Personal feature information processing method and device and server

Abstract

The embodiment of the invention provides a personal characteristic information processing method and device and a server. The method comprises the steps that when a user triggers a disposal instruction, a server can respond to the disposal instruction, and personal feature information, input by the user on an interactive interface, of a to-be-disposed user is acquired; the server can retrieve in a system connected with the personal characteristic information processing system according to the personal characteristic information to obtain at least one related system associated with the to-be-processed user. The server can dispose the personal characteristic information of the to-be-disposed user in the related system according to a preset disposal strategy after determining the related system. And the server can check files and mails in the terminal device which may be used by the to-be-handled user. And when it is found that the file and / or the mail contain the personal characteristic information of the user to be handled, the server can handle the file and / or the mail. The method is used for achieving the effect of improving the disposal efficiency.

Description

Technical Field

[0001] The present application relates to the field of computers, and in particular to a method, device and server for processing personal characteristic information. Background Art

[0002] With the development of computer technology, electronic office is increasingly replacing paper documents. Users can directly store personal characteristic information in the server, and users can achieve information docking in the office process through various related systems. When a user leaves, in order to ensure the information security of the enterprise and the user, it is usually necessary to dispose of all the user's information. At present, it is usually necessary for technicians who manage various related systems to search and dispose of their modules respectively to achieve the disposal of the user's personal characteristic information. Obviously, this method has the problem of low disposal efficiency. Summary of the invention

[0003] The personal characteristic information processing method, device and server provided in the embodiments of the present application are used to improve the efficiency of personal characteristic information processing.

[0004] In a first aspect, an embodiment of the present application provides a method for processing personal characteristic information, including:

[0005] In response to the processing instruction, obtaining personal characteristic information of the user to be processed;

[0006] According to the personal characteristic information of the user to be processed, determining at least one related system associated with the user to be processed, and processing the personal characteristic information of the user to be processed in the related system;

[0007] At least one file and / or email associated with the user to be processed is determined according to the personal characteristic information of the user to be processed, and the file and / or email associated with the user to be processed is processed.

[0008] Optionally, determining at least one related system associated with the user to be processed according to the personal characteristic information of the user to be processed, and processing the personal characteristic information of the user to be processed in the related system includes:

[0009] According to the personal characteristic information, querying from the strong correlation docking module of the personal characteristic information processing system to obtain at least one strong correlation system containing the personal characteristic information;

[0010] And, according to the personal characteristic information, querying from a database of a weakly associated docking module of the personal characteristic information processing system to obtain at least one weakly associated system containing the personal characteristic information;

[0011] According to the information type and information source of the personal characteristic information of the user to be processed in the strong association system and / or the weak association system, a disposal strategy for the personal characteristic information of the user to be processed is determined, and the personal characteristic information of the user to be processed is disposed.

[0012] Optionally, determining a disposal strategy for the personal characteristic information of the user to be disposed according to the information type and information source of the personal characteristic information of the user to be disposed, and disposing the personal characteristic information of the user to be disposed, includes at least one of the following:

[0013] Deleting the biometric features of the user to be processed;

[0014] Performing coding processing on the image information containing the user to be processed;

[0015] Using wildcards to replace key information in the text content of the user to be processed;

[0016] The hash value is used to replace the sensitive information in the text content of the user to be processed.

[0017] Optionally, determining at least one file and / or email associated with the user to be processed according to the personal characteristic information of the user to be processed includes:

[0018] Determine the personal characteristic information of the user to be processed according to the personal characteristic information of the user to be processed; wherein the personal characteristic information is part of the key information in the personal characteristic information;

[0019] By means of a preset data leakage prevention function, the personal characteristic information of the user to be processed is converted into sensitive information to be checked, and a corresponding sensitive information checking strategy is generated;

[0020] Generate a file scanning task within a target range and within a target time according to the sensitive information screening strategy and the active range and active time indicated by the personal characteristic information of the user to be processed;

[0021] If the scan finds the file related to the sensitive information to be checked, the file is disposed of and a disposal reminder is sent;

[0022] Through the preset data leakage prevention function, the personal characteristic information of the user to be processed is added to the sensitive information interception strategy of the email.

[0023] Optionally, the method further includes:

[0024] In response to a retrieval process in a strong association docking module of the personal characteristic information processing system according to the personal characteristic information, generating a first log file;

[0025] In response to a process of searching a database of a weakly associated docking module of the personal characteristic information processing system according to the personal characteristic information, generating a second log file;

[0026] generating a third log file in response to a process of handling the personal characteristic information of the user to be handled according to the handling policy of the personal characteristic information of the user to be handled;

[0027] generating a fourth log file in response to the scanning and handling process of the file;

[0028] generating a fifth log file in response to an interception process performed by the email-based sensitive information interception policy;

[0029] An information security tracing report is generated based on the first log file, the second log file, the third log file, the fourth log file, and the fifth log file.

[0030] Optionally, the method further includes:

[0031] Acquire information types and information sources of the personal characteristic information to be processed in the strong correlation system and the weak correlation system, as well as the processing strategy, and generate a first processing list;

[0032] Obtaining files that have been processed after scanning based on the sensitive information screening strategy, and generating a second processing list;

[0033] A processed list is generated and exported according to the first processed list and the second processed list.

[0034] In a second aspect, an embodiment of the present application provides a personal characteristic information processing device, including:

[0035] An acquisition module, used for acquiring personal characteristic information of the user to be processed in response to the processing instruction;

[0036] A disposal module is used to determine at least one related system that is associated with the user to be disposed according to the personal characteristic information of the user to be disposed, and to dispose of the personal characteristic information of the user to be disposed in the related system; determine at least one file and / or email that is associated with the user to be disposed according to the personal characteristic information of the user to be disposed, and to dispose of the file and / or email that is associated with the user to be disposed.

[0037] Optionally, a disposal module is used to:

[0038] According to the personal characteristic information, querying from the strong correlation docking module of the personal characteristic information processing system to obtain at least one strong correlation system containing the personal characteristic information;

[0039] And, according to the personal characteristic information, querying from a database of a weakly associated docking module of the personal characteristic information processing system to obtain at least one weakly associated system containing the personal characteristic information;

[0040] According to the information type and information source of the personal characteristic information of the user to be processed in the strong association system and / or the weak association system, a disposal strategy for the personal characteristic information of the user to be processed is determined, and the personal characteristic information of the user to be processed is disposed.

[0041] Optionally, a disposal module is used to:

[0042] Deleting the biometric features of the user to be processed;

[0043] Performing coding processing on the image information containing the user to be processed;

[0044] Using wildcards to replace key information in the text content of the user to be processed;

[0045] The hash value is used to replace the sensitive information in the text content of the user to be processed.

[0046] Optionally, a disposal module is used to:

[0047] Determine the personal characteristic information of the user to be processed according to the personal characteristic information of the user to be processed; wherein the personal characteristic information is part of the key information in the personal characteristic information;

[0048] By means of a preset data leakage prevention function, the personal characteristic information of the user to be processed is converted into sensitive information to be checked, and a corresponding sensitive information checking strategy is generated;

[0049] Generate a file scanning task within a target range and within a target time according to the sensitive information screening strategy and the active range and active time indicated by the personal characteristic information of the user to be processed;

[0050] If the scan finds the file related to the sensitive information to be checked, the file is disposed of and a disposal reminder is sent;

[0051] Through the preset data leakage prevention function, the personal characteristic information of the user to be processed is added to the sensitive information interception strategy of the email.

[0052] Optionally, a disposal module is used to:

[0053] In response to a retrieval process in a strong association docking module of the personal characteristic information processing system according to the personal characteristic information, generating a first log file;

[0054] In response to a process of searching a database of a weakly associated docking module of the personal characteristic information processing system according to the personal characteristic information, generating a second log file;

[0055] generating a third log file in response to a process of handling the personal characteristic information of the user to be handled according to the handling policy of the personal characteristic information of the user to be handled;

[0056] generating a fourth log file in response to the scanning and handling process of the file;

[0057] generating a fifth log file in response to an interception process performed by the email-based sensitive information interception policy;

[0058] An information security tracing report is generated based on the first log file, the second log file, the third log file, the fourth log file, and the fifth log file.

[0059] Optionally, a disposal module is used to:

[0060] Acquire information types and information sources of the personal characteristic information to be processed in the strong correlation system and the weak correlation system, as well as the processing strategy, and generate a first processing list;

[0061] Obtaining files that have been processed after scanning based on the sensitive information screening strategy, and generating a second processing list;

[0062] A processed list is generated and exported according to the first processed list and the second processed list.

[0063] In a third aspect, an embodiment of the present application provides a server, including: a memory, a processor;

[0064] The memory stores computer-executable instructions;

[0065] The processor executes the computer-executable instructions stored in the memory, so that the processor executes the above first aspect and / or various possible implementations of the first aspect.

[0066] In a fourth aspect, an embodiment of the present application provides a computer-readable storage medium, in which computer-executable instructions are stored. When the computer-executable instructions are executed by a processor, they are used to implement the first aspect above and / or various possible implementations of the first aspect.

[0067] In a fifth aspect, an embodiment of the present application provides a computer program product, including a computer program, which, when executed by a processor, implements the above first aspect and / or various possible implementation methods of the first aspect.

[0068] The personal characteristic information processing method, server, storage medium and program product provided in the embodiments of the present application obtain the personal characteristic information of the user to be processed input by the user on the interactive interface in response to the processing instruction; search in the system connected to the personal characteristic information processing system according to the personal characteristic information to obtain at least one related system that has an association relationship with the user to be processed; after determining the related system, according to the preset processing strategy, the personal characteristic information of the user to be processed in the related system is processed; the files and emails in the terminal device that may be used by the user to be processed are checked; when the personal characteristic information of the user to be processed is contained in the file and / or email, the means of processing the file and / or email is used to avoid the complex operation of cleaning up each related system one by one, improve the processing efficiency, improve the protection of personal characteristic information, and improve the security of the enterprise system. BRIEF DESCRIPTION OF THE DRAWINGS

[0069] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0070] Figure 1 A flowchart of the method for handling personal characteristic information provided for this application;

[0071] Figure 2 A schematic diagram of the structure of the personal characteristic information processing system provided for this application;

[0072] Figure 3 A flowchart of an example of processing personal characteristic information provided for this application;

[0073] Figure 4 A schematic diagram of the structure of the personal characteristic information processing device provided for this application;

[0074] Figure 5 A schematic diagram of the structure of the server provided for this application.

[0075] The above drawings have shown clear embodiments of the present application, which will be described in more detail later. These drawings and text descriptions are not intended to limit the scope of the present application in any way, but to illustrate the concept of the present application to those skilled in the art by referring to specific embodiments. DETAILED DESCRIPTION

[0076] Exemplary embodiments will be described in detail herein, examples of which are shown in the accompanying drawings. When the following description refers to the drawings, the same numbers in different drawings represent the same or similar elements unless otherwise indicated. The implementations described in the following exemplary embodiments do not represent all implementations consistent with the present application. Instead, they are merely examples of devices and methods consistent with some aspects of the present application as detailed in the appended claims.

[0077] First, the terms involved in this application are explained:

[0078] Identity and Access Management (IAM): used to provide user- or role-based access control to applications.

[0079] Data Loss Prevention (DLP): It uses advanced regular expressions, keywords and data dictionaries, file fingerprints, OCR and other technologies to achieve in-depth identification of content. The main function of terminal DLP is to identify and clean up sensitive information stored in the terminal, and the main function of email DLP is to identify and block sensitive information contained in emails.

[0080] Operation and maintenance audit system: also known as the bastion host, it is used to provide a unified entrance for logging into information assets (such as operating systems), control the authority to access information assets, and record the access process.

[0081] With the promulgation of the "Personal Information Protection Law", the responsibilities and obligations that enterprises bear for the proper collection, transmission, storage, use, disposal and destruction of personal information are becoming increasingly important. Based on the electronic office and automated management implemented in the current business, enterprises usually need to collect employees' personal information when they join the company, so as to realize the authentication of employee rights in the electronic office and automated management process of the company. For example, enterprises usually collect and record employees' biometrics for access control. For another example, enterprises usually generate employee accounts for the office system when employees join the company, and the company will collect and record the employee accounts for registration. When an employee leaves, in order to avoid the leakage of the employee's personal information and the improper use of the employee's personal information, it is usually necessary to dispose of the personal information related to the employee when the employee leaves, so as to realize the employee's authority cleaning and privacy protection.

[0082] At present, when an enterprise deals with the resignation of its own employees, it can often freeze the employee's permissions and clean up unnecessary personal characteristic information at one time through the linkage between the human resource management system and the IAM system. However, there are usually outsourced personnel from third-party companies in the enterprise. On the one hand, the human resource management of outsourced personnel is often organized by the outsourcing company itself. The use of outsourced personnel is often scattered in different business lines of the enterprise, and there is generally no department within the enterprise that manages all outsourced personnel in a unified manner. On the other hand, outsourced personnel usually need to enter some personal characteristic information during their service in the enterprise to facilitate company entry and exit and system use. However, since outsourced personnel are not entered into the enterprise's human resource management system, and the turnover rate of outsourced personnel is high, it is easy for a large amount of personal information of outsourced personnel to remain in the enterprise and cannot be cleared in a timely and thorough manner. Therefore, it is impossible to directly dispose of the personal characteristic information of outsourced personnel through the linkage between the human resource management system and the IAM system. This leads to the high complexity and poor disposal effect of the disposal of the personal characteristic information of outsourced personnel when they leave, which in turn leads to the problem of low disposal efficiency.

[0083] In order to solve the above problems, the personal characteristic information disposal method provided by the present application can realize the disposal management of the personal characteristic information of outsourced personnel when the outsourced personnel leave the company by establishing a personal characteristic information disposal system. The personal characteristic information disposal system can be connected to various systems and data leakage prevention systems within the enterprise that are involved in storing the personal characteristic information of outsourced personnel. The use of the personal characteristic information disposal system can provide managers with an interactive interface for centrally disposing the personal characteristic information of outsourced personnel without changing the internal management model of outsourced personnel in the enterprise. Through the interactive interface of the personal characteristic information disposal system, managers can realize the rapid disposal of the personal characteristic information of outsourced personnel, thereby improving the disposal efficiency of the personal characteristic information of outsourced personnel, improving the protection of personal characteristic information, and improving the security of the enterprise's system.

[0084] Optionally, the outsourced personnel who have resigned may be regarded as a user to be processed by the personal characteristic information processing system, and the personal characteristic information processing system may be used to process the personal characteristic information of the user to be processed.

[0085] Specifically, the personal characteristic information processing system can be connected to various systems within the enterprise. In addition, the personal characteristic information processing system can screen out relevant systems that store the personal characteristic information of the user to be processed from various systems through its personal characteristic information processing method. Furthermore, through the personal characteristic information processing method, the processing of the personal characteristic information of the user to be processed can be realized in the relevant system.

[0086] Optionally, the docking mode between the personal characteristic information processing system and each system can be divided into two types: strong association and weak association. Among them, strong association means that the system storing the personal characteristic information of the user to be processed can provide an application API to the personal characteristic information processing system. The personal characteristic information processing system can directly perform disposal operations on the personal characteristic information of the user to be processed in the relevant system according to the preset process and strategy. The disposal operation includes but is not limited to the desensitization and disposal of personal characteristic information. Among them, weak association means that the API form is not used for docking. The personal characteristic information processing system can scan the background database of the relevant system through query permissions, and inform the personal characteristic information processing system by echoing, prompting, etc. after the query finds the personal characteristic information of the user to be processed.

[0087] Optionally, the personal characteristic information processing system can also connect to the DLP system to include the personal characteristic information of the user to be processed as sensitive information into the DLP policy, thereby realizing the identification and processing of the personal characteristic information of the user to be processed stored in the terminal device, and realizing the identification and interception of personal characteristic information related to the user to be processed transmitted in the email.

[0088] In summary, the present application can achieve docking with relevant systems within the enterprise that may involve storing personal characteristic information of employees by establishing the personal characteristic information processing system. The personal characteristic information processing system can centrally process the personal characteristic information of the personnel to be processed, avoid the complex operation of cleaning up each related system one by one, and improve the processing efficiency. Moreover, through the personal characteristic information processing system, the management personnel only need to enter the keywords of the user to be processed to realize the query and processing of all personal characteristic information of the user to be processed, which improves the user experience of the management personnel. Moreover, the personal characteristic information processing system can also retain the processing log during the processing of the personal characteristic information of the user to be processed, so as to realize subsequent verification and backtracking.

[0089] Furthermore, in the implementation process of this application, this application fully considers the feasibility of docking the personal characteristic information processing system with other systems, and sets different strategies for systems that can be docked through the application API and systems that cannot be docked through the application API, respectively, to achieve the retrieval and disposal of the personal characteristic information of the user to be processed. This setting can ensure that the retrieval of personal characteristic information is achieved without affecting the operation of the system itself, thereby improving the efficiency of disposal.

[0090] The technical solution of the present application and how the technical solution of the present application solves the above-mentioned technical problems are described in detail below with specific embodiments. The following specific embodiments can be combined with each other, and the same or similar concepts or processes may not be repeated in some embodiments. The embodiments of the present application will be described below in conjunction with the accompanying drawings.

[0091] Figure 1 A flowchart of the method for handling personal characteristic information provided for this application is as follows: Figure 1 As shown, the personal characteristic information processing method is applied to a personal characteristic information processing system. With a server as the execution subject, the personal characteristic information processing system can be run in the server, and the method includes:

[0092] S101. In response to a processing instruction, obtain personal characteristic information of a user to be processed.

[0093] In this embodiment, the administrator can input the personal characteristic information of the user to be processed through the interactive interface of the personal characteristic information processing system. The administrator can also trigger and generate a processing instruction through the interactive interface. Optionally, the personal characteristic information can be a keyword of the personal characteristic information of the user to be deleted. For example, the personal characteristic information can be part or all of the information such as the user name, user number, user contact number, etc. Optionally, the user to be processed can be an outsourced person who has resigned.

[0094] The server may be a server running a personal characteristic information processing system. The administrator may access the interactive interface of the personal characteristic information processing system in the server through his user terminal. When the user operates on the interactive interface, the server may obtain corresponding information in response to the obtained operation. When the user triggers a processing instruction, the server may obtain the personal characteristic information of the user to be processed input by the user on the interactive interface in response to the processing instruction.

[0095] S102: Determine at least one related system associated with the user to be processed based on the personal characteristic information of the user to be processed, and process the personal characteristic information of the user to be processed in the related system.

[0096] In this embodiment, the server can search the system connected to the personal characteristic information processing system according to the personal characteristic information to obtain at least one related system that has an associated relationship with the user to be processed. Specifically, when the server obtains the personal characteristic information of the user to be deleted according to the personal characteristic information query in the system connected to the personal characteristic information processing system, the system is the related system that has an associated relationship with the user to be deleted. After determining the related system, the server can process the personal characteristic information of the user to be processed in the related system according to the preset processing strategy.

[0097] In one example, the various systems in the enterprise and the personal characteristic information processing system may include multiple docking methods. If the system can be docked with the personal characteristic information processing system through an application programming interface (API), the system can be a strongly associated docking module of the personal characteristic information processing system. Otherwise, if the system cannot be docked with the personal characteristic information processing system through an API, the system can be a weakly associated docking module of the personal characteristic information processing system. The server can query the relevant systems that have an associated relationship with the user to be processed from the strong associated docking module and the weak associated docking module based on the personal characteristic information that has been obtained, and then perform corresponding processing. The process may include:

[0098] Step 1: Based on the personal characteristic information, query and obtain at least one strongly associated system containing the personal characteristic information from the strongly associated docking module of the personal characteristic information processing system.

[0099] In this step, the server can first obtain the strongly associated docking module of the personal characteristic information processing system. These strongly associated docking modules can be connected to the personal characteristic information processing system through an API. The server can call the API through the personal characteristic information processing system to implement the operation of querying the personal characteristic information in the strongly associated docking module. When the server queries the personal characteristic information in the strongly associated docking module through the API, the server can use the system corresponding to the strongly associated docking module as a strongly associated system. The strongly associated docking module can generally be a system that is closely related to the system to be processed. For example, the strongly associated docking module may include a visitor registration system, a door access control system, an outsourced project management system, an outsourced personnel attendance system, etc.

[0100] Step 2: Based on the personal characteristic information, query and obtain at least one weakly associated system containing the personal characteristic information from the database of the weakly associated docking module of the personal characteristic information processing system.

[0101] In this step, the server can obtain the weakly associated docking modules of the personal characteristic information processing system. These weakly associated docking modules are systems that cannot be connected to the personal characteristic information processing system through the API. The server can use the personal characteristic information processing system to search the database (or backup database) of the weakly associated docking modules that do not provide the application API with the query permission. When the server obtains the personal characteristic information from its database, the server can use the weakly associated docking module containing the personal characteristic information as a weakly associated system.

[0102] Optionally, important systems such as the IAM system within the enterprise are usually weakly associated docking modules of the personal characteristic information processing system. This setting can prevent the personal characteristic information processing system from posing a threat to such important systems. In addition, other systems with a small scope of use and high difficulty in transformation can also be used as weakly associated docking modules of the personal characteristic information processing system. This setting can reduce the implementation cost of the personal characteristic information processing system.

[0103] Optionally, in order to prevent the personal characteristic information processing system from affecting the normal operation of the system during the query process, the retrieval process should be implemented when the database is idle, or the retrieval should be implemented on a backup database.

[0104] Step 3: Determine a disposal strategy for the personal characteristic information of the user to be disposed according to the information type and information source of the personal characteristic information of the user to be disposed in the strong association system and / or weak association system, and dispose of the personal characteristic information of the user to be disposed.

[0105] In this step, after determining the strongly associated system and / or the weakly associated system, the server may determine the information type and information source of the personal characteristic information of the user to be processed in the strongly associated system and / or the weakly associated system. The server may be provided with different disposal strategies for personal characteristic information of different information types and / or information sources. The server may determine the corresponding disposal strategy based on the information type and information source of the personal characteristic information of the user to be processed in the strongly associated system and / or the weakly associated system. The server may complete the disposal of the personal characteristic information of the user to be processed in the strongly associated system and / or the weakly associated system based on the disposal strategy.

[0106] For example, different processing strategies set for personal characteristic information of different information types and / or information sources may include at least one of the following:

[0107] First, delete the biometric features of the user to be processed. Among them, biometric features are usually used in various identity recognition scenarios. For example, the biometric features may include fingerprints, faces, irises, palm prints, voice prints, etc. When the user to be processed leaves, the biometric features of the user to be processed can be directly deleted from the database storing the user's biometric features to freeze all the user's permissions.

[0108] Second, the image information containing the user to be processed is coded. The image information containing the user to be processed may include certificate images, work images, life images, etc. Work images and life images are usually not used in situations where there is a security level, so such images do not need to be processed. However, for certificate images, since the certificate images usually include personal characteristic information such as the certificate number and name of the user to be processed, the certificate images need to be processed. When deleting the certificate image does not affect the system, the server can first use the deletion strategy to delete the certificate image. When the deletion of the certificate image involves a wide range, the server can choose a coding strategy to code the personal characteristic information in the certificate image.

[0109] Third, use wildcards to replace key information in the text content of the user to be processed. Among them, when the personal characteristic information of the user to be processed is stored in the form of text content, if deleting the personal characteristic information does not affect the system, the server can first use the deletion strategy to delete the text content. When the deletion of the text content involves a wide range, the server can select a wildcard replacement strategy to replace the key information in the text content. For example, some characters in the user name of the user to be deleted can be replaced with wildcards so that the user name cannot be directly obtained. For another example, some characters in the user number of the user to be deleted can be replaced with wildcards so that the user number cannot be directly obtained.

[0110] Fourth, use hash values ​​to replace sensitive information in the text content of the user to be processed. When the personal characteristic information of the user to be processed is stored in the form of text content, if replacing some of the characters with wildcards still cannot meet the confidentiality requirements, the server can use the hash value replacement strategy to directly replace the personal characteristic information of the user to be processed with the hash value.

[0111] Fifth, by informing the relevant managers, so that they can formulate a disposal plan. Among them, the deletion or modification of some personal characteristic information may have a greater impact on the system. At this time, the server can inform the relevant managers so that the relevant managers can manually formulate a disposal strategy.

[0112] S103: Determine at least one file and / or email associated with the user to be processed based on the personal characteristic information of the user to be processed, and process the file and / or email associated with the user to be processed.

[0113] In this embodiment, in addition to the office management system used in the above-mentioned enterprise, the personal characteristic information of the user to be processed may also be stored in the terminal device used by the user to be processed. On the terminal device, the personal characteristic information of the user to be processed may exist in a file. And, the personal characteristic information of the user to be processed may also appear in an email. In order to further improve the perfection of the disposal of personal characteristic information, the server can check the files and emails in the terminal device that the user to be processed may use. When it is found that the file and / or email contains the personal characteristic information of the user to be processed, the server can dispose of the file and / or email.

[0114] Specifically, the process of checking files and / or emails on the server may include:

[0115] Step 1: Determine the personal characteristic information of the user to be processed according to the personal characteristic information of the user to be processed, wherein the personal characteristic information is part of the key information in the personal characteristic information.

[0116] In this step, the server may query the personal characteristic information of the user to be processed from the above-mentioned strong association system and / or weak association system according to the personal characteristic information of the user to be processed.

[0117] Optionally, the personal characteristic information is specifically part of the key information in the personal characteristic information. Optionally, the personal characteristic information in this step may include personal characteristic information that may appear in files and / or emails.

[0118] Step 2: Through the preset data leakage prevention function, the personal characteristic information of the user to be processed is converted into sensitive information to be checked, and the corresponding sensitive information checking strategy is generated.

[0119] In this step, the server can convert the personal characteristic information of the user to be processed into sensitive information to be checked through the preset data leakage prevention function. Furthermore, the server can generate a corresponding sensitive information screening strategy through the preset data leakage prevention function. Optionally, the preset data leakage prevention function is a DLP system. The DLP system can be a docking module of the personal characteristic information processing system.

[0120] Step 3: Generate a file scanning task within a target range and target time based on the sensitive information screening strategy and the active range and active time indicated by the personal characteristic information of the user to be processed.

[0121] In this step, the server can determine the active time of the user to be processed in the enterprise based on the personal characteristic information of the user to be processed. Optionally, the active time is the time period from the time of joining the company to the time of leaving the company. And, the server can determine the department to which the user to be processed is connected in the company based on the personal characteristic information of the user to be processed. The server can determine the acquisition range based on the connected department. The server can determine the terminal devices that need to be checked based on the active range. The server can determine the range of timestamps of files that need to be checked in the terminal device based on the active time. The server can generate a file scanning task based on the terminal devices that need to be checked and the range of timestamps of files.

[0122] Step 4: If the scan finds files related to the sensitive information to be checked, the files will be disposed of and a disposal reminder will be sent.

[0123] In this step, the server can scan the files within the time stamp range in the terminal device that needs to be checked according to the file scanning task. If the file contains sensitive information to be checked, it means that the personal characteristic information of the user to be handled exists in the file. At this time, the server can dispose of the file and send a corresponding disposal reminder. Optionally, the file can be an application form filled out by the user, etc. Optionally, the server disposes the file and may include deleting the file, or deleting the personal characteristic information of the user to be handled in the file, or replacing the personal characteristic information of the user to be handled in the file with a string such as a wildcard, or directly sending a disposal request containing information such as the file name and file address to the administrator. Optionally, the disposal reminder can be sent directly to the terminal device storing the file. Alternatively, the server can also generate a pop-up window on the terminal device storing the file to remind the user of the terminal device to dispose of the file. The pop-up window may also include a disposal time limit.

[0124] Step 5: By using the preset data leakage prevention function, the personal characteristic information of the user to be processed is added to the sensitive information interception strategy of the email.

[0125] Optionally, the server can add the personal characteristic information of the user to be processed to the sensitive information interception policy of the email through the preset data leakage prevention function. Thereafter, if an email containing the personal characteristic information of the user to be processed appears, the email will be actively intercepted.

[0126] The personal characteristic information disposal method provided by the embodiment of the present application, when the user triggers the disposal instruction, the server can respond to the disposal instruction and obtain the personal characteristic information of the user to be disposed input by the user on the interactive interface. The server can search in the system connected to the personal characteristic information disposal system according to the personal characteristic information, and obtain at least one related system with which the user to be disposed has an association relationship. After determining the related system, the server can dispose of the personal characteristic information of the user to be disposed in the related system according to the preset disposal strategy. The server can check the files and emails in the terminal device that the user to be disposed may use. When the personal characteristic information of the user to be disposed is contained in the file and / or email, the server can dispose of the file and / or email. The present application obtains the personal characteristic information of the user to be disposed, and based on the personal characteristic information, queries the personal characteristic information of the user to be disposed contained in the related system, file and email, and disposes of the personal characteristic information, thereby avoiding the complex operation of cleaning up each related system one by one, improving the disposal efficiency, improving the protection of personal characteristic information, and improving the security of the enterprise's system. Furthermore, this application divides the system into strong-correlation system and weak-correlation system according to the docking mode with the personal characteristic information processing system, and uses different strategies for investigation for the strong-correlation system and the weak-correlation system, further improving the completeness and effectiveness of the investigation. In addition, this application handles the personal characteristic information stored in the form of documents in the terminal and the personal characteristic information that may appear in the email by docking with the DLP system, so that the comprehensiveness of the investigation is further improved.

[0127] Based on the above embodiment, the personal characteristic information processing system of the present application may also be provided with a log recording module. The log recording module may record the logs generated during the query and processing process during the execution of the above embodiment. The specific process may include:

[0128] S201. In response to a retrieval process of personal characteristic information in a strong association docking module of a personal characteristic information processing system, generate a first log file.

[0129] In this embodiment, the server can generate a first log file in the process of searching in the strong correlation docking module of the personal characteristic information processing system using the personal characteristic information. The first log file can be used to indicate the server's search results, search duration, timestamp and other information in each strong correlation docking module.

[0130] S202: In response to a process of searching the database of the weakly associated docking module of the personal characteristic information processing system according to the personal characteristic information, generate a second log file.

[0131] In this embodiment, the server can generate a second log file in the process of searching the database of the weakly associated docking module of the personal characteristic information processing system using the personal characteristic information. The second log file can be used to indicate the server's search results, search duration, timestamp and other information in the database of each weakly associated docking module.

[0132] S203: In response to the process of handling the personal characteristic information of the user to be handled according to the handling strategy for the personal characteristic information of the user to be handled, generate a third log file.

[0133] In this embodiment, after retrieving the strongly associated system and / or the weakly associated system, the server can determine the disposal strategy according to the type and source of the personal characteristic information of the user to be disposed in the strongly associated system and / or the weakly associated system, and use the disposal strategy to dispose of the personal characteristic information in the strongly associated system and / or the weakly associated system. In this process, the server can record a third log file. The third log file may include information such as the type and source of the personal characteristic information of the user to be disposed in the strongly associated system and / or the weakly associated system, the disposal strategy, the disposal result, and a timestamp.

[0134] S204: Generate a fourth log file in response to the scanning and handling process of the file.

[0135] In this embodiment, after generating the file scanning task, the server may perform the file scanning operation, and when the scanning determines that the file contains the personal characteristic information of the user to be processed, the server may process the file. In this process, the server may generate a fourth log file. The fourth log file may include information such as the file scanning task, the scanning result, the processing strategy, the processing result, and the timestamp.

[0136] S205. Generate a fifth log file in response to the interception process executed based on the sensitive information interception policy of the email.

[0137] In this embodiment, the server may also generate a fifth log file during the mail interception process, which may include information such as a timestamp, a mail source, and mail content.

[0138] S206. Generate an information security tracing report according to the first log file, the second log file, the third log file, the fourth log file, and the fifth log file.

[0139] In this embodiment, the server may regularly summarize and store the first log file, the second log file, the third log file, the fourth log file, and the fifth log file. Optionally, the storage is to transfer the first log file, the second log file, the third log file, the fourth log file, and the fifth log file to achieve longer storage. Optionally, the server may also generate an information security tracing report based on the first log file, the second log file, the third log file, the fourth log file, and the fifth log file. The information security tracing report is used to indicate information such as the address of the long-term storage of the first log file, the second log file, the third log file, the fourth log file, and the fifth log file, so as to facilitate use during tracing.

[0140] The personal characteristic information processing method provided in the embodiment of the present application makes the processing of personal characteristic information traceable and provable by recording logs, which complies with the relevant requirements of the "Cybersecurity Law".

[0141] On the basis of the above embodiment, after completing all the troubleshooting tasks, the server can also output a processed list through an interactive interface to inform the management personnel of the processing status of the personal characteristic information of the user to be processed. Optionally, the processed list can include information such as which systems the personal characteristic information of the user to be processed exists, what strategy is used for processing, and the processing results. Optionally, the processed list can also be used to check the information of the user to be processed, so that the person to be processed can clearly understand that his personal characteristic information has been processed. The specific process includes:

[0142] S301: Acquire information types and information sources of personal characteristic information to be handled in a strong association system and a weak association system, as well as handling strategies, and generate a first handling list.

[0143] In this embodiment, the server can determine the strongly associated system and / or weakly associated system in which the personal characteristic information of the user to be processed exists based on the third log file. The server can also obtain the specific personal characteristic information in the strongly associated system and / or weakly associated system of the personal characteristic information of the user to be processed, as well as the information type and information source of the personal characteristic information. The server can also obtain a disposal strategy determined based on the information type and information source. The server can also obtain the disposal result of disposing the personal characteristic information of the user to be processed based on the disposal strategy. The server can use each of the above-mentioned information obtained as a field to generate a first disposal list.

[0144] S302: Obtain files that are processed after scanning based on the sensitive information screening strategy, and generate a second processing list.

[0145] In this embodiment, the server may also obtain a file that contains personal characteristic information of the user to be processed after being scanned by the file scanning task. The server may also obtain a processing strategy for the file. The server may also obtain a processing result for the file. The server may use each of the above-obtained information as a field to generate a second processing list.

[0146] S303: Generate and export a processed list according to the first processed list and the second processed list.

[0147] In this embodiment, the server can generate a processed list based on the first processing list and the second processing list. The server can export the processed list. The server can send the processed list to the interactive interface of the personal feature information processing system so that the administrator can obtain the processed list.

[0148] The personal characteristic information processing method provided in the embodiment of the present application generates a processed list, so that managers and users to be processed can clarify the deleted information by comparing the processed list, thereby improving the user experience.

[0149] Based on the above embodiments, the personal characteristic information processing system of the present application can be as follows: Figure 2 As shown, it includes a user interaction module, a disposal strategy module, a strong relationship docking module, a weak relationship docking module, a sensitive information docking module and a log recording module.

[0150] The user interaction module may include an interactive interface. The manager may input personal characteristic information of the user to be processed through the interactive interface. The personal characteristic information may be a keyword of the personal characteristic information of the user to be processed. The user interaction module may also return a processed list to the manager after completing the processing of the personal characteristic information of the user to be processed. Optionally, the processed list may include the results of the investigation and processing. Optionally, the processed list may also include situations that require offline negotiation and processing.

[0151] Among them, the disposal strategy module is used to determine the corresponding disposal strategy according to the information type, information source and other information of the personal characteristic information to be disposed. Optionally, in the disposal strategy module, the server can determine the disposal strategy by querying a mapping table or other methods. Optionally, the management personnel can input the selection logic and disposal strategy of the disposal strategy into the disposal strategy module in advance. The setting of the disposal strategy usually requires not only to ensure that unnecessary personal characteristic information is disposed or desensitized, but also to ensure that the log information cannot be used for event backtracking due to the disposal of personal characteristic information. In addition, the disposal strategy can be uniformly formulated by the department in the enterprise responsible for personal characteristic information protection / data security to ensure that under the current situation of decentralized use and decentralized management of outsourced services, each outsourced using department can handle the personal characteristic information of outsourced personnel in accordance with a consistent strategy.

[0152] Among them, the strong relationship docking module is used to complete the query and processing of the personal characteristic information of the user to be processed in the system connected to the personal characteristic information processing system through API.

[0153] The weak relationship docking module is used to implement background query of the database through database query permissions in a system that is not connected to the personal characteristic information processing system through an API, and to implement the processing of the personal characteristic information when it is determined that the personal characteristic information exists in the database.

[0154] Among them, the sensitive information docking module is used to query files and emails in terminal devices. The sensitive information docking module can convert personal characteristic information into terminal sensitive information screening strategies and email sensitive information interception strategies, so that the personal characteristic information of documents that are free from various systems can be cleaned up and stopped from spreading.

[0155] Among them, the log recording module is used to record the process information of the system receiving the personal characteristic information screening tasks of the persons to be processed and implementing the personal characteristic information processing, so that the personal characteristic information processing can be traced and proved, which complies with the relevant requirements of the "Cybersecurity Law".

[0156] The personal characteristic information processing system is connected to all systems within the enterprise that store personal characteristic information. When the user to be processed leaves the company, this system can be used to extensively check and process the personal characteristic information of the user to be processed stored in various systems within the enterprise, thereby avoiding unnecessary personal characteristic information from remaining within the enterprise and improving information security within the enterprise.

[0157] Based on the above embodiments, Figure 3 As shown, the person to be handled may be an outsourced person. When the outsourced person leaves the enterprise, the server may perform the following steps:

[0158] Step 1: The outsourced department can initiate a disposal application through the server.

[0159] Step 2.1: The server may call an API to retrieve a strongly associated system that includes the outsourced personnel.

[0160] Step 2.2: The server may retrieve personal characteristic information in the strong association system.

[0161] Step 2.3: The server may automatically process the personal characteristic information of the outsourced personnel in the strong association system according to the processing strategy.

[0162] Step 3.1: The server may query the database of the weakly associated system.

[0163] Step 3.2: The server may retrieve personal characteristic information from the weakly associated system.

[0164] Step 3.3: The server may query the database of the weak management system.

[0165] Step 4.1: The server can convert the personal characteristic information of the outsourced personnel into DLP screening / blocking strategies.

[0166] Step 4.2: The server can perform a terminal DLP check and delete the file containing the personal characteristic information of the outsourced personnel.

[0167] Step 4.3: The server can execute email DLP and block emails containing personal characteristic information of the outsourced personnel.

[0168] Step 5: The server can inform the outsourced user department of the disposal result through the interactive interface.

[0169] Figure 4 The structural diagram of the personal characteristic information processing device provided for this application is as follows: Figure 4 As shown, the personal characteristic information processing device 400 provided in this embodiment includes:

[0170] The acquisition module 401 is used to acquire personal characteristic information of the user to be processed in response to the processing instruction.

[0171] The handling module 402 is used to determine at least one related system associated with the user to be handled based on the personal characteristic information of the user to be handled, and handle the personal characteristic information of the user to be handled in the related system. According to the personal characteristic information of the user to be handled, determine at least one file and / or email associated with the user to be handled, and handle the file and / or email associated with the user to be handled.

[0172] Optionally, the processing module 402 is used to:

[0173] According to the personal characteristic information, at least one strongly associated system containing the personal characteristic information is queried from the strongly associated docking module of the personal characteristic information processing system.

[0174] And, according to the personal characteristic information, at least one weakly associated system containing the personal characteristic information is queried from the database of the weakly associated docking module of the personal characteristic information processing system.

[0175] According to the information type and information source of the personal characteristic information of the user to be processed in the strong association system and / or the weak association system, a disposal strategy for the personal characteristic information of the user to be processed is determined, and the personal characteristic information of the user to be processed is disposed.

[0176] Optionally, the processing module 402 is used to:

[0177] Delete the biometrics of the user to be processed.

[0178] The image information containing the user to be processed is coded.

[0179] Use wildcards to replace key information in the text content of the user to be processed.

[0180] Use hash values ​​to replace sensitive information in the text content of the user to be processed.

[0181] Optionally, the processing module 402 is used to:

[0182] According to the personal characteristic information of the user to be processed, the personal characteristic information of the user to be processed is determined, wherein the personal characteristic information is part of the key information in the personal characteristic information.

[0183] Through the preset data leakage prevention function, the personal characteristic information of the user to be processed is converted into sensitive information to be checked, and the corresponding sensitive information checking strategy is generated.

[0184] Generate a file scanning task within the target range and target time based on the sensitive information screening strategy and the active range and active time indicated by the personal characteristic information of the user to be processed.

[0185] If the scan finds files related to the sensitive information to be checked, the files will be disposed of and a disposal reminder will be sent.

[0186] Through the preset data leakage prevention function, the personal characteristic information of the user to be processed is added to the sensitive information interception strategy of the email.

[0187] Optionally, the processing module 402 is used to:

[0188] In response to a retrieval process in a strong association docking module of a personal characteristic information processing system according to the personal characteristic information, a first log file is generated.

[0189] In response to a process of searching the database of the weakly associated docking module of the personal characteristic information handling system according to the personal characteristic information, a second log file is generated.

[0190] In response to the process of handling the personal characteristic information of the user to be handled according to the handling policy of the personal characteristic information of the user to be handled, a third log file is generated.

[0191] In response to the scanning and handling process of the file, a fourth log file is generated.

[0192] In response to the interception process executed based on the email sensitive information interception policy, a fifth log file is generated.

[0193] An information security tracing report is generated based on the first log file, the second log file, the third log file, the fourth log file, and the fifth log file.

[0194] Optionally, the processing module 402 is used to:

[0195] The information type and information source of the personal characteristic information to be handled in the strong association system and the weak association system, as well as the handling strategy, are obtained, and a first handling list is generated.

[0196] Obtain the files that are processed after scanning based on the sensitive information screening strategy, and generate a second processing list.

[0197] A processed list is generated and exported based on the first processed list and the second processed list.

[0198] The personal characteristic information processing device provided in this embodiment can execute the method provided in the above method embodiment. Its implementation principle and technical effect are similar, and this embodiment will not be described in detail here.

[0199] Figure 5 This is a schematic diagram of the server structure provided for this application. Figure 5 As shown, the server 50 provided in this embodiment includes: at least one processor 501 and a memory 502. Optionally, the device 50 also includes a communication component 503. The processor 501, the memory 502 and the communication component 503 are connected via a bus 504.

[0200] In a specific implementation process, at least one processor 501 executes the computer-executable instructions stored in the memory 502, so that at least one processor 501 executes the above method.

[0201] The specific implementation process of the processor 501 can be found in the above method embodiment, and its implementation principle and technical effect are similar, so this embodiment will not be repeated here.

[0202] In the above embodiments, it should be understood that the processor may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), etc. The general-purpose processor may be a microprocessor or the processor may be any conventional processor, etc. The steps of the method disclosed in the invention may be directly embodied as being executed by a hardware processor, or may be executed by a combination of hardware and software modules in the processor.

[0203] The memory may include a high-speed memory (Random Access Memory, RAM), and may also include a non-volatile memory (Non-volatile Memory, NVM), such as at least one disk memory.

[0204] The bus may be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus, or an Extended Industry Standard Architecture (EISA) bus, etc. The bus may be divided into an address bus, a data bus, a control bus, etc. For ease of representation, the bus in the drawings of the present application is not limited to only one bus or one type of bus.

[0205] The present application also provides a computer program product, including a computer program, which implements the above method when executed by a processor.

[0206] The present application also provides a computer-readable storage medium, in which computer-executable instructions are stored. When a processor executes the computer-executable instructions, the above method is implemented.

[0207] The above-mentioned readable storage medium can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic storage, flash memory, magnetic disk or optical disk. The readable storage medium can be any available medium that can be accessed by a general or special-purpose computer.

[0208] An exemplary readable storage medium is coupled to a processor so that the processor can read information from the readable storage medium and write information to the readable storage medium. Of course, the readable storage medium can also be a component of the processor. The processor and the readable storage medium can be located in an application specific integrated circuit (ASIC). Of course, the processor and the readable storage medium can also exist in the device as discrete components.

[0209] The division of units is only a logical function division, and there may be other divisions in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be an indirect coupling or communication connection through some interface, device or unit, which can be electrical, mechanical or other forms.

[0210] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0211] In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0212] If the function is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art, or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes several instructions for a computer device (which can be a personal computer, server, or network device, etc.) to perform all or part of the steps of the methods of various embodiments of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, ROM, RAM, disk or optical disk, etc., which can store program codes.

[0213] Those skilled in the art will appreciate that all or part of the steps of implementing the above-mentioned method embodiments can be completed by hardware related to program instructions. The aforementioned program can be stored in a computer-readable storage medium. When the program is executed, the steps of the above-mentioned method embodiments are executed. The aforementioned storage medium includes: ROM, RAM, magnetic disk or optical disk, etc., various media that can store program codes.

[0214] It should be noted that the personal characteristic information (including but not limited to user device information, user personal characteristic information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with the relevant laws, regulations and standards of the relevant countries and regions, and provide corresponding operation entrances for users to choose to authorize or refuse.

[0215] Finally, it should be noted that those skilled in the art will readily conceive of other embodiments of the present invention after considering the specification and practicing the invention disclosed herein. The present invention is intended to cover any variations, uses or adaptations of the present invention, which follow the general principles of the present invention and include common knowledge or customary technical means in the art not disclosed by the present invention, are not limited to the precise structure described above and shown in the drawings, and may be modified and changed in various ways without departing from the scope thereof. The scope of the present invention is limited only by the appended claims.

Claims

1. A method for processing personal characteristic information, characterized in that: Applied to a personal characteristic information processing system, the method comprises: In response to the processing instruction, obtaining personal characteristic information of the user to be processed; According to the personal characteristic information of the user to be processed, determining at least one related system associated with the user to be processed, and processing the personal characteristic information of the user to be processed in the related system; According to the personal characteristic information of the user to be processed, at least one file and / or email associated with the user to be processed is determined, and the file and / or email associated with the user to be processed is processed.

2. The method according to claim 1, characterized in that According to the personal characteristic information of the user to be processed, determining at least one related system associated with the user to be processed, and processing the personal characteristic information of the user to be processed in the related system, including: According to the personal characteristic information, querying from the strong correlation docking module of the personal characteristic information processing system to obtain at least one strong correlation system containing the personal characteristic information; According to the personal characteristic information, querying from a database of a weakly associated docking module of the personal characteristic information processing system to obtain at least one weakly associated system containing the personal characteristic information; According to the information type and information source of the personal characteristic information of the user to be processed in the strong association system and / or the weak association system, a disposal strategy for the personal characteristic information of the user to be processed is determined, and the personal characteristic information of the user to be processed is disposed.

3. The method according to claim 2, characterized in that Determining a disposal strategy for the personal characteristic information of the user to be disposed according to the information type and information source of the personal characteristic information of the user to be disposed, and disposing the personal characteristic information of the user to be disposed, including at least one of the following: Deleting the biometric features of the user to be processed; Performing coding processing on the image information containing the user to be processed; Using wildcards to replace key information in the text content of the user to be processed; The hash value is used to replace the sensitive information in the text content of the user to be processed.

4. The method according to claim 1, characterized in that: Determining at least one file and / or email associated with the user to be processed according to the personal characteristic information of the user to be processed includes: Determine the personal characteristic information of the user to be processed according to the personal characteristic information of the user to be processed; wherein the personal characteristic information is part of the key information in the personal characteristic information; By means of a preset data leakage prevention function, the personal characteristic information of the user to be processed is converted into sensitive information to be checked, and a corresponding sensitive information checking strategy is generated; Generate a file scanning task within a target range and within a target time according to the sensitive information screening strategy and the active range and active time indicated by the personal characteristic information of the user to be processed; If the scan finds the file related to the sensitive information to be checked, the file is disposed of and a disposal reminder is sent; Through the preset data leakage prevention function, the personal characteristic information of the user to be processed is added to the sensitive information interception strategy of the email.

5. The method according to any one of claims 1 to 4, characterized in that The method further comprises: In response to a retrieval process in a strong association docking module of the personal characteristic information processing system according to the personal characteristic information, generating a first log file; In response to a process of searching a database of a weakly associated docking module of the personal characteristic information processing system according to the personal characteristic information, generating a second log file; generating a third log file in response to a process of handling the personal characteristic information of the user to be handled according to the handling policy of the personal characteristic information of the user to be handled; generating a fourth log file in response to the scanning and handling process of the file; generating a fifth log file in response to an interception process performed by the email-based sensitive information interception policy; An information security tracing report is generated based on the first log file, the second log file, the third log file, the fourth log file, and the fifth log file.

6. The method according to any one of claims 1 to 4, characterized in that The method further comprises: Acquire information types and information sources of the personal characteristic information to be processed in the strong correlation system and the weak correlation system, as well as the processing strategy, and generate a first processing list; Obtaining files that have been processed after scanning based on the sensitive information screening strategy, and generating a second processing list; A processed list is generated and exported according to the first processed list and the second processed list.

7. A personal characteristic information processing device, characterized in that: include: An acquisition module, used for acquiring personal characteristic information of the user to be processed in response to the processing instruction; A handling module, configured to determine at least one related system associated with the user to be handled according to the personal characteristic information of the user to be handled, and handle the relevant information of the user to be handled from the related system associated with the user to be handled; At least one file and / or email associated with the user to be processed is determined according to the personal characteristic information of the user to be processed, and relevant information of the user to be processed is processed from the file and / or email.

8. A server, characterized in that: include: Memory, processor; The memory stores computer-executable instructions; The processor executes the computer-executable instructions stored in the memory, so that the processor performs the method according to any one of claims 1 to 6.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer-executable instructions, which are used to implement the method according to any one of claims 1 to 6 when executed by a processor.

10. A computer program product, characterized in that The invention comprises a computer program, which implements the method according to any one of claims 1 to 6 when being executed by a processor.

Images