Data desensitization method and device, computer equipment and storage medium

Abstract

The invention relates to a data desensitization method and device, computer equipment and a storage medium. The method comprises the following steps: in response to a field selection operation performed on a target data table, determining each target field to be desensitized; in response to a desensitization strategy configuration operation performed on each target field, determining a desensitization strategy corresponding to each target field; displaying parameterized configuration options respectively corresponding to the desensitization strategies; in response to a trigger operation performed on each parameterized configuration option, determining desensitization parameters respectively configured for each desensitization strategy; and performing desensitization processing on the field value of the target field corresponding to each desensitization strategy according to the desensitization parameters respectively configured for each desensitization strategy. By adopting the method, the data desensitization efficiency can be improved.

Description

Technical Field

[0001] The present application relates to the field of computer technology, and in particular to a data desensitization method, apparatus, computer equipment and storage medium. Background Art

[0002] In recent years, data has become an important asset for enterprises. For security reasons, in the process of applying data, it is necessary to follow the data security principles and perform data desensitization on the data used.

[0003] At present, for data tables with different structures, a fixed desensitization script needs to be written specifically for each data table, so as to perform data desensitization processing on the data table with a fixed structure according to the fixed script.

[0004] However, when a data table with a new structure appears, the fixed desensitization script cannot meet the desensitization requirements of the data table. At this time, it is necessary to rewrite the corresponding desensitization script, and then perform data desensitization processing according to the rewritten desensitization script, which will result in low efficiency of data desensitization. Summary of the invention

[0005] Based on this, it is necessary to provide a data desensitization method, device, computer equipment and storage medium that can improve the efficiency of data desensitization in response to the above technical problems.

[0006] In a first aspect, the present application provides a data desensitization method. The method comprises:

[0007] In response to a field selection operation performed on a target data table, determining each target field to be desensitized;

[0008] In response to the desensitization strategy configuration operation performed on each target field, determining the desensitization strategy corresponding to each target field;

[0009] Display the parameterized configuration options corresponding to each desensitization strategy;

[0010] In response to the triggering operation performed on each parameterized configuration option, determining the desensitization parameters configured for each desensitization strategy;

[0011] According to the desensitization parameters configured for each desensitization strategy, the field value of the target field corresponding to each desensitization strategy is desensitized.

[0012] In a second aspect, the present application also provides a data desensitization device. The device includes:

[0013] A field determination module, used to determine each target field to be desensitized in response to a field selection operation performed on a target data table;

[0014] A policy configuration module, for determining the desensitization policies corresponding to the target fields in response to the desensitization policy configuration operation performed on the target fields;

[0015] A parameter configuration module, used to display parameterized configuration options corresponding to each desensitization strategy; in response to a trigger operation on each parameterized configuration option, determine the desensitization parameters configured for each desensitization strategy;

[0016] The data desensitization module is used to perform desensitization processing on the field value of the target field corresponding to each desensitization strategy according to the desensitization parameters configured for each desensitization strategy.

[0017] In some embodiments, the data desensitization device also includes a data table determination module, which is used to determine the original data table location and the import field range in response to the data table configuration operation; connect to the corresponding external system according to the original data table location, and obtain the corresponding data table from the database of the external system; filter the fields of the data table according to the import field range, so as to load the filtered fields into the data table used for desensitization processing to obtain the target data table.

[0018] In some embodiments, the desensitization strategy includes a desensitization algorithm. The policy configuration module is also used to respond to the rule selection operation performed from each pre-configured desensitization rule, obtain the desensitization rules corresponding to each target field; determine the candidate desensitization algorithms that match each target field according to the desensitization rules corresponding to each target field; each candidate desensitization algorithm is an algorithm that complies with the corresponding desensitization rule; respond to the algorithm selection operation performed on each candidate desensitization algorithm, and obtain the desensitization algorithm corresponding to each target field.

[0019] In some embodiments, the parameter configuration module is also used to determine the candidate parameters corresponding to each desensitizing algorithm; the candidate parameters are the parameters required to execute the corresponding desensitizing algorithm; according to the parameter type of each candidate parameter, the interface component corresponding to each candidate parameter is determined; according to each candidate parameter and the interface component corresponding to each candidate parameter, the parameterized configuration options corresponding to each desensitizing algorithm are displayed.

[0020] In some embodiments, the parameter configuration module is further used to determine the desensitization parameters configured for each desensitization algorithm from the candidate parameters corresponding to each desensitization algorithm in response to the parameter selection operation performed on each parameterized configuration option.

[0021] In some embodiments, the data desensitization module is also used to load corresponding desensitization parameters for the target field corresponding to each desensitization strategy through the configuration interface corresponding to the target field, and to load the corresponding desensitization program through the calling interface corresponding to the target field, so that the loaded desensitization program uses the loaded desensitization parameters to desensitize the field value of the target field when implementing the desensitization algorithm corresponding to the target field.

[0022] In some embodiments, the data desensitizing device also includes a data export module, which is used to determine, for each target field, an export field name mapped to the field name of the target field according to the field name mapping relationship corresponding to the export data table; determine the field value filling area corresponding to the export field name in the export data table, and fill the field value of the target field into the field value filling area to obtain an updated export data table.

[0023] In a third aspect, the present application provides a computer device, the computer device comprising a memory and a processor, the memory storing a computer program, and the processor implementing the steps in the above method when executing the computer program.

[0024] In a fourth aspect, the present application provides a computer-readable storage medium having a computer program stored thereon, which implements the steps in the above method when executed by a processor.

[0025] In a fifth aspect, the present application provides a computer program product, which includes a computer program, and the computer program implements the steps in the above method when executed by a processor.

[0026] The above-mentioned data desensitization method, device, computer equipment, storage medium and computer program product determine the target fields to be desensitized by responding to the field selection operation performed on the target data table; determine the desensitization strategies corresponding to each target field in response to the desensitization strategy configuration operation performed on each target field; display the parameterized configuration options corresponding to each desensitization strategy; determine the desensitization parameters configured for each desensitization strategy in response to the trigger operation performed on each parameterized configuration option; and perform desensitization processing on the field value of the target field corresponding to each desensitization strategy according to the desensitization parameters configured for each desensitization strategy. In other words, the present application can abstract the data desensitization process into a general process of data processing, that is, the user can customize the configuration of each target field to be desensitized, the desensitization strategy corresponding to each target field, and the desensitization parameters required for executing each desensitization strategy in the interface. A series of desensitization parameters required in the data desensitization processing process can be completed through interface configuration, thereby flexibly adapting to various types of data desensitization requirements, which is more efficient than manually writing desensitization scripts. BRIEF DESCRIPTION OF THE DRAWINGS

[0027] Figure 1 A flowchart of a data desensitization method provided in an embodiment of the present application;

[0028] Figure 2 A schematic diagram of a data desensitization device provided in an embodiment of the present application;

[0029] Figure 3A structural block diagram of a data desensitization device provided in an embodiment of the present application;

[0030] Figure 4 A structural block diagram of another data desensitization device provided in an embodiment of the present application;

[0031] Figure 5 An internal structure diagram of a computer device provided in an embodiment of the present application;

[0032] Figure 6 An internal structure diagram of a computer-readable storage medium provided in an embodiment of the present application. DETAILED DESCRIPTION

[0033] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0034] In some embodiments, Figure 1 As shown, a data desensitization method is provided. This embodiment uses the method applied to a computer device as an example. It can be understood that the computer device can be a terminal. The method can be implemented by the terminal alone or through interaction between a server and the terminal. In this embodiment, the method includes but is not limited to the following steps:

[0035] S102, in response to a field selection operation performed on a target data table, determining target fields to be desensitized.

[0036] The target data table refers to the data table that needs to be desensitized. The field selection operation refers to the operation of selecting some or all of the required fields in the data table. The target field refers to the field determined in the target data table through the field selection operation and used for subsequent desensitization.

[0037] Specifically, the user performs a field selection operation on some or all of the fields in the target data table in the desensitization configuration interface. The computer device responds to the field selection operation and determines the target fields to be desensitized from the fields in the target data table. The desensitization configuration interface refers to a user interface for performing desensitization operations on sensitive data in a data table.

[0038] In some embodiments, after entering the desensitization configuration interface, the user can determine the target data table to be desensitized from the multiple data tables displayed on the desensitization configuration interface. For example, a list consisting of multiple data tables will be displayed on the configuration interface, and the user can view the names, descriptions and related information of these data tables in the interface to select the target data table that needs to be desensitized. Alternatively, the user can view the contents of each data table through the preview function provided by the desensitization configuration interface to understand the fields, data structures and sensitive data that may be contained in each data table, so as to confirm whether the corresponding data table needs to be desensitized.

[0039] S104: In response to the desensitization policy configuration operation performed on each target field, a desensitization policy corresponding to each target field is determined.

[0040] Among them, desensitization strategy refers to the method and rules for converting sensitive data into non-sensitive form according to data confidentiality requirements. Desensitization strategy configuration operation refers to the operation in which the user configures the corresponding desensitization strategy for each target field in the desensitization configuration interface for subsequent desensitization processing.

[0041] Specifically, since the sensitivity and protection requirements of different target fields may be different, the user needs to configure a suitable desensitization strategy for each target field in the desensitization configuration interface. The computer device responds to the above desensitization strategy configuration operation and determines the desensitization strategy configured by the user for each target field.

[0042] In some embodiments, the desensitization strategy includes at least one of replacement desensitization, encryption desensitization, conversion desensitization, partial desensitization, deletion desensitization or desensitization shielding.

[0043] It should be noted that replacement desensitization refers to replacing some or all characters in the target field with specific placeholders or random characters. For example, when the target field is a mobile phone number, replacement desensitization of the mobile phone number can be to replace the middle four digits of the original mobile phone number with "*", such as replacing the original mobile phone number with 138****1234, etc. Encryption desensitization refers to encrypting the target field using an encryption algorithm, and only authorized users can decrypt the encrypted target field. Conversion desensitization refers to desensitizing the target field according to specific rules, for example, it is stipulated that the name field only displays the first letter and the first letter of the last name, and the age field only displays whether it is an adult or not. Partial desensitization refers to replacing the target field with a unique identifier, which is usually associated with data in another data table so that the original target field can be restored when needed. Deletion desensitization refers to directly deleting or clearing the data in the target field. Desensitization shielding refers to deleting or hiding at least part of the target field, such as covering the target field with a black square or dotted line.

[0044] S106, displaying parameterized configuration options corresponding to each desensitization strategy.

[0045] Among them, the parameterized configuration option is an option list obtained by performing interface design according to the corresponding desensitization strategy and used to configure the desensitization parameters of the corresponding desensitization strategy.

[0046] Specifically, for each desensitization strategy in each desensitization strategy, after the user determines the desensitization strategy corresponding to a target field, the computer device provides a corresponding page component in the desensitization configuration interface, and displays some desensitization parameters required to execute the desensitization strategy in the page component for the user's reference, thereby obtaining the parameterized configuration options corresponding to the desensitization strategy.

[0047] S108, in response to the triggering operation performed on each parameterized configuration option, determining the desensitization parameters configured for each desensitization strategy.

[0048] The desensitization parameters refer to the specific parameters needed to desensitize the target field using the corresponding desensitization strategy. For example, if the desensitization strategy is to replace the first N bits of the target field with replacement characters, the desensitization parameters corresponding to the desensitization strategy can be "*" and "3", which means that the first 3 bits of the target field need to be replaced with the replacement character "*".

[0049] A trigger operation refers to an operation that is triggered by a parameterized configuration option to generate a desensitization parameter corresponding to a desensitization policy. In some embodiments, the trigger operation may be an operation of selecting a desensitization parameter displayed in the parameterized configuration option. In other embodiments, the trigger operation may be an operation of configuring a custom desensitization parameter by referring to the desensitization parameter displayed in the parameterized configuration option.

[0050] Specifically, the user selects the desensitizing parameters in each parameterized configuration option, or the user performs a customized parameter configuration operation with reference to the desensitizing parameters displayed in each parameterized configuration option. The computer device can then respond to any of the above triggering operations to configure the desensitizing parameters selected by the user in the parameterized configuration option as the desensitizing parameters required by the corresponding desensitizing strategy, or configure the user-defined desensitizing parameters as the desensitizing parameters required by the corresponding desensitizing strategy.

[0051] S110, performing desensitization processing on the field value of the target field corresponding to each desensitization strategy according to the desensitization parameters respectively configured for each desensitization strategy.

[0052] The field value of the target field refers to the specific value or content contained in the target field.

[0053] Specifically, for each target field in each target field, the computer device obtains the field value corresponding to the target field, and performs corresponding desensitization processing on the field value corresponding to the target field according to the desensitization strategy selected for the target field and the configured desensitization parameters to obtain the field value after desensitization processing.

[0054] For example, assuming that the target field is the name field, and the field value corresponding to the name field is "Zhang San", the corresponding desensitization strategy is: use the replacement character to replace the Nth bit of the name field, and the desensitization parameters used are: "2" and "*". The field value obtained after desensitizing the field value "Zhang San" of the name field is "Zhang*".

[0055] The above-mentioned data desensitization method, device, computer equipment, storage medium and computer program product determine the target fields to be desensitized by responding to the field selection operation performed on the target data table; determine the desensitization strategies corresponding to each target field in response to the desensitization strategy configuration operation performed on each target field; display the parameterized configuration options corresponding to each desensitization strategy; determine the desensitization parameters configured for each desensitization strategy in response to the trigger operation performed on each parameterized configuration option; and perform desensitization processing on the field value of the target field corresponding to each desensitization strategy according to the desensitization parameters configured for each desensitization strategy. In other words, the present application can abstract the data desensitization process into a general process of data processing, that is, the user can customize the configuration of each target field to be desensitized, the desensitization strategy corresponding to each target field, and the desensitization parameters required for executing each desensitization strategy in the interface. A series of desensitization parameters required in the data desensitization processing process can be completed through interface configuration, thereby flexibly adapting to various types of data desensitization requirements, which is more efficient than manually writing desensitization scripts.

[0056] In some embodiments, before S102, the data desensitization method of the embodiments of the present application also includes but is not limited to: determining the original data table location and the import field range in response to the data table configuration operation; connecting to the corresponding external system according to the original data table location, and obtaining the corresponding data table from the database of the external system; filtering the fields of the data table according to the import field range to load the filtered fields into the data table used for desensitization processing to obtain the target data table.

[0057] The data table configuration operation refers to the operation of configuring the data table to be desensitized. The original data table location refers to the external system from which the original data table can be called, and the specific location in the database of the external system where it is stored. The external system refers to a third-party system that does not belong to the same system as the current system. The import field range refers to the specified field range that needs to be imported into this system when the original data table is imported into this system.

[0058] Specifically, before determining the target data table, the user needs to specify the original data table location and import field range of the data table to be configured. The computer device determines the original data table location and import field range configured by the user in response to the above-mentioned data table configuration operation. Based on the original data table location, the computer device determines the external system to be called, establishes a communication connection with the external system, and obtains the corresponding data table from the database of the external system with the communication connection. The computer device screens each field in the data table according to the import field range to determine the fields that need to be retained, and loads the fields that need to be retained into the data table for desensitization processing, which has been set up in advance with a data structure, to obtain the target data table to be desensitized.

[0059] It can be seen that in this embodiment, by importing data tables of external systems, data integration and consolidation operations between different systems can be achieved. By specifying the import field range of the data table, it can be ensured that only necessary fields are imported to reduce the time and resource consumption of the import operation.

[0060] In some embodiments, the desensitization strategy includes a desensitization algorithm. S104 specifically includes but is not limited to: in response to the rule selection operation performed from each pre-configured desensitization rule, obtain the desensitization rules corresponding to each target field; according to the desensitization rules corresponding to each target field, determine each candidate desensitization algorithm that matches each target field; in response to the algorithm selection operation performed on each candidate desensitization algorithm, obtain the desensitization algorithm corresponding to each target field.

[0061] Desensitization rules refer to the rules for changing or hiding sensitive data during data processing, and desensitization algorithms refer to the specific algorithms or technologies used to implement desensitization rules.

[0062] The rule selection operation refers to the operation of selecting a corresponding desensitization rule from the pre-configured desensitization rules.

[0063] A candidate desensitization algorithm refers to one or more desensitization algorithms required to execute a corresponding desensitization rule.

[0064] The algorithm selection operation refers to the operation of selecting a corresponding desensitization algorithm from among various candidate desensitization algorithms.

[0065] In some embodiments, the desensitization rules include at least one of replacement rules, mask rules, desensitization rules, encryption rules, or hash rules. Among them, the replacement rule refers to replacing the target field with randomly generated data or fixed template data. The mask rule refers to partially hiding or covering up the target field. The desensitization rule refers to replacing or removing characters from the target field. The encryption rule refers to encrypting the target field using an encryption algorithm. The hash rule refers to using a hash algorithm to perform a certain degree of obfuscation on the target field.

[0066] In some embodiments, the algorithms supporting the above-mentioned desensitization rules include replacement algorithms, masking algorithms, desensitization algorithms, encryption algorithms and hash algorithms. Exemplarily, the replacement algorithm may be to replace the name field with a random string, replace the birthday field with a fixed date, or replace the mobile phone number field with a random 11-digit string. The masking algorithm may be to replace part of the numbers in the ID card number field with asterisks or other characters. The desensitization algorithm may be to replace the "@" symbol in the email address field with other characters and remove the user name part in the social media account field. The encryption algorithm may be to encrypt sensitive password fields, bank account fields, etc. to ensure that only authorized users can decrypt and read. The hash algorithm may be to process the target field through a hash algorithm to generate a column of fixed-length hash values.

[0067] Specifically, the computer device displays each preconfigured desensitization rule for each target field in the desensitization configuration interface, and the user can select the desensitization rule he wants to use from the preconfigured desensitization rules. The computer device responds to the above rule selection operation to determine the desensitization rule selected by the user and corresponding to each target field. The computer device determines the candidate desensitization algorithms that match each target field based on the desensitization rules corresponding to the target fields, and displays each candidate desensitization algorithm in the desensitization configuration interface. The user selects the desensitization algorithm he wants to use from the candidate desensitization algorithms. The computer device responds to the above algorithm selection operation to determine the desensitization algorithm selected by the user and corresponding to each target field.

[0068] It can be seen that in this embodiment, by providing users with the function of configuring desensitization rules and desensitization algorithms in the desensitization configuration interface, various data desensitization requirements can be flexibly adapted to improve the flexibility of desensitization configuration.

[0069] In some embodiments, S106 specifically includes but is not limited to: determining the candidate parameters corresponding to each desensitization algorithm; determining the interface components corresponding to each candidate parameter according to the parameter type of each candidate parameter; and displaying the parameterized configuration options corresponding to each desensitization algorithm according to each candidate parameter and the interface components corresponding to each candidate parameter.

[0070] Among them, the candidate parameters are the parameters required to execute the corresponding desensitization algorithm.

[0071] In some embodiments, the parameter type of the candidate parameter includes at least one of a numerical parameter, a Boolean parameter, or a date parameter. Among them, a numerical parameter refers to a parameter used to specify a numeric type, such as retaining the first few digits, generating a range of random numbers, etc. A Boolean parameter refers to a parameter used to specify whether to apply the selected desensitization algorithm, such as whether to mask the mobile phone number. A date parameter refers to a parameter used to specify a date type, such as a date format, a date range, etc.

[0072] In some embodiments, the interface component corresponding to the numerical parameter may be at least one of a text box or a drop-down list, etc., so that the user can manually input the desensitized parameter or select the corresponding candidate parameter option. The interface component corresponding to the Boolean parameter may be at least one of a check box or a switch button, etc., and the user can choose whether to apply the option. The interface component corresponding to the date parameter may be at least one of a date selector or a text input box, etc., and the user can select or manually input the date.

[0073] Specifically, the computer device determines the candidate parameters corresponding to each desensitization algorithm. The computer device determines the interface components corresponding to each candidate parameter and more convenient for the user to configure or select the candidate parameters according to the parameter type of each candidate parameter. The computer device regards each candidate parameter and the interface components corresponding to each candidate parameter as a whole as parameterized configuration options corresponding to each desensitization algorithm.

[0074] It can be seen that in this embodiment, for candidate parameters of different parameter types, more appropriate interface components can be selected as parameterized configuration options, which can make it easier for users to select or input parameter values, thereby reducing the user's operating difficulty and improving the user experience. In addition, through the above embodiment, corresponding selection ranges or restrictions can be set for desensitized parameters of different parameter types to ensure that the desensitized parameters set by the user are within a reasonable range.

[0075] In some embodiments, S108 specifically includes but is not limited to: in response to the parameter selection operation performed on each parameterized configuration option, determining the desensitization parameters configured for each desensitization algorithm from each candidate parameter corresponding to each desensitization algorithm.

[0076] The parameter selection operation refers to an operation of selecting a corresponding candidate parameter from among the candidate parameters displayed in each parameterized configuration option.

[0077] Specifically, the user selects corresponding parameters from each parameterized configuration option displayed on the desensitization configuration interface. In response to the parameter selection operation, the computer device determines the candidate parameters selected by the user as desensitization parameters configured for each desensitization algorithm from each candidate parameter corresponding to each desensitization algorithm.

[0078] It can be seen that in this embodiment, by providing the user with the function of configuring desensitizing parameters in the desensitizing configuration interface, various data desensitizing requirements can be flexibly adapted to improve the flexibility of the desensitizing configuration.

[0079] In some embodiments, S110 specifically includes but is not limited to: for the target field corresponding to each desensitization strategy, loading the corresponding desensitization parameters through the configuration interface corresponding to the target field, and loading the corresponding desensitization program through the calling interface corresponding to the target field, so that the loaded desensitization program uses the loaded desensitization parameters to perform desensitization processing on the field value of the target field when implementing the desensitization algorithm corresponding to the target field.

[0080] Among them, the configuration interface refers to the interface used to call the configured desensitization parameters. The calling interface refers to the interface used to call the external desensitization program, which is used to execute to implement the corresponding desensitization algorithm. It can be understood that after the user configures the desensitization parameters in the desensitization configuration interface, the user can configure the corresponding configuration interface for the desensitization parameters, so as to load the desensitization parameters into the system and ensure that the system can correctly use these configurations during the operation process. It should be noted that the configuration interface allows the desensitization parameters to be dynamically configured, so that the desensitization behavior of the system can be flexibly adjusted according to specific needs.

[0081] Specifically, for the target field corresponding to each desensitization strategy, the computer device loads the corresponding desensitization parameters through the configuration interface corresponding to the target field, and loads the corresponding desensitization program through the call interface corresponding to the target field. After loading the desensitization program, the computer device can pass the desensitization parameters to the desensitization program. When the desensitization program is running, it can read the desensitization parameters passed by the computer device and use the read desensitization parameters to desensitize the target field according to the specified desensitization algorithm.

[0082] It can be seen that in this embodiment, automatic desensitization is achieved by loading the corresponding desensitization program during the data desensitization process, which can further improve the efficiency and accuracy of desensitization.

[0083] In some embodiments, after S110, the data desensitization method of the embodiments of the present application specifically also includes but is not limited to: for each target field, determining the export field name mapped to the field name of the target field according to the field name mapping relationship corresponding to the export data table; determining the field value filling area corresponding to the export field name in the export data table, and filling the field value of the target field into the field value filling area to obtain an updated export data table.

[0084] The exported data table refers to the data table used to display the data masking results after the data masking is completed. The field name mapping relationship includes the mapping relationship between the field names of each target field in the target data table and the exported field names of each field in the exported data table. The field value filling area refers to the area used to fill in the field value corresponding to the exported field name.

[0085] Specifically, for each target field, the computer device determines the export field name mapped to the field name of the target field according to the field name mapping relationship corresponding to the export data table. The computer device determines the field value filling area corresponding to the export field name in the export data table, and fills the field value of the target field into the field value filling area to obtain an updated export data table, and exports the updated export data table, thereby completing the data desensitization processing flow.

[0086] It can be seen that in this embodiment, by exporting the field values ​​of each target field in the data masking results to the export data table, it is possible to better control and track the access and use of the masked data. Users can also customize the field names of the export data table to improve the flexibility of data masking.

[0087] In some embodiments, a data table name mapping relationship may also be determined, the relationship including a mapping relationship between a data table name of a target data table and a data table name of an export data table. According to the data table name mapping rule, an export data table matching the target data table may be determined, so that data export processing is performed based on the export data table.

[0088] In some embodiments, Figure 2As shown, the data desensitization device of the present application includes a data import module, a desensitization rule module, a desensitization algorithm module, a configuration module and a data export module. Among them, the data import module is used to import the data table to be desensitized into the system to obtain the target data table. The desensitization rule module is used to determine the desensitization rules used in the data desensitization process. The desensitization algorithm module is used to configure the desensitization algorithm used in the data desensitization process according to the desensitization rules, and determine the desensitization program that calls the desensitization algorithm. The configuration module is used to configure the desensitization parameters required to execute the corresponding desensitization algorithm during the desensitization process. The data export module is used to perform desensitization processing on the fields in the target data table according to the desensitization algorithm and desensitization parameters to export the data desensitization results.

[0089] In some embodiments, the data desensitization method of the present application further includes but is not limited to the following steps:

[0090] (1) In response to a data table configuration operation, determine the original data table location and the import field range.

[0091] (2) Connect to the corresponding external system according to the location of the original data table, and obtain the corresponding data table from the database of the external system.

[0092] (3) Filter the fields in the data table according to the import field range, and load the filtered fields into the data table for desensitization processing to obtain the target data table.

[0093] (4) In response to a field selection operation performed on a target data table, the target fields to be desensitized are determined.

[0094] (5) In response to the rule selection operation performed from each pre-configured desensitization rule, a desensitization rule corresponding to each target field is obtained.

[0095] (6) According to the desensitization rules corresponding to each target field, determine the candidate desensitization algorithms that match each target field.

[0096] (7) In response to the algorithm selection operation performed on each candidate desensitizing algorithm, a desensitizing algorithm corresponding to each target field is obtained.

[0097] (8) Determine the candidate parameters corresponding to each desensitization algorithm.

[0098] (9) Determine the interface component corresponding to each candidate parameter based on the parameter type of each candidate parameter.

[0099] (10) According to each candidate parameter and the interface component corresponding to each candidate parameter, the parameterized configuration options corresponding to each desensitization algorithm are displayed.

[0100] (11) In response to the parameter selection operation performed on each parameterized configuration option, a desensitization parameter configured for each desensitization algorithm is determined from each candidate parameter corresponding to each desensitization algorithm.

[0101] (12) For the target field corresponding to each desensitization strategy, the corresponding desensitization parameters are loaded through the configuration interface corresponding to the target field, and the corresponding desensitization program is loaded through the calling interface corresponding to the target field, so that the loaded desensitization program uses the loaded desensitization parameters to perform desensitization processing on the field value of the target field when implementing the desensitization algorithm corresponding to the target field.

[0102] (13) For each target field, determine the export field name that is mapped to the field name of the target field based on the field name mapping relationship corresponding to the export data table.

[0103] (14) In the exported data table, determine the field value filling area corresponding to the exported field name, and fill the field value of the target field into the field value filling area to obtain the updated exported data table.

[0104] It should be understood that, although the steps in the flowcharts involved in the above-mentioned embodiments are displayed in sequence according to the indications of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear description in this article, there is no strict order restriction on the execution of these steps, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above-mentioned embodiments may include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily to be carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0105] Based on the same inventive concept, the embodiment of the present application also provides a data desensitization device. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme recorded in the above method, so the specific limitations in one or more data desensitization device embodiments provided below can refer to the limitations of the data desensitization method above, and will not be repeated here.

[0106] like Figure 3 As shown, the embodiment of the present application provides a data desensitization device, including:

[0107] A field determination module 302, for determining target fields to be desensitized in response to a field selection operation performed on a target data table;

[0108] A policy configuration module 304, configured to determine the desensitization policies corresponding to the target fields in response to the desensitization policy configuration operation performed on the target fields;

[0109] The parameter configuration module 306 is used to display the parameterized configuration options corresponding to each desensitization strategy; in response to the triggering operation performed on each parameterized configuration option, determine the desensitization parameters configured for each desensitization strategy;

[0110] The data desensitization module 308 is used to perform desensitization processing on the field value of the target field corresponding to each desensitization strategy according to the desensitization parameters configured for each desensitization strategy.

[0111] The above-mentioned data desensitization device determines each target field to be desensitized by responding to the field selection operation performed on the target data table; determines the desensitization strategy corresponding to each target field in response to the desensitization strategy configuration operation performed on each target field; displays the parameterized configuration options corresponding to each desensitization strategy; determines the desensitization parameters configured for each desensitization strategy in response to the trigger operation performed on each parameterized configuration option; and performs desensitization processing on the field value of the target field corresponding to each desensitization strategy according to the desensitization parameters configured for each desensitization strategy. In other words, the present application can abstract the data desensitization process into a general process of data processing, that is, the user can customize the configuration of each target field to be desensitized, the desensitization strategy corresponding to each target field, and the desensitization parameters required to execute each desensitization strategy in the interface. A series of desensitization parameters required in the data desensitization processing process can be completed through interface configuration, thereby flexibly adapting to various types of data desensitization requirements, which is more efficient than manually writing desensitization scripts.

[0112] In some embodiments, Figure 4 As shown, the data desensitizing device also includes a data table determination module 301, which is used to determine the original data table location and the import field range in response to the data table configuration operation; connect to the corresponding external system according to the original data table location, and obtain the corresponding data table from the database of the external system; filter the fields of the data table according to the import field range, so as to load the filtered fields into the data table used for desensitizing processing to obtain the target data table.

[0113] In some embodiments, the desensitization strategy includes a desensitization algorithm. The strategy configuration module 304 is also used to respond to the rule selection operation performed from each pre-configured desensitization rule, obtain the desensitization rules corresponding to each target field; determine the candidate desensitization algorithms that match each target field according to the desensitization rules corresponding to each target field; each candidate desensitization algorithm is an algorithm that complies with the corresponding desensitization rule; respond to the algorithm selection operation performed on each candidate desensitization algorithm, and obtain the desensitization algorithm corresponding to each target field.

[0114] In some embodiments, the parameter configuration module 306 is also used to determine the candidate parameters corresponding to each desensitization algorithm; the candidate parameters are the parameters required to execute the corresponding desensitization algorithm; according to the parameter type of each candidate parameter, the interface component corresponding to each candidate parameter is determined; according to each candidate parameter and the interface component corresponding to each candidate parameter, the parameterized configuration options corresponding to each desensitization algorithm are displayed.

[0115] In some embodiments, the parameter configuration module 306 is further used to determine the desensitization parameters configured for each desensitization algorithm from the candidate parameters corresponding to each desensitization algorithm in response to the parameter selection operation performed on each parameterized configuration option.

[0116] In some embodiments, the data desensitization module 308 is also used to load corresponding desensitization parameters for the target field corresponding to each desensitization strategy through the configuration interface corresponding to the target field, and to load the corresponding desensitization program through the calling interface corresponding to the target field, so that the loaded desensitization program uses the loaded desensitization parameters to perform desensitization processing on the field value of the target field when implementing the desensitization algorithm corresponding to the target field.

[0117] In some embodiments, Figure 4 As shown, the data desensitizing device also includes a data export module 310, which is used to determine, for each target field, the export field name mapped to the field name of the target field according to the field name mapping relationship corresponding to the export data table; determine the field value filling area corresponding to the export field name in the export data table, and fill the field value of the target field into the field value filling area to obtain an updated export data table.

[0118] Each module in the above-mentioned data desensitization device can be implemented in whole or in part by software, hardware and their combination. Each of the above-mentioned modules can be embedded in or independent of the processor in the computer device in the form of hardware, or can be stored in the memory of the computer device in the form of software, so that the processor can call and execute the operations corresponding to each of the above modules.

[0119] In some embodiments, a computer device is provided, which may be a terminal, and its internal structure diagram may be as follows: Figure 5As shown. The computer device includes a processor, a memory, an input / output interface, a communication interface, a display unit and an input device. Among them, the processor, the memory and the input / output interface are connected through a system bus, and the communication interface, the display unit and the input device are connected to the system bus through the input / output interface. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The input / output interface of the computer device is used to exchange information between the processor and the external device. The communication interface of the computer device is used to communicate with an external terminal in a wired or wireless manner, and the wireless manner can be implemented through WIFI, a mobile cellular network, NFC (near field communication) or other technologies. When the computer program is executed by the processor, the steps in the above-mentioned data desensitization method are implemented. The display unit of the computer device is used to form a visually visible picture, which can be a display screen, a projection device or a virtual reality imaging device. The display screen can be a liquid crystal display screen or an electronic ink display screen; the input device of the computer device can be a touch layer covering the display screen, or a key, trackball or touchpad provided on the computer device housing, or an external keyboard, touchpad or mouse, etc.

[0120] Those skilled in the art will understand that Figure 5 The structure shown in the figure is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0121] In some embodiments, a computer device is provided. The computer device includes a memory and a processor. The memory stores a computer program. When the processor executes the computer program, the steps in the above method embodiments are implemented.

[0122] In some embodiments, Figure 6 As shown, an internal structure diagram of a computer-readable storage medium is provided, and the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps in the above-mentioned method embodiments are implemented.

[0123] In some embodiments, a computer program product is provided. The computer program product includes a computer program. When the computer program is executed by a processor, the steps in the above method embodiments are implemented.

[0124] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with relevant laws, regulations and standards of relevant countries and regions.

[0125] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in this application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetoresistive random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, etc., but are not limited to this.

[0126] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0127] The above-described embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A data desensitization method, characterized in that: The method comprises: In response to a field selection operation performed on a target data table, determining target fields to be desensitized; In response to the desensitization policy configuration operation performed on each target field, determining the desensitization policies respectively corresponding to each target field; Display the parameterized configuration options corresponding to each desensitization strategy; In response to a trigger operation performed on each parameterized configuration option, determining desensitization parameters configured respectively for each desensitization strategy; According to the desensitization parameters respectively configured for each desensitization strategy, the field value of the target field corresponding to each desensitization strategy is desensitized.

2. The method according to claim 1, characterized in that Before determining the target fields to be desensitized in response to the field selection operation performed on the target data table, the method further includes: In response to the data table configuration operation, determining the original data table location and the import field range; Connecting to a corresponding external system according to the location of the original data table, and obtaining a corresponding data table from a database of the external system; The data table is screened for fields according to the import field range, so as to load the screened fields into the data table for desensitization processing to obtain the target data table.

3. The method according to claim 1, characterized in that: The desensitization strategy includes a desensitization algorithm; The step of determining the desensitization policies respectively corresponding to the target fields in response to the desensitization policy configuration operation performed on the target fields includes: In response to the rule selection operation performed respectively from each pre-configured desensitization rule, the desensitization rule corresponding to each target field is obtained; According to the desensitization rules corresponding to the target fields, determine the candidate desensitization algorithms that match the target fields respectively; the candidate desensitization algorithms are algorithms that meet the corresponding desensitization rules; In response to the algorithm selection operations performed on each of the candidate desensitization algorithms, the desensitization algorithms corresponding to each of the target fields are obtained.

4. The method according to claim 3, characterized in that The parameterized configuration options corresponding to each desensitization strategy are displayed, including: Determine candidate parameters corresponding to each desensitization algorithm; the candidate parameters are parameters required to execute the corresponding desensitization algorithm; Determining, according to the parameter type of each candidate parameter, an interface component corresponding to each candidate parameter; According to the candidate parameters and the interface components corresponding to the candidate parameters, the parameterized configuration options corresponding to the desensitization algorithms are displayed.

5. The method according to claim 4, characterized in that The step of determining the desensitization parameters configured for each desensitization strategy in response to the triggering operation performed on each parameterized configuration option includes: In response to the parameter selection operation performed on each parameterized configuration option, a desensitization parameter configured for each desensitization algorithm is determined from each candidate parameter corresponding to each desensitization algorithm.

6. The method according to claim 1, characterized in that The desensitizing the field value of the target field corresponding to each desensitizing strategy according to the desensitizing parameters respectively configured for each desensitizing strategy includes: For the target field corresponding to each desensitization strategy, the corresponding desensitization parameters are loaded through the configuration interface corresponding to the target field, and the corresponding desensitization program is loaded through the calling interface corresponding to the target field, so that the loaded desensitization program uses the loaded desensitization parameters to desensitize the field value of the target field when implementing the desensitization algorithm corresponding to the target field.

7. The method according to any one of claims 1 to 6, characterized in that: After performing desensitization processing on the field value of the target field corresponding to each desensitization strategy according to the desensitization parameters respectively configured for each desensitization strategy, the method further includes: For each target field, determine the export field name mapped to the field name of the target field according to the field name mapping relationship corresponding to the export data table; In the export data table, a field value filling area corresponding to the export field name is determined, and the field value of the target field is filled into the field value filling area to obtain an updated export data table.

8. A data desensitization device, characterized in that: The device comprises: A field determination module, used to determine each target field to be desensitized in response to a field selection operation performed on a target data table; A policy configuration module, configured to determine the desensitization policies respectively corresponding to the target fields in response to the desensitization policy configuration operation performed on the target fields; A parameter configuration module, used to display parameterized configuration options corresponding to each desensitization strategy; in response to a trigger operation performed on each parameterized configuration option, determine the desensitization parameters configured for each desensitization strategy; The data desensitization module is used to perform desensitization processing on the field value of the target field corresponding to each desensitization strategy according to the desensitization parameters configured respectively for each desensitization strategy.

9. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 7 are implemented.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 7 are implemented.

Images