Information query method and device, equipment, medium and product

Abstract

The invention discloses an information query method and device, equipment, a medium and a product, and relates to the technical field of privacy computing, and the method comprises the steps: determining a query result processing demand of a target user according to an information query request sent by a target client; under the condition that the query result processing demand is a first type of demand, determining whether the to-be-queried information field is a sensitive information field or not through an authority verification module; if the to-be-queried information field is a sensitive-related information field, performing information desensitization on the original field content through an information desensitization module to obtain desensitized field content; and sending the desensitization field content to the target client, so that the target client displays the desensitization field content. According to the method, the authority verification and the information desensitization are respectively realized in different functional sub-modules, so that the effect of separating the execution of the authority control process is realized, the flexibility of the authority control process in an information query scene is improved, and the later maintenance and updating cost of the authority control process is reduced.

Description

Technical Field

[0001] The present invention relates to the field of privacy computing technology, and in particular to an information query method, device, equipment, medium and product. Background Art

[0002] In the information query scenario, information permission control is always the primary goal of various security checks. When a user needs to query information, he needs to use the information query system through the client to complete a series of permission control operations before the queried information can be fed back to the user for viewing.

[0003] The current information query system integrates various permission control processes into the same functional module, which results in the program code of the functional module being very bloated, and is not conducive to the subsequent maintenance and updating of various permission control processes. Summary of the invention

[0004] The present invention provides an information query method, device, equipment, medium and product to solve the problem in the prior art that various permission control processes are integrated into the same functional module, which is not conducive to the subsequent maintenance and update of various permission control processes.

[0005] According to one aspect of the present invention, there is provided an information query method, which is performed by an information query system, the information query system comprising an authority verification module and an information desensitization module, and the method comprises:

[0006] Determine the query result processing requirements of the target user according to the information query request sent by the target client; wherein the target user is the user who operates the target client;

[0007] In the case where the query result processing requirement is a first type of requirement, determining whether the information field to be queried is a sensitive information field through the authority verification module; wherein the first type of requirement is information desensitization and information display, and the information field to be queried is determined according to the information query request;

[0008] If the information field to be queried is a sensitive information field, the information desensitization module performs information desensitization on the original field content to obtain desensitized field content; wherein the original field content is the query result obtained by performing information query according to the information field to be queried;

[0009] The desensitized field content is sent to the target client so that the target client can display the desensitized field content.

[0010] According to another aspect of the present invention, there is provided an information query device, which is configured in an information query system. The information query system includes an authority verification module and an information desensitization module. The device includes:

[0011] A demand determination module, used to determine the query result processing demand of the target user according to the information query request sent by the target client; wherein the target user is the user who operates the target client;

[0012] a sensitive information field identification module, used to determine whether the information field to be queried is a sensitive information field through the permission verification module when the query result processing requirement is a first type of requirement; wherein the first type of requirement is information desensitization and information display, and the information field to be queried is determined according to the information query request;

[0013] A desensitized field content acquisition module, used for, if the information field to be queried is a sensitive information field, desensitizing the original field content through the information desensitization module to obtain desensitized field content; wherein the original field content is a query result obtained by performing information query according to the information field to be queried;

[0014] The information sending module is used to send the desensitized field content to the target client so that the target client can display the desensitized field content.

[0015] According to another aspect of the present invention, there is provided an electronic device, the electronic device comprising:

[0016] at least one processor; and

[0017] a memory communicatively connected to the at least one processor; wherein,

[0018] The memory stores a computer program executable by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the information query method described in any one of the present invention.

[0019] According to another aspect of the present invention, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement any one of the information query methods of the present invention when executed.

[0020] According to another aspect of the present invention, a computer program product is provided, comprising a computer program, wherein when the computer program is executed by a processor, the computer program implements the information query method according to any one of the present invention.

[0021] The present invention sets an information query system including an authority verification module and an information desensitization module. When the query result processing requirement is a first-class requirement, the authority verification module is used to determine whether the information field to be queried is a sensitive information field; if the information field to be queried is a sensitive information field, the information desensitization module is used to desensitize the original field content to obtain the desensitized field content; the desensitized field content is sent to a target client so that the target client can display the desensitized field content, thereby respectively implementing the authority verification and information desensitization in the authority control process in different functional sub-modules, achieving the effect of separating the execution of the authority control process, avoiding the problem that all authority control processes are integrated in the same functional module, resulting in bloated program code that is not conducive to subsequent maintenance and updating, improving the flexibility of the authority control process in the information query scenario, and reducing the cost of later maintenance and updating of the authority control process.

[0022] It should be understood that the contents described in this section are not intended to identify the key or important features of the embodiments of the present invention, nor are they intended to limit the scope of the present invention. Other features of the present invention will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0024] Figure 1 A flowchart of a method for querying information provided in Embodiment 1 of the present invention;

[0025] Figure 2 A flowchart of a method for querying information provided by Embodiment 2 of the present invention;

[0026] Figure 3 A flowchart of a method for querying information provided by Embodiment 3 of the present invention;

[0027] Figure 4 A flowchart of a method for querying information provided by Embodiment 4 of the present invention;

[0028] Figure 5 A flowchart of a method for querying information provided by Embodiment 5 of the present invention;

[0029] Figure 6 A schematic diagram of the structure of an information query device provided in Embodiment 6 of the present invention;

[0030] Figure 7It is a structural schematic diagram of an electronic device for implementing the information query method of an embodiment of the present invention. DETAILED DESCRIPTION

[0031] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0032] It should be noted that the terms "candidate", "target", "first category", "second category", "third category", "fourth category", "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0033] Embodiment 1

[0034] Figure 1 This is a flowchart of an information query method provided in the first embodiment of the present invention. This embodiment is applicable to the case where the information query system queries the field content for the target client. The method can be executed by an information query device, which is configured in the information query system and can be implemented in the form of hardware and / or software. The information query system refers to a system with information query function, and the information query system includes a permission verification module and an information desensitization module. Figure 1 As shown, the method includes:

[0035] S101. Determine the query result processing requirements of the target user according to the information query request sent by the target client.

[0036] The target client refers to the client held by the target user who has information query needs, and the target user is the user who operates the target client. The types of target clients include but are not limited to web clients, app clients, or email clients, etc. This embodiment does not limit the specific type of web clients. The query result processing requirements reflect what processing operations the target user expects the information query system to perform on the query results obtained, including but not limited to information desensitization, information non-desensitization, information display, and information download.

[0037] In one embodiment, the target user operates the target client and clicks an information query button on a page displayed by the target client, and the target client generates a to-be-queried information selection page, wherein the to-be-queried information selection page displays all information fields that the target user can query in the file database. The target user selects several from all information fields as to-be-queried information fields according to actual business needs, or selects all information fields as to-be-queried information fields by default.

[0038] The target client generates an information query request in response to the target user's selection operation in the information selection page to be queried. The information query request carries the information field to be queried. The target client sends the information query request to the information query system.

[0039] The information query system obtains the information query request sent by the target client, and determines the query result processing requirements of the target user according to the information query request. Specifically, determining the query result processing requirements includes but is not limited to being achieved by one of the following methods:

[0040] 1) The target user operates the target client and clicks the information query button on the page displayed by the target client. The target client generates a page for selecting information to be queried, wherein the page for selecting information to be queried displays all information fields that the target user can query in the file database, as well as candidate query result processing requirements that the target user can select. The target user selects several information fields from all information fields as information fields to be queried according to actual business needs, or selects all information fields as information fields to be queried by default; and the target user selects from the candidate query result processing requirements according to actual business needs to determine the query result processing requirements of the target user.

[0041] The target client generates an information query request in response to the target user's selection operation in the information selection page to be queried. The information query request carries the information fields to be queried and the query result processing requirements of the target user. The target client sends the information query request to the information query system.

[0042] The information query system obtains the information query request sent by the target client, and parses the information query request to obtain the query result processing requirements of the target user.

[0043] 2) The information query system obtains the information query request sent by the target client, and controls the target client to display the demand selection page accordingly. The target user selects the target query result processing demand on the demand selection page. The target query result processing demand sent by the target client is used as the query result processing demand of the target user.

[0044] S102: When the query result processing requirement is a first type requirement, determine whether the information field to be queried is a sensitive information field through a permission verification module.

[0045] Among them, the first type of demand is information desensitization and information display, and the information field to be queried is determined according to the information query request. Information desensitization refers to desensitizing the sensitive field content in the query results. The sensitive field content refers to the field content involving customer sensitive information. Such field content needs to be desensitized for privacy protection. Information display refers to feeding back the query results to the target client so that the target client can display the query results to the target user. The permission verification module is integrated into the information query system and is used to execute the permission verification, sensitive verification and other processes in the permission control process. The information field to be queried is determined according to the information query request, that is, the information query request carries the information field to be queried.

[0046] In one embodiment, the information query system identifies the query result processing requirements. When it is determined that the query result processing requirements are the first type of requirements, the information query system first calls the permission verification module to perform permission verification on the target user. The process includes: the permission verification module controls the target client to provide the user with a corresponding operation entrance for the user to choose whether to agree to share the target identity information. If the user agrees to share the target identity information, the permission verification module obtains the target identity information of the target user accordingly, and determines whether the target user is a legal user based on the target identity information, and determines whether the target user has the authority to perform information query based on the target identity information. When the target user is both a legal user and has information query authority, it is determined that the target user's authority verification has passed; when the target user is not a legal user or does not have information query authority, it is determined that the target user's authority verification has failed, and the target user is notified through the target client to re-verify the authority.

[0047] When the target user passes the authority check, the information query system calls the authority check module again to perform a sensitive check on the information field to be queried to determine whether the information field to be queried is a sensitive information field. The process includes: the authority check module matches the information field to be queried with the candidate information field that has been determined to be a sensitive information field. If they match, the information field to be queried is determined to be a sensitive information field; if they do not match, the information field to be queried is determined to be a non-sensitive information field.

[0048] S103. If the information field to be queried is a sensitive information field, the original field content is desensitized by an information desensitization module to obtain desensitized field content.

[0049] The original field content is the query result obtained by querying the information field to be queried. It can be understood that the original field content is the real field content of the information field to be queried without desensitization. The information desensitization module is integrated into the information query system and is used to execute information desensitization and other processes in the permission control process.

[0050] In one embodiment, if the information field to be queried is not a sensitive information field, that is, the original field content does not contain sensitive content, the information query system sends the original field content directly to the target client for the target client to display the original field content.

[0051] If the information field to be queried is a sensitive information field, that is, the original field content contains sensitive content, the information query system uses the information desensitizing module to use a preset information desensitizing algorithm to desensitize the original field content, and uses the desensitized original field content as the desensitized field content.

[0052] S104: Send the desensitized field content to the target client, so that the target client can display the desensitized field content.

[0053] In one implementation, the information query system sends the desensitized field content to the target client. After receiving the desensitized field content, the target client displays the desensitized field content for the target user to view.

[0054] The embodiment of the present invention sets an information query system including an authority verification module and an information desensitization module. When the query result processing requirement is a first-class requirement, the authority verification module is used to determine whether the information field to be queried is a sensitive information field; if the information field to be queried is a sensitive information field, the information desensitization module is used to desensitize the original field content to obtain the desensitized field content; the desensitized field content is sent to the target client for the target client to display the desensitized field content, thereby implementing the authority verification and information desensitization in the authority control process in different functional sub-modules respectively, achieving the effect of separating the execution of the authority control process, avoiding the problem that all authority control processes are integrated in the same functional module, resulting in bloated program code that is not conducive to subsequent maintenance and updates, improving the flexibility of the authority control process in the information query scenario, and reducing the cost of later maintenance and updates of the authority control process.

[0055] Embodiment 2

[0056] Figure 2 This is a flow chart of a method for querying information provided by Embodiment 2 of the present invention. This embodiment further optimizes and expands the above embodiment and can be combined with the above optional implementations. Figure 2 As shown, the method includes:

[0057] S201. According to the information query request sent by the target client, control the target client to display a demand selection page.

[0058] Among them, the demand selection page contains at least one type of candidate query result processing demand, and the candidate query result processing demand refers to the query result processing demand that the target user can select, including but not limited to at least one of information desensitization, information non-desensitization, information display and information download.

[0059] In one embodiment, the target client generates an information query request in response to the target user's selection operation in the to-be-queried information selection page, and sends the information query request to the information query system.

[0060] After receiving the information query request sent by the target client, the information query system sends a control instruction to the target client to control the target client to display the demand selection page.

[0061] S202: Determine the query result processing requirement of the target user according to the target query result processing requirement sent by the target client.

[0062] The target query result processing requirement is selected by the target user from the candidate query result processing requirements. For example, the candidate query result processing requirements include "information desensitization", "information non-desensitization", "information display" and "information download". Assuming that the target user selects "information desensitization" and "information display", "information desensitization" and "information display" are used as the target query result processing requirements.

[0063] In one implementation, the target user selects the target query result processing requirement from the candidate query result processing requirements displayed on the requirement selection page. Optionally, a tab pops up on the requirement selection page, and the tab mainly includes whether to perform information desensitization (single choice), whether to display, and whether to download. The target user selects the tab to generate the target query result processing requirement.

[0064] The target client sends the target query result processing requirement to the information query system, and the information query system uses the target query result processing requirement as the query result processing requirement of the target user.

[0065] By controlling the target client to display the demand selection page according to the information query request sent by the target client, and determining the target user's query result processing requirements according to the target query result processing requirements sent by the target client, the right to choose the query result processing requirements is transferred to the target user, which can meet the target user's diverse and personalized query result processing requirements and improve the target user's experience of using the information query system.

[0066] S203: When the query result processing requirement is a first type requirement, at least one candidate information field that has been determined to be a sensitive information field is obtained through a permission verification module.

[0067] The candidate information fields refer to the information fields in the file database that have been determined to be sensitive. The candidate information fields can be pre-screened in the file database by relevant technical personnel.

[0068] S204. Match the information field to be queried with each candidate information field respectively through the permission verification module. If the information field to be queried matches any candidate information field, it is determined that the information field to be queried is a sensitive information field.

[0069] In one embodiment, the information query system matches the information field to be queried with each candidate information field through an authority verification module to determine whether there is a candidate information field that matches the information field to be queried. If the information field to be queried matches any candidate information field, the information field to be queried is determined to be a sensitive information field; if the information field to be queried does not match any candidate information field, the information field to be queried is determined to be a non-sensitive information field.

[0070] Exemplarily, assuming that the candidate information fields include "information field A", "information field B", "information field C" and "information field D", and assuming that the information field to be queried is "information field B", it can be determined that the information field to be queried "information field B" is a sensitive information field; assuming that the information field to be queried is "information field E", it can be determined that the information field to be queried "information field E" is a non-sensitive information field.

[0071] At least one candidate information field that has been determined to be a sensitive information field is obtained through the permission verification module; the information field to be queried is matched with each candidate information field respectively through the permission verification module. If the information field to be queried matches any candidate information field, the information field to be queried is determined to be a sensitive information field. On the one hand, the effect of identifying whether the information field to be queried is sensitive is achieved, avoiding the problem of directly exposing the content of the sensitive field to the external environment without desensitizing, thereby ensuring the security of sensitive information; on the other hand, since the candidate information fields are set in advance, whether the information field to be queried is sensitive can be directly determined only by means of field matching, thereby improving the efficiency of sensitive identification of the information field to be queried.

[0072] S205. If the information field to be queried is a sensitive information field, the original field content is desensitized by an information desensitization module to obtain desensitized field content.

[0073] S206: Send the desensitized field content to the target client, so that the target client can display the desensitized field content.

[0074] Embodiment 3

[0075] Figure 3 This is a flowchart of a method for querying information provided by Embodiment 3 of the present invention. This embodiment further optimizes and expands the solution after "determining the query result processing requirements of the target user" in the above embodiment, and can be combined with the above optional implementations. Figure 3 As shown, the method includes:

[0076] S301. When the query result processing requirement is the second type of requirement, determine whether the information field to be queried is a sensitive information field through the permission verification module.

[0077] The second type of demand is information desensitization and information download. Information download refers to feeding back the query results to the target client so that the target user can download the query results through the target client.

[0078] In one implementation, the information query system identifies the query result processing requirements, and when determining that the query result processing requirements are the second type of requirements, the information query system first calls the permission verification module to perform permission verification on the target user. When the target user passes the permission verification, the information query system calls the permission verification module again to perform a sensitive verification on the information field to be queried, and determines whether the information field to be queried is a sensitive information field.

[0079] S302. If the information field to be queried is a sensitive information field, the original field content is desensitized by an information desensitization module to obtain desensitized field content.

[0080] In one embodiment, if the information field to be queried is not a sensitive information field, that is, the original field content does not contain sensitive content, the information query system sends the original field content to the target client, and controls the target client to generate a third download hyperlink based on the original field content, so that the target user can download the original field content through the third download hyperlink.

[0081] If the information field to be queried is a sensitive information field, that is, the original field content contains sensitive content, the information query system uses the information desensitizing module to use a preset information desensitizing algorithm to desensitize the original field content, and uses the desensitized original field content as the desensitized field content.

[0082] S303: Send the desensitized field content to the target client, and control the target client to generate a first download hyperlink according to the desensitized field content, so that the target user can download the desensitized field content through the first download hyperlink.

[0083] In one embodiment, the information query system sends the desensitized field content to the target client, and controls the target client to generate a query snapshot and a third download hyperlink based on the desensitized field content, so that the target user can download the original field content through the third download hyperlink. For example, the target user clicks the third download hyperlink to complete the download of the original field content.

[0084] When the query result processing requirement is the second type of requirement, the permission verification module is used to determine whether the information field to be queried is a sensitive information field; if the information field to be queried is a sensitive information field, the original field content is desensitized by the information desensitization module to obtain the desensitized field content; the desensitized field content is sent to the target client, and the target client is controlled to generate a first download hyperlink according to the desensitized field content, so that the target user can download the desensitized field content through the first download hyperlink, thereby meeting the target user's desensitization and downloading requirements for the query results and improving the target user's user experience of the information query system.

[0085] Embodiment 4

[0086] Figure 4 This is a flowchart of a method for querying information provided by Embodiment 4 of the present invention. This embodiment further optimizes and expands the solution after "determining the query result processing requirements of the target user" in the above embodiment, and can be combined with the above optional implementations. Figure 4 As shown, the method includes:

[0087] S401. When the query result processing requirement is the third type of requirement, determine whether the information field to be queried is a sensitive information field through the permission verification module.

[0088] Among them, the third type of requirements is information non-masking and information display. Information non-masking means that sensitive field contents in the query results are not masked to ensure the integrity of the field contents in the query results.

[0089] S402: If the information field to be queried is a sensitive information field, a manual approval request is initiated to the approval client according to the original field content through the information approval module.

[0090] Among them, if the information field to be queried is a sensitive information field, if the original field content of the information field to be queried is not desensitized and directly fed back to the target client, there is a possibility of sensitive information leakage. Therefore, in this case, it is necessary to manually review the original field content to determine whether the original field content can be directly fed back to the target client. The information approval module is integrated into the information query system and is used to execute processes such as manual approval in the permission control process.

[0091] In one embodiment, if the information field to be queried is not a sensitive information field, that is, the original field content does not contain sensitive content, the information query system sends the original field content directly to the target client for the target client to display the original field content.

[0092] If the information field to be queried is a sensitive information field, that is, the original field content contains sensitive content, the information query system initiates a manual approval request to the approval client based on the original field content through the information approval module. The execution process includes: the information approval module determines whether an approval client is preset. If so, a manual approval request is initiated to the preset approval client based on the original field content; if not, a manual approval request is initiated to the default approval client based on the original field content.

[0093] S403: When the approval is passed by the approval client, the original field content is sent to the target client, so that the target client can display the original field content.

[0094] In one embodiment, if the approval client fails to approve the application, that is, the manual approval believes that directly feeding back the original field content to the target client for display may cause leakage of sensitive information, the information query system will refuse to send the original field content to the target client for display, and control the target client to ask the target user again whether to desensitize the information.

[0095] If the approval client passes the review, that is, the manual reviewer believes that the original field content is directly fed back to the target client for display, which will not cause sensitive information leakage, then the information query system will send the original field content to the target client. The target client generates a query snapshot, and the target user can view the original field content by clicking the View button in the query snapshot.

[0096] When the query result processing requirement is the third type of requirement, the permission verification module is used to determine whether the information field to be queried is a sensitive information field; if the information field to be queried is a sensitive information field, the information approval module initiates a manual approval request to the approval client according to the original field content; when the approval client approves, the original field content is sent to the target client for the target client to display the original field content. The beneficial effects are:

[0097] First, the permission verification and manual approval in the permission control process are implemented in different functional sub-modules respectively, which achieves the effect of separating the execution of the permission control process, avoiding the problem of integrating all permission control processes in the same functional module, resulting in bloated program code that is not conducive to subsequent maintenance and updates, improving the flexibility of the permission control process in information query scenarios, and reducing the cost of subsequent maintenance and updates of the permission control process.

[0098] Secondly, since the original field content without desensitization will be fed back to the target client for display only after manual approval, the possibility of sensitive information leakage is greatly reduced.

[0099] Thirdly, it meets the target users' needs for the display of query results and improves the target users' experience of using the information query system.

[0100] Embodiment 5

[0101] Figure 5 This is a flowchart of a method for querying information provided by Embodiment 5 of the present invention. This embodiment further optimizes and expands the solution after "determining the query result processing requirements of the target user" in the above embodiment, and can be combined with the above optional implementations. Figure 5 As shown, the method includes:

[0102] S501. When the query result processing requirement is the fourth type of requirement, determine whether the information field to be queried is a sensitive information field through the permission verification module.

[0103] Among them, the fourth category of demand is non-massification of information and information downloading.

[0104] S502: If the information field to be queried is a sensitive information field, a manual approval request is initiated to the approval client according to the original field content through the information approval module.

[0105] In one embodiment, if the information field to be queried is not a sensitive information field, that is, the original field content does not contain sensitive content, the information query system sends the original field content directly to the target client, and controls the target client to generate a fourth download hyperlink based on the original field content, so that the target user can download the original field content through the fourth download hyperlink.

[0106] If the information field to be queried is a sensitive information field, that is, the original field content contains sensitive content, the information query system will initiate a manual approval request to the approval client based on the original field content through the information approval module.

[0107] S503: When the approval client passes the approval, the original field content is sent to the target client, and the target client is controlled to generate a second download hyperlink according to the original field content, so that the target user can download the original field content through the second download hyperlink.

[0108] In one embodiment, when the approval client approves it, that is, the manual approval believes that the original field content is directly fed back to the target client for downloading, and will not cause sensitive information leakage, the information query system will send the original field content to the target client, and control the target client to generate a second download hyperlink based on the original field content, so that the target user can download the original field content through the second download hyperlink.

[0109] S504: If the approval client fails to approve the application, the original field content is sent to the target client so that the target client can display the original field content.

[0110] In one embodiment, if the approval client fails to approve the content, that is, the manual approval believes that the original field content is directly fed back to the target client for downloading, which may lead to the leakage of sensitive information. At this time, the information query system only sends the original field content to the target client for the target user to view the original field content through the target client, and does not support the target user to download the original field content through the target client.

[0111] When the query result processing requirement is the fourth type of requirement, the permission verification module is used to determine whether the information field to be queried is a sensitive information field; if the information field to be queried is a sensitive information field, the information approval module initiates a manual approval request to the approval client according to the original field content; when the approval client approves, the original field content is sent to the target client, and the target client is controlled to generate a second download hyperlink according to the original field content, so that the target user can download the original field content through the second download hyperlink; when the approval client fails to approve, the original field content is sent to the target client, so that the target client can display the original field content. The beneficial effects are:

[0112] First, since the original un-masked field content is fed back to the target client for download only after manual approval, and if the manual approval is not passed, the original un-masked field content is refused to be fed back to the target client for download, the possibility of sensitive information leakage is greatly reduced.

[0113] Secondly, if manual approval fails, the original field content that has not been desensitized will still be fed back to the target client for display, which can not only reduce the possibility of sensitive information leakage, but also to a certain extent alleviate the anxiety of the target user caused by the inability to download the original field content, thereby improving the target user's experience of using the information query system.

[0114] Embodiment 6

[0115] Figure 6 This is a schematic diagram of the structure of an information query device provided by Embodiment 6 of the present invention. The information query device is configured in an information query system, and the information query system includes an authority verification module and an information desensitization module, such as Figure 6 As shown, the device comprises:

[0116] The demand determination module 61 is used to determine the query result processing demand of the target user according to the information query request sent by the target client; wherein the target user is the user who operates the target client;

[0117] A sensitive information field identification module 62 is used to determine whether the information field to be queried is a sensitive information field through the permission verification module when the query result processing requirement is a first type of requirement; wherein the first type of requirement is information desensitization and information display, and the information field to be queried is determined according to the information query request;

[0118] The desensitized field content acquisition module 63 is used to desensitize the original field content through the information desensitization module to obtain the desensitized field content if the information field to be queried is a sensitive information field; wherein the original field content is the query result obtained by performing information query according to the information field to be queried;

[0119] The information sending module 64 is used to send the desensitized field content to the target client so that the target client can display the desensitized field content.

[0120] Optionally, the demand determination module 61 is specifically configured to:

[0121] According to the information query request sent by the target client, control the target client to display a demand selection page; wherein the demand selection page includes at least one type of candidate query result processing demand;

[0122] The query result processing requirement of the target user is determined according to the target query result processing requirement sent by the target client; wherein the target query result processing requirement is selected by the target user from the candidate query result processing requirements.

[0123] Optionally, the sensitive information field identification module 62 is specifically used to:

[0124] Acquire, through the permission verification module, at least one candidate information field that has been determined to be a sensitive information field;

[0125] The information field to be queried is matched with each of the candidate information fields respectively through the permission verification module. If the information field to be queried matches any of the candidate information fields, it is determined that the information field to be queried is a sensitive information field.

[0126] Optionally, the device further includes a first information processing module, specifically configured to:

[0127] In the case where the query result processing requirement is a second type of requirement, determining whether the information field to be queried is a sensitive information field through the permission verification module; wherein the second type of requirement is information desensitization and information download;

[0128] If the information field to be queried is a sensitive information field, the information desensitization module performs information desensitization on the original field content to obtain desensitized field content;

[0129] The desensitized field content is sent to the target client, and the target client is controlled to generate a first download hyperlink according to the desensitized field content, so that the target user can download the desensitized field content through the first download hyperlink.

[0130] Optionally, the device further includes a second information processing module, specifically configured to:

[0131] In the case where the query result processing requirement is a third type requirement, determining whether the information field to be queried is a sensitive information field through the authority verification module; wherein the third type requirement is that the information is not desensitized and the information is displayed;

[0132] If the information field to be queried is a sensitive information field, a manual approval request is initiated to the approval client according to the original field content by the information approval module;

[0133] When the approval is passed by the approval client, the original field content is sent to the target client, so that the target client can display the original field content.

[0134] Optionally, the device further includes a third information processing module, specifically configured to:

[0135] In the case where the query result processing requirement is a fourth type of requirement, determining whether the information field to be queried is a sensitive information field through the permission verification module; wherein the fourth type of requirement is that the information is not desensitized and the information is downloaded;

[0136] If the information field to be queried is a sensitive information field, a manual approval request is initiated to the approval client according to the original field content by the information approval module;

[0137] If the approval client passes the approval, the original field content is sent to the target client, and the target client is controlled to generate a second download hyperlink according to the original field content, so that the target user can download the original field content through the second download hyperlink;

[0138] In the case that the approval client fails to approve the content, the original field content is sent to the target client so that the target client can display the original field content.

[0139] The information query device provided by the embodiment of the present invention can execute the information query method provided by any embodiment of the present invention, and has the corresponding functional modules and beneficial effects of the execution method.

[0140] Embodiment 7

[0141] Figure 7A schematic diagram of an electronic device 70 that can be used to implement an embodiment of the present invention is shown. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital processing, cellular phones, smart phones, wearable devices (such as helmets, glasses, watches, etc.) and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely examples and are not intended to limit the implementation of the present invention described and / or required herein.

[0142] like Figure 7 As shown, the electronic device 70 includes at least one processor 71, and a memory connected to the at least one processor 71, such as a read-only memory (ROM) 72, a random access memory (RAM) 73, etc., wherein the memory stores a computer program that can be executed by at least one processor, and the processor 71 can perform various appropriate actions and processes according to the computer program stored in the read-only memory (ROM) 72 or the computer program loaded from the storage unit 78 to the random access memory (RAM) 73. In the RAM 73, various programs and data required for the operation of the electronic device 70 can also be stored. The processor 71, the ROM 72, and the RAM 73 are connected to each other via a bus 74. An input / output (I / O) interface 75 is also connected to the bus 74.

[0143] A number of components in the electronic device 70 are connected to the I / O interface 75, including: an input unit 76, such as a keyboard, a mouse, etc.; an output unit 77, such as various types of displays, speakers, etc.; a storage unit 78, such as a disk, an optical disk, etc.; and a communication unit 79, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 79 allows the electronic device 70 to exchange information / data with other devices through a computer network such as the Internet and / or various telecommunication networks.

[0144] The processor 71 may be a variety of general and / or special processing components with processing and computing capabilities. Some examples of the processor 71 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any appropriate processor, controller, microcontroller, etc. The processor 71 executes the various methods and processes described above, such as a method for querying information.

[0145] In some embodiments, the information query method can be implemented as a computer program, which is tangibly contained in a computer-readable storage medium, such as a storage unit 78. In some embodiments, part or all of the computer program can be loaded and / or installed on the electronic device 70 via the ROM 72 and / or the communication unit 79. When the computer program is loaded into the RAM 73 and executed by the processor 71, one or more steps of the information query method described above can be performed. Alternatively, in other embodiments, the processor 71 can be configured to execute the information query method in any other appropriate manner (for example, by means of firmware).

[0146] Various implementations of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), complex programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various implementations can include: being implemented in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which can be a special purpose or general purpose programmable processor that can receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit data and instructions to the storage system, the at least one input device, and the at least one output device.

[0147] Computer programs for implementing the methods of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, so that when the computer program is executed by the processor, the functions / operations specified in the flow chart and / or block diagram are implemented. The computer program may be executed entirely on the machine, partially on the machine, partially on the machine and partially on a remote machine as a stand-alone software package, or entirely on a remote machine or server.

[0148] In the context of the present invention, a computer-readable storage medium may be a tangible medium that may contain or store a computer program for use by or in combination with an instruction execution system, device or equipment. A computer-readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, devices or equipment, or any suitable combination of the foregoing. Alternatively, a computer-readable storage medium may be a machine-readable signal medium. A more specific example of a machine-readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0149] To provide interaction with a user, the systems and techniques described herein may be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and a pointing device (e.g., a mouse or trackball) through which the user can provide input to the electronic device. Other types of devices may also be used to provide interaction with the user; for example, the feedback provided to the user may be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user may be received in any form (including acoustic input, voice input, or tactile input).

[0150] The systems and techniques described herein may be implemented in a computing system that includes backend components (e.g., as a data server), or a computing system that includes middleware components (e.g., an application server), or a computing system that includes frontend components (e.g., a user computer with a graphical user interface or a web browser through which a user can interact with implementations of the systems and techniques described herein), or a computing system that includes any combination of such backend components, middleware components, or frontend components. The components of the system may be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: a local area network (LAN), a wide area network (WAN), a blockchain network, and the Internet.

[0151] A computing system may include a client and a server. The client and the server are generally remote from each other and usually interact through a communication network. The client and server relationship is generated by computer programs running on the corresponding computers and having a client-server relationship with each other. The server may be a cloud server, also known as a cloud computing server or cloud host, which is a host product in the cloud computing service system to solve the defects of difficult management and weak business scalability in traditional physical hosts and VPS services.

[0152] It should be understood that the various forms of processes shown above can be used to reorder, add or delete steps. For example, the steps described in the present invention can be executed in parallel, sequentially or in different orders, as long as the desired results of the technical solution of the present invention can be achieved, and this document does not limit this.

[0153] The above specific implementations do not constitute a limitation on the protection scope of the present invention. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions can be made according to design requirements and other factors. Any modification, equivalent substitution and improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. An information query method, executed by an information query system, characterized in that: The information query system includes an authority verification module and an information desensitization module, and the method includes: Determine the query result processing requirements of the target user according to the information query request sent by the target client; wherein the target user is the user who operates the target client; In the case where the query result processing requirement is a first type of requirement, determining whether the information field to be queried is a sensitive information field through the authority verification module; wherein the first type of requirement is information desensitization and information display, and the information field to be queried is determined according to the information query request; If the information field to be queried is a sensitive information field, the information desensitization module performs information desensitization on the original field content to obtain desensitized field content; wherein the original field content is the query result obtained by performing information query according to the information field to be queried; The desensitized field content is sent to the target client so that the target client can display the desensitized field content.

2. The method according to claim 1, characterized in that: Determining the query result processing requirements of the target user according to the information query request sent by the target client includes: According to the information query request sent by the target client, control the target client to display a demand selection page; wherein the demand selection page includes at least one type of candidate query result processing demand; The query result processing requirement of the target user is determined according to the target query result processing requirement sent by the target client; wherein the target query result processing requirement is selected by the target user from the candidate query result processing requirements.

3. The method according to claim 1, characterized in that The determining whether the information field to be queried is a sensitive information field by the permission verification module includes: Acquire, through the permission verification module, at least one candidate information field that has been determined to be a sensitive information field; The information field to be queried is matched with each of the candidate information fields respectively through the permission verification module. If the information field to be queried matches any of the candidate information fields, it is determined that the information field to be queried is a sensitive information field.

4. The method according to claim 1, after determining the query result processing requirements of the target user, the method further comprises: In the case where the query result processing requirement is a second type of requirement, determining whether the information field to be queried is a sensitive information field through the permission verification module; wherein the second type of requirement is information desensitization and information download; If the information field to be queried is a sensitive information field, the information desensitization module performs information desensitization on the original field content to obtain desensitized field content; The desensitized field content is sent to the target client, and the target client is controlled to generate a first download hyperlink according to the desensitized field content, so that the target user can download the desensitized field content through the first download hyperlink.

5. According to the method of claim 1, the information query system further comprises an information approval module; After determining the query result processing requirements of the target user, the method further includes: In the case where the query result processing requirement is a third type requirement, determining whether the information field to be queried is a sensitive information field through the authority verification module; wherein the third type requirement is that the information is not desensitized and the information is displayed; If the information field to be queried is a sensitive information field, a manual approval request is initiated to the approval client according to the original field content by the information approval module; When the approval is passed by the approval client, the original field content is sent to the target client, so that the target client can display the original field content.

6. The method according to claim 5, after determining the query result processing requirements of the target user, the method further comprises: In the case where the query result processing requirement is a fourth type of requirement, determining whether the information field to be queried is a sensitive information field through the permission verification module; wherein the fourth type of requirement is that the information is not desensitized and the information is downloaded; If the information field to be queried is a sensitive information field, a manual approval request is initiated to the approval client according to the original field content by the information approval module; If the approval client passes the approval, the original field content is sent to the target client, and the target client is controlled to generate a second download hyperlink according to the original field content, so that the target user can download the original field content through the second download hyperlink; In the case that the approval client fails to approve the content, the original field content is sent to the target client so that the target client can display the original field content.

7. An information query device, configured in an information query system, characterized in that: The information query system includes an authority verification module and an information desensitization module, and the device includes: A demand determination module, used to determine the query result processing demand of the target user according to the information query request sent by the target client; wherein the target user is the user who operates the target client; a sensitive information field identification module, used to determine whether the information field to be queried is a sensitive information field through the permission verification module when the query result processing requirement is a first type of requirement; wherein the first type of requirement is information desensitization and information display, and the information field to be queried is determined according to the information query request; A desensitized field content acquisition module, used for, if the information field to be queried is a sensitive information field, desensitizing the original field content through the information desensitization module to obtain desensitized field content; wherein the original field content is a query result obtained by performing information query according to the information field to be queried; The information sending module is used to send the desensitized field content to the target client so that the target client can display the desensitized field content.

8. An electronic device, characterized in that: The electronic device comprises: at least one processor; and a memory communicatively connected to the at least one processor; wherein, The memory stores a computer program executable by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the information query method according to any one of claims 1 to 6.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to execute the information query method according to any one of claims 1 to 6.

10. A computer program product, comprising a computer program, wherein when the computer program is executed by a processor, the computer program implements the information query method according to any one of claims 1 to 6.

Images