An information processing method, apparatus, server, client, and storage medium

Abstract

This application relates to the field of data security technology, specifically to an information processing method, apparatus, server, client, and storage medium. The method, applied to the server, includes: upon receiving a data request from the client, verifying the data request based on verification information in the data request; wherein the verification information is generated by the client based on the client's identifier, the object identifier corresponding to the data request, and the session identifier corresponding to the data request; after the data request is verified, determining the information type and target information corresponding to the data request; performing desensitization processing on the target information based on the desensitization method corresponding to the information type to obtain desensitized information, and sending the desensitized information and information type to the client; after the client displays the desensitized information, responding to a recovery instruction for the desensitized information, sending key fields from the recovery instruction to the server; and determining whether to recover the desensitized information based on the key fields, thereby improving information security.

Description

Technical Field

[0001] This application relates to the field of data security technology, specifically to an information processing method, apparatus, server, client, and storage medium. Background Technology

[0002] In the era of the internet and big data, personal information protection is the foundation of digital society governance and the development of the digital economy, affecting the vital interests of millions of people and concerning the rational use and standardized development of personal information by enterprises. Processing personal information must not only be legal, legitimate, and necessary, but also have a clear and reasonable purpose. It must also be done in a way that minimizes the impact on individual rights, be limited to the minimum scope required to achieve the processing purpose, adhere to the principles of openness and transparency, ensure the accuracy and completeness of personal information, and take necessary measures to protect its security. These principles, as the most basic requirements for personal information processing activities, permeate all stages of personal information processing, including collection, storage, use, processing, transmission, provision, disclosure, and deletion. For example, in the process of processing personal information at bank counters, it is necessary to ensure the security of personal information.

[0003] In related technologies, a unified encryption method is used for some data during the data display process. However, since the counter is deployed at the front end, there are many people interacting with it, and the counter involves the display of various types of data, this method has poor security. Summary of the Invention

[0004] This application provides an information processing method, apparatus, server, client, and storage medium to improve information security.

[0005] In a first aspect, this application provides a first information processing method applied to a server, the method comprising:

[0006] Upon receiving a data request from the client, the client verifies the data request based on the verification information contained in the data request; wherein, the verification information is generated by the client based on the client's identifier, the object identifier corresponding to the data request, and the session identifier corresponding to the data request.

[0007] After the data request is verified, the information type and target information corresponding to the data request are determined.

[0008] The target information is de-identified based on the de-identification method corresponding to the information type to obtain de-identified information. The de-identified information and the information type are then sent to the client so that after the client displays the de-identified information, it responds to the recovery instruction for the de-identified information corresponding to the target information type by sending the key fields in the recovery instruction to the server.

[0009] Based on the key fields, determine whether to restore the de-identified information.

[0010] The above scheme, when information needs to be displayed, first generates verification information based on the client's identifier, the object identifier corresponding to the data request, and the session identifier corresponding to the data request. When the server receives the data request, it first verifies the data request based on the verification information to ensure the reliability of the request. After confirming the reliability of the request, it determines the information type and target information corresponding to the data request. Each information type has its corresponding de-identification method to match different security requirements. Based on the de-identification method corresponding to the information type of the data request, the target information is de-identified to improve de-identification security. In addition, the server sends the information type to the client. When the user needs to view the original target information, the client makes an initial judgment based on the information type to determine whether the information type can be displayed in plaintext. To ensure that the user has permission to view the original target information, the client obtains the key fields in the recovery command and performs permission judgment through the server to ensure the secure display of information.

[0011] In some optional implementations, the information types include key certificate types, customer identification information types, customer contact information types, customer account information types, and customer financial information types;

[0012] The key certificate class is completely anonymized; the customer identification information class, customer contact information class, customer account information class, and customer financial information class are partially anonymized.

[0013] In some optional implementations, the target information is de-identified based on the de-identification method corresponding to the information type, including:

[0014] If the desensitization method corresponding to the information type is complete desensitization, then the desensitization character corresponding to the information type is determined, and the target information is desensitized based on the desensitization character;

[0015] If the desensitization method corresponding to the information type is partial desensitization, then determine the desensitization digits and desensitization characters corresponding to the information type, and perform desensitization processing on the desensitization digits of the target information based on the desensitization characters.

[0016] In some optional implementations, after determining whether to restore the de-identified information based on the key fields, the method further includes:

[0017] If it is determined that the de-identified information will be restored, then the target duration corresponding to the information type is determined;

[0018] The target information and the target duration are sent to the client so that the client can display the target information within the target duration and display the de-identified information after the target duration.

[0019] The above solution sets target durations for different information types. The server sends the target durations for each information type, along with the target information, to the client. The client only displays the target information within the target duration and then displays it in an anonymized form after the target duration, thus balancing the user's need to view the original target information with information security.

[0020] Some optional implementations also include:

[0021] In response to an encryption request sent by the client, a private key and a public key are generated based on the object identifier corresponding to the encryption request, the client's organization number, and a timestamp; wherein, the encryption request is triggered by the client after receiving an information modification instruction;

[0022] The public key is sent to the client, so that the client can encrypt the modified information in the information modification instruction based on the public key to obtain encrypted information, and then send the encrypted information to the server.

[0023] The encrypted information is decrypted based on the private key, and the information is adjusted based on the modified information after decryption.

[0024] The above scheme generates a public-private key pair based on the object identifier corresponding to the encryption request, the client's organization number, and the timestamp, ensuring the uniqueness of the public-private key pair; by using asymmetric encryption on the modified information, it reduces the possibility of leakage during transmission or at the front end.

[0025] Secondly, embodiments of this application provide another information processing method applied to a client, the method comprising:

[0026] Verification information is generated based on the client's identifier, the object identifier corresponding to the data request, and the session identifier corresponding to the data request;

[0027] A data request carrying the verification information is sent to the server, so that the server verifies the data request based on the verification information, determines the information type and target information corresponding to the data request, and performs desensitization processing on the target information based on the desensitization method corresponding to the information type to obtain desensitized information.

[0028] Receive the de-identified information and the information type sent by the server;

[0029] The de-identified information is displayed, and in response to a recovery instruction for the de-identified information corresponding to the target information type, the key fields in the recovery instruction are sent to the server so that the server can determine whether to recover the de-identified information based on the key fields.

[0030] In some optional implementations, after displaying the de-identified information, the method further includes:

[0031] If the target duration and the target information are received, the target information is displayed within the target duration, and the de-identified information is displayed after the target duration; wherein, the target duration is determined by the server after deciding to restore the de-identified information.

[0032] Some optional implementations also include:

[0033] Upon receiving the information modification instruction, an encryption request is sent to the server so that the server generates a private key and a public key based on the object identifier corresponding to the encryption request, the organization number of the client, and the timestamp.

[0034] After receiving the public key sent by the server, the modified information in the information modification instruction is encrypted based on the public key to obtain encrypted information;

[0035] The encrypted information is sent to the server so that the server can decrypt the encrypted information based on the private key and adjust the information based on the decrypted modified information.

[0036] Thirdly, embodiments of this application provide an information processing apparatus applied to a server, the apparatus comprising:

[0037] The verification module is used to verify the data request based on the verification information in the data request after receiving the data request sent by the client; wherein the verification information is generated by the client based on the client's identifier, the object identifier corresponding to the data request, and the session identifier corresponding to the data request;

[0038] The information determination module is used to determine the information type and target information corresponding to the data request after the data request has been verified.

[0039] The desensitization module is used to desensitize the target information based on the desensitization method corresponding to the information type, obtain desensitized information, and send the desensitized information and the information type to the client, so that after the client displays the desensitized information, it responds to the restoration instruction for the desensitized information corresponding to the target information type and sends the key fields in the restoration instruction to the server.

[0040] The desensitization module is also used to determine whether to restore the desensitized information based on the key fields.

[0041] In some optional implementations, the information types include key certificate types, customer identification information types, customer contact information types, customer account information types, and customer financial information types;

[0042] The key certificate class is completely anonymized; the customer identification information class, customer contact information class, customer account information class, and customer financial information class are partially anonymized.

[0043] In some optional implementations, the desensitization module is specifically used for:

[0044] If the desensitization method corresponding to the information type is complete desensitization, then the desensitization character corresponding to the information type is determined, and the target information is desensitized based on the desensitization character;

[0045] If the desensitization method corresponding to the information type is partial desensitization, then determine the desensitization digits and desensitization characters corresponding to the information type, and perform desensitization processing on the desensitization digits of the target information based on the desensitization characters.

[0046] In some optional implementations, after determining whether to restore the de-identified information based on the key fields, the de-identification module is further configured to:

[0047] If it is determined that the de-identified information will be restored, then the target duration corresponding to the information type is determined;

[0048] The target information and the target duration are sent to the client so that the client can display the target information within the target duration and display the de-identified information after the target duration.

[0049] In some alternative implementations, a first encryption module is also included, for:

[0050] In response to an encryption request sent by the client, a private key and a public key are generated based on the object identifier corresponding to the encryption request, the client's organization number, and a timestamp; wherein, the encryption request is triggered by the client after receiving an information modification instruction;

[0051] The public key is sent to the client, so that the client can encrypt the modified information in the information modification instruction based on the public key to obtain encrypted information, and then send the encrypted information to the server.

[0052] The encrypted information is decrypted based on the private key, and the information is adjusted based on the modified information after decryption.

[0053] Fourthly, embodiments of this application provide another information processing apparatus applied to a client, the apparatus comprising:

[0054] The verification information generation module is used to generate verification information based on the client's identifier, the object identifier corresponding to the data request, and the session identifier corresponding to the data request;

[0055] The request module is used to send a data request carrying the verification information to the server, so that the server verifies the data request based on the verification information, determines the information type and target information corresponding to the data request, and performs desensitization processing on the target information based on the desensitization method corresponding to the information type to obtain desensitized information.

[0056] A receiving module is used to receive the de-identified information and the information type sent by the server;

[0057] The request module is further configured to display the de-identified information, and in response to a recovery instruction for the de-identified information corresponding to the target information type, send the key fields in the recovery instruction to the server so that the server can determine whether to recover the de-identified information based on the key fields.

[0058] In some alternative implementations, the receiving module is also used for:

[0059] If the target duration and the target information are received, the target information is displayed within the target duration, and the de-identified information is displayed after the target duration; wherein, the target duration is determined by the server after deciding to restore the de-identified information.

[0060] Some alternative implementations also include a second encryption module for:

[0061] Upon receiving the information modification instruction, an encryption request is sent to the server so that the server generates a private key and a public key based on the object identifier corresponding to the encryption request, the organization number of the client, and the timestamp.

[0062] After receiving the public key sent by the server, the modified information in the information modification instruction is encrypted based on the public key to obtain encrypted information;

[0063] The encrypted information is sent to the server so that the server can decrypt the encrypted information based on the private key and adjust the information based on the decrypted modified information.

[0064] Fifthly, embodiments of this application provide a server including at least one processor and at least one memory, wherein the memory stores a computer program that, when executed by the processor, causes the processor to perform any of the methods described in the first aspect above.

[0065] In a sixth aspect, embodiments of this application provide a client comprising at least one processor and at least one memory, wherein the memory stores a computer program that, when executed by the processor, causes the processor to perform any of the methods described in the second aspect above.

[0066] In a seventh aspect, embodiments of this application provide a computer-readable storage medium storing a computer program, which, when executed by a processor, implements the method described in either the first or second aspect above.

[0067] Eighthly, embodiments of this application provide a computer program product comprising computer-executable instructions, the computer-executable instructions being used to cause a computer to perform the method described in either the first or second aspect above. Attached Figure Description

[0068] Figure 1 This is a schematic diagram of an application scenario provided by an embodiment of this application;

[0069] Figure 2 An interactive flowchart of the first information processing method provided in the embodiments of this application;

[0070] Figure 3 An interactive flowchart of the second information processing method provided in the embodiments of this application;

[0071] Figure 4 An interactive flowchart of the third information processing method provided in the embodiments of this application;

[0072] Figure 5 A flowchart illustrating the first information processing method provided in this application embodiment;

[0073] Figure 6 A flowchart illustrating the second information processing method provided in this application embodiment;

[0074] Figure 7 This is a schematic diagram of the structure of the first information processing device provided in the embodiments of this application;

[0075] Figure 8 This is a schematic diagram of the structure of the second information processing device provided in the embodiments of this application;

[0076] Figure 9This is a schematic diagram of the server structure provided in an embodiment of this application;

[0077] Figure 10 This is a schematic diagram of the structure of the client provided in an embodiment of this application. Detailed Implementation

[0078] To make the objectives, technical solutions, and advantages of this application clearer, the technical solutions in the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only a part of the embodiments of this application, and not all of them. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application. Unless otherwise specified, the embodiments and features in the embodiments of this application can be arbitrarily combined with each other. Furthermore, although a logical order is shown in the flowchart, in some cases, the steps shown or described may be performed in a different order than that shown here.

[0079] The terms "first" and "second" in the specification, claims, and accompanying drawings of this application are used to distinguish different objects, not to describe a specific order. Furthermore, the term "comprising" and any variations thereof are intended to cover non-exclusive protection. For example, a process, method, system, product, or device that includes a series of steps or units is not limited to the listed steps or units, but may optionally include steps or units not listed, or may optionally include other steps or units inherent to these processes, methods, products, or devices. The term "multiple" in this application can mean at least two, for example, two, three, or more, and the embodiments of this application do not impose limitations.

[0080] The following description, in conjunction with the accompanying drawings, illustrates exemplary embodiments of this application, including various details to aid understanding. These embodiments should be considered merely exemplary. Therefore, those skilled in the art should recognize that various changes and modifications can be made to the embodiments described herein without departing from the scope of this application. Similarly, for clarity and brevity, descriptions of well-known functions and structures are omitted in the following description. It should be noted that in the embodiments of this application, certain existing industry solutions such as software, components, and models may be mentioned. These should be considered exemplary, intended only to illustrate the feasibility of implementing the technical solutions of this application, and do not imply that the applicant has already used or necessarily used such solutions.

[0081] The acquisition, transmission, storage, and use of data in this application all comply with the requirements of relevant national laws and regulations.

[0082] Before introducing the information processing method provided in the embodiments of this application, the technical background of the embodiments of this application will be described in detail for ease of understanding.

[0083] In the era of the internet and big data, personal information protection is the foundation of digital society governance and the development of the digital economy, affecting the vital interests of millions of people and concerning the rational use and standardized development of personal information by enterprises. Processing personal information must not only be legal, legitimate, and necessary, but also have a clear and reasonable purpose. It must also be done in a way that minimizes the impact on individual rights, be limited to the minimum scope required to achieve the processing purpose, adhere to the principles of openness and transparency, ensure the accuracy and completeness of personal information, and take necessary measures to protect its security. These principles, as the most basic requirements for personal information processing activities, permeate all stages of personal information processing, including collection, storage, use, processing, transmission, provision, disclosure, and deletion. For example, in the process of processing personal information at bank counters, it is necessary to ensure the security of personal information.

[0084] In related technologies, a unified encryption method is used for some data during the data display process. However, since the counter is deployed at the front end, there are many people interacting with it, and the counter involves the display of various types of data, this method has poor security.

[0085] In view of this, this application proposes an information processing method, apparatus, server, client, and storage medium. The method is applied to the server and includes: after receiving a data request sent by the client, verifying the data request based on verification information in the data request; wherein the verification information is generated by the client based on the client's identifier, the object identifier corresponding to the data request, and the session identifier corresponding to the data request; after the data request is verified, determining the information type and target information corresponding to the data request; performing desensitization processing on the target information based on the desensitization method corresponding to the information type to obtain desensitized information, and sending the desensitized information and the information type to the client, so that after the client displays the desensitized information, in response to a recovery instruction for the desensitized information corresponding to the target information type, sending the key fields in the recovery instruction to the server; and determining whether to recover the desensitized information based on the key fields.

[0086] The above scheme, when information needs to be displayed, first generates verification information based on the client's identifier, the object identifier corresponding to the data request, and the session identifier corresponding to the data request. When the server receives the data request, it first verifies the data request based on the verification information to ensure the reliability of the request. After confirming the reliability of the request, it determines the information type and target information corresponding to the data request. Each information type has its corresponding de-identification method to match different security requirements. Based on the de-identification method corresponding to the information type of the data request, the target information is de-identified to improve de-identification security. In addition, the server sends the information type to the client. When the user needs to view the original target information, the client makes an initial judgment based on the information type to determine whether the information type can be displayed in plaintext. To ensure that the user has permission to view the original target information, the client obtains the key fields in the recovery command and performs permission judgment through the server to ensure the secure display of information.

[0087] See Figure 1 As shown, this is an application scenario provided by an embodiment of the present application, including a server 100 and a client 200;

[0088] For the query scenario, client 200 generates verification information based on the client's identifier, the object identifier corresponding to the data request, and the session identifier corresponding to the data request;

[0089] Client 200 sends a data request carrying the verification information to server 100;

[0090] The server 100 verifies the data request based on the verification information in the data request;

[0091] After the server 100 verifies the data request, it determines the information type and target information corresponding to the data request; and performs desensitization processing on the target information based on the desensitization method corresponding to the information type to obtain desensitized information.

[0092] The server 100 sends the de-identified information and the information type to the client 200;

[0093] After displaying the de-identified information, the client 200 responds to the recovery instruction for the de-identified information corresponding to the target information type by sending the key fields in the recovery instruction to the server 100.

[0094] The server 100 determines whether to restore the de-identified information based on the key fields.

[0095] The above application scenarios are merely examples of application scenarios for implementing the embodiments of this application, and the embodiments of this application are not limited to the above application scenarios.

[0096] The technical solution of this application and how it solves the above-mentioned technical problems will be described in detail below with reference to the accompanying drawings and specific embodiments. The following specific embodiments can be combined with each other, and the same or similar concepts or processes may not be described again in some embodiments.

[0097] Figure 2 An interactive flowchart of the first information processing method provided in the embodiments of this application is shown below. Figure 2 As shown, it includes the following steps:

[0098] Step S201: The client generates verification information based on the client's identifier, the object identifier corresponding to the data request, and the session identifier corresponding to the data request.

[0099] In practice, for query scenarios, the client needs to send a data request to the server to request the queried data. However, the data request may be forged or tampered with. Based on this, this embodiment adds a trusted security verification of the request.

[0100] Since the client's identifier can uniquely identify the client; the object identifier corresponding to the data request can uniquely identify the requested object; and the session identifier corresponding to the data request can uniquely identify the session, the verification information generated based on these pieces of information can comprehensively perform trusted security verification and improve information security.

[0101] For example, the security factor is generated by mixing the above information in multiple dimensions, and the message authentication code (MAC) is calculated based on the security factor to obtain the verification information.

[0102] Step S202: The client sends a data request carrying the verification information to the server.

[0103] This embodiment does not specifically limit the method of sending data requests. For example, if the client and the server are in the same banking system, the client sends the data request to the server through the intranet; if the client and the server are in different banking systems, the client sends the data request to the server through the external network, etc.

[0104] Step S203: The server verifies the data request based on the verification information in the data request.

[0105] In practice, the client generates verification information based on multiple pieces of information corresponding to the data request; correspondingly, the server verifies the reliability of the data request based on the verification information.

[0106] For example, the server performs MAC verification based on the client's method of obtaining verification information through MAC calculation.

[0107] Step S204: After the server verifies the data request, it determines the information type and target information corresponding to the data request.

[0108] In practice, if all information is anonymized in the same way, it is not only inflexible, but also has low security for some important information.

[0109] Based on this, in addition to determining the target information requested by the client, this embodiment also determines its information type. Each information type has its corresponding desensitization method. Some information types have the same desensitization method, while others have different desensitization methods.

[0110] Step S205: The server performs desensitization processing on the target information based on the desensitization method corresponding to the information type to obtain desensitized information.

[0111] As mentioned above, each type of information has its corresponding desensitization method. Some information types use the same desensitization method, while others use different methods.

[0112] Based on this, this embodiment performs desensitization processing on the target information according to the desensitization method corresponding to the information type determined above, and obtains desensitized information that matches the security level required by the information type.

[0113] Step S206: The server sends the de-identified information and the information type to the client.

[0114] In practice, the server performs de-identification processing, and the client displays the de-identified information. However, in some scenarios, users need to view the original target information. Based on this, this embodiment provides a process for viewing the original target information for certain information types.

[0115] To ensure proper access control for the target information, the server first needs to send the information type to the client. When a user requests to view the target information, the client makes an initial judgment based on the information type to determine whether the information type is one that can be displayed in plaintext.

[0116] Step S207: The client displays the de-identified information.

[0117] This embodiment does not specifically limit the method of anonymizing the client display, such as displaying it through the client's screen.

[0118] Step S208: In response to the recovery instruction for the de-identified information corresponding to the target de-identification method, the client sends the key fields in the recovery instruction to the server.

[0119] As described above, in order to ensure viewing security, this embodiment performs permission judgment to view the original target information, and sends the information type to the client through the server; when the user has a need to view the original target information, the client makes an initial judgment based on the information type to determine whether the information type is a type that can be displayed in plaintext;

[0120] In addition, to ensure that users have permission to view the original target information, key fields in the recovery instructions are retrieved, and the server determines whether the user has permission to view the original target information, thus ensuring the secure display of information.

[0121] Step S209: The server determines whether to restore the target de-identified information based on the key fields.

[0122] In practice, to ensure that users have permission to view the original target information, relevant recovery information is set on the server side, such as the number of consecutive plaintext characters for de-identification, or the information set by the user when entering the information into the server. By comparing the above key fields with the recovery information, it can be accurately determined whether to restore the target de-identified information.

[0123] The above scheme, when information needs to be displayed, first generates verification information based on the client's identifier, the object identifier corresponding to the data request, and the session identifier corresponding to the data request. When the server receives the data request, it first verifies the data request based on the verification information to ensure the reliability of the request. After confirming the reliability of the request, it determines the information type and target information corresponding to the data request. Each information type has its corresponding de-identification method to match different security requirements. Based on the de-identification method corresponding to the information type of the data request, the target information is de-identified to improve de-identification security. In addition, the server sends the information type to the client. When the user needs to view the original target information, the client makes an initial judgment based on the information type to determine whether the information type can be displayed in plaintext. To ensure that the user has permission to view the original target information, the client obtains the key fields in the recovery command and performs permission judgment through the server to ensure the secure display of information.

[0124] In some optional implementations, the information types include key certificate types, customer identification information types, customer contact information types, customer account information types, and customer financial information types;

[0125] The key certificate class is completely anonymized; the customer identification information class, customer contact information class, customer account information class, and customer financial information class are partially anonymized.

[0126] In this embodiment, for the bank counter scenario, several information types are set up, including key certificate type, customer identification information type, customer contact information type, customer account information type and customer financial information type;

[0127] Among them, key certificate classes involve some verification operations, which require a high level of security. The corresponding desensitization method is complete desensitization, which does not display plaintext in any scenario, thus ensuring the security of the verification process and ensuring the reliable execution of other operations.

[0128] For identification information, customer contact information, customer account information, and customer financial information, which have low security requirements, partial anonymization makes them easier to view.

[0129] In some optional implementations, step S205 above can be implemented in, but is not limited to, the following ways:

[0130] If the desensitization method corresponding to the information type is complete desensitization, then the desensitization character corresponding to the information type is determined, and the target information is desensitized based on the desensitization character;

[0131] If the desensitization method corresponding to the information type is partial desensitization, then determine the desensitization digits and desensitization characters corresponding to the information type, and perform desensitization processing on the desensitization digits of the target information based on the desensitization characters.

[0132] In practice, for the complete desensitization method, the entire information is not displayed in plaintext. Based on this, this embodiment determines the desensitization character corresponding to the information type, and performs desensitization processing on all characters of the target information based on the desensitization character; wherein, the desensitization characters corresponding to each digit in the target information can be the same or different;

[0133] For partial desensitization methods, some characters are displayed in plaintext while others need to be desensitized. Based on this, this embodiment determines the desensitized characters and the number of desensitization bits corresponding to the information type, and performs desensitization processing on the desensitized characters of the target information based on the desensitized characters.

[0134] This embodiment does not limit the specific implementation method for determining the number of de-identified bits for certain information types. The number of de-identified bits can be determined directly based on the correspondence between each subtype in the information type and the number of de-identified bits; alternatively, an initial number of bits can be determined based on the correspondence between each subtype in the information type and the number of de-identified bits, and then adjusted based on the number of information items corresponding to the data request to obtain the final number of de-identified bits. For example, the number of de-identified bits for a single ID card query (data request corresponding to one piece of information) is the number of bits other than the first four and last four digits; the number of de-identified bits for batch ID card queries (data request corresponding to multiple pieces of information) is the number of bits other than the first and last digits.

[0135] The above-mentioned desensitization bit depth is only an example and can be set according to the actual scenario during implementation.

[0136] Figure 3 An interactive flowchart of the second information processing method provided in the embodiments of this application is shown below. Figure 3 As shown, it includes the following steps:

[0137] Step S301: The client generates verification information based on the client's identifier, the object identifier corresponding to the data request, and the session identifier corresponding to the data request.

[0138] Step S302: The client sends a data request carrying the verification information to the server.

[0139] Step S303: The server verifies the data request based on the verification information in the data request.

[0140] Step S304: After the server verifies the data request, it determines the information type and target information corresponding to the data request.

[0141] Step S305: The server performs desensitization processing on the target information based on the desensitization method corresponding to the information type to obtain desensitized information.

[0142] Step S306: The server sends the de-identified information and the information type to the client.

[0143] Step S307: The client displays the de-identified information.

[0144] Step S308: In response to the recovery instruction for the de-identified information corresponding to the target de-identification method, the client sends the key fields in the recovery instruction to the server.

[0145] Step S309: The server determines whether to restore the target de-identified information based on the key fields.

[0146] The specific implementation of steps S301 to S309 can be referred to the above embodiments, and will not be repeated here.

[0147] Step S310: If the server determines to restore the de-identified information, it determines the target duration corresponding to the information type.

[0148] Step S311: The server sends the target information and the target duration to the client.

[0149] Step S312: The client displays the target information within the target duration and displays the de-identified information after the target duration.

[0150] In this embodiment, if the server determines whether to restore the de-identified information, and if the de-identified information is restored, it will be directly sent to the client for plaintext display, which poses a risk of data leakage. Based on this, this embodiment also determines the target duration corresponding to the information type; by sending the target information and the target duration to the client; the client only displays the target information within the target duration, and after the target duration, it is still displayed in de-identified form.

[0151] The above solution sets target durations for different information types. The server sends the target durations for each information type, along with the target information, to the client. The client only displays the target information within the target duration and then displays it in an anonymized form after the target duration, thus balancing the user's need to view the original target information with information security.

[0152] Figure 4 The interactive flowchart of the third information processing method provided in the embodiments of this application is as follows: Figure 4 As shown, it includes the following steps:

[0153] Step S401: The client generates verification information based on the client's identifier, the object identifier corresponding to the data request, and the session identifier corresponding to the data request.

[0154] Step S402: The client sends a data request carrying the verification information to the server.

[0155] Step S403: The server verifies the data request based on the verification information in the data request.

[0156] Step S404: After the server verifies the data request, it determines the information type and target information corresponding to the data request.

[0157] Step S405: The server performs desensitization processing on the target information based on the desensitization method corresponding to the information type to obtain desensitized information.

[0158] Step S406: The server sends the de-identified information and the information type to the client.

[0159] Step S407: The client displays the de-identified information.

[0160] The specific implementation of steps S401 to S407 can be referred to the above embodiments, and will not be repeated here.

[0161] Step S408: After receiving the information modification instruction, the client sends an encryption request to the server.

[0162] During implementation, after the de-identified information is displayed on the client side, the user can modify the information (modify the personal information stored on the server side) and trigger the information modification command;

[0163] Since there is a risk of information leakage during data transmission when information on the server needs to be modified, this embodiment does not send the modified information directly to the server after receiving the information modification instruction, but instead sends an encrypted request to the server.

[0164] Step S409: The server generates a private key and a public key based on the object identifier corresponding to the encryption request, the organization number of the client, and the timestamp.

[0165] During implementation, after receiving an encryption request, the server generates a public-private key pair based on the object identifier (such as user ID), the client's organization ID, and the timestamp corresponding to the encryption request, ensuring the uniqueness of the public-private key pair.

[0166] Step S410: The server sends the public key to the client.

[0167] Step S411: The client encrypts the modification information in the information modification instruction based on the public key to obtain encrypted information.

[0168] The server sends its public key to the client, which then uses that public key to perform asymmetric encryption on the modification instructions to obtain encrypted information, thus reducing the possibility of leakage during transmission or at the front end.

[0169] Step S412: The client sends the encrypted information to the server.

[0170] Step S413: The server decrypts the encrypted information based on the private key and adjusts the information based on the decrypted modified information.

[0171] In this embodiment, after receiving the encrypted information, the server decrypts it using the corresponding private key to obtain the modified information, thereby adjusting the information.

[0172] Figure 4 The embodiment does not include recovery-related content. In practice, recovery-related steps can be added after step S407 above. The implementation of recovery-related steps can refer to the above embodiment, and will not be repeated here.

[0173] The above scheme generates a public-private key pair based on the object identifier corresponding to the encryption request, the client's organization number, and the timestamp, ensuring the uniqueness of the public-private key pair; by using asymmetric encryption on the modified information, it reduces the possibility of leakage during transmission or at the front end.

[0174] In this embodiment of the application, the information processing method executed by the server is as follows: Figure 5 As shown, it includes the following steps:

[0175] Step S501: After receiving a data request sent by the client, the data request is verified based on the verification information in the data request; wherein, the verification information is generated by the client based on the client's identifier, the object identifier corresponding to the data request, and the session identifier corresponding to the data request;

[0176] Step S502: After the data request is verified, determine the information type and target information corresponding to the data request;

[0177] Step S503: De-identify the target information based on the de-identification method corresponding to the information type to obtain de-identified information, and send the de-identified information and the information type to the client so that after the client displays the de-identified information, it responds to the recovery instruction for the de-identified information corresponding to the target information type and sends the key fields in the recovery instruction to the server.

[0178] Step S504: Determine whether to restore the de-identified information based on the key fields.

[0179] In some optional implementations, the information types include key certificate types, customer identification information types, customer contact information types, customer account information types, and customer financial information types;

[0180] The key certificate class is completely anonymized; the customer identification information class, customer contact information class, customer account information class, and customer financial information class are partially anonymized.

[0181] In some optional implementations, the target information is de-identified based on the de-identification method corresponding to the information type, including:

[0182] If the desensitization method corresponding to the information type is complete desensitization, then the desensitization character corresponding to the information type is determined, and the target information is desensitized based on the desensitization character;

[0183] If the desensitization method corresponding to the information type is partial desensitization, then determine the desensitization digits and desensitization characters corresponding to the information type, and perform desensitization processing on the desensitization digits of the target information based on the desensitization characters.

[0184] In some optional implementations, after determining whether to restore the de-identified information based on the key fields, the method further includes:

[0185] If it is determined that the de-identified information will be restored, then the target duration corresponding to the information type is determined;

[0186] The target information and the target duration are sent to the client so that the client can display the target information within the target duration and display the de-identified information after the target duration.

[0187] Some optional implementations also include:

[0188] In response to an encryption request sent by the client, a private key and a public key are generated based on the object identifier corresponding to the encryption request, the client's organization number, and a timestamp; wherein, the encryption request is triggered by the client after receiving an information modification instruction;

[0189] The public key is sent to the client, so that the client can encrypt the modified information in the information modification instruction based on the public key to obtain encrypted information, and then send the encrypted information to the server.

[0190] The encrypted information is decrypted based on the private key, and the information is adjusted based on the modified information after decryption.

[0191] In this embodiment of the application, the information processing method executed by the client is as follows: Figure 6 As shown, it includes the following steps:

[0192] Step S601: Generate verification information based on the client's identifier, the object identifier corresponding to the data request, and the session identifier corresponding to the data request;

[0193] Step S602: Send a data request carrying the verification information to the server, so that the server verifies the data request based on the verification information, determines the information type and target information corresponding to the data request, and performs desensitization processing on the target information based on the desensitization method corresponding to the information type to obtain desensitized information;

[0194] Step S603: Receive the de-identified information and the information type sent by the server;

[0195] Step S604: Display the de-identified information, and in response to the recovery instruction for the de-identified information corresponding to the target information type, send the key fields in the recovery instruction to the server so that the server can determine whether to recover the de-identified information based on the key fields.

[0196] In some optional implementations, after displaying the de-identified information, the method further includes:

[0197] If the target duration and the target information are received, the target information is displayed within the target duration, and the de-identified information is displayed after the target duration; wherein, the target duration is determined by the server after deciding to restore the de-identified information.

[0198] Some optional implementations also include:

[0199] Upon receiving the information modification instruction, an encryption request is sent to the server so that the server generates a private key and a public key based on the object identifier corresponding to the encryption request, the organization number of the client, and the timestamp.

[0200] After receiving the public key sent by the server, the modified information in the information modification instruction is encrypted based on the public key to obtain encrypted information;

[0201] The encrypted information is sent to the server so that the server can decrypt the encrypted information based on the private key and adjust the information based on the decrypted modified information.

[0202] Figures 5-6 For details on the specific implementation of the embodiments, please refer to the implementation of the above-described interaction method; repeated details will not be repeated here.

[0203] like Figure 7 As shown, based on and Figure 5 The present application provides a first information processing device 700, which is based on the same inventive concept as the information processing method shown, and is applied to a server. The device includes:

[0204] The verification module 701 is used to verify the data request based on the verification information in the data request after receiving the data request sent by the client; wherein the verification information is generated by the client based on the client's identifier, the object identifier corresponding to the data request, and the session identifier corresponding to the data request;

[0205] The information determination module 702 is used to determine the information type and target information corresponding to the data request after the data request has been verified.

[0206] The desensitization module 703 is used to desensitize the target information based on the desensitization method corresponding to the information type, obtain desensitized information, and send the desensitized information and the information type to the client, so that after the client displays the desensitized information, it responds to the restoration instruction for the desensitized information corresponding to the target information type and sends the key fields in the restoration instruction to the server.

[0207] The desensitization module 703 is also used to determine whether to restore the desensitized information based on the key field.

[0208] In some optional implementations, the information types include key certificate types, customer identification information types, customer contact information types, customer account information types, and customer financial information types;

[0209] The key certificate class is completely anonymized; the customer identification information class, customer contact information class, customer account information class, and customer financial information class are partially anonymized.

[0210] In some optional implementations, the desensitization module 703 is specifically used for:

[0211] If the desensitization method corresponding to the information type is complete desensitization, then the desensitization character corresponding to the information type is determined, and the target information is desensitized based on the desensitization character;

[0212] If the desensitization method corresponding to the information type is partial desensitization, then determine the desensitization digits and desensitization characters corresponding to the information type, and perform desensitization processing on the desensitization digits of the target information based on the desensitization characters.

[0213] In some optional implementations, after determining whether to restore the de-identified information based on the key fields, the de-identification module 703 is further configured to:

[0214] If it is determined that the de-identified information will be restored, then the target duration corresponding to the information type is determined;

[0215] The target information and the target duration are sent to the client so that the client can display the target information within the target duration and display the de-identified information after the target duration.

[0216] In some optional implementations, a first encryption module 704 is also included, for:

[0217] In response to an encryption request sent by the client, a private key and a public key are generated based on the object identifier corresponding to the encryption request, the client's organization number, and a timestamp; wherein, the encryption request is triggered by the client after receiving an information modification instruction;

[0218] The public key is sent to the client, so that the client can encrypt the modified information in the information modification instruction based on the public key to obtain encrypted information, and then send the encrypted information to the server.

[0219] The encrypted information is decrypted based on the private key, and the information is adjusted based on the modified information after decryption.

[0220] like Figure 8 As shown, based on and Figure 6 The present application provides a second information processing device 800, which is based on the same inventive concept as the information processing method shown, and is applied to a client, including:

[0221] The verification information generation module 801 is used to generate verification information based on the client's identifier, the object identifier corresponding to the data request, and the session identifier corresponding to the data request;

[0222] The request module 802 is used to send a data request carrying the verification information to the server, so that the server verifies the data request based on the verification information, determines the information type and target information corresponding to the data request, and performs desensitization processing on the target information based on the desensitization method corresponding to the information type to obtain desensitized information.

[0223] The receiving module 803 is used to receive the de-identified information and the information type sent by the server;

[0224] The request module 802 is further configured to display the de-identified information, and in response to a recovery instruction for the de-identified information corresponding to the target information type, send the key fields in the recovery instruction to the server so that the server can determine whether to recover the de-identified information based on the key fields.

[0225] In some alternative implementations, the receiving module 803 is also used for:

[0226] If the target duration and the target information are received, the target information is displayed within the target duration, and the de-identified information is displayed after the target duration; wherein, the target duration is determined by the server after deciding to restore the de-identified information.

[0227] Some alternative implementations also include a second encryption module 804, used for:

[0228] Upon receiving the information modification instruction, an encryption request is sent to the server so that the server generates a private key and a public key based on the object identifier corresponding to the encryption request, the organization number of the client, and the timestamp.

[0229] After receiving the public key sent by the server, the modified information in the information modification instruction is encrypted based on the public key to obtain encrypted information;

[0230] The encrypted information is sent to the server so that the server can decrypt the encrypted information based on the private key and adjust the information based on the decrypted modified information.

[0231] Figures 7-8For details on the specific implementation of the embodiments, please refer to the implementation of the above-described interaction method; repeated details will not be repeated here.

[0232] Based on the same technical concept, this application also provides a server 900, such as... Figure 9 As shown, it includes at least one processor 901 and a memory 902 connected to at least one processor. In this embodiment, the specific connection medium between the processor 901 and the memory 902 is not limited. Figure 9 Taking the connection between processor 901 and memory 902 via bus 903 as an example, the bus can be divided into address bus, data bus, control bus, etc. For ease of illustration, Figure 9 The bus is represented by a single thick line, but this does not mean that there is only one bus or one type of bus.

[0233] The processor 901 serves as the control center of the server, connecting to various parts of the server via various interfaces and lines. It performs data processing by running or executing instructions stored in the memory 902 and accessing data stored in the memory 902. Optionally, the processor 901 may include one or more processing units. The processor 901 may integrate an application processor and a modem processor. The application processor primarily handles the operating system, user interface, and applications, while the modem processor primarily handles issuing instructions. It is understood that the modem processor may not be integrated into the processor 901. In some embodiments, the processor 901 and the memory 902 may be implemented on the same chip; in other embodiments, they may be implemented on separate chips.

[0234] The processor 901 can be a general-purpose processor, such as a central processing unit (CPU), digital signal processor, application-specific integrated circuit (ASIC), field-programmable gate array (FPGA), or other programmable logic device, discrete gate or transistor logic device, or discrete hardware component, capable of implementing or executing the methods, steps, and logic block diagrams disclosed in the embodiments of this application. The general-purpose processor can be a microprocessor or any conventional processor. The steps of the methods disclosed in the information processing method embodiments can be directly manifested as being executed by a hardware processor, or executed by a combination of hardware and software modules within the processor.

[0235] Memory 902, as a non-volatile computer-readable storage medium, can be used to store non-volatile software programs, non-volatile computer-executable programs, and modules. Memory 902 may include at least one type of storage medium, such as flash memory, hard disk, multimedia card, card-type memory, random access memory (RAM), static random access memory (SRAM), programmable read-only memory (PROM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), magnetic storage, magnetic disk, optical disk, etc. Memory 902 can be any other medium capable of carrying or storing desired program code in the form of instructions or data structures that can be accessed by a computer, but is not limited thereto. In the embodiments of this application, memory 902 can also be a circuit or any other device capable of implementing storage functions for storing program instructions and / or data.

[0236] In this embodiment, the memory 902 stores a computer program, which, when executed by the processor 901, causes the processor 901 to perform the following:

[0237] Upon receiving a data request from the client, the client verifies the data request based on the verification information contained in the data request; wherein, the verification information is generated by the client based on the client's identifier, the object identifier corresponding to the data request, and the session identifier corresponding to the data request.

[0238] After the data request is verified, the information type and target information corresponding to the data request are determined.

[0239] The target information is de-identified based on the de-identification method corresponding to the information type to obtain de-identified information. The de-identified information and the information type are then sent to the client so that after the client displays the de-identified information, it responds to the recovery instruction for the de-identified information corresponding to the target information type by sending the key fields in the recovery instruction to the server.

[0240] Based on the key fields, determine whether to restore the de-identified information.

[0241] In some optional implementations, the information types include key certificate types, customer identification information types, customer contact information types, customer account information types, and customer financial information types;

[0242] The key certificate class is completely anonymized; the customer identification information class, customer contact information class, customer account information class, and customer financial information class are partially anonymized.

[0243] In some optional implementations, processor 901 specifically performs:

[0244] If the desensitization method corresponding to the information type is complete desensitization, then the desensitization character corresponding to the information type is determined, and the target information is desensitized based on the desensitization character;

[0245] If the desensitization method corresponding to the information type is partial desensitization, then determine the desensitization digits and desensitization characters corresponding to the information type, and perform desensitization processing on the desensitization digits of the target information based on the desensitization characters.

[0246] In some optional implementations, after determining whether to restore the de-identified information based on the key fields, the processor 901 further executes:

[0247] If it is determined that the de-identified information will be restored, then the target duration corresponding to the information type is determined;

[0248] The target information and the target duration are sent to the client so that the client can display the target information within the target duration and display the de-identified information after the target duration.

[0249] In some alternative implementations, processor 901 also performs:

[0250] In response to an encryption request sent by the client, a private key and a public key are generated based on the object identifier corresponding to the encryption request, the client's organization number, and a timestamp; wherein, the encryption request is triggered by the client after receiving an information modification instruction;

[0251] The public key is sent to the client, so that the client can encrypt the modified information in the information modification instruction based on the public key to obtain encrypted information, and then send the encrypted information to the server.

[0252] The encrypted information is decrypted based on the private key, and the information is adjusted based on the modified information after decryption.

[0253] Since this server is the same as the server in the method of this application embodiment, and the principle of the server in solving the problem is similar to that of the method, the implementation of the server can refer to the implementation of the method, and the repeated parts will not be described again.

[0254] Based on the same technical concept, this application also provides a client 1000, such as... Figure 10 As shown, it includes at least one processor 1001 and a memory 1002 connected to at least one processor. In this embodiment, the specific connection medium between the processor 1001 and the memory 1002 is not limited. Figure 10 Taking the connection between processor 1001 and memory 1002 via bus 1003 as an example. The bus can be divided into address bus, data bus, control bus, etc. For ease of illustration, Figure 10 The bus is represented by a single thick line, but this does not mean that there is only one bus or one type of bus.

[0255] The processor 1001 serves as the control center for the client, connecting various parts of the client via various interfaces and lines. It performs data processing by running or executing instructions stored in the memory 1002 and accessing data stored in the memory 1002. Optionally, the processor 1001 may include one or more processing units. The processor 1001 may integrate an application processor and a modem processor. The application processor primarily handles the operating system, user interface, and applications, while the modem processor primarily handles issuing instructions. It is understood that the modem processor may not be integrated into the processor 1001. In some embodiments, the processor 1001 and the memory 1002 may be implemented on the same chip; in other embodiments, they may be implemented on separate chips.

[0256] The processor 1001 can be a general-purpose processor, such as a central processing unit, digital signal processor, application-specific integrated circuit, field-programmable gate array or other programmable logic device, discrete gate or transistor logic device, or discrete hardware component, capable of implementing or executing the methods, steps, and logic block diagrams disclosed in the embodiments of this application. The general-purpose processor can be a microprocessor or any conventional processor. The steps of the methods disclosed in the information processing method embodiments can be directly manifested as being executed by a hardware processor, or executed by a combination of hardware and software modules within the processor.

[0257] Memory 1002, as a non-volatile computer-readable storage medium, can be used to store non-volatile software programs, non-volatile computer-executable programs, and modules. Memory 1002 may include at least one type of storage medium, such as flash memory, hard disk, multimedia card, card-type memory, random access memory, static random access memory, programmable read-only memory, read-only memory, electrically erasable programmable read-only memory, magnetic memory, magnetic disk, optical disk, etc. Memory 1002 can be any other medium capable of carrying or storing desired program code in the form of instructions or data structures that can be accessed by a computer, but is not limited thereto. In the embodiments of this application, memory 1002 can also be a circuit or any other device capable of implementing storage functions for storing program instructions and / or data.

[0258] In this embodiment, the memory 1002 stores a computer program, which, when executed by the processor 1001, causes the processor 1001 to perform the following:

[0259] Verification information is generated based on the client's identifier, the object identifier corresponding to the data request, and the session identifier corresponding to the data request;

[0260] A data request carrying the verification information is sent to the server, so that the server verifies the data request based on the verification information, determines the information type and target information corresponding to the data request, and performs desensitization processing on the target information based on the desensitization method corresponding to the information type to obtain desensitized information.

[0261] Receive the de-identified information and the information type sent by the server;

[0262] The de-identified information is displayed, and in response to a recovery instruction for the de-identified information corresponding to the target information type, the key fields in the recovery instruction are sent to the server so that the server can determine whether to recover the de-identified information based on the key fields.

[0263] In some optional implementations, processor 1001 also performs:

[0264] If the target duration and the target information are received, the target information is displayed within the target duration, and the de-identified information is displayed after the target duration; wherein, the target duration is determined by the server after deciding to restore the de-identified information.

[0265] In some optional implementations, processor 1001 also performs:

[0266] Upon receiving the information modification instruction, an encryption request is sent to the server so that the server generates a private key and a public key based on the object identifier corresponding to the encryption request, the organization number of the client, and the timestamp.

[0267] After receiving the public key sent by the server, the modified information in the information modification instruction is encrypted based on the public key to obtain encrypted information;

[0268] The encrypted information is sent to the server so that the server can decrypt the encrypted information based on the private key and adjust the information based on the decrypted modified information.

[0269] Since this client is the same client in the method of this application embodiment, and the principle of the client in solving the problem is similar to that of the method, the implementation of the client can refer to the implementation of the method, and the repeated parts will not be described again.

[0270] Based on the same technical concept, embodiments of this application also provide a computer-readable storage medium storing a computer program that, when executed by a processor, implements the steps of the above-described information processing method.

[0271] In some alternative implementations, various aspects of the information processing method provided in this application may also be implemented as a program product containing computer-executable instructions. When the program product is run on a computer device, the computer-executable instructions are used to cause the computer device to perform the steps of the information processing method according to the various exemplary embodiments of this application described above.

[0272] Those skilled in the art will understand that embodiments of this application can be provided as methods, systems, or computer program products. Therefore, this application can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, this application can take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0273] This application is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to this application. It should be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart illustrations. Figure 1One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0274] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0275] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0276] Although preferred embodiments of this application have been described, those skilled in the art, upon learning the basic inventive concept, can make other changes and modifications to these embodiments. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments as well as all changes and modifications falling within the scope of this application.

[0277] Obviously, those skilled in the art can make various modifications and variations to this application without departing from the spirit and scope of this application. Therefore, if such modifications and variations fall within the scope of the claims of this application and their equivalents, this application also intends to include such modifications and variations.

Claims

1. An information processing method, characterized in that, Applied to the server side, the method includes: Upon receiving a data request from the client, the client verifies the data request based on the verification information contained in the data request; wherein, the verification information is generated by the client based on the client's identifier, the object identifier corresponding to the data request, and the session identifier corresponding to the data request. After the data request is verified, the information type and target information corresponding to the data request are determined. The target information is de-identified based on the de-identification method corresponding to the information type to obtain de-identified information. The de-identified information and the information type are then sent to the client so that after the client displays the de-identified information, it responds to the recovery instruction for the de-identified information corresponding to the target information type by sending the key fields in the recovery instruction to the server. Based on the key fields, determine whether to restore the de-identified information; After determining whether to restore the de-identified information based on the key fields, the process further includes: If it is determined that the de-identified information will be restored, then the target duration corresponding to the information type is determined; The target information and the target duration are sent to the client so that the client can display the target information within the target duration and display the de-identified information after the target duration.

2. The method as described in claim 1, characterized in that, The information types include key certificate types, customer identification information types, customer contact information types, customer account information types, and customer financial information types; The key certificate class is completely anonymized; the customer identification information class, customer contact information class, customer account information class, and customer financial information class are partially anonymized.

3. The method as described in claim 1, characterized in that, The target information is de-identified based on the de-identification method corresponding to the information type, including: If the desensitization method corresponding to the information type is complete desensitization, then the desensitization character corresponding to the information type is determined, and the target information is desensitized based on the desensitization character; If the desensitization method corresponding to the information type is partial desensitization, then determine the desensitization digits and desensitization characters corresponding to the information type, and perform desensitization processing on the desensitization digits of the target information based on the desensitization characters.

4. The method according to any one of claims 1 to 3, characterized in that, Also includes: In response to an encryption request sent by the client, a private key and a public key are generated based on the object identifier corresponding to the encryption request, the client's organization number, and a timestamp; wherein, the encryption request is triggered by the client after receiving an information modification instruction; The public key is sent to the client, so that the client can encrypt the modified information in the information modification instruction based on the public key to obtain encrypted information, and then send the encrypted information to the server. The encrypted information is decrypted based on the private key, and the information is adjusted based on the modified information after decryption.

5. An information processing method, characterized in that, Applied to a client, the method includes: Verification information is generated based on the client's identifier, the object identifier corresponding to the data request, and the session identifier corresponding to the data request; A data request carrying the verification information is sent to the server, so that the server verifies the data request based on the verification information, determines the information type and target information corresponding to the data request, and performs desensitization processing on the target information based on the desensitization method corresponding to the information type to obtain desensitized information. Receive the de-identified information and the information type sent by the server; The de-identified information is displayed, and in response to a recovery instruction for the de-identified information corresponding to the target information type, the key fields in the recovery instruction are sent to the server so that the server can determine whether to recover the de-identified information based on the key fields. After displaying the de-identified information, the following is also included: If the target duration and the target information are received, the target information is displayed within the target duration, and the de-identified information is displayed after the target duration; wherein, the target duration is determined by the server after deciding to restore the de-identified information.

6. The method as described in claim 5, characterized in that, Also includes: Upon receiving the information modification instruction, an encryption request is sent to the server so that the server generates a private key and a public key based on the object identifier corresponding to the encryption request, the organization number of the client, and the timestamp. After receiving the public key sent by the server, the modified information in the information modification instruction is encrypted based on the public key to obtain encrypted information; The encrypted information is sent to the server so that the server can decrypt the encrypted information based on the private key and adjust the information based on the decrypted modified information.

7. An information processing device, characterized in that, For use on the server side, the device includes: The verification module is used to verify the data request based on the verification information in the data request after receiving the data request sent by the client; wherein the verification information is generated by the client based on the client's identifier, the object identifier corresponding to the data request, and the session identifier corresponding to the data request; The information determination module is used to determine the information type and target information corresponding to the data request after the data request has been verified. The desensitization module is used to desensitize the target information based on the desensitization method corresponding to the information type, obtain desensitized information, and send the desensitized information and the information type to the client, so that after the client displays the desensitized information, it responds to the restoration instruction for the desensitized information corresponding to the target information type and sends the key fields in the restoration instruction to the server. The desensitization module is also used to determine whether to restore the desensitized information based on the key fields; After determining whether to restore the de-identified information based on the key fields, the de-identification module is further configured to: If it is determined that the de-identified information will be restored, then the target duration corresponding to the information type is determined; The target information and the target duration are sent to the client so that the client can display the target information within the target duration and display the de-identified information after the target duration.

8. An information processing device, characterized in that, For use on a client, the device includes: The verification information generation module is used to generate verification information based on the client's identifier, the object identifier corresponding to the data request, and the session identifier corresponding to the data request; The request module is used to send a data request carrying the verification information to the server, so that the server verifies the data request based on the verification information, determines the information type and target information corresponding to the data request, and performs desensitization processing on the target information based on the desensitization method corresponding to the information type to obtain desensitized information. A receiving module is used to receive the de-identified information and the information type sent by the server; The request module is further configured to display the de-identified information, and in response to a recovery instruction for the de-identified information corresponding to the target information type, send the key fields in the recovery instruction to the server so that the server can determine whether to recover the de-identified information based on the key fields; The receiving module is also used for: If the target duration and the target information are received, the target information is displayed within the target duration, and the de-identified information is displayed after the target duration; wherein, the target duration is determined by the server after deciding to restore the de-identified information.

9. A server-side component, characterized in that, It includes at least one processor and at least one memory, wherein the memory stores a computer program that, when executed by the processor, causes the processor to perform the method as described in any one of claims 1 to 4.

10. A client, characterized in that, It includes at least one processor and at least one memory, wherein the memory stores a computer program that, when executed by the processor, causes the processor to perform the method as described in any one of claims 5 to 6.

11. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a computer program, which, when executed by a processor, implements the method as described in any one of claims 1 to 6.

12. A computer program product, characterized in that, It includes computer-executable instructions for causing a computer to perform the method as described in any one of claims 1 to 6.

Images