct contact person / direct person in charge of the customer of the customer information, the correlation coefficient is 1; if the information access requester is the indirect contact person / indirect person in charge of the customer of the customer information, the correlation coefficient is 1 / 2.

[0039] S32, calculating the accessibility score of the information access requester according to the position information, the years of employment information and the correlation coefficient.

[0040] In one embodiment of the present invention, the job information includes the job level of the information access requester, and step S31 specifically includes calculating the accessibility score by the following formula:

[0041]

[0042] Among them, p is the accessibility score, α1 is the first weight coefficient, x1 is the position level, α2 is the second weight coefficient, x2 is the years of service information, α3 is the third weight coefficient, k is a constant greater than zero, and x3 is the correlation coefficient.

[0043] S33, obtaining an access level according to the accessibility score. If the accessibility score is less than a first preset value, the access level is zero; if the accessibility score is greater than or equal to the first preset value and less than a second preset value, the access level is I; if the accessibility score is greater than or equal to the second preset value, the access level is II. The first preset value and the second preset value can be calibrated according to actual conditions.

[0044] In one embodiment of the present invention, if the access permission level is level zero, the information access requester is prohibited from accessing any information; if the access permission level is level I, the information access requester is allowed to access non-important information; if the access permission level is level II, the information access requester is allowed to access both important and non-important information.

[0045] It should be noted that when the access permission level of the information access requester is Level II, the ciphertext information inserted in the important information can be removed based on the location information recorded in the integrated information, and then the important information after the ciphertext information is removed can be integrated with the non-important information based on the types of important information and non-important information to obtain the complete customer information requested for access.

[0046] In summary, according to the customer information security protection method of the embodiment of the present invention, the customer information to be stored is obtained, and the customer information to be stored is divided into important information and non-important information and stored in isolation, wherein the important information includes integrated information that integrates important information and non-important information into the customer information to be stored, and after receiving the information access request, the access level of the information access requester is obtained, and a corresponding response is made to the information access requester according to the access level; wherein, if the access permission level is level zero, the information access requester is prohibited from accessing any information; if the access permission level is level I, the information access requester is allowed to access non-important information; if the access permission level is level II, the information access requester is allowed to access important information and non-important information. Thus, the customer information to be stored is divided into important information and non-important information for isolation and storage, so that the access requests of all information access requesters can be met, and the reliability and security of customer information storage are greatly improved.

[0047] Corresponding to the customer information security protection method of the above embodiment, the present invention also proposes a customer information security protection system.

[0048] like Figure 2 As shown, the customer information security protection system of the embodiment of the present invention may include: a first acquisition module 100, an information storage module 200 and a second acquisition module 300.

[0049] Among them, the first acquisition module 100 is used to obtain customer information to be saved; the information preservation module 200 is used to divide the customer information to be saved into important information and non-important information and store them in isolation; wherein, the important information includes integrated information that integrates important information and non-important information into customer information to be saved; the second acquisition module 300 is used to obtain the access level of the information access requester after receiving the information access request, and make a corresponding response to the information access requester according to the access level; wherein, if the access permission level is level zero, the information access requester is prohibited from accessing any information; if the access permission level is level I, the information access requester is allowed to access non-important information; if the access permission level is level II, the information access requester is allowed to access important information and non-important information.

[0050] In one embodiment of the present invention, the information saving module 200 specifically performs the following steps: S21, obtaining the information type of the customer information to be saved, and confirming the information type code of the customer information to be saved according to the information type; wherein, before saving various customer information, each customer information type is encoded, and the important information of each customer information is confirmed, and a corresponding important information statistical table is generated; S22, according to the information type code of the customer information to be saved, the important information statistical table is compared, and the corresponding important information and non-important information are obtained from the customer information to be saved; S23, the important information and non-important information are separated and saved, wherein, when saving the important information, the important information is processed, and the corresponding integrated information is obtained during the information processing.

[0051] In one embodiment of the present invention, the information storage module 200 specifically performs the following steps: S231, randomly generates a set of ciphertext information; S232, inserts the ciphertext information into any position of the important information, repeats the insertion N times, and records the position information, ciphertext information, and information types of important information and non-important information each time to generate integrated information.

[0052] In one embodiment of the present invention, the second acquisition module 300 specifically performs the following steps: S31, obtaining the position information, years of service information and the correlation coefficient with the customer information requested for access of the information access requester; S32, calculating the accessibility score of the information access requester based on the position information, years of service information and the correlation coefficient; S33, obtaining the access level based on the accessibility score; wherein, if the accessibility score is less than a first preset value, the access level is zero; if the accessibility score is greater than or equal to the first preset value and less than the second preset value, the access level is I; if the accessibility score is greater than or equal to the second preset value, the access level is II.

[0053] In one embodiment of the present invention, the job information includes the job level of the information access requester, and the second acquisition module 300 specifically calculates the accessibility score by the following formula:

[0054]

[0055] Among them, p is the accessibility score, α1 is the first weight coefficient, x1 is the position level, α2 is the second weight coefficient, x2 is the years of service information, α3 is the third weight coefficient, k is a constant greater than zero, and x3 is the correlation coefficient.

[0056] It should be noted that for details not disclosed in the customer information security protection system of the embodiment of the present invention, please refer to the details disclosed in the customer information security protection method of the embodiment of the present invention, and the specific details will not be described here.

[0057] According to the customer information security protection system of the embodiment of the present invention, the customer information to be saved is obtained through the first acquisition module, and the customer information to be saved is divided into important information and non-important information through the information storage module and stored in isolation, wherein the important information includes the integration information of the important information and the non-important information into the customer information to be saved, and after receiving the information access request, the second acquisition module obtains the access level of the information access requester, and responds to the information access requester according to the access level; wherein, if the access permission level is level zero, the information access requester is prohibited from accessing any information; if the access permission level is level I, the information access requester is allowed to access the non-important information; if the access permission level is level II, the information access requester is allowed to access the important information and the non-important information. Thus, the customer information to be saved is divided into important information and non-important information for isolation and storage, so that the access requests of all information access requesters can be met, which greatly improves the reliability and security of customer information storage.

[0058] Corresponding to the above embodiment, the present invention also provides a computer device.

[0059] The computer device of the embodiment of the present invention includes a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, the customer information security protection method of the above embodiment is implemented.

[0060] The computer device according to the embodiment of the present invention divides the customer information to be stored into important information and non-important information for isolated storage, thereby being able to meet the access requests of all information access requesters and greatly improving the reliability and security of customer information storage.

[0061] Corresponding to the above embodiment, the present invention also proposes a non-transitory computer-readable storage medium.

[0062] The non-transitory computer-readable storage medium of the embodiment of the present invention stores a computer program, and when the program is executed by a processor, the above-mentioned customer information security protection method is implemented.

[0063] According to the non-temporary computer-readable storage medium of the embodiment of the present invention, the customer information to be stored is divided into important information and non-important information for isolated storage, thereby being able to meet the access requests of all information access requesters, greatly improving the reliability and security of customer information storage.

[0064] In the description of the present invention, the terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Therefore, the features defined as "first" and "second" may explicitly or implicitly include one or more of the features. "Multiple" means two or more, unless otherwise clearly and specifically defined.

[0065] In the present invention, unless otherwise clearly specified and limited, the terms "installed", "connected", "connected", "fixed" and the like should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection or an indirect connection through an intermediate medium, it can be the internal connection of two elements or the interaction relationship between two elements. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0066] In the present invention, unless otherwise clearly specified and limited, a first feature being "above" or "below" a second feature may mean that the first and second features are in direct contact, or the first and second features are in indirect contact through an intermediate medium. Moreover, a first feature being "above", "above" or "above" a second feature may mean that the first feature is directly above or obliquely above the second feature, or simply means that the first feature is higher in level than the second feature. A first feature being "below", "below" or "below" a second feature may mean that the first feature is directly below or obliquely below the second feature, or simply means that the first feature is lower in level than the second feature.

[0067] In the description of this specification, the description with reference to the terms "one embodiment", "some embodiments", "example", "specific example", or "some examples" etc. means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present invention. In this specification, the schematic representations of the above terms do not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described may be combined in any one or more embodiments or examples in a suitable manner. In addition, those skilled in the art may combine and combine the different embodiments or examples described in this specification and the features of the different embodiments or examples, unless they are contradictory.

[0068] In addition, each functional unit in each embodiment of the present invention may be integrated into a processing module, or each unit may exist physically separately, or two or more units may be integrated into one module. The above-mentioned integrated module may be implemented in the form of hardware or in the form of a software functional module. If the integrated module is implemented in the form of a software functional module and sold or used as an independent product, it may also be stored in a computer-readable storage medium.

[0069] Although the embodiments of the present invention have been shown and described above, it is to be understood that the above embodiments are exemplary and are not to be construed as limitations of the present invention. A person skilled in the art may change, modify, replace and vary the above embodiments within the scope of the present invention.

Claims

1. A method for protecting customer information security, characterized in that: The following steps are involved: S1, obtain the customer information to be saved; S2, dividing the customer information to be saved into important information and non-important information and saving them separately; wherein the important information includes integrated information that integrates the important information and the non-important information into the customer information to be saved; S3, after receiving the information access request, obtain the access level of the information access requester, and make a corresponding response to the information access requester according to the access level; wherein, if the access permission level is level zero, the information access requester is prohibited from accessing any information; if the access permission level is level I, the information access requester is allowed to access the non-important information; if the access permission level is level II, the information access requester is allowed to access both the important information and the non-important information.

2. The method for protecting customer information security according to claim 1, characterized in that: Step S2 specifically includes the following steps: S21, obtaining the information type of the customer information to be saved, and confirming the information type code of the customer information to be saved according to the information type; wherein, before saving various customer information, each customer information type is encoded, and important information of each customer information is confirmed, and a corresponding important information statistical table is generated; S22, comparing the important information statistical table according to the information type code of the customer information to be saved, and obtaining the corresponding important information and the non-important information from the customer information to be saved; S23, the important information and the non-important information are stored separately, wherein when the important information is stored, the important information is processed, and the corresponding integrated information is obtained during the information processing.

3. The method for protecting customer information security according to claim 2, characterized in that: Step S23 specifically includes the following steps: S231, randomly generate a set of ciphertext information; S232, inserting the ciphertext information into any position of the important information, repeating the insertion N times, and recording the position information of each insertion, the ciphertext information, and the information types of the important information and the non-important information to generate the integrated information.

4. The method for protecting customer information security according to claim 1, characterized in that: Step S3 specifically includes the following steps: S31, obtaining the position information, years of service information and correlation coefficient between the information access requester and the client information requested for access; S32, calculating the accessibility score of the information access requester according to the position information, the employment years information and the correlation coefficient; S33, obtaining the access level according to the accessibility score; wherein, if the accessibility score is less than a first preset value, the access level is level zero; if the accessibility score is greater than or equal to the first preset value and less than a second preset value, the access level is level I; if the accessibility score is greater than or equal to the second preset value, the access level is level II.

5. The method for protecting customer information security according to claim 4, characterized in that: The job information includes the job level of the information access requester. Step S32 specifically includes calculating the accessibility score by the following formula: Among them, p is the accessibility score, α1 is the first weight coefficient, x1 is the position level, α2 is the second weight coefficient, x2 is the years of service information, α3 is the third weight coefficient, k is a constant greater than zero, and x3 is the association coefficient.

6. A customer information security protection system, characterized in that: include: A first acquisition module, the first acquisition module is used to acquire the customer information to be saved; An information storage module, the information storage module is used to divide the customer information to be stored into important information and non-important information and store them separately; wherein the important information includes integrated information that integrates the important information and the non-important information into the customer information to be stored; A second acquisition module, the second acquisition module is used to obtain the access level of the information access requester after receiving the information access request, and make a corresponding response to the information access requester according to the access level; wherein, if the access permission level is level zero, the information access requester is prohibited from accessing any information; if the access permission level is level I, the information access requester is allowed to access the non-important information; if the access permission level is level II, the information access requester is allowed to access both the important information and the non-important information.

7. A computer device comprising a memory, a processor and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, it implements the customer information security protection method according to any one of claims 1-5.

8. A non-transitory computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the customer information security protection method according to any one of claims 1 to 5 is implemented.

Images