Sensitive data access method and device, electronic equipment and storage medium

Abstract

The embodiment of the invention provides a sensitive data access method and device, electronic equipment and a storage medium, relates to the technical field of data processing, and is suitable for the field of financial science and technology. The method comprises the following steps: receiving a data access request of a first terminal for sensitive data; acquiring a security level of a second terminal associated with the first terminal according to the first terminal identifier and the association relationship; calculating the security level of the first terminal based on the security level of the second terminal; detecting the access authority of the first terminal according to the security level and the access control strategy of the first terminal; and determining whether to send the sensitive data to the first terminal according to the access authority. According to the embodiment of the invention, the security level can be dynamically adjusted according to the association relationship between the terminals instead of statically setting a fixed security level for each terminal, different application scenes and security requirements can be adapted, meanwhile, manual intervention is reduced, and the data access authority is more accurately controlled, so that the risk of data leakage is reduced.

Description

Technical Field

[0001] The present application relates to the field of data processing technology, applicable to the field of financial technology, and in particular to sensitive data access methods and devices, electronic devices and storage media. Background Art

[0002] The financial industry needs to process large amounts of financial data, and often distributes data processing tasks to multiple computing nodes through distributed computing to improve data processing efficiency. Since there is a large amount of user sensitive data in financial business, the leakage of sensitive data will cause significant losses to users and enterprises. Therefore, it is necessary to control access to computing nodes that access sensitive data to reduce the risk of sensitive data leakage. Summary of the invention

[0003] The main purpose of the embodiments of the present application is to propose a sensitive data access method and device, an electronic device and a storage medium, aiming to reduce the risk of sensitive data leakage.

[0004] To achieve the above-mentioned purpose, a first aspect of an embodiment of the present application proposes a sensitive data access method, the method comprising:

[0005] In some embodiments, a data access request for sensitive data from a first terminal is received, the sensitive data contains an access control policy based on a security level, the security level is used to characterize a data leakage risk, the first terminal is associated with a second terminal, the second terminal has a second security level, and the data access request includes a first terminal identifier for identifying the first terminal;

[0006] Acquire the security level of the second terminal according to the first terminal identifier and the association relationship to obtain the second security level;

[0007] Based on the second security level, calculating the security level of the first terminal to obtain a first security level;

[0008] detecting access rights of the first terminal according to the first security level and the access control policy;

[0009] The sensitive data is sent to the first terminal or not sent to the first terminal according to the access permission.

[0010] In some embodiments, the calculating the security level of the first terminal based on the second security level to obtain the first security level includes:

[0011] Calculate the security score difference between the first terminal and the second terminal according to the preset security index;

[0012] The security level of the first terminal is set according to the second security level and the security score difference to obtain a first security level.

[0013] In some embodiments, the security indicators include hardware indicators and software indicators;

[0014] The calculating, according to a preset security indicator, a security score difference between the first terminal and the second terminal includes:

[0015] According to the hardware indicator, respectively calculating the hardware indicator scores of the first terminal and the second terminal to obtain a first hardware indicator score and a second hardware indicator score;

[0016] Calculate the difference between the first hardware indicator score and the second hardware indicator score to obtain a first difference;

[0017] Calculate the ratio of the first difference value to the second hardware indicator score to obtain a first difference ratio;

[0018] According to the software indicator, respectively calculating the software indicator scores of the first terminal and the second terminal to obtain a first software indicator score and a second software indicator score;

[0019] Calculate the difference between the first software indicator score and the second software indicator score to obtain a second difference;

[0020] Calculate the ratio of the second difference to the second software indicator score to obtain a second difference ratio;

[0021] The sum of the first difference ratio and the second difference ratio is calculated to obtain the safety score difference.

[0022] In some embodiments, setting the security level of the first terminal according to the second security level and the security score difference to obtain the first security level includes:

[0023] If the security score difference is greater than a preset threshold, the first security level is set to be greater than or equal to the second security level; otherwise, the first security level is set to be less than the second security level.

[0024] In some embodiments, the number of the second terminals is multiple;

[0025] The acquiring, according to the first terminal identifier and the association relationship, the security level of the second terminal to obtain the second security level includes:

[0026] Acquire the security levels of the plurality of second terminals according to the first terminal identifier and the association relationship, and obtain the plurality of second security levels;

[0027] The calculating the security level of the first terminal based on the second security level to obtain the first security level includes:

[0028] respectively calculating similarities between the first terminal and the plurality of second terminals;

[0029] Among the multiple second security levels, the second security level corresponding to the second terminal with the highest similarity is taken as the first security level.

[0030] In some embodiments, respectively calculating the similarities between the first terminal and the plurality of second terminals includes:

[0031] Acquire a plurality of security feature vectors of the second terminals to obtain a plurality of second security feature vectors;

[0032] Acquire a security feature vector of the first terminal to obtain a first security feature vector;

[0033] Distances between the first security feature vector and the plurality of second security feature vectors are calculated respectively to obtain similarities between the first terminal and the plurality of second terminals.

[0034] To achieve the above-mentioned purpose, a second aspect of an embodiment of the present application provides a sensitive data access device, which is applied to a data management end and includes:

[0035] a request receiving module, configured to receive a data access request from a first terminal for sensitive data, the sensitive data including an access control policy based on a security level, the security level being used to characterize a data leakage risk, the first terminal being associated with a second terminal, the second terminal having a second security level, and the data access request including a first terminal identifier for identifying the first terminal;

[0036] A second security level acquisition module, configured to acquire the security level of the second terminal according to the first terminal identifier and the association relationship, to obtain the second security level;

[0037] A first security level calculation module, configured to calculate the security level of the first terminal based on the second security level to obtain a first security level;

[0038] an access control module, configured to detect access rights of the first terminal according to the first security level and the access control policy;

[0039] A data sending module is used to send the sensitive data to the first terminal or not send the sensitive data to the first terminal according to the access permission.

[0040] To achieve the above objectives, a third aspect of an embodiment of the present application proposes an electronic device, which includes a memory and a processor, wherein the memory stores a computer program, and when the processor executes the computer program, the method described in the first aspect is implemented.

[0041] To achieve the above-mentioned purpose, the fourth aspect of an embodiment of the present application proposes a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method described in the first aspect is implemented.

[0042] The sensitive data access method and device, electronic device and storage medium proposed in the present application calculate the security level of the first terminal based on the security level of the second terminal, control the first terminal's access to sensitive data according to the security level of the first terminal, and can dynamically adjust the security level according to the association relationship between the terminals, rather than statically setting a fixed security level for each terminal. It can adapt to different application scenarios and security requirements, while reducing manual intervention and more accurately controlling data access rights, thereby reducing the risk of data leakage. BRIEF DESCRIPTION OF THE DRAWINGS

[0043] Figure 1 is a flowchart of a sensitive data access method provided by an embodiment of the present application;

[0044] Figure 2 yes Figure 1 Flow chart of step S103 in FIG.

[0045] Figure 3 yes Figure 2 Flow chart of step S201 in FIG.

[0046] Figure 4 yes Figure 1 Flow chart of step S103 in FIG.

[0047] Figure 5 yes Figure 4 Flow chart of step S402 in FIG.

[0048] Figure 6 is a schematic diagram of the structure of a sensitive data access device provided in an embodiment of the present application;

[0049] Figure 7 It is a schematic diagram of the hardware structure of the electronic device provided in the embodiment of the present application. DETAILED DESCRIPTION

[0050] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0051] It should be noted that, although the functional modules are divided in the device schematic diagram and the logical order is shown in the flowchart, in some cases, the steps shown or described may be performed in a different order than the module division in the device or the order in the flowchart. The terms "first", "second", etc. in the specification, claims and the above drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence.

[0052] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as those commonly understood by those skilled in the art to which this application belongs. The terms used herein are only for the purpose of describing the embodiments of this application and are not intended to limit this application.

[0053] First, some nouns involved in this application are analyzed:

[0054] Sensitive Data (SD): Sensitive data refers to data that, once leaked, may have a serious impact on personal privacy, business operations, etc. This type of data usually requires special protection measures to prevent data leakage, abuse or tampering. Sensitive data includes but is not limited to personal information, financial data, health information, and trade secrets.

[0055] Distributed Computing (DC): Distributed computing is a process of breaking down a task into multiple subtasks and distributing them to multiple computer systems for processing, and finally combining the processing results of each subtask to obtain the final task result. Distributed computing involves multiple computer systems working together in a network environment to achieve a common computing goal. These computer systems, also known as computing nodes, may be physically dispersed in different geographical locations, but they are connected and coordinated through communication networks to complete specific tasks by passing messages.

[0056] Access Control Policy (ACP): An access control policy is a set of rules that define who can access specific resources and what actions can be performed. These policies are critical to protecting sensitive data and system resources from unauthorized access. In a distributed computing environment, access control policies are even more important because they help ensure that only authorized users and systems can access sensitive data. These policies can be based on a variety of factors, such as the user's identity, role, group, access time, and access location.

[0057] In the related art, attribute-based data access control methods define a series of access policies, which are evaluated based on user attributes to determine whether to allow users to perform specific operations. However, user attributes are difficult to reflect the security risks of visitors, and related technologies cannot perform access control based on the data leakage risk of visitors. It is necessary to further reduce the risk of sensitive data leakage.

[0058] Based on this, embodiments of the present application provide a sensitive data access method and device, an electronic device, and a storage medium, aiming to reduce the risk of sensitive data leakage.

[0059] The sensitive data access method and device, electronic device and storage medium provided in the embodiments of the present application are specifically illustrated through the following embodiments. First, the sensitive data access method in the embodiments of the present application is described.

[0060] The embodiments of the present application can acquire and process relevant data based on artificial intelligence technology. Among them, artificial intelligence (AI) is the theory, method, technology and application system that uses digital computers or machines controlled by digital computers to simulate, extend and expand human intelligence, perceive the environment, acquire knowledge and use knowledge to obtain the best results.

[0061] AI basic technologies generally include sensors, dedicated AI chips, cloud computing, distributed storage, big data processing technology, operation / interaction systems, mechatronics, etc. AI software technologies mainly include computer vision technology, robotics technology, biometrics technology, speech processing technology, natural language processing technology, and machine learning / deep learning.

[0062] The sensitive data access method provided in the embodiment of the present application relates to the field of data processing technology and is applicable to the field of financial technology. The sensitive data access method provided in the embodiment of the present application can be applied to a terminal, can be applied to a server side, or can be software running in a terminal or a server side. In some embodiments, the terminal can be a smart phone, a tablet computer, a laptop computer, a desktop computer, etc.; the server side can be configured as an independent physical server, or can be configured as a server cluster or a distributed system composed of multiple physical servers, and can also be configured as a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, CDN, and big data and artificial intelligence platforms; the software can be an application that implements the sensitive data access method, etc., but is not limited to the above forms.

[0063] The present application can be used in many general or special computer system environments or configurations. For example: personal computers, server computers, handheld or portable devices, tablet devices, multiprocessor systems, microprocessor-based systems, set-top boxes, programmable consumer electronics, network PCs, minicomputers, mainframe computers, distributed computing environments including any of the above systems or devices, etc. The present application can be described in the general context of computer-executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform specific tasks or implement specific abstract data types. The present application can also be practiced in distributed computing environments, in which tasks are performed by remote processing devices connected through a communication network. In a distributed computing environment, program modules can be located in local and remote computer storage media including storage devices.

[0064] It should be noted that in each specific implementation of the present application, when it comes to the need to perform relevant processing based on data related to user identity or characteristics such as user information, user behavior data, user historical data, and user location information, the user's permission or consent will be obtained first, and the collection, use, and processing of these data will comply with relevant laws, regulations, and standards. In addition, when the embodiment of the present application needs to obtain the user's sensitive personal information, the user's separate permission or consent will be obtained through a pop-up window or by jumping to a confirmation page. After clearly obtaining the user's separate permission or consent, the necessary user-related data for the normal operation of the embodiment of the present application will be obtained.

[0065] Figure 1 is an optional flowchart of the sensitive data access method provided in the embodiment of the present application. Figure 1 The method is applied to the data management end, and may include but is not limited to steps S101 to S106.

[0066] Step S101, receiving a data access request for sensitive data from a first terminal, the sensitive data including an access control policy based on a security level, the security level being used to characterize a risk of data leakage, the first terminal being associated with a second terminal, the second terminal having a second security level, and the data access request including a first terminal identifier for identifying the first terminal;

[0067] Step S102, obtaining the security level of the second terminal according to the first terminal identifier and the association relationship, and obtaining a second security level;

[0068] Step S103, calculating the security level of the first terminal based on the second security level to obtain a first security level;

[0069] Step S104, detecting access rights of the first terminal according to the first security level and the access control policy;

[0070] Step S105: Send the sensitive data to the first terminal or do not send the sensitive data to the first terminal according to the access permission.

[0071] In steps S101 to S105 shown in the embodiment of the present application, the security level of the first terminal is calculated based on the security level of the second terminal, and the access of the first terminal to sensitive data is controlled according to the security level of the first terminal. The security level can be dynamically adjusted according to the association relationship between the terminals, rather than statically setting a fixed security level for each terminal. This can adapt to different application scenarios and security requirements, while reducing manual intervention and more accurately controlling data access rights, thereby reducing the risk of data leakage.

[0072] In step S101 of some embodiments, the first terminal may be a computing node in a computing cluster, a client in a financial service system, or an Internet of Things device, but is not limited thereto.

[0073] Taking the banking application scenario as an example, the first terminal is a computing node in the computing cluster, as described below:

[0074] After receiving the computing task issued by the banking business system, the computing node sends a data access request to the data management end to obtain the sensitive data required to process the computing task, such as the user's loan information, transaction information, biometrics, etc.

[0075] The data management end receives a data access request, which includes a computing node identifier and a sensitive data identifier.

[0076] The data management terminal searches for the second terminal associated with the computing node according to the computing node identifier to obtain the second terminal identifier. For example, other computing nodes in the computing cluster to which the computing node belongs are searched as the associated second terminals.

[0077] The data management terminal searches the local database for the security level of the second terminal according to the second terminal identifier to obtain the second security level.

[0078] The data management terminal calculates the security level of the computing node based on the second security level to obtain the first security level. The data management terminal can directly use the security level of the second terminal as the security level of the computing node, or compare the data leakage risk of the computing node and the second terminal, and adjust the second security level upward or downward based on the comparison result to obtain the first security level. For example, the data management terminal obtains the hardware configuration of the computing node and the second terminal respectively. If the encryption level of the security chip in the computing node is lower than the encryption level of the security chip in the second terminal, the second security level is reduced by one to obtain the first security level.

[0079] The data management end searches for the sensitive data based on the sensitive data identifier.

[0080] The data management end detects the access rights of the computing node according to the first security level and the access control policy of sensitive data.

[0081] When the access permission is to allow access, the data management end sends sensitive data to the computing node; when the access permission is to not allow access, the data management end does not send sensitive data to the computing node.

[0082] In step S101 of some embodiments, the first terminal may be a newly accessed device that has not accessed the data management terminal, and the data management terminal has not stored its corresponding first security level record; or it may be a device that has accessed the data management terminal, and the data management terminal has lost or needs to update its corresponding first security level record; but it is not limited to this.

[0083] In step S101 of some embodiments, an association relationship may be set between computing nodes belonging to the same computing cluster, between workstations within the same network domain, or between terminals running the same banking system, but is not limited thereto.

[0084] In some embodiments, before step S101, the sensitive data access method further includes: obtaining sensitive data. The data management end may obtain sensitive data from a data source, or may obtain encrypted sensitive data from an encryption service provider, but is not limited thereto.

[0085] Taking the transaction application scenario as an example, the data source is the transaction processing server, the first terminal is the order processing server, and the data management terminal is the data middle station, as described below:

[0086] After the transaction is completed, the transaction processing server generates transaction data; the transaction processing server sends the transaction data to the encryption service provider;

[0087] The encryption service provider generates a private key and uses the private key to encrypt sensitive data to obtain data ciphertext; the encryption service provider returns the data ciphertext to the transaction processing server.

[0088] The transaction processing server synchronizes the encrypted data to the data center.

[0089] The order processing server sends a data access request to the data center to request the transaction data.

[0090] The data middle station receives a data access request, which includes a first terminal identifier and a sensitive data identifier.

[0091] The data center searches for a business server in the same local area network as the order processing server as an associated terminal. The data center searches for the security level of the business server in the local database to obtain the second security level. The security level of the business server is used as the security level of the order processing server to obtain the first security level.

[0092] The data center detects access rights to the order processing server based on the first security level and access control policy for sensitive data.

[0093] When the access permission is to allow access, the data center sends sensitive data to the order processing server; when the access permission is to not allow access, the data center does not send sensitive data to the order processing server.

[0094] The order processing server uses the public key corresponding to the above private key to decrypt the data ciphertext to obtain the transaction data.

[0095] In some embodiments, step S102 may include, but is not limited to, steps S1021 to S1023:

[0096] Step S1021, searching for a second terminal associated with the first terminal according to the first terminal identifier and the association relationship;

[0097] Step S1022, obtaining a second terminal identifier for identifying the second terminal;

[0098] Step S1023: acquiring the security level of the second terminal according to the second terminal identifier to obtain a second security level.

[0099] In step S1021 of some embodiments, the second terminal associated with the first terminal is queried in a local database, or the second terminal associated with the first terminal is requested from a third-party server, but not limited thereto. For example, the second terminal associated with the first terminal may be requested from a banking system.

[0100] In step S1023 of some embodiments, the second security level is obtained by querying the security level of the second terminal in a local database; or by requesting the security level of the second terminal from a third-party server; but it is not limited thereto.

[0101] See also Figure 2 In some embodiments, step S103 may include but is not limited to steps S201 to S202:

[0102] Step S201, calculating the security score difference between the first terminal and the second terminal according to a preset security index;

[0103] Step S202: setting the security level of the first terminal according to the second security level and the security score difference to obtain a first security level.

[0104] In steps S201 to S202 shown in the embodiment of the present application, the security score difference between the first terminal and the second terminal is calculated based on the security index, the data leakage risk difference between the first terminal and the second terminal is quantified, and the security level of the first terminal is set based on the security score difference. The obtained first security level can more objectively and accurately reflect the data leakage risk difference of the first terminal, more accurately control the access rights of the first terminal, and ensure the security of sensitive data.

[0105] In step S201 of some embodiments, security indicators may include but are not limited to hardware indicators and software indicators. Specifically, hardware indicators are used as first-level indicators, which can be subdivided into terminal chip encryption level, routing chip encryption level, etc.; software indicators are used as first-level indicators, which can be subdivided into whether communication encryption algorithms are configured, whether network attack protection algorithms are configured, whether malware protection algorithms are configured, number of vulnerabilities, etc.

[0106] In step S201 of some embodiments, the security scores of the first terminal and the second terminal can be calculated respectively, and the difference between the security score of the first terminal and the security score of the second terminal can be calculated as the security score difference. Specifically, the security score can be calculated by the analytic hierarchy process, the fuzzy comprehensive evaluation method, the Bayesian network and other methods. Among them, the analytic hierarchy process is an analysis method that decomposes complex factor connections into hierarchical hierarchical relationships composed of local simple relationships, and performs fuzzy comprehensive evaluation by constructing a relationship matrix, a weight vector and a rating matrix. The fuzzy comprehensive evaluation method is a method that converts qualitative evaluation results into quantitative results based on the membership theory of fuzzy data. By constructing a risk indicator set and an evaluation indicator set, combining the level of each risk indicator judged by experts, the membership function is defined to establish a weight fuzzy matrix and a relationship fuzzy matrix, and the product of the weight fuzzy matrix and the correlation fuzzy matrix is ​​used as the security score. The evaluation method based on the Bayesian network constructs the dependency relationship between variables, and uses the Bayesian theorem to update the probability distribution of the variables, thereby calculating the security score.

[0107] See also Figure 3 In some embodiments, the security indicators include hardware indicators and software indicators; step S201 may include but is not limited to steps S301 to S307:

[0108] Step S301, calculating the hardware index scores of the first terminal and the second terminal respectively according to the hardware index, to obtain a first hardware index score and a second hardware index score;

[0109] Step S302, calculating the difference between the first hardware indicator score and the second hardware indicator score to obtain a first difference;

[0110] Step S303, calculating the ratio of the first difference value to the second hardware indicator score to obtain a first difference ratio;

[0111] Step S304, calculating the software index scores of the first terminal and the second terminal respectively according to the software index, to obtain a first software index score and a second software index score;

[0112] Step S305, calculating the difference between the first software indicator score and the second software indicator score to obtain a second difference;

[0113] Step S306, calculating the ratio of the second difference value to the second software indicator score to obtain a second difference ratio;

[0114] Step S307, calculating the sum of the first difference ratio and the second difference ratio to obtain a safety score difference.

[0115] In steps S301 to S307 shown in the embodiment of the present application, the difference in scores of the first terminal and the second terminal under hardware indicators and software indicators is calculated respectively, and the difference ratio of the hardware indicator score and the software indicator score of the second terminal is calculated based on the score difference. The difference ratio can accurately quantify the difference between the two terminals in hardware and software. The sum of the difference ratios is used as the security score difference. Taking the difference between the first terminal and the second terminal into comprehensive consideration, the difference in data leakage risk of the first terminal relative to the second terminal can be more comprehensively reflected.

[0116] In some embodiments, before step S307, the sensitive data access method further includes: setting weights of the first difference ratio and the second difference ratio respectively to obtain the first weight and the second weight; step S307 includes but is not limited to: calculating the weighted sum of the first difference ratio and the second difference ratio according to the first weight and the second weight to obtain the security score difference. The relationship between the first weight and the second weight is not limited, for example, the first weight can be set to be greater than the second weight.

[0117] The embodiment of the present application sets weights for the first difference ratio and the second difference ratio, calculates the weighted sum of the first difference ratio and the second difference ratio as the security score difference, highlights the security indicators that have a greater impact on the risk of data leakage, and makes the security score difference better reflect the difference in data leakage risk between the first terminal and the second terminal.

[0118] See also Figure 3 In some embodiments, step S202 may include but is not limited to step S308:

[0119] Step S308: If the security score difference is greater than a preset threshold, the first security level is set to be greater than or equal to the second security level; otherwise, the first security level is set to be less than the second security level.

[0120] Step S308 shown in the embodiment of the present application determines the relationship between the security score difference and the threshold, and adjusts the first security level upward or downward based on the second security level, thereby reducing manual intervention in the level determination process and more accurately controlling data access rights, thereby further reducing the risk of data leakage.

[0121] In step S308 of some embodiments, the threshold of the security score difference can be set to zero or a positive number, and is not limited thereto. For example, the threshold is set to zero, and the second security level is obtained as level 2. When the security score difference is equal to zero, the first security level is set to level 2; when the security score difference is less than zero, the first security level is set to level 1; when the security score difference is greater than zero, the first security level is set to level 3.

[0122] See also Figure 4 In some embodiments, the number of the second terminals is multiple; step S102 may include, but is not limited to: obtaining security levels of multiple second terminals according to the first terminal identifier and the association relationship, and obtaining multiple second security levels;

[0123] Step S103 may include but is not limited to steps S401 to S402:

[0124] Step S401, respectively calculating similarities between a first terminal and a plurality of second terminals;

[0125] Step S402: Among multiple second security levels, the second security level corresponding to the second terminal with the highest similarity is selected as the first security level.

[0126] In steps S401 to S402 shown in the embodiment of the present application, by calculating the similarity between the first terminal and multiple second terminals, the second security level corresponding to the second terminal with the highest similarity is taken as the first security level, and the first security level is dynamically determined in a data-driven manner, thereby reducing human interference and more objectively reflecting the data leakage risk of the first terminal.

[0127] See also Figure 5 In some embodiments, step S402 may include but is not limited to steps S501 to S503:

[0128] Step S501, acquiring security feature vectors of multiple second terminals to obtain multiple second security feature vectors;

[0129] Step S502, obtaining a security feature vector of the first terminal to obtain a first security feature vector;

[0130] Step S503: Calculate the distances between the first security feature vector and the plurality of second security feature vectors respectively to obtain similarities between the first terminal and the plurality of second terminals.

[0131] In steps S501 to S503 shown in the embodiment of the present application, by acquiring the security feature vectors of the first terminal and the second terminal, the distance between the security feature vectors is calculated to obtain the similarity between the first terminal and the second terminal to improve the automation of calculating the security level and reduce manual intervention.

[0132] In step S501 of some embodiments, the security feature vector may include but is not limited to network behavior features, software features, and hardware features. For example, the network behavior features reflect the activity mode of the terminal in the network, which may be connection frequency, duration, data transmission volume, etc.; the software features may be the type of operating system installed on the terminal, security vulnerability records, etc.; the hardware features may be the level of the security chip.

[0133] In step S503 of some embodiments, the distance between the first security feature vector and the plurality of second security feature vectors may be calculated by cosine similarity or by Euclidean distance, but is not limited thereto.

[0134] In some embodiments, the access control policy includes a logic statement, and the variables of the logic statement include terminal attributes and security levels; step S104 may include but is not limited to steps S601 to S603:

[0135] Step S601, acquiring terminal attributes of a first terminal to obtain first terminal attributes;

[0136] Step S602, inputting the first terminal attribute and the first security level as variable values ​​into a logic statement to obtain a logic statement value;

[0137] Step S603, if the value of the logic statement is true, the access permission is to allow access; otherwise, the access permission is to not allow access.

[0138] In some embodiments, step S105 may include but is not limited to steps S701 to S702:

[0139] Step S701, when the logic statement value is true, the access permission is to allow access, and the sensitive data is sent to the first terminal;

[0140] Step S702: When the value of the logic statement is false, the access permission is not allowed, and the sensitive data is not sent to the first terminal.

[0141] Steps S601 to S603 and steps S701 to S702 shown in the embodiment of the present application detect access rights according to terminal attributes and security levels, and decide whether to send sensitive data based on the access rights, thereby achieving more refined access control and ensuring that only terminals that meet specific conditions can access sensitive data.

[0142] In step S601 of some embodiments, the terminal attributes may include but are not limited to the device type, the department to which the terminal belongs, the user role of the terminal user, and a timestamp.

[0143] In some embodiments, the access control strategy uses an access tree structure to organize a number of logical statements. The access tree includes a number of leaf nodes and a number of internal nodes. Each leaf node corresponds to each variable one by one, and each internal node contains a logic gate, such as "AND" and "OR". The logic gate of the internal node and the child nodes of the internal node are a logic statement. Step S602 can be performed by recursively traversing the internal nodes of the access tree, performing operations based on the logic gates of the internal nodes and the child nodes of the internal nodes, and obtaining the logic statement value until the logic statement value of the root node of the access tree is obtained. If the logic statement value is true, the monitoring result of the access permission is that access is allowed; if the logic statement value is false, the monitoring result of the access permission is that access is not allowed.

[0144] In some embodiments, after step S702, the sensitive data access method further includes: encrypting the sensitive data to obtain data ciphertext; and sending the data ciphertext to the first terminal. The first terminal decrypts the data ciphertext to obtain the sensitive data.

[0145] See also Figure 6 The embodiment of the present application also provides a sensitive data access device, which can implement the above sensitive data access method. The device is applied to the data management end, including:

[0146] a request receiving module, configured to receive a data access request from a first terminal for sensitive data, the sensitive data including an access control policy based on a security level, the security level being used to characterize a risk of data leakage, the first terminal being associated with a second terminal, the second terminal having a second security level, and the data access request including a first terminal identifier for identifying the first terminal;

[0147] A second security level acquisition module, used to acquire the security level of the second terminal according to the first terminal identifier and the association relationship, and obtain the second security level;

[0148] A first security level calculation module, configured to calculate the security level of the first terminal based on the second security level to obtain a first security level;

[0149] An access control module, configured to detect access rights of the first terminal according to the first security level and the access control policy;

[0150] The data sending module is used to send sensitive data to the first terminal or not send sensitive data to the first terminal according to the access permission.

[0151] The specific implementation of the sensitive data access device is basically the same as the specific implementation of the sensitive data access method described above, and will not be repeated here.

[0152] The embodiment of the present application also provides an electronic device, the electronic device includes a memory and a processor, the memory stores a computer program, and the processor implements the above sensitive data access method when executing the computer program. The electronic device can be any smart terminal including a tablet computer, a car computer, etc.

[0153] See also Figure 7 , Figure 7 The hardware structure of an electronic device of another embodiment is illustrated, and the electronic device includes:

[0154] The processor 901 may be implemented by a general-purpose CPU (Central Processing Unit), a microprocessor, an application-specific integrated circuit (Application Specific Integrated Circuit, ASIC), or one or more integrated circuits, and is used to execute relevant programs to implement the technical solutions provided in the embodiments of the present application;

[0155] The memory 902 can be implemented in the form of a read-only memory (ROM), a static storage device, a dynamic storage device, or a random access memory (RAM). The memory 902 can store an operating system and other applications. When the technical solution provided in the embodiments of this specification is implemented by software or firmware, the relevant program code is stored in the memory 902, and the processor 901 calls and executes the sensitive data access method of the embodiments of this application;

[0156] Input / output interface 903, used to implement information input and output;

[0157] Communication interface 904, used to realize communication interaction between the device and other devices, which can be realized by wired mode (such as USB, network cable, etc.) or wireless mode (such as mobile network, WIFI, Bluetooth, etc.);

[0158] A bus 905 that transmits information between various components of the device (e.g., the processor 901, the memory 902, the input / output interface 903, and the communication interface 904);

[0159] The processor 901 , the memory 902 , the input / output interface 903 and the communication interface 904 are connected to each other in communication within the device via a bus 905 .

[0160] An embodiment of the present application also provides a computer-readable storage medium, which stores a computer program, and when the computer program is executed by a processor, the above-mentioned sensitive data access method is implemented.

[0161] The memory, as a non-transient computer-readable storage medium, can be used to store non-transient software programs and non-transient computer executable programs. In addition, the memory may include a high-speed random access memory, and may also include a non-transient memory, such as at least one disk storage device, a flash memory device, or other non-transient solid-state storage device. In some embodiments, the memory may optionally include a memory remotely disposed relative to the processor, and these remote memories may be connected to the processor via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0162] The sensitive data access method, sensitive data access device, electronic device and storage medium provided in the embodiments of the present application calculate the security level of the first terminal based on the security level of the second terminal, control the first terminal's access to sensitive data according to the security level of the first terminal, and can dynamically adjust the security level according to the association relationship between the terminals, rather than statically setting a fixed security level for each terminal. It can adapt to different application scenarios and security requirements, while reducing human intervention and more accurately controlling data access rights, thereby reducing the risk of data leakage.

[0163] The embodiments described in the embodiments of the present application are intended to more clearly illustrate the technical solutions of the embodiments of the present application and do not constitute a limitation on the technical solutions provided in the embodiments of the present application. Those skilled in the art will appreciate that with the evolution of technology and the emergence of new application scenarios, the technical solutions provided in the embodiments of the present application are also applicable to similar technical problems.

[0164] Those skilled in the art will appreciate that the technical solutions shown in the figures do not constitute a limitation on the embodiments of the present application, and may include more or fewer steps than shown in the figures, or a combination of certain steps, or different steps.

[0165] The device embodiments described above are merely illustrative, and the units described as separate components may or may not be physically separated, that is, they may be located in one place or distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0166] Those skilled in the art will appreciate that all or some of the steps in the methods disclosed above, and the functional modules / units in the systems and devices may be implemented as software, firmware, hardware, or a suitable combination thereof.

[0167] The terms "first", "second", "third", "fourth", etc. (if any) in the specification of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0168] It should be understood that in the present application, "at least one (item)" means one or more, and "plurality" means two or more. "And / or" is used to describe the association relationship of associated objects, indicating that three relationships may exist. For example, "A and / or B" can mean: only A exists, only B exists, and A and B exist at the same time, where A and B can be singular or plural. The character " / " generally indicates that the objects associated before and after are in an "or" relationship. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single or plural items. For example, at least one of a, b or c can mean: a, b, c, "a and b", "a and c", "b and c", or "a and b and c", where a, b, c can be single or multiple.

[0169] In the several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the above units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0170] The units described above as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0171] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0172] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including multiple instructions to enable a computer device (which can be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods of various embodiments of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (Read-Only Memory, referred to as ROM), random access memory (Random Access Memory, referred to as RAM), disk or optical disk and other media that can store programs.

[0173] The preferred embodiments of the present invention are described above with reference to the accompanying drawings, but the scope of the rights of the present invention is not limited thereto. Any modification, equivalent substitution and improvement made by a person skilled in the art without departing from the scope and essence of the present invention should be within the scope of the rights of the present invention.

Claims

1. A sensitive data access method, characterized in that: The method is applied to a data management end, and the method includes: receiving a data access request for sensitive data from a first terminal, the sensitive data including an access control policy based on a security level, the security level being used to characterize a data leakage risk, the first terminal being associated with a second terminal, the second terminal having a second security level, and the data access request including a first terminal identifier for identifying the first terminal; Acquire the security level of the second terminal according to the first terminal identifier and the association relationship to obtain the second security level; Based on the second security level, calculating the security level of the first terminal to obtain a first security level; detecting access rights of the first terminal according to the first security level and the access control policy; The sensitive data is sent to the first terminal or not sent to the first terminal according to the access permission.

2. The method according to claim 1, characterized in that The calculating the security level of the first terminal based on the second security level to obtain the first security level includes: Calculate the security score difference between the first terminal and the second terminal according to the preset security index; The security level of the first terminal is set according to the second security level and the security score difference to obtain a first security level.

3. The method according to claim 1, characterized in that: The safety indicators include hardware indicators and software indicators; The calculating, according to a preset security indicator, a security score difference between the first terminal and the second terminal includes: According to the hardware indicator, respectively calculating the hardware indicator scores of the first terminal and the second terminal to obtain a first hardware indicator score and a second hardware indicator score; Calculate the difference between the first hardware indicator score and the second hardware indicator score to obtain a first difference; Calculate the ratio of the first difference value to the second hardware indicator score to obtain a first difference ratio; According to the software indicator, respectively calculating the software indicator scores of the first terminal and the second terminal to obtain a first software indicator score and a second software indicator score; Calculate the difference between the first software indicator score and the second software indicator score to obtain a second difference; Calculate the ratio of the second difference to the second software indicator score to obtain a second difference ratio; The sum of the first difference ratio and the second difference ratio is calculated to obtain the safety score difference.

4. The method according to claim 3, characterized in that The step of setting the security level of the first terminal according to the second security level and the security score difference to obtain the first security level includes: If the security score difference is greater than a preset threshold, the first security level is set to be greater than or equal to the second security level; otherwise, the first security level is set to be less than the second security level.

5. The method according to claim 1, characterized in that The number of the second terminals is multiple; The acquiring, according to the first terminal identifier and the association relationship, the security level of the second terminal to obtain the second security level includes: Acquire the security levels of the plurality of second terminals according to the first terminal identifier and the association relationship, and obtain the plurality of second security levels; The calculating the security level of the first terminal based on the second security level to obtain the first security level includes: respectively calculating similarities between the first terminal and the plurality of second terminals; Among the multiple second security levels, the second security level corresponding to the second terminal with the highest similarity is taken as the first security level.

6. The method according to claim 5, characterized in that The respectively calculating the similarities between the first terminal and the plurality of the second terminals includes: Acquire a plurality of security feature vectors of the second terminal to obtain a plurality of second security feature vectors; Acquire a security feature vector of the first terminal to obtain a first security feature vector; Distances between the first security feature vector and the plurality of second security feature vectors are calculated respectively to obtain similarities between the first terminal and the plurality of second terminals.

7. The method according to any one of claims 1 to 6, characterized in that: The access control policy includes a logic statement, and the variables of the logic statement include terminal attributes and security levels; The detecting, according to the first security level and the access control policy, the access permission of the first terminal includes: Acquire the terminal attribute of the first terminal to obtain the first terminal attribute; input the first terminal attribute and the first security level as variable values ​​into the logic statement to obtain a logic statement value; if the logic statement value is true, the access permission is to allow access; otherwise, the access permission is not to allow access.

8. A sensitive data access device, characterized in that: The device is applied to a data management terminal, and comprises: a request receiving module, configured to receive a data access request from a first terminal for sensitive data, the sensitive data including an access control policy based on a security level, the security level being used to characterize a data leakage risk, the first terminal being associated with a second terminal, the second terminal having a second security level, and the data access request including a first terminal identifier for identifying the first terminal; A second security level acquisition module, configured to acquire the security level of the second terminal according to the first terminal identifier and the association relationship, to obtain the second security level; A first security level calculation module, configured to calculate the security level of the first terminal based on the second security level to obtain a first security level; an access control module, configured to detect access rights of the first terminal according to the first security level and the access control policy; A data sending module is used to send the sensitive data to the first terminal or not send the sensitive data to the first terminal according to the access permission.

9. An electronic device, characterized in that: The electronic device includes a memory and a processor, the memory stores a computer program, and the processor implements the sensitive data access method described in any one of claims 1 to 7 when executing the computer program.

10. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the sensitive data access method according to any one of claims 1 to 7 is implemented.

Images