Information processing method and device, server, client and storage medium

Abstract

The invention relates to the technical field of data security, in particular to an information processing method and device, a server side, a client side and a storage medium, and the method is applied to the server side and comprises the steps that after a data request sent by the client side is received, the data request is verified based on verification information in the data request; wherein the verification information is generated by the client based on an identifier of the client, an object identifier corresponding to the data request and a session identifier corresponding to the data request; after the data request passes verification, determining an information type and target information corresponding to the data request; performing desensitization processing on the target information based on a desensitization mode corresponding to the information type to obtain desensitization information, sending the desensitization information and the information type to the client, and after the client displays the desensitization information, responding to a recovery instruction for the desensitization information, and sending a key field in the recovery instruction to the server; and whether the desensitized information is recovered or not is determined based on the key field, so that the information security is improved.

Description

Technical Field

[0001] The present application relates to the field of data security technology, and specifically to an information processing method, device, server, client and storage medium. Background Art

[0002] In the era of the Internet and big data, personal information protection is the foundation of digital social governance and digital economic development, affecting the vital interests of the public, and also related to the reasonable use and standardized development of personal information by enterprises. The processing of personal information must not only meet the requirements of legality, legitimacy, and necessity, but also have clear and reasonable purposes. At the same time, it must be done in a way that has the least impact on personal rights and interests, limited to the minimum scope of achieving the purpose of processing, follow the principles of openness and transparency, ensure the accuracy and integrity of personal information, and take necessary measures to ensure the security of personal information. As the most basic requirements for personal information processing activities, these principles run through all aspects of personal information processing, such as collection, storage, use, processing, transmission, provision, disclosure, and deletion. For example, in the process of bank counter processing, the security of personal information needs to be guaranteed.

[0003] In the related art, a unified encryption method is used for some data in the data display process. However, the counter is deployed at the front end, there are many people interacting with the counter, and the counter involves the display of various types of data, so this method has poor security. Summary of the invention

[0004] The embodiments of the present application provide an information processing method, device, server, client and storage medium to improve information security.

[0005] In a first aspect, the present application provides a first information processing method, which is applied to a server, and the method comprises:

[0006] After receiving the data request sent by the client, verify the data request based on verification information in the data request; wherein the verification information is generated by the client based on the client identifier, the object identifier corresponding to the data request, and the session identifier corresponding to the data request;

[0007] After the data request is verified, determining the information type and target information corresponding to the data request;

[0008] Desensitizing the target information based on the desensitizing method corresponding to the information type to obtain desensitized information, and sending the desensitized information and the information type to the client, so that after the client displays the desensitized information, in response to a recovery instruction for the desensitized information corresponding to the target information type, the client sends the key fields in the recovery instruction to the server;

[0009] Determine whether to restore the desensitized information based on the key field.

[0010] In the above scheme, when information display is needed, the client first generates verification information based on the client's identifier, the object identifier corresponding to the data request, and the session identifier corresponding to the data request. When the server receives the data request, it first verifies the data request based on the verification information to ensure the reliability of the request; after determining that the request is reliable, the information type and target information corresponding to the data request are determined. Each information type has its corresponding desensitization method to match the requirements of different security levels. The target information is desensitized based on the desensitization method corresponding to the information type of the data request to improve the desensitization security. In addition, the server sends the information type to the client. When the user needs to view the original target information, the client makes an initial judgment based on the information type to determine whether the information type is a type that can be displayed in plain text; in order to ensure that the user has the authority to view the original target information, the client obtains the key fields in the recovery instruction, and makes an authority judgment through the server to ensure the safe display of information.

[0011] In some optional implementations, the information types include key certificate types, customer identification information types, customer contact information types, customer account information types, and customer financial information types;

[0012] Among them, the desensitization method corresponding to the key certificate class is complete desensitization; the desensitization method corresponding to the customer identification information class, customer contact information class, customer account information class and customer financial information class is partial desensitization.

[0013] In some optional implementations, desensitizing the target information based on a desensitizing method corresponding to the information type includes:

[0014] If the desensitization method corresponding to the information type is complete desensitization, determining the desensitization characters corresponding to the information type, and performing desensitization processing on the target information based on the desensitization characters;

[0015] If the desensitization method corresponding to the information type is partial desensitization, the number of desensitization digits and desensitization characters corresponding to the information type are determined, and the number of desensitization digits of the target information is desensitized based on the desensitization characters.

[0016] In some optional implementations, after determining whether to restore the desensitized information based on the key field, the method further includes:

[0017] If it is determined to restore the desensitized information, then determining the target duration corresponding to the information type;

[0018] The target information and the target duration are sent to the client, so that the client displays the target information within the target duration and displays the desensitized information after the target duration.

[0019] The above scheme sets the target time corresponding to different information types, and the server sends the target time corresponding to the above information type together with the target information to the client; the client only displays the target information within the target time, and performs desensitized display after the target time, thereby taking into account the user's need to view the original target information and the security of the information.

[0020] Some optional implementations also include:

[0021] In response to the encryption request sent by the client, generating a private key and a public key based on the object identifier corresponding to the encryption request, the organization number of the client and the timestamp; wherein the encryption request is triggered by the client after receiving the information modification instruction;

[0022] Sending the public key to the client, so that the client encrypts the modification information in the information modification instruction based on the public key to obtain encrypted information, and sends the encrypted information to the server;

[0023] The encrypted information is decrypted based on the private key, and information adjustment is performed based on the decrypted modified information.

[0024] The above scheme generates a public-private key pair based on the object identifier corresponding to the encryption request, the client's organization number and the timestamp to ensure the uniqueness of the public-private key pair; by asymmetrically encrypting the modified information, it reduces the occurrence of leakage during the transmission process or on the front end.

[0025] In a second aspect, an embodiment of the present application provides another information processing method, which is applied to a client, and the method includes:

[0026] Generate verification information based on the identifier of the client, the object identifier corresponding to the data request, and the session identifier corresponding to the data request;

[0027] Sending a data request carrying the verification information to a server, so that the server, based on the verification information, verifies the data request and determines the information type and target information corresponding to the data request; desensitizing the target information based on a desensitizing method corresponding to the information type to obtain desensitized information;

[0028] Receiving the desensitized information and the information type sent by the server;

[0029] The desensitized information is displayed, and in response to a recovery instruction for the desensitized information corresponding to the target information type, a key field in the recovery instruction is sent to the server, so that the server determines whether to restore the desensitized information based on the key field.

[0030] In some optional implementations, after displaying the desensitized information, the method further includes:

[0031] If the target duration and the target information are received, the target information is displayed within the target duration, and the desensitized information is displayed after the target duration; wherein the target duration is determined by the server after determining to restore the desensitized information.

[0032] Some optional implementations also include:

[0033] After receiving the information modification instruction, an encryption request is sent to the server, so that the server generates a private key and a public key based on the object identifier corresponding to the encryption request, the organization number of the client and the timestamp;

[0034] After receiving the public key sent by the server, encrypting the modification information in the information modification instruction based on the public key to obtain encrypted information;

[0035] The encrypted information is sent to the server, so that the server decrypts the encrypted information based on the private key and adjusts the information based on the modified information after decryption.

[0036] In a third aspect, an embodiment of the present application provides an information processing device, which is applied to a server, and the device includes:

[0037] A verification module, configured to verify the data request after receiving the data request sent by the client based on verification information in the data request; wherein the verification information is generated by the client based on the client identifier, the object identifier corresponding to the data request, and the session identifier corresponding to the data request;

[0038] An information determination module, used to determine the information type and target information corresponding to the data request after the data request is verified;

[0039] A desensitizing module, configured to perform desensitizing processing on the target information based on a desensitizing method corresponding to the information type to obtain desensitized information, and send the desensitized information and the information type to the client, so that after the client displays the desensitized information, in response to a recovery instruction for the desensitized information corresponding to the target information type, the client sends a key field in the recovery instruction to the server;

[0040] The desensitizing module is also used to determine whether to restore the desensitized information based on the key field.

[0041] In some optional implementations, the information types include key certificate types, customer identification information types, customer contact information types, customer account information types, and customer financial information types;

[0042] Among them, the desensitization method corresponding to the key certificate class is complete desensitization; the desensitization method corresponding to the customer identification information class, customer contact information class, customer account information class and customer financial information class is partial desensitization.

[0043] In some optional implementations, the desensitization module is specifically used to:

[0044] If the desensitization method corresponding to the information type is complete desensitization, determining the desensitization characters corresponding to the information type, and performing desensitization processing on the target information based on the desensitization characters;

[0045] If the desensitization method corresponding to the information type is partial desensitization, the number of desensitization digits and desensitization characters corresponding to the information type are determined, and the number of desensitization digits of the target information is desensitized based on the desensitization characters.

[0046] In some optional implementations, after determining whether to restore the desensitized information based on the key field, the desensitizing module is further used to:

[0047] If it is determined to restore the desensitized information, then determining the target duration corresponding to the information type;

[0048] The target information and the target duration are sent to the client, so that the client displays the target information within the target duration and displays the desensitized information after the target duration.

[0049] Some optional implementations further include a first encryption module, configured to:

[0050] In response to the encryption request sent by the client, generating a private key and a public key based on the object identifier corresponding to the encryption request, the organization number of the client and the timestamp; wherein the encryption request is triggered by the client after receiving the information modification instruction;

[0051] Sending the public key to the client, so that the client encrypts the modification information in the information modification instruction based on the public key to obtain encrypted information, and sends the encrypted information to the server;

[0052] The encrypted information is decrypted based on the private key, and information adjustment is performed based on the decrypted modified information.

[0053] In a fourth aspect, an embodiment of the present application provides another information processing device, applied to a client, the device comprising:

[0054] A verification information generation module, used to generate verification information based on the identifier of the client, the object identifier corresponding to the data request, and the session identifier corresponding to the data request;

[0055] A request module is used to send a data request carrying the verification information to a server, so that the server can determine the information type and target information corresponding to the data request after verifying the data request based on the verification information; perform desensitization processing on the target information based on a desensitization method corresponding to the information type to obtain desensitized information;

[0056] A receiving module, used for receiving the desensitized information and the information type sent by the server;

[0057] The request module is also used to display the desensitized information, and in response to a recovery instruction for the desensitized information corresponding to the target information type, send the key fields in the recovery instruction to the server, so that the server determines whether to restore the desensitized information based on the key fields.

[0058] In some optional implementation modes, the receiving module is further configured to:

[0059] If the target duration and the target information are received, the target information is displayed within the target duration, and the desensitized information is displayed after the target duration; wherein the target duration is determined by the server after determining to restore the desensitized information.

[0060] Some optional implementations further include a second encryption module, configured to:

[0061] After receiving the information modification instruction, an encryption request is sent to the server, so that the server generates a private key and a public key based on the object identifier corresponding to the encryption request, the organization number of the client and the timestamp;

[0062] After receiving the public key sent by the server, encrypting the modification information in the information modification instruction based on the public key to obtain encrypted information;

[0063] The encrypted information is sent to the server, so that the server decrypts the encrypted information based on the private key and adjusts the information based on the modified information after decryption.

[0064] In a fifth aspect, an embodiment of the present application provides a server, comprising at least one processor and at least one memory, wherein the memory stores a computer program, and when the program is executed by the processor, the processor executes any method described in the first aspect above.

[0065] In a sixth aspect, an embodiment of the present application provides a client, comprising at least one processor and at least one memory, wherein the memory stores a computer program, and when the program is executed by the processor, the processor executes any method described in the second aspect above.

[0066] In a seventh aspect, an embodiment of the present application provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method described in any one of the first aspect or the second aspect is implemented.

[0067] In an eighth aspect, an embodiment of the present application provides a computer program product comprising computer executable instructions, wherein the computer executable instructions are used to enable a computer to execute any of the methods described in the first aspect or the second aspect above. BRIEF DESCRIPTION OF THE DRAWINGS

[0068] Figure 1 A schematic diagram of an application scenario provided for an embodiment of the present application;

[0069] Figure 2 An interactive flow chart of the first information processing method provided in an embodiment of the present application;

[0070] Figure 3 An interactive flow chart of a second information processing method provided in an embodiment of the present application;

[0071] Figure 4 An interactive flow chart of a third information processing method provided in an embodiment of the present application;

[0072] Figure 5 A schematic diagram of a flow chart of a first information processing method provided in an embodiment of the present application;

[0073] Figure 6 A schematic diagram of a second information processing method provided in an embodiment of the present application;

[0074] Figure 7 A schematic diagram of the structure of a first information processing device provided in an embodiment of the present application;

[0075] Figure 8 A schematic diagram of the structure of a second information processing device provided in an embodiment of the present application;

[0076] Fig. 9A schematic diagram of the structure of the server provided in the embodiment of the present application;

[0077] Fig.10 A schematic diagram of the structure of the client provided in an embodiment of the present application. DETAILED DESCRIPTION

[0078] In order to make the purpose, technical scheme and advantages of the present application clearer, the technical scheme in the embodiment of the present application will be clearly and completely described below in conjunction with the drawings in the embodiment of the present application. Obviously, the described embodiment is only a part of the embodiment of the present application, rather than all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in the field without making creative work are within the scope of protection of the present application. In the absence of conflict, the embodiments in the present application and the features in the embodiments can be arbitrarily combined with each other. In addition, although the logical order is shown in the flow chart, in some cases, the steps shown or described can be performed in an order different from that here.

[0079] The terms "first" and "second" in the specification and claims of the present application and the above-mentioned drawings are used to distinguish different objects, rather than to describe a specific order. In addition, the term "comprising" and any of their variations are intended to cover non-exclusive protection. For example, a process, method, system, product or device comprising a series of steps or units is not limited to the listed steps or units, but optionally also includes steps or units that are not listed, or optionally also includes other steps or units inherent to these processes, methods, products or devices. "Multiple" in the present application can mean at least two, for example, two, three or more, and the embodiments of the present application are not limited.

[0080] The following is a description of exemplary embodiments of the present application in conjunction with the accompanying drawings, including various details of the embodiments of the present application to facilitate understanding, which should be considered as merely exemplary. Therefore, those of ordinary skill in the art should recognize that various changes and modifications can be made to the embodiments described herein without departing from the scope of the present application. Similarly, for the sake of clarity and conciseness, the description of well-known functions and structures is omitted in the following description. It should be noted that in the embodiments of the present application, certain software, components, models and other existing solutions in the industry may be mentioned, which should be considered as exemplary, and their purpose is only to illustrate the feasibility of the implementation of the technical solution of the present application, but it does not mean that the applicant has or will necessarily use the solution.

[0081] In the technical solution of this application, the acquisition, transmission, storage, and use of data are in compliance with the requirements of relevant national laws and regulations.

[0082] Before introducing the information processing method provided by the embodiment of the present application, in order to facilitate understanding, the technical background of the embodiment of the present application is first introduced in detail.

[0083] In the era of the Internet and big data, personal information protection is the foundation of digital social governance and digital economic development, affecting the vital interests of the public, and also related to the reasonable use and standardized development of personal information by enterprises. The processing of personal information must not only meet the requirements of legality, legitimacy, and necessity, but also have clear and reasonable purposes. At the same time, it must be done in a way that has the least impact on personal rights and interests, limited to the minimum scope of achieving the purpose of processing, follow the principles of openness and transparency, ensure the accuracy and integrity of personal information, and take necessary measures to ensure the security of personal information. As the most basic requirements for personal information processing activities, these principles run through all aspects of personal information processing, such as collection, storage, use, processing, transmission, provision, disclosure, and deletion. For example, in the process of bank counter processing, the security of personal information needs to be guaranteed.

[0084] In the related art, a unified encryption method is used for some data in the data display process. However, the counter is deployed at the front end, there are many people interacting with the counter, and the counter involves the display of various types of data, so this method has poor security.

[0085] In view of this, an embodiment of the present application proposes an information processing method, device, server, client and storage medium, which is applied to the server, including: after receiving a data request sent by a client, verifying the data request based on verification information in the data request; wherein the verification information is generated by the client based on the client's identifier, the object identifier corresponding to the data request and the session identifier corresponding to the data request; after the data request is verified, determining the information type and target information corresponding to the data request; desensitizing the target information based on the desensitizing method corresponding to the information type to obtain desensitized information, and sending the desensitized information and the information type to the client, so that after the client displays the desensitized information, in response to a recovery instruction for the desensitized information corresponding to the target information type, the key fields in the recovery instruction are sent to the server; determining whether to restore the desensitized information based on the key field.

[0086] In the above scheme, when information display is needed, the client first generates verification information based on the client's identifier, the object identifier corresponding to the data request, and the session identifier corresponding to the data request. When the server receives the data request, it first verifies the data request based on the verification information to ensure the reliability of the request; after determining that the request is reliable, the information type and target information corresponding to the data request are determined. Each information type has its corresponding desensitization method to match the requirements of different security levels. The target information is desensitized based on the desensitization method corresponding to the information type of the data request to improve the desensitization security. In addition, the server sends the information type to the client. When the user needs to view the original target information, the client makes an initial judgment based on the information type to determine whether the information type is a type that can be displayed in plain text; in order to ensure that the user has the authority to view the original target information, the client obtains the key fields in the recovery instruction, and makes an authority judgment through the server to ensure the safe display of information.

[0087] See also Figure 1 As shown, an application scenario provided by an embodiment of the present application includes a server 100 and a client 200;

[0088] For the query scenario, the client 200 generates verification information based on the client identifier, the object identifier corresponding to the data request, and the session identifier corresponding to the data request;

[0089] The client 200 sends a data request carrying the verification information to the server 100;

[0090] The server 100 verifies the data request based on the verification information in the data request;

[0091] After verifying the data request, the server 100 determines the information type and target information corresponding to the data request; desensitizes the target information based on the desensitization method corresponding to the information type to obtain desensitized information;

[0092] The server 100 sends the desensitized information and the information type to the client 200;

[0093] After displaying the desensitized information, the client 200 responds to a recovery instruction for the desensitized information corresponding to the target information type and sends the key fields in the recovery instruction to the server 100;

[0094] The server 100 determines whether to restore the desensitized information based on the key field.

[0095] The above application scenarios are only examples of application scenarios for implementing the embodiments of the present application, and the embodiments of the present application are not limited to the above application scenarios.

[0096] The following will be combined with the accompanying drawings and specific embodiments to describe in detail the technical solution of the present application and how the technical solution of the present application solves the above technical problems. The following specific embodiments can be combined with each other, and the same or similar concepts or processes may not be repeated in some embodiments.

[0097] Figure 2 The interactive flow chart of the first information processing method provided in the embodiment of the present application is as follows: Figure 2 As shown, the following steps are included:

[0098] Step S201: The client generates verification information based on the client identifier, the object identifier corresponding to the data request, and the session identifier corresponding to the data request.

[0099] In the implementation, for the query scenario, the client needs to send a data request to the server to request the queried data, and the data request may be forged or tampered with. Based on this, this embodiment adds a trusted security check for the request;

[0100] Since the client identifier can uniquely identify the client, the object identifier corresponding to the data request can uniquely identify the requested object, and the session identifier corresponding to the data request can uniquely identify the session, the verification information generated based on these information can perform comprehensive trusted security verification and improve information security.

[0101] Exemplarily, the above-mentioned information is mixed in multiple dimensions to generate a security factor, and message authentication codes (MAC) are calculated based on the security factor to obtain verification information.

[0102] Step S202: The client sends a data request carrying the verification information to the server.

[0103] This embodiment does not specifically limit the method for sending data requests. For example, if the client and the server are in the same bank system, the client sends the data request to the server through the intranet; if the client and the server are in different bank systems, the client sends the data request to the server through the extranet, etc.

[0104] Step S203: The server verifies the data request based on the verification information in the data request.

[0105] During implementation, the client generates verification information based on multiple pieces of information corresponding to the data request; correspondingly, the server verifies the reliability of the data request based on the verification information.

[0106] Exemplarily, the server performs MAC verification in response to the client obtaining verification information through MAC calculation.

[0107] Step S204: After verifying the data request, the server determines the information type and target information corresponding to the data request.

[0108] In practice, if all information is desensitized in the same way, it will not only be inflexible, but also have low security for some important information;

[0109] Based on this, in addition to determining the target information requested by the client, this embodiment also determines its information type. Each information type has its corresponding desensitization method. The desensitization methods of some information types are the same, while the desensitization methods of some information types are different.

[0110] Step S205: The server performs desensitization processing on the target information based on the desensitization method corresponding to the information type to obtain desensitized information.

[0111] As mentioned above, each information type has its corresponding desensitization method. The desensitization methods of some information types are the same, while the desensitization methods of some information types are different.

[0112] Based on this, this embodiment performs desensitization processing on the target information based on the desensitization method corresponding to the information type determined above, and obtains desensitized information that matches the security level required by the information type.

[0113] Step S206: The server sends the desensitized information and the information type to the client.

[0114] During implementation, the server performs desensitization processing and the client performs desensitized display. However, in some scenarios, users need to view the original target information. Based on this, this embodiment provides a process for viewing the original target information for some information types.

[0115] In order to ensure the authority judgment of the target information to be viewed subsequently, the server needs to send the information type to the client first; when the user needs to view the target information, the client makes an initial judgment based on the information type to determine whether the information type is a type that can be displayed in plain text.

[0116] Step S207: The client displays the desensitized information.

[0117] This embodiment does not specifically limit the manner in which the client performs desensitized display, such as displaying through a display screen of the client.

[0118] Step S208: The client responds to the recovery instruction of the desensitized information corresponding to the target desensitization method and sends the key fields in the recovery instruction to the server.

[0119] As described above, in order to ensure viewing security, this embodiment performs a permission judgment for viewing the original target information, and sends the information type to the client through the server; when the user has a need to view the original target information, the client performs an initial judgment based on the information type to determine whether the information type is a type that can be displayed in plain text;

[0120] In addition, in order to ensure that the user has the authority to view the original target information, the key fields in the recovery instruction are obtained, and the server determines whether the user has the authority to view the original target information to ensure the safe display of the information.

[0121] Step S209: The server determines whether to restore the target desensitized information based on the key field.

[0122] During implementation, in order to ensure that the user has the authority to view the original target information, relevant recovery information is set on the server, such as desensitized plain text characters of consecutive digits, or information set by the user when entering the information into the server; by comparing the above key fields with the recovery information, it can be accurately determined whether to restore the target desensitized information.

[0123] In the above scheme, when information display is needed, the client first generates verification information based on the client's identifier, the object identifier corresponding to the data request, and the session identifier corresponding to the data request. When the server receives the data request, it first verifies the data request based on the verification information to ensure the reliability of the request; after determining that the request is reliable, the information type and target information corresponding to the data request are determined. Each information type has its corresponding desensitization method to match the requirements of different security levels. The target information is desensitized based on the desensitization method corresponding to the information type of the data request to improve the desensitization security. In addition, the server sends the information type to the client. When the user needs to view the original target information, the client makes an initial judgment based on the information type to determine whether the information type is a type that can be displayed in plain text; in order to ensure that the user has the authority to view the original target information, the client obtains the key fields in the recovery instruction, and makes an authority judgment through the server to ensure the safe display of information.

[0124] In some optional implementations, the information types include key certificate types, customer identification information types, customer contact information types, customer account information types, and customer financial information types;

[0125] Among them, the desensitization method corresponding to the key certificate class is complete desensitization; the desensitization method corresponding to the customer identification information class, customer contact information class, customer account information class and customer financial information class is partial desensitization.

[0126] In this embodiment, for the bank counter scenario, several information types are set, including key certificate type, customer identification information type, customer contact information type, customer account information type, and customer financial information type;

[0127] Among them, the key certificate class involves some verification operations, which require a high degree of security. The corresponding desensitization method is complete desensitization, and the plain text is not displayed in any scenario, which ensures the security of the verification process and thus ensures the reliability of other operations;

[0128] For identification information, customer contact information, customer account information, and customer financial information, the security requirements are low, and partial desensitization is performed to make viewing more convenient.

[0129] In some optional implementation manners, the above step S205 may be implemented by but not limited to the following methods:

[0130] If the desensitization method corresponding to the information type is complete desensitization, determining the desensitization characters corresponding to the information type, and performing desensitization processing on the target information based on the desensitization characters;

[0131] If the desensitization method corresponding to the information type is partial desensitization, the number of desensitization digits and desensitization characters corresponding to the information type are determined, and the number of desensitization digits of the target information is desensitized based on the desensitization characters.

[0132] In the implementation, for the desensitization method of complete desensitization, the entire information is not displayed in plain text. Based on this, this embodiment determines the desensitization character corresponding to the information type, and desensitizes all characters of the target information based on the desensitization character; wherein the desensitization characters corresponding to each digit in the target information can be the same or different;

[0133] For the partial desensitization method, some characters are displayed in plain text, and some characters need to be desensitized; based on this, this embodiment determines the desensitized characters and the number of desensitized digits corresponding to the information type, and desensitizes the desensitized characters of the target information based on the desensitized characters.

[0134] This embodiment does not limit the specific implementation method of determining the number of desensitized digits of partially desensitized information types. The number of desensitized digits can be directly determined based on the corresponding relationship between each subtype in the information type and the number of desensitized digits; or, the initial number of digits is determined based on the corresponding relationship between each subtype in the information type and the number of desensitized digits, and the initial number of digits is adjusted based on the number of information corresponding to the data request to obtain the final number of desensitized digits. For example, the number of desensitized digits for a single ID card query (the data request corresponds to one piece of information) is the number of digits other than the first 4 digits and the last 4 digits; the number of desensitized digits for a batch ID card query (the data request corresponds to multiple pieces of information) is the number of digits other than the first 1 digit and the last 1 digit.

[0135] The above desensitization digits are only exemplary and can be set according to actual scenarios during implementation.

[0136] Figure 3 The interactive flow chart of the second information processing method provided in the embodiment of the present application is as follows: Figure 3 As shown, the following steps are included:

[0137] Step S301: The client generates verification information based on the client identifier, the object identifier corresponding to the data request, and the session identifier corresponding to the data request.

[0138] Step S302: The client sends a data request carrying the verification information to the server.

[0139] Step S303: The server verifies the data request based on the verification information in the data request.

[0140] Step S304: After verifying the data request, the server determines the information type and target information corresponding to the data request.

[0141] Step S305: The server performs desensitization processing on the target information based on the desensitization method corresponding to the information type to obtain desensitized information.

[0142] Step S306: The server sends the desensitized information and the information type to the client.

[0143] Step S307: The client displays the desensitized information.

[0144] Step S308: The client responds to the recovery instruction of the desensitized information corresponding to the target desensitization method and sends the key fields in the recovery instruction to the server.

[0145] Step S309: The server determines whether to restore the target desensitized information based on the key field.

[0146] The specific implementation of steps S301 to S309 can refer to the above embodiment and will not be described again here.

[0147] Step S310: If the server determines to restore the desensitized information, it determines the target duration corresponding to the information type.

[0148] Step S311: The server sends the target information and the target duration to the client.

[0149] Step S312: The client displays the target information within the target duration, and displays the desensitized information after the target duration.

[0150] In this embodiment, the server determines whether to restore the desensitized information. If the desensitized information is restored, it is sent directly to the client for plain text display, which poses a risk of data leakage. Based on this, this embodiment also determines the target duration corresponding to the information type; by sending the target information and the target duration to the client; the client only displays the target information within the target duration, and performs desensitized display again after the target duration.

[0151] The above scheme sets the target time corresponding to different information types, and the server sends the target time corresponding to the above information type together with the target information to the client; the client only displays the target information within the target time, and performs desensitized display after the target time, thereby taking into account the user's need to view the original target information and the security of the information.

[0152] Figure 4 The interactive flow chart of the third information processing method provided in the embodiment of the present application is as follows: Figure 4 As shown, the following steps are included:

[0153] Step S401: The client generates verification information based on the client identifier, the object identifier corresponding to the data request, and the session identifier corresponding to the data request.

[0154] Step S402: The client sends a data request carrying the verification information to the server.

[0155] Step S403: The server verifies the data request based on the verification information in the data request.

[0156] Step S404: After verifying the data request, the server determines the information type and target information corresponding to the data request.

[0157] Step S405: The server performs desensitization processing on the target information based on the desensitization method corresponding to the information type to obtain desensitized information.

[0158] Step S406: The server sends the desensitized information and the information type to the client.

[0159] Step S407: The client displays the desensitized information.

[0160] The specific implementation of steps S401 to S407 can refer to the above embodiment and will not be described again here.

[0161] Step S408: After receiving the information modification instruction, the client sends an encryption request to the server.

[0162] In implementation, after the client displays the desensitized information, the user can modify the information (modify the personal information stored in the server), triggering the information modification instruction;

[0163] Since there may be a risk of information leakage during data transmission when the information on the server needs to be modified, this embodiment does not send the modification information directly to the server after receiving the information modification instruction, but sends an encryption request to the server.

[0164] Step S409: The server generates a private key and a public key based on the object identifier corresponding to the encryption request, the organization number of the client, and the timestamp.

[0165] During implementation, after receiving the encryption request, the server generates a public-private key pair based on the object identifier corresponding to the encryption request (such as the user number), the client's organization number and the timestamp to ensure the uniqueness of the public-private key pair.

[0166] Step S410: The server sends the public key to the client.

[0167] Step S411: the client encrypts the modification information in the information modification instruction based on the public key to obtain encrypted information.

[0168] The server sends the public key to the client, and the client asymmetrically encrypts the modification information in the information modification instruction based on the public key to obtain encrypted information, thereby reducing the occurrence of leakage during the transmission process or at the front end.

[0169] Step S412: The client sends the encrypted information to the server.

[0170] Step S413: The server decrypts the encrypted information based on the private key, and adjusts the information based on the decrypted modified information.

[0171] In this embodiment, after receiving the encrypted information, the server can decrypt it using the corresponding private key to obtain the modified information, thereby adjusting the information.

[0172] Figure 4 The embodiment does not combine recovery-related content. During implementation, recovery-related steps may be added after the above step S407. The implementation of the recovery-related steps may refer to the above embodiment and will not be repeated here.

[0173] The above scheme generates a public-private key pair based on the object identifier corresponding to the encryption request, the client's organization number and the timestamp to ensure the uniqueness of the public-private key pair; by asymmetrically encrypting the modified information, it reduces the occurrence of leakage during the transmission process or on the front end.

[0174] In the embodiment of the present application, the information processing method executed by the server is as follows: Figure 5 As shown, the following steps are included:

[0175] Step S501: after receiving a data request sent by a client, verify the data request based on verification information in the data request; wherein the verification information is generated by the client based on the client identifier, the object identifier corresponding to the data request, and the session identifier corresponding to the data request;

[0176] Step S502: after the data request is verified, determining the information type and target information corresponding to the data request;

[0177] Step S503: Desensitizing the target information based on the desensitizing method corresponding to the information type to obtain desensitized information, and sending the desensitized information and the information type to the client, so that after the client displays the desensitized information, in response to a recovery instruction for the desensitized information corresponding to the target information type, the client sends the key fields in the recovery instruction to the server;

[0178] Step S504: Determine whether to restore the desensitized information based on the key field.

[0179] In some optional implementations, the information types include key certificate types, customer identification information types, customer contact information types, customer account information types, and customer financial information types;

[0180] Among them, the desensitization method corresponding to the key certificate class is complete desensitization; the desensitization method corresponding to the customer identification information class, customer contact information class, customer account information class and customer financial information class is partial desensitization.

[0181] In some optional implementations, desensitizing the target information based on a desensitizing method corresponding to the information type includes:

[0182] If the desensitization method corresponding to the information type is complete desensitization, determining the desensitization characters corresponding to the information type, and performing desensitization processing on the target information based on the desensitization characters;

[0183] If the desensitization method corresponding to the information type is partial desensitization, the number of desensitization digits and desensitization characters corresponding to the information type are determined, and the number of desensitization digits of the target information is desensitized based on the desensitization characters.

[0184] In some optional implementations, after determining whether to restore the desensitized information based on the key field, the method further includes:

[0185] If it is determined to restore the desensitized information, then determining the target duration corresponding to the information type;

[0186] The target information and the target duration are sent to the client, so that the client displays the target information within the target duration and displays the desensitized information after the target duration.

[0187] Some optional implementations also include:

[0188] In response to the encryption request sent by the client, generating a private key and a public key based on the object identifier corresponding to the encryption request, the organization number of the client and the timestamp; wherein the encryption request is triggered by the client after receiving the information modification instruction;

[0189] Sending the public key to the client, so that the client encrypts the modification information in the information modification instruction based on the public key to obtain encrypted information, and sends the encrypted information to the server;

[0190] The encrypted information is decrypted based on the private key, and information adjustment is performed based on the decrypted modified information.

[0191] In the embodiment of the present application, the information processing method executed by the client is as follows: Figure 6 As shown, the following steps are included:

[0192] Step S601: Generate verification information based on the client identifier, the object identifier corresponding to the data request, and the session identifier corresponding to the data request;

[0193] Step S602: Sending a data request carrying the verification information to the server, so that the server verifies the data request based on the verification information, and then determines the information type and target information corresponding to the data request; desensitizes the target information based on the desensitization method corresponding to the information type to obtain desensitized information;

[0194] Step S603: receiving the desensitized information and the information type sent by the server;

[0195] Step S604: Display the desensitized information, and in response to a recovery instruction for the desensitized information corresponding to the target information type, send the key fields in the recovery instruction to the server, so that the server determines whether to restore the desensitized information based on the key fields.

[0196] In some optional implementations, after displaying the desensitized information, the method further includes:

[0197] If the target duration and the target information are received, the target information is displayed within the target duration, and the desensitized information is displayed after the target duration; wherein the target duration is determined by the server after determining to restore the desensitized information.

[0198] Some optional implementations also include:

[0199] After receiving the information modification instruction, an encryption request is sent to the server, so that the server generates a private key and a public key based on the object identifier corresponding to the encryption request, the organization number of the client and the timestamp;

[0200] After receiving the public key sent by the server, encrypting the modification information in the information modification instruction based on the public key to obtain encrypted information;

[0201] The encrypted information is sent to the server, so that the server decrypts the encrypted information based on the private key and adjusts the information based on the modified information after decryption.

[0202] Figure 5-6 The specific implementation of the embodiment can refer to the implementation of the above-mentioned interaction method, and the repeated parts will not be repeated.

[0203] like Figure 7 As shown, based on Figure 5 The information processing method shown in the figure has the same inventive concept, and the embodiment of the present application provides a first information processing device 700, which is applied to a server, and the device includes:

[0204] Verification module 701, used for verifying the data request after receiving the data request sent by the client based on verification information in the data request; wherein the verification information is generated by the client based on the client identifier, the object identifier corresponding to the data request and the session identifier corresponding to the data request;

[0205] The information determination module 702 is used to determine the information type and target information corresponding to the data request after the data request is verified;

[0206] The desensitizing module 703 is used to perform desensitization processing on the target information based on the desensitization method corresponding to the information type to obtain desensitized information, and send the desensitized information and the information type to the client, so that after the client displays the desensitized information, in response to the recovery instruction for the desensitized information corresponding to the target information type, the key fields in the recovery instruction are sent to the server;

[0207] The desensitizing module 703 is further used to determine whether to restore the desensitized information based on the key field.

[0208] In some optional implementations, the information types include key certificate types, customer identification information types, customer contact information types, customer account information types, and customer financial information types;

[0209] Among them, the desensitization method corresponding to the key certificate class is complete desensitization; the desensitization method corresponding to the customer identification information class, customer contact information class, customer account information class and customer financial information class is partial desensitization.

[0210] In some optional implementations, the desensitization module 703 is specifically used to:

[0211] If the desensitization method corresponding to the information type is complete desensitization, determining the desensitization characters corresponding to the information type, and performing desensitization processing on the target information based on the desensitization characters;

[0212] If the desensitization method corresponding to the information type is partial desensitization, the number of desensitization digits and desensitization characters corresponding to the information type are determined, and the number of desensitization digits of the target information is desensitized based on the desensitization characters.

[0213] In some optional implementations, after determining whether to restore the desensitized information based on the key field, the desensitizing module 703 is further used to:

[0214] If it is determined to restore the desensitized information, then determining the target duration corresponding to the information type;

[0215] The target information and the target duration are sent to the client, so that the client displays the target information within the target duration and displays the desensitized information after the target duration.

[0216] Some optional implementations further include a first encryption module 704, which is used to:

[0217] In response to the encryption request sent by the client, generating a private key and a public key based on the object identifier corresponding to the encryption request, the organization number of the client and the timestamp; wherein the encryption request is triggered by the client after receiving the information modification instruction;

[0218] Sending the public key to the client, so that the client encrypts the modification information in the information modification instruction based on the public key to obtain encrypted information, and sends the encrypted information to the server;

[0219] The encrypted information is decrypted based on the private key, and information adjustment is performed based on the decrypted modified information.

[0220] like Figure 8 As shown, based on Figure 6 The information processing method shown in the figure has the same inventive concept, and the embodiment of the present application provides a second information processing device 800, which is applied to a client and includes:

[0221] A verification information generating module 801, configured to generate verification information based on the identifier of the client, the object identifier corresponding to the data request, and the session identifier corresponding to the data request;

[0222] The request module 802 is used to send a data request carrying the verification information to the server, so that the server can determine the information type and target information corresponding to the data request after verifying the data request based on the verification information; perform desensitization processing on the target information based on the desensitization method corresponding to the information type to obtain desensitized information;

[0223] The receiving module 803 is used to receive the desensitized information and the information type sent by the server;

[0224] The request module 802 is also used to display the desensitized information, and in response to a recovery instruction for the desensitized information corresponding to the target information type, send the key fields in the recovery instruction to the server, so that the server determines whether to restore the desensitized information based on the key fields.

[0225] In some optional implementation manners, the receiving module 803 is further configured to:

[0226] If the target duration and the target information are received, the target information is displayed within the target duration, and the desensitized information is displayed after the target duration; wherein the target duration is determined by the server after determining to restore the desensitized information.

[0227] Some optional implementations further include a second encryption module 804, configured to:

[0228] After receiving the information modification instruction, an encryption request is sent to the server, so that the server generates a private key and a public key based on the object identifier corresponding to the encryption request, the organization number of the client and the timestamp;

[0229] After receiving the public key sent by the server, encrypting the modification information in the information modification instruction based on the public key to obtain encrypted information;

[0230] The encrypted information is sent to the server, so that the server decrypts the encrypted information based on the private key and adjusts the information based on the modified information after decryption.

[0231] Figure 7-8The specific implementation of the embodiment can refer to the implementation of the above-mentioned interaction method, and the repeated parts will not be repeated.

[0232] Based on the same technical concept, the embodiment of the present application also provides a server 900, such as Fig. 9 As shown, it includes at least one processor 901 and a memory 902 connected to the at least one processor. The specific connection medium between the processor 901 and the memory 902 is not limited in the embodiment of the present application. Fig. 9 For example, the processor 901 and the memory 902 are connected via a bus 903. The bus can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Fig. 9 Only one thick line is used in the diagram, but this does not mean that there is only one bus or only one type of bus.

[0233] Among them, the processor 901 is the control center of the server, and can use various interfaces and lines to connect various parts of the server, and realize data processing by running or executing instructions stored in the memory 902 and calling data stored in the memory 902. Optionally, the processor 901 may include one or more processing units, and the processor 901 may integrate an application processor and a modem processor, wherein the application processor mainly processes the operating system, user interface, and application programs, etc., and the modem processor mainly processes the issuance of instructions. It is understandable that the above-mentioned modem processor may not be integrated into the processor 901. In some embodiments, the processor 901 and the memory 902 may be implemented on the same chip, and in some embodiments, they may also be implemented separately on independent chips.

[0234] Processor 901 can be a general-purpose processor, such as a central processing unit (CPU), a digital signal processor, an application-specific integrated circuit (ASIC), a field programmable gate array or other programmable logic device, a discrete gate or transistor logic device, a discrete hardware component, and can implement or execute the various methods, steps and logic block diagrams disclosed in the embodiments of the present application. A general-purpose processor can be a microprocessor or any conventional processor, etc. The steps of the method disclosed in the information processing method embodiment can be directly embodied as a hardware processor for execution, or can be executed by a combination of hardware and software modules in the processor.

[0235] The memory 902 is a non-volatile computer-readable storage medium that can be used to store non-volatile software programs, non-volatile computer executable programs and modules. The memory 902 may include at least one type of storage medium, such as a flash memory, a hard disk, a multimedia card, a card-type memory, a random access memory (RandomAccess Memory, RAM), a static random access memory (Static RandomAccess Memory, SRAM), a programmable read-only memory (Programmable Read Only Memory, PROM), a read-only memory (Read Only Memory, ROM), an electrically erasable programmable read-only memory (Electrically Erasable Programmable Read-Only Memory, EEPROM), a magnetic memory, a disk, an optical disk, etc. The memory 902 is any other medium that can be used to carry or store a desired program code in the form of an instruction or data structure and can be accessed by a computer, but is not limited thereto. The memory 902 in the embodiment of the present application can also be a circuit or any other device that can realize a storage function, for storing program instructions and / or data.

[0236] In the embodiment of the present application, the memory 902 stores a computer program. When the program is executed by the processor 901, the processor 901 executes:

[0237] After receiving the data request sent by the client, verify the data request based on verification information in the data request; wherein the verification information is generated by the client based on the client identifier, the object identifier corresponding to the data request, and the session identifier corresponding to the data request;

[0238] After the data request is verified, determining the information type and target information corresponding to the data request;

[0239] Desensitizing the target information based on the desensitizing method corresponding to the information type to obtain desensitized information, and sending the desensitized information and the information type to the client, so that after the client displays the desensitized information, in response to a recovery instruction for the desensitized information corresponding to the target information type, the client sends the key fields in the recovery instruction to the server;

[0240] Determine whether to restore the desensitized information based on the key field.

[0241] In some optional implementations, the information types include key certificate types, customer identification information types, customer contact information types, customer account information types, and customer financial information types;

[0242] Among them, the desensitization method corresponding to the key certificate class is complete desensitization; the desensitization method corresponding to the customer identification information class, customer contact information class, customer account information class and customer financial information class is partial desensitization.

[0243] In some optional implementations, the processor 901 specifically performs:

[0244] If the desensitization method corresponding to the information type is complete desensitization, determining the desensitization characters corresponding to the information type, and performing desensitization processing on the target information based on the desensitization characters;

[0245] If the desensitization method corresponding to the information type is partial desensitization, the number of desensitization digits and desensitization characters corresponding to the information type are determined, and the number of desensitization digits of the target information is desensitized based on the desensitization characters.

[0246] In some optional implementations, after determining whether to restore the desensitized information based on the key field, the processor 901 further executes:

[0247] If it is determined to restore the desensitized information, then determining the target duration corresponding to the information type;

[0248] The target information and the target duration are sent to the client, so that the client displays the target information within the target duration and displays the desensitized information after the target duration.

[0249] In some optional implementations, the processor 901 further executes:

[0250] In response to the encryption request sent by the client, generating a private key and a public key based on the object identifier corresponding to the encryption request, the organization number of the client and the timestamp; wherein the encryption request is triggered by the client after receiving the information modification instruction;

[0251] Sending the public key to the client, so that the client encrypts the modification information in the information modification instruction based on the public key to obtain encrypted information, and sends the encrypted information to the server;

[0252] The encrypted information is decrypted based on the private key, and information adjustment is performed based on the decrypted modified information.

[0253] Since the server is the server in the method in the embodiment of the present application, and the principle of solving the problem by the server is similar to that of the method, the implementation of the server can refer to the implementation of the method, and the repeated parts will not be repeated.

[0254] Based on the same technical concept, the embodiment of the present application also provides a client 1000, such as Fig.10 As shown, it includes at least one processor 1001 and a memory 1002 connected to the at least one processor. The specific connection medium between the processor 1001 and the memory 1002 is not limited in the embodiment of the present application. Fig.10 For example, the processor 1001 and the memory 1002 are connected via a bus 1003. The bus can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Fig.10 Only one thick line is used in the diagram, but this does not mean that there is only one bus or only one type of bus.

[0255] Among them, the processor 1001 is the control center of the client, and can use various interfaces and lines to connect various parts of the client, and realize data processing by running or executing instructions stored in the memory 1002 and calling data stored in the memory 1002. Optionally, the processor 1001 may include one or more processing units, and the processor 1001 may integrate an application processor and a modem processor, wherein the application processor mainly processes the operating system, user interface, and application program, etc., and the modem processor mainly processes the issuance of instructions. It is understandable that the above-mentioned modem processor may not be integrated into the processor 1001. In some embodiments, the processor 1001 and the memory 1002 may be implemented on the same chip, and in some embodiments, they may also be implemented separately on independent chips.

[0256] Processor 1001 may be a general-purpose processor, such as a central processing unit, a digital signal processor, an application-specific integrated circuit, a field programmable gate array or other programmable logic device, a discrete gate or transistor logic device, or a discrete hardware component, and may implement or execute the methods, steps, and logic block diagrams disclosed in the embodiments of the present application. A general-purpose processor may be a microprocessor or any conventional processor, etc. The steps of the method disclosed in the information processing method embodiment may be directly embodied as being executed by a hardware processor, or may be executed by a combination of hardware and software modules in the processor.

[0257] The memory 1002, as a non-volatile computer-readable storage medium, can be used to store non-volatile software programs, non-volatile computer executable programs and modules. The memory 1002 may include at least one type of storage medium, such as a flash memory, a hard disk, a multimedia card, a card-type memory, a random access memory, a static random access memory, a programmable read-only memory, a read-only memory, an electrically erasable programmable read-only memory, a magnetic memory, a disk, an optical disk, etc. The memory 1002 is any other medium that can be used to carry or store a desired program code in the form of an instruction or data structure and can be accessed by a computer, but is not limited thereto. The memory 1002 in the embodiment of the present application can also be a circuit or any other device that can realize a storage function, for storing program instructions and / or data.

[0258] In the embodiment of the present application, the memory 1002 stores a computer program. When the program is executed by the processor 1001, the processor 1001 executes:

[0259] Generate verification information based on the identifier of the client, the object identifier corresponding to the data request, and the session identifier corresponding to the data request;

[0260] Sending a data request carrying the verification information to a server, so that the server, based on the verification information, verifies the data request and determines the information type and target information corresponding to the data request; desensitizing the target information based on a desensitizing method corresponding to the information type to obtain desensitized information;

[0261] Receiving the desensitized information and the information type sent by the server;

[0262] The desensitized information is displayed, and in response to a recovery instruction for the desensitized information corresponding to the target information type, a key field in the recovery instruction is sent to the server, so that the server determines whether to restore the desensitized information based on the key field.

[0263] In some optional implementations, the processor 1001 further executes:

[0264] If the target duration and the target information are received, the target information is displayed within the target duration, and the desensitized information is displayed after the target duration; wherein the target duration is determined by the server after determining to restore the desensitized information.

[0265] In some optional implementations, the processor 1001 further executes:

[0266] After receiving the information modification instruction, an encryption request is sent to the server, so that the server generates a private key and a public key based on the object identifier corresponding to the encryption request, the organization number of the client and the timestamp;

[0267] After receiving the public key sent by the server, encrypting the modification information in the information modification instruction based on the public key to obtain encrypted information;

[0268] The encrypted information is sent to the server, so that the server decrypts the encrypted information based on the private key and adjusts the information based on the modified information after decryption.

[0269] Since the client is the client in the method in the embodiment of the present application, and the principle of solving the problem by the client is similar to that of the method, the implementation of the client can refer to the implementation of the method, and the repeated parts will not be repeated.

[0270] Based on the same technical concept, an embodiment of the present application also provides a computer-readable storage medium, which stores a computer program. When the computer program is executed by a processor, the steps of the above-mentioned information processing method are implemented.

[0271] In some optional embodiments, various aspects of the information processing method provided by the present application can also be implemented in the form of a program product, which contains computer-executable instructions. When the program product is run on a computer device, the computer-executable instructions are used to enable the computer device to execute the steps of the information processing method according to various exemplary embodiments of the present application described above in this specification.

[0272] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented in one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that include computer-usable program code.

[0273] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0274] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0275] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0276] Although the preferred embodiments of the present application have been described, those skilled in the art may make other changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications falling within the scope of the present application.

[0277] Obviously, those skilled in the art can make various changes and modifications to the present application without departing from the spirit and scope of the present application. Thus, if these modifications and variations of the present application fall within the scope of the claims of the present application and their equivalents, the present application is also intended to include these modifications and variations.

Claims

1. An information processing method, characterized in that: Applied to the server, the method includes: After receiving the data request sent by the client, verify the data request based on verification information in the data request; wherein the verification information is generated by the client based on the client identifier, the object identifier corresponding to the data request, and the session identifier corresponding to the data request; After the data request is verified, determining the information type and target information corresponding to the data request; Desensitizing the target information based on the desensitizing method corresponding to the information type to obtain desensitized information, and sending the desensitized information and the information type to the client, so that after the client displays the desensitized information, in response to a recovery instruction for the desensitized information corresponding to the target information type, the client sends the key fields in the recovery instruction to the server; Determine whether to restore the desensitized information based on the key field.

2. The method according to claim 1, characterized in that The information types include key certificate type, customer identification information type, customer contact information type, customer account information type and customer financial information type; Among them, the desensitization method corresponding to the key certificate class is complete desensitization; the desensitization method corresponding to the customer identification information class, customer contact information class, customer account information class and customer financial information class is partial desensitization.

3. The method according to claim 1, characterized in that Desensitizing the target information based on the desensitization method corresponding to the information type, including: If the desensitization method corresponding to the information type is complete desensitization, determining the desensitization characters corresponding to the information type, and performing desensitization processing on the target information based on the desensitization characters; If the desensitization method corresponding to the information type is partial desensitization, the number of desensitization digits and desensitization characters corresponding to the information type are determined, and the number of desensitization digits of the target information is desensitized based on the desensitization characters.

4. The method according to claim 1, characterized in that After determining whether to restore the desensitized information based on the key field, the method further includes: If it is determined to restore the desensitized information, then determining the target duration corresponding to the information type; The target information and the target duration are sent to the client, so that the client displays the target information within the target duration and displays the desensitized information after the target duration.

5. The method according to any one of claims 1 to 4, characterized in that: Also includes: In response to the encryption request sent by the client, generating a private key and a public key based on the object identifier corresponding to the encryption request, the organization number of the client and the timestamp; wherein the encryption request is triggered by the client after receiving the information modification instruction; Sending the public key to the client, so that the client encrypts the modification information in the information modification instruction based on the public key to obtain encrypted information, and sends the encrypted information to the server; The encrypted information is decrypted based on the private key, and information adjustment is performed based on the decrypted modified information.

6. An information processing method, characterized in that: Applied to a client, the method comprises: Generate verification information based on the identifier of the client, the object identifier corresponding to the data request, and the session identifier corresponding to the data request; Sending a data request carrying the verification information to a server, so that the server, based on the verification information, verifies the data request and determines the information type and target information corresponding to the data request; desensitizing the target information based on a desensitizing method corresponding to the information type to obtain desensitized information; Receiving the desensitized information and the information type sent by the server; The desensitized information is displayed, and in response to a recovery instruction for the desensitized information corresponding to the target information type, a key field in the recovery instruction is sent to the server, so that the server determines whether to restore the desensitized information based on the key field.

7. The method according to claim 6, characterized in that After displaying the desensitized information, the method further includes: If the target duration and the target information are received, the target information is displayed within the target duration, and the desensitized information is displayed after the target duration; wherein the target duration is determined by the server after determining to restore the desensitized information.

8. The method according to claim 6 or 7, characterized in that Also includes: After receiving the information modification instruction, an encryption request is sent to the server, so that the server generates a private key and a public key based on the object identifier corresponding to the encryption request, the organization number of the client and the timestamp; After receiving the public key sent by the server, encrypting the modification information in the information modification instruction based on the public key to obtain encrypted information; The encrypted information is sent to the server, so that the server decrypts the encrypted information based on the private key and adjusts the information based on the modified information after decryption.

9. An information processing device, characterized in that: Applied to the server, the device includes: A verification module, configured to verify the data request after receiving the data request sent by the client based on verification information in the data request; wherein the verification information is generated by the client based on the client identifier, the object identifier corresponding to the data request, and the session identifier corresponding to the data request; An information determination module, used to determine the information type and target information corresponding to the data request after the data request is verified; A desensitizing module, configured to perform desensitizing processing on the target information based on a desensitizing method corresponding to the information type to obtain desensitized information, and send the desensitized information and the information type to the client, so that after the client displays the desensitized information, in response to a recovery instruction for the desensitized information corresponding to the target information type, the client sends a key field in the recovery instruction to the server; The desensitizing module is also used to determine whether to restore the desensitized information based on the key field.

10. An information processing device, characterized in that: Applied to the client, the device includes: A verification information generation module, used to generate verification information based on the identifier of the client, the object identifier corresponding to the data request, and the session identifier corresponding to the data request; A request module is used to send a data request carrying the verification information to a server, so that the server can determine the information type and target information corresponding to the data request after verifying the data request based on the verification information; perform desensitization processing on the target information based on a desensitization method corresponding to the information type to obtain desensitized information; A receiving module, used for receiving the desensitized information and the information type sent by the server; The request module is also used to display the desensitized information, and in response to a recovery instruction for the desensitized information corresponding to the target information type, send the key fields in the recovery instruction to the server, so that the server determines whether to restore the desensitized information based on the key fields.

11. A server, characterized in that: The method comprises at least one processor and at least one memory, wherein the memory stores a computer program, and when the program is executed by the processor, the processor executes the method according to any one of claims 1 to 5.

12. A client, characterized in that: The method comprises at least one processor and at least one memory, wherein the memory stores a computer program, and when the program is executed by the processor, the processor executes the method according to any one of claims 6 to 8.

13. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method according to any one of claims 1 to 8 is implemented.

14. A computer program product, characterized in that The method comprises computer executable instructions, wherein the computer executable instructions are used to enable a computer to execute the method according to any one of claims 1 to 8.

Images