Document processing method and device, equipment, storage medium and program product

Abstract

The invention provides a document processing method which can be applied to the technical field of big data and the technical field of privacy computing. The document processing method comprises the steps that in response to an access request of a user for accessing an original document, a target desensitization information identifier is read from the original document, the target desensitization information identifier is a preset area which is steganographically written into a preset picture in advance, the preset picture is located in the original document, and the preset area is used for displaying additional document information; under the condition of determining that the user has the fixed access authority to the original document, obtaining target information to be desensitized corresponding to the fixed access authority based on the target desensitization information identifier and the fixed access authority; based on the target to-be-desensitized information, performing predetermined desensitization processing on the original document to generate a first target document matched with the fixed access permission; and displaying the first target document to the user. The invention further provides a document processing device and equipment, a storage medium and a program product.

Description

Technical Field

[0001] The present disclosure relates to the fields of big data technology and privacy computing technology, and more specifically to a document processing method, apparatus, device, storage medium and program product. Background Art

[0002] As the scale of enterprises expands, the number of branches increases, and the number of employees grows, the control of various documents within the enterprise becomes increasingly important, especially for documents containing sensitive information related to the development of the enterprise. For sensitive information in various documents, different branches and employees in different positions within the company often need to strictly retain different forms of authorization. Using encryption keys is a common document encryption and authorization solution.

[0003] In the process of realizing the concept of the present disclosure, the inventors found that there are at least the following problems in the related technology: employees of different branches usually need to use different decryption keys to ensure that the documents they view meet the authority requirements of the current organization, especially for sensitive data and other information in the documents, which makes the key setting more complicated. In addition, since the key processing itself is more complicated, and the encryption and decryption operations involve multiple processes such as approval and operation, the document authority control process is more cumbersome. Summary of the invention

[0004] In view of the above problems, the present disclosure provides a document processing method, apparatus, device, storage medium and program product.

[0005] According to a first aspect of the present disclosure, a document processing method is provided, comprising: in response to an access request from a user to access an original document, reading a target desensitized information identifier from the original document, wherein the target desensitized information identifier is pre-steganographically written into a predetermined image, the predetermined image is located in a predetermined area in the original document, and the predetermined area is used to display additional document information; in a case where it is determined that the user has fixed access rights to the original document, obtaining target information to be desensitized corresponding to the fixed access rights based on the target desensitized information identifier and the fixed access rights; performing predetermined desensitization processing on the original document based on the target desensitized information to generate a first target document matching the fixed access rights; and displaying the first target document to the user.

[0006] According to an embodiment of the present disclosure, the document processing method also includes determining the full amount of information to be desensitized in the original document; generating an original desensitized information identifier based on the full amount of information to be desensitized; determining a predetermined area in the original document, the predetermined area including a predetermined picture; and through a preset steganographic processing, steganographically writing the original desensitized information identifier into the predetermined picture to generate a target desensitized information identifier.

[0007] According to an embodiment of the present disclosure, the predetermined area includes at least one of the following: a predetermined identification area and a predetermined supplementary description area in the original document.

[0008] According to an embodiment of the present disclosure, the predetermined identification area includes: a header area; and the predetermined supplementary description area includes: a footer area.

[0009] According to an embodiment of the present disclosure, the original desensitized information identifier is steganographically written into a predetermined image through a preset steganographic processing, including: obtaining the color channel value of each pixel in the predetermined image; performing a first conversion processing on the first predetermined digit of each color channel value to obtain a target color channel value; performing a second conversion processing on the original desensitized information identifier to obtain target binary information corresponding to the original desensitized information identifier; based on the target color channel value and the target binary information, the original desensitized information identifier is steganographically written into the predetermined image.

[0010] According to an embodiment of the present disclosure, the document processing method also includes: in a case where it is determined that the user does not have fixed access rights to the original document, determining temporary access information corresponding to the access request; based on the temporary access information, generating a temporary access right corresponding to the user; based on the target desensitizing information identifier and the temporary access right, determining temporary information to be desensitized corresponding to the temporary access right; based on the temporary information to be desensitized, temporarily desensitizing the original document to generate a second target document that matches the temporary access right; based on the temporary access right, displaying the second target document to the user.

[0011] According to an embodiment of the present disclosure, displaying the second target document to the user based on the temporary access permission includes: determining the temporary accessible times and temporary accessible duration corresponding to the user based on the temporary access permission; displaying the second target document to the user, wherein the target display duration for displaying the second target document to the user is less than the temporary accessible duration, and the target display times for displaying the second target document to the user is less than the temporary accessible times.

[0012] According to an embodiment of the present disclosure, displaying the second target document to the user based on the temporary access permission also includes: stopping displaying the second target document to the user when the target display duration is greater than or equal to the temporary accessible duration; or stopping displaying the second target document to the user when the target display number is greater than or equal to the temporary accessible number.

[0013] A second aspect of the present disclosure provides a document processing device, including: a reading module, for reading a target desensitized information identifier from an original document in response to an access request from a user to access an original document, wherein the target desensitized information identifier is pre-steganographically written into a predetermined image, the predetermined image is located in a predetermined area in the original document, and the predetermined area is used to display additional document information; an acquisition module, for acquiring target information to be desensitized corresponding to the fixed access right based on the target desensitized information identifier and the fixed access right when it is determined that the user has a fixed access right to the original document; a predetermined desensitization processing module, for performing a predetermined desensitization processing on the original document based on the target information to be desensitized, and generating a first target document matching the fixed access right; and a first display module, for displaying the first target document to the user.

[0014] A third aspect of the present disclosure provides an electronic device, comprising: one or more processors; and a memory for storing one or more computer programs, wherein the one or more processors execute the one or more computer programs to implement the steps of the above method.

[0015] The fourth aspect of the present disclosure further provides a computer-readable storage medium having a computer program or instructions stored thereon, which implements the steps of the above method when the above computer program or instructions are executed by a processor.

[0016] The fifth aspect of the present disclosure further provides a computer program product, including a computer program or instructions, which implement the steps of the above method when the above computer program or instructions are executed by a processor.

[0017] According to the embodiment of the present disclosure, since the target desensitized information identifier is pre-steganographically written in a predetermined area for displaying additional document information, it will neither affect the reading of the document itself nor increase the additional storage space of the document; since the document itself stores the target desensitized information identifier for characterizing the sensitive information in the original document, it can avoid the mismatch problem that may occur when the document and the authority are in different storage locations, thereby improving the integrity and portability of the document. By pre-steganographically writing the target desensitized information identifier in the predetermined image of the original document, when the user requests to access the original document, the target information to be desensitized can be directly determined based on the target desensitized information identifier stored in the original document, without the need to determine the target information to be desensitized based on the key or other encryption method, thereby reducing the complexity of the document control process. In addition, since the user no longer needs to perform cumbersome encryption and decryption operations through the key to access the document, the user is almost insensitive to the document processing process, thereby reducing the user's operation amount and improving the user experience. Therefore, at least partially overcome the technical problem that the document authority control process is relatively cumbersome, thereby achieving the technical effect of reducing the complexity of the document control process and improving the integrity and portability of the document. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] The above contents and other objects, features and advantages of the present disclosure will become more apparent through the following description of the embodiments of the present disclosure with reference to the accompanying drawings, in which:

[0019] Figure 1 A diagram schematically illustrates an application scenario of a document processing method, apparatus, device, storage medium, and program product according to an embodiment of the present disclosure;

[0020] Figure 2 A flowchart schematically shows a document processing method according to an embodiment of the present disclosure;

[0021] Figure 3 A schematic diagram schematically shows a document processing method according to an embodiment of the present disclosure;

[0022] Figure 4 A schematic diagram schematically shows a preset steganographic processing method according to an embodiment of the present disclosure;

[0023] Figure 5 A schematic diagram schematically shows a document processing method according to another embodiment of the present disclosure;

[0024] Figure 6 A schematic diagram showing a structural block diagram of a document processing device according to an embodiment of the present disclosure; and

[0025] Figure 7 A block diagram of an electronic device suitable for implementing a document processing method according to an embodiment of the present disclosure is schematically shown. DETAILED DESCRIPTION

[0026] Hereinafter, embodiments of the present disclosure will be described with reference to the accompanying drawings. However, it should be understood that these descriptions are exemplary only and are not intended to limit the scope of the present disclosure. In the following detailed description, for ease of explanation, many specific details are set forth to provide a comprehensive understanding of the embodiments of the present disclosure. However, it is apparent that one or more embodiments may also be implemented without these specific details. In addition, in the following description, descriptions of known structures and technologies are omitted to avoid unnecessary confusion of the concepts of the present disclosure.

[0027] The terms used herein are only for describing specific embodiments and are not intended to limit the present disclosure. The terms "comprise", "include", etc. used herein indicate the existence of features, steps, operations and / or components, but do not exclude the existence or addition of one or more other features, steps, operations or components.

[0028] All terms (including technical and scientific terms) used herein have the meanings commonly understood by those skilled in the art unless otherwise defined. It should be noted that the terms used herein should be interpreted as having a meaning consistent with the context of this specification and should not be interpreted in an idealized or overly rigid manner.

[0029] When using expressions such as "at least one of A, B, and C, etc.", they should generally be interpreted according to the meaning of the expression commonly understood by those skilled in the art (for example, "a system having at least one of A, B, and C" should include but is not limited to a system having A alone, B alone, C alone, A and B, A and C, B and C, and / or A, B, C, etc.).

[0030] It should be noted that the document processing method and device disclosed herein can be used in the fields of big data technology and privacy computing technology, and can also be used in any field other than the fields of big data technology and privacy computing technology. The application field of the document processing method and device disclosed herein is not limited.

[0031] In the technical solution of the present disclosure, the user information (including but not limited to user personal information, user image information, user device information, such as location information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved are all information and data authorized by the user or fully authorized by all parties, and the collection, storage, use, processing, transmission, provision, disclosure and application of the relevant data comply with relevant laws, regulations and standards, take necessary confidentiality measures, do not violate public order and good morals, and provide corresponding operation entrances for users to choose to authorize or refuse.

[0032] In the scenario of using personal information for automated decision-making, the methods, devices, and systems provided by the embodiments of the present disclosure provide users with corresponding operation portals for users to choose to agree or reject the automated decision-making results; if the user chooses to reject, the expert decision-making process will be entered. The expression "automated decision-making" here refers to the activity of automatically analyzing and evaluating a person's behavioral habits, interests and hobbies, or economic, health, credit status, etc. through computer programs, and making decisions. The expression "expert decision-making" here refers to the activity of making decisions by people who specialize in a certain field, have specialized experience, knowledge and skills, and have reached a certain level of professionalism.

[0033] Different users may have different permissions to access sensitive information in a document. For example, high-privilege users can access all sensitive information in a document; medium-privilege users can only access part of the sensitive information in a document; and low-privilege users cannot access sensitive permissions in a document. To ensure data security, sensitive information that users do not have permission to access usually needs to be encrypted when they access a document. Related technologies usually use encryption keys for document encryption and authorization operations. For example, employees in different branches need to use different decryption keys. In the process of realizing the concept of the present disclosure, the inventors found that there are at least the following problems in the related technology: the key setting and processing process are relatively complicated, and the encryption and decryption operations involve multiple processes such as approval and operation, which makes the document authorization process more cumbersome and complicated.

[0034] In view of this, an embodiment of the present disclosure provides a document processing method, including: in response to a user's access request to access an original document, reading a target desensitized information identifier from the original document, wherein the target desensitized information identifier is pre-written in a predetermined image, the predetermined image is located in a predetermined area in the original document, and the predetermined area is used to display additional document information; when it is determined that the user has fixed access rights to the original document, obtaining target information to be desensitized corresponding to the fixed access rights based on the target desensitized information identifier and the fixed access rights; performing predetermined desensitization processing on the original document based on the target desensitized information to generate a first target document that matches the fixed access rights; and displaying the first target document to the user.

[0035] Figure 1 The application scenario diagram of the document processing method, apparatus, device, storage medium and program product according to the embodiments of the present disclosure is schematically shown.

[0036] like Figure 1 As shown, the application scenario 100 according to this embodiment may include a first terminal device 101, a second terminal device 102, a third terminal device 103, a network 104, and a server 105. The network 104 is used to provide a medium for a communication link between the first terminal device 101, the second terminal device 102, the third terminal device 103, and the server 105. The network 104 may include various connection types, such as wired, wireless communication links, or optical fiber cables, etc.

[0037] The user can use the first terminal device 101, the second terminal device 102, and the third terminal device 103 to interact with the server 105 through the network 104 to receive or send messages, etc. Various communication client applications can be installed on the first terminal device 101, the second terminal device 102, and the third terminal device 103, such as shopping applications, web browser applications, search applications, instant messaging tools, email clients, social platform software, etc. (only for example).

[0038] The first terminal device 101, the second terminal device 102, and the third terminal device 103 may be various electronic devices having display screens and supporting web browsing, including but not limited to smart phones, tablet computers, laptop computers, desktop computers, and the like.

[0039] The server 105 may be a server that provides various services, such as a background management server (only as an example) that provides support for websites browsed by users using the first terminal device 101, the second terminal device 102, and the third terminal device 103. The background management server may analyze and process the received data such as user requests, and feed back the processing results (such as web pages, information, or data obtained or generated according to user requests) to the terminal device.

[0040] It should be noted that the document processing method provided in the embodiment of the present disclosure can generally be executed by the server 105. Accordingly, the document processing device provided in the embodiment of the present disclosure can generally be set in the server 105. The document processing method provided in the embodiment of the present disclosure can also be executed by a server or server cluster that is different from the server 105 and can communicate with the first terminal device 101, the second terminal device 102, the third terminal device 103 and / or the server 105. Accordingly, the document processing device provided in the embodiment of the present disclosure can also be set in a server or server cluster that is different from the server 105 and can communicate with the first terminal device 101, the second terminal device 102, the third terminal device 103 and / or the server 105.

[0041] It should be understood that Figure 1 The number of terminal devices, networks and servers in the embodiment is only for illustration. Any number of terminal devices, networks and servers may be provided according to implementation requirements.

[0042] The following will be based on Figure 1 The scene described by Figure 2~Figure 5 The document processing method of the embodiment of the present disclosure is described in detail.

[0043] Figure 2 The flowchart of the document processing method according to the embodiment of the present disclosure is schematically shown.

[0044] like Figure 2 As shown, the document processing method of this embodiment includes operations S210 to S240.

[0045] In operation S210, in response to a user's access request to access an original document, a target desensitized information identifier is read from the original document, wherein the target desensitized information identifier is pre-steganographically written into a predetermined image, the predetermined image is located in a predetermined area in the original document, and the predetermined area is used to display additional document information.

[0046] In operation S220, when it is determined that the user has a fixed access right to the original document, the target to-be-desensitized information corresponding to the fixed access right is acquired based on the target desensitized information identifier and the fixed access right.

[0047] In operation S230, a predetermined desensitization process is performed on the original document based on the target information to be desensitized, and a first target document matching the fixed access authority is generated.

[0048] In operation S240, the first target document is presented to the user.

[0049] According to an embodiment of the present disclosure, in operation S210, the target desensitized information identifier can be used to identify sensitive information in the original document. Sensitive information is information in the original document that requires access control. For example: "average daily total income" and "average daily net profit" in the original document are sensitive information, and only high-authorized users can access them. After opening the original document, the document preparation stage is entered. In the document preparation stage, based on the target desensitized information identifier in the original document, it can be determined that the sensitive information in the original document includes: "average daily total income" and "average daily net profit".

[0050] According to an embodiment of the present disclosure, the target desensitized information identifier is pre-steganographically written into a predetermined image in a predetermined area. The predetermined area includes an area for displaying additional document information, wherein the additional document information may be document information other than the main text, such as a header, a page number, etc.; the predetermined area may include a header area; and the predetermined image may include an image in the header.

[0051] According to an embodiment of the present disclosure, in operation S220, the fixed access right may be: within a predetermined time interval, the user has permanent access rights to the original document. For example, within a predetermined time interval, the user always has access rights to the original document. The fixed access rights of different users may be different. For example, user A has a lower fixed access right, so user A cannot access sensitive information in the original document; or user B has a higher right and can access all sensitive information in the original document.

[0052] Different users may have different fixed access rights, so it is necessary to desensitize the sensitive information in the original document so that only the information they have permission to access is displayed to the user. Specifically, the sensitive information in the original document can be determined based on the target desensitized information identifier, the user's access rights can be determined based on the fixed access rights, the target desensitized information identifier and the target desensitized information identifier can be matched to determine the sensitive information that the user has no permission to access, and the target information to be desensitized can be obtained.

[0053] According to an embodiment of the present disclosure, in operation S230, the predetermined desensitization process may be to rewrite the target information to be desensitized in the original document page by page. Rewriting the target information to be desensitized in the original document may include: deleting the target information to be desensitized, or changing the target information to be desensitized, for example, the target information to be desensitized may be changed to a predetermined symbol. After the predetermined desensitization process is performed on the target information to be desensitized, a first target document may be obtained.

[0054] For example: the original document contains Table 1. When the user opens the original document, the original document enters the document preparation stage, and based on the target desensitized information identification in the original document, the "average daily total revenue" and "average daily net profit" in Table 1 can be identified as sensitive information. When user A requests to access the original document, based on user A's fixed access rights and the target desensitized information identification, it is determined that user A has no right to access branch B's average daily total revenue and average daily net profit, so it is determined that the target information to be desensitized includes branch B's average daily total revenue and average daily net profit. The average daily total revenue and average daily net profit of branch B can be subjected to predetermined desensitization processing, for example, the average daily total revenue and average daily net profit of branch B can be replaced with **, as shown in Table 2;

[0055] In the case where user B requests to access the original document, based on user B's fixed access rights and the target desensitized information identifier, it is determined that the target desensitized information corresponding to user B includes the average daily total revenue and average daily net profit of branch A and branch B. Therefore, the target desensitized information corresponding to user B can be replaced with **, as shown in Table 3.

[0056] Table 1

[0057]

[0058] Table 2

[0059]

[0060] Table 3

[0061]

[0062] According to an embodiment of the present disclosure, in operation S240, the first target document includes desensitized document information and document information that the user has permission to access.

[0063] According to the embodiments of the present disclosure, on the one hand, since the target desensitized information identifier is pre-written in a predetermined area for displaying additional document information rather than being written in the main text area, it will neither affect the reading of the document itself nor increase the additional storage space of the document; since the document itself stores the target desensitized information identifier for characterizing the sensitive information in the original document rather than storing the access permission related information in other locations, the mismatch problem that may arise due to the documents and permissions being in different storage locations can be avoided, thereby improving the integrity and portability of the document.

[0064] On the other hand, unlike the related key-based method of controlling document access rights, the embodiment of the present disclosure stores the desensitized information identifier directly in the original document by pre-steganographically writing the desensitized information identifier into a predetermined image. Therefore, when a user requests access to the original document, the target desensitized information can be determined directly based on the target desensitized information identifier stored in the original document, without the need to additionally determine the target desensitized information based on a key or other encryption method, thereby reducing the complexity of the document control process. In addition, since users no longer need to perform cumbersome encryption and decryption operations through keys to access documents, users are almost unaware of the document processing process, thereby reducing the user's operation workload and improving the user experience.

[0065] According to an embodiment of the present disclosure, the document processing method further includes operations 11 to 14.

[0066] Operation 11: Determine the entire amount of information to be desensitized in the original document.

[0067] Operation 12: Generate the original desensitized information identifier based on the full amount of information to be desensitized.

[0068] Operation 13: Determine a predetermined area in the original document, where the predetermined area includes a predetermined picture.

[0069] Operation 14: Through a preset steganographic process, the original desensitized information identifier is steganographically written into a predetermined image to generate a target desensitized information identifier.

[0070] According to an embodiment of the present disclosure, in operation 11, sensitive information may exist in the original document, and the sensitive information may include information that requires control of user access rights, such as customer accounts, remittance addresses, etc. Each page of the original document may be previewed, and all sensitive information may be screened out to obtain the full amount of information to be desensitized.

[0071] In an embodiment of the present disclosure, before obtaining the user's information, the user's consent or authorization may be obtained. For example, before operation S11, a request to obtain the user's information may be issued to the user. When the user agrees or authorizes that the user's information may be obtained, operation S11 is performed.

[0072] According to an embodiment of the present disclosure, in operation 12, based on the full amount of information to be desensitized, generating the original desensitized information identifier may be: determining the full amount of page number information corresponding to the full amount of information to be desensitized; determining the document name of the original document; and generating the original desensitized information identifier based on the full amount of information to be desensitized, the full amount of page number information, and the document name. Specifically:

[0073] The full amount of information to be desensitized includes one or more information to be desensitized, and the page numbers corresponding to the various information to be desensitized included in the full amount of information to be desensitized can be determined to obtain the full amount of page number information. The original desensitized information identifier can include a Uniform Resource Locator (abbreviated as URL). A unique Uniform Resource Locator including the full amount of information to be desensitized, the full amount of page number information and the document name can be generated to obtain the original desensitized information identifier.

[0074] For example: the name of the original document is XXX report; sensitive information includes accounts and remittance addresses. The information on each page of the original document can be previewed. After screening, it is determined that the original document contains 2 remittance addresses and 1 account information. Therefore, the full amount of information to be desensitized includes 2 remittance addresses and 1 account information. Specifically, the above 2 remittance addresses are both located on page 7 of the original document, and the above 1 account information is located on page 8 of the original document. Based on the above information, a unique uniform resource locator can be generated. The above unique uniform resource locator is used to accurately point to information related to the above sensitive information, specifically: XXX report + pages 7 and 8 + the above 2 remittance addresses and 1 account information.

[0075] According to the embodiments of the present disclosure, if the original desensitized information identifier is directly stored in the body of the original document, on the one hand, the user will see the original desensitized information identifier when reading the body of the document, thereby affecting the user's reading; on the other hand, directly storing the original desensitized information identifier in the original document will occupy the storage space of the original document. In order not to affect the reading of the document itself and not to increase the storage space, the original desensitized information identifier can be pre-set steganographic processing, so that the original desensitized information identifier is hidden in a predetermined picture.

[0076] In operation 13, the original desensitized information identifier can be steganographically written in a predetermined image in a predetermined area. Since the predetermined area is used to display additional document information rather than displaying text information, the original desensitized information identifier is steganographically written in the image located in the predetermined area, and no additional storage space is added to the storage of the document itself. Since the original desensitized information identifier is steganographically written in the image rather than directly storing the original desensitized information identifier itself in the predetermined area, the user cannot see the original desensitized information identifier after steganography, and thus it will not affect the user's reading.

[0077] Among them, since the document header usually stores pictures for identification, such as company trademark pictures, organization logo pictures, etc., the predetermined area can be the header area, and the predetermined picture can be the picture in the header.

[0078] In operation 14, the target desensitized information identifier may be a new desensitized identifier that is steganographically written into the predetermined image. Through the preset steganographic processing, the original desensitized information identifier may be steganographically written into the predetermined image, so that the user cannot see the original desensitized information identifier after the steganography with the naked eye; at the same time, although the predetermined image is subjected to the preset steganographic processing, the user cannot distinguish the difference between the predetermined image before and after the processing with the naked eye.

[0079] According to the embodiments of the present disclosure, an original desensitized information identifier is generated based on the full amount of information to be desensitized, and the original desensitized information identifier is steganographically written in a predetermined image, so that the original document stores both the desensitized information identifier for representing the full amount of information to be desensitized, the full amount of page number information, and the document name, and the user cannot recognize the difference between the predetermined image before and after processing, nor can the user see the steganographic desensitized information identifier, thereby not affecting the user experience. In addition, since the predetermined image is located in the predetermined area for displaying additional document information, rather than the main text area, it does not increase the additional storage space of the document, and further ensures that it will not affect the user's reading experience.

[0080] Figure 3 The following schematic diagram shows a document processing method according to an embodiment of the present disclosure. Figure 3 As shown, the document processing method of this embodiment includes operations S310 to S350.

[0081] In operation S310, a full amount of information to be desensitized is determined.

[0082] In operation S320, the entire amount of information to be desensitized is uploaded to the server.

[0083] In operation S330, the server generates an original desensitized information identifier.

[0084] In operation S340, the server returns the original desensitized information identifier.

[0085] In operation S350, the client performs a predetermined steganographic process on the original document page by page.

[0086] According to the embodiments of the present disclosure, the staff can open and preview the original document through the client to determine all sensitive information in the original document and obtain the full amount of information to be desensitized. After uploading the full amount of information to be desensitized to the server through the client, the server can generate the original desensitized information identifier based on the full amount of information to be desensitized, and return the original desensitized information identifier to the client, so that the client can steganographically write the original desensitized information identifier into the predetermined image through the preset steganographic processing.

[0087] According to an embodiment of the present disclosure, the predetermined area includes at least one of the following: a predetermined identification area and a predetermined supplementary description area in the original document.

[0088] According to an embodiment of the present disclosure, the predetermined identification area includes: a header area; and the predetermined supplementary description area includes: a footer area.

[0089] According to an embodiment of the present disclosure, the original document may include a body area, a predetermined logo area and a predetermined supplementary description area. The predetermined logo area may be, for example, a header area, and the predetermined supplementary description area may include, for example, a footer area.

[0090] According to an embodiment of the present disclosure, the area containing the predetermined picture can be determined from the predetermined logo area and the predetermined supplementary description area to obtain the predetermined area. The predetermined picture can be a picture located in the header area or a picture located in the footer area.

[0091] According to the embodiments of the present disclosure, the original desensitized information mark is steganographically written to a predetermined mark area or a predetermined supplementary description area instead of being steganographically written to the main text area, which does not increase the document storage space extra and does not affect user reading.

[0092] According to an embodiment of the present disclosure, the original desensitized information identifier is steganographically written into a predetermined image through a preset steganographic process, including operations 21 to 24.

[0093] Operation 21: Obtain the color channel value of each pixel in the predetermined image.

[0094] Operation 22: Perform a first conversion process on a first predetermined digit of each color channel value to obtain a target color channel value.

[0095] Operation 23: Perform a second conversion process on the original desensitized information identifier to obtain target binary information corresponding to the original desensitized information identifier.

[0096] Operation 24: Based on the target color channel value and the target binary information, the original desensitized information identifier is steganographically written into the predetermined image.

[0097] According to an embodiment of the present disclosure, in operation 21, the color channel value may include intensity values ​​of three color channels, namely, red, green, and blue, for example, RGB values.

[0098] According to an embodiment of the present disclosure, in operation 22, the first predetermined digit of the color channel value may include the lowest bit of the color channel value. The lowest bit of the color channel value may be the rightmost bit of the color channel value. Performing a first conversion process on the first predetermined digit of each color channel value may include: converting the lowest bit of the color channel value to an even number.

[0099] According to an embodiment of the present disclosure, in operation 23, performing a second conversion process on the original desensitized information identifier includes: converting the original desensitized information identifier into binary information. Performing a second conversion process on the original desensitized information identifier also includes: when the original desensitized information identifier includes a single-byte character, and the number of bits of the binary information generated after the single-byte character conversion process is less than a predetermined value, performing zero padding on the second predetermined digit of the binary information. Among them, the second predetermined digit may include the highest bit of the binary information, and the highest bit of the binary information may include the leftmost bit of the binary information. For example: for a single-byte character, a second conversion process is performed on it to generate binary information corresponding to the single-byte character. When the number of bits of the above-mentioned binary information corresponding to the single-byte character is less than or equal to 8 bits, the highest bit of the above-mentioned binary information is padded with zeros.

[0100] According to an embodiment of the present disclosure, in operation 24, based on the target color channel value and the target binary information, steganographically writing the original desensitized information identifier into the predetermined picture may include: adding the target binary information to the target color channel value of each pixel in the predetermined picture, thereby steganographically writing the original desensitized information identifier into the predetermined picture to obtain the target picture, which includes the target desensitized information identifier.

[0101] According to an embodiment of the present disclosure, by stealthily writing the original desensitized information identifier into a predetermined image, rather than directly marking the original desensitized information identifier in the original document, the desensitized information identifier can be retained in the original document, while preventing the user from seeing the desensitized information identifier carried by the original document with the naked eye, thereby improving the user's reading experience. In addition, since the change in the lowest bit of the color channel value will only cause the smallest change in the color channel value, the first conversion process is performed on the lowest bit of the color channel value in the predetermined image, thereby stealthily writing the original desensitized information identifier into the predetermined image, so that the predetermined image will only produce subtle changes in color that are unrecognizable to the naked eye, thereby ensuring that the user cannot see the desensitized information identifier carried by the original document with the naked eye.

[0102] Figure 4 The schematic diagram of the preset steganographic processing method according to the embodiment of the present disclosure is schematically shown. Figure 4 As shown, the preset steganographic processing method of this embodiment includes operations S410 to S450.

[0103] In operation S410, a target desensitized information identifier is determined.

[0104] In operation S420, the target desensitized information identifier is sent.

[0105] In operation S430, target information to be desensitized is determined.

[0106] In operation S440, the target information to be desensitized is returned.

[0107] In operation S450, document rewriting is performed.

[0108] According to an embodiment of the present disclosure, a user can initiate an access request to access an original document through a client. After receiving the access request, the client can determine the target desensitized information identifier and send the target desensitized information identifier to the server. After receiving the target desensitized information identifier, the server can determine the target information to be desensitized based on the target desensitized information identifier, and send the target information to be desensitized to the client. The client rewrites the document based on the target information to be desensitized, and the document rewriting may include performing predetermined desensitization processing on the original document page by page. Among them, multiple servers can be set, such as server A and server B, and server A and server B are in a master-slave relationship with each other.

[0109] According to an embodiment of the present disclosure, the document processing method further includes operations 31 to 35.

[0110] Operation 31: When it is determined that the user does not have fixed access rights to the original document, determine temporary access information corresponding to the access request.

[0111] Operation 32: Generate a temporary access permission corresponding to the user based on the temporary access information.

[0112] Operation 33: Based on the target desensitized information identifier and the temporary access permission, determine the temporary information to be desensitized corresponding to the temporary access permission.

[0113] Operation 34: Based on the temporary information to be desensitized, temporarily desensitize the original document to generate a second target document that matches the temporary access permission.

[0114] Operation 35: Based on the temporary access permission, display the second target document to the user.

[0115] According to an embodiment of the present disclosure, in operation 31, the user has no fixed access rights to the original document, which means that the user has no access to the original document within a predetermined time interval; or the user has access to the original document but has no access to some sensitive information in the original document.

[0116] For users who do not have fixed access rights, they may sometimes apply to access the original document due to business needs. Therefore, for users who do not have fixed access rights but have the need to access the original document, the access request can be parsed to obtain temporary access information corresponding to the access request. The temporary access information may include at least one of the following: user identity, user organization information, document name to be accessed, document content to be accessed, page number of the information to be accessed, access device, access period, and access times.

[0117] In an embodiment of the present disclosure, before obtaining the user's information, the user's consent or authorization may be obtained. For example, before operation S31, a request to obtain the user's information may be issued to the user. When the user agrees or authorizes that the user's information may be obtained, operation S31 is performed.

[0118] According to an embodiment of the present disclosure, in operation 32, based on temporary access information such as user identity, information about the organization to which the user belongs, name of the document to be accessed, and content of the document to be accessed, the user's temporary access rights can be determined. For example, based on information such as user identity and information about the organization to which the user belongs, it is determined that the user's access rights are low, and the user can only temporarily view the average daily total income of the organization to which the user belongs, but cannot view the average daily total income of other organizations. Therefore, a temporary access right can be generated, and the temporary access right is used to control the user to only view the average daily total income of the organization to which the user belongs, but cannot view the average daily total income of other organizations.

[0119] According to an embodiment of the present disclosure, in operation 33, sensitive information contained in the original document can be determined based on the target desensitized information identifier, and sensitive information that the user does not have permission to access can be determined based on the temporary access permission. Therefore, based on both the target desensitized information identifier and the temporary access permission, temporary information to be desensitized can be determined, and the temporary information to be desensitized includes information in the original document that the user does not have permission to access.

[0120] According to an embodiment of the present disclosure, in operation 34, the temporary desensitization process may include, for example, encrypting the temporary information to be desensitized.

[0121] According to the embodiments of the present disclosure, temporary access rights are granted to users who do not have fixed access rights, thereby fully considering the user's access needs and providing the user with a way to view sensitive information of documents in temporary situations.

[0122] Figure 5 The following schematically shows a document processing method according to another embodiment of the present disclosure. Figure 5 As shown, the preset steganographic processing method of this embodiment includes operations S510 to S570.

[0123] In operation S510, an access request is initiated.

[0124] In operation S520, temporary access information is determined.

[0125] In operation S530, temporary access information is uploaded.

[0126] In operation S540, a temporary access right is generated.

[0127] In operation S550, temporary information to be desensitized is determined.

[0128] In operation S560, the temporary information to be desensitized is returned.

[0129] In operation S570, temporary desensitization processing is performed.

[0130] According to an embodiment of the present disclosure, a user initiates an access request through a client. When the client determines that the user does not have fixed access rights to the original document, the client determines temporary access information and uploads the temporary access information to the server, so that the server generates temporary access rights based on the temporary access information and determines temporary information to be desensitized based on the temporary access rights. After the client receives the temporary information to be desensitized sent by the server, the client can perform temporary desensitization on the original document, thereby obtaining a second target document after temporary desensitization.

[0131] According to an embodiment of the present disclosure, displaying the second target document to the user based on the temporary access permission includes: determining the temporary accessible times and temporary accessible duration corresponding to the user based on the temporary access permission; displaying the second target document to the user, wherein the target display duration for displaying the second target document to the user is less than the temporary accessible duration, and the target display times for displaying the second target document to the user is less than the temporary accessible times.

[0132] According to an embodiment of the present disclosure, since the user has only temporary access rights, in order to ensure data security, the number of temporary access times and temporary access duration of the user can be determined based on the temporary access rights. The number of temporary access times can be the maximum number of times the original document is accessed corresponding to the temporary access rights; the temporary access duration can be the maximum duration of access to the original document corresponding to the temporary access rights.

[0133] According to an embodiment of the present disclosure, to ensure data security, the duration of displaying the second target document to the user may be limited to be less than the temporary accessible duration, and the number of times the second target document is displayed to the user may be limited to be less than the temporary accessible number.

[0134] According to an embodiment of the present disclosure, by setting the number of temporary accessible times and the temporary accessible duration, and setting the display of the second target document to the user, wherein the target display duration for displaying the second target document to the user is less than the temporary accessible duration, and the target number of displays for displaying the second target document to the user is less than the temporary accessible number, the number of accesses and durations of users with only temporary access rights can be effectively controlled, thereby ensuring the security of document data.

[0135] According to an embodiment of the present disclosure, displaying the second target document to the user based on the temporary access permission also includes: stopping displaying the second target document to the user when the target display duration is greater than or equal to the temporary accessible duration; or stopping displaying the second target document to the user when the target display number is greater than or equal to the temporary accessible number.

[0136] According to an embodiment of the present disclosure, when the target display duration is greater than or equal to the temporary accessible duration, it means that the user has browsed the document for longer than the access duration allowed by his temporary access rights, and therefore, it is necessary to stop displaying the second target document to the user; correspondingly, when the target display times are greater than or equal to the temporary accessible times, it means that the user has browsed the document for longer than the access times allowed by his temporary access rights, and therefore, it is necessary to stop displaying the second target document to the user. Specifically, stopping displaying the second target document to the user may include any one of the following: closing the second target document, desensitizing sensitive information in the second target document, and restoring the second target document to a display state corresponding to the user's original access rights. Among them, the user's original access rights may be the access rights that the user has when the user is not granted temporary access rights.

[0137] According to the embodiments of the present disclosure, when a user views a document on a designated device, if the target display duration is greater than or equal to the temporary accessible duration, or if the target display times are greater than or equal to the temporary accessible times, the second target document is stopped from being displayed to the user, thereby effectively ensuring the security of document data. Furthermore, the problem that the user cannot quickly read and obtain sensitive information of the document in a short time after the document permissions are stored in advance can be avoided.

[0138] In addition, by steganographically writing the original desensitized information identifier into the predetermined image, obtaining the target information to be desensitized based on the target desensitized information identifier and fixed access rights, generating temporary access rights for users, and stopping displaying the second target document to users when the target display duration is greater than or equal to the temporary accessible duration or when the target display times are greater than or equal to the temporary accessible times, strict control of document access rights is achieved throughout the entire process of document creation, storage, authorization, reading, and change, thereby reducing the possibility of sensitive data leakage.

[0139] Based on the above document processing method, the present disclosure also provides a document processing device. Figure 6 The device is described in detail.

[0140] Figure 6 The structural block diagram of a document processing device according to an embodiment of the present disclosure is schematically shown.

[0141] like Figure 6 As shown, the document processing device 600 of this embodiment includes a reading module 610, an acquisition module 620, a predetermined desensitization processing module 630 and a first display module 640.

[0142] The reading module 610 is used to respond to the user's access request to access the original document and read the target desensitized information identifier from the original document, wherein the target desensitized information identifier is pre-steganographically written into a predetermined image, and the predetermined image is located in a predetermined area in the original document, and the predetermined area is used to display the additional document information. In one embodiment, the reading module 610 can be used to perform the operation S210 described above, which will not be repeated here.

[0143] The acquisition module 620 is used to obtain the target information to be desensitized corresponding to the fixed access right based on the target desensitized information identifier and the fixed access right when it is determined that the user has the fixed access right to the original document. In one embodiment, the acquisition module 620 can be used to perform the operation S220 described above, which will not be repeated here.

[0144] The predetermined desensitization processing module 630 is used to perform predetermined desensitization processing on the original document based on the target information to be desensitized, and generate a first target document matching the fixed access rights. In one embodiment, the predetermined desensitization processing module 630 can be used to perform the operation S230 described above, which will not be described in detail here.

[0145] The first display module 640 is used to display the first target document to the user. In one embodiment, the first display module 640 can be used to perform the operation S240 described above, which will not be described in detail here.

[0146] According to an embodiment of the present disclosure, the document processing device further includes a first determination module, a first generation module, a second determination module and a predetermined steganography processing module.

[0147] The first determination module is used to determine the full amount of information to be desensitized in the original document; the first generation module is used to generate an original desensitized information identifier based on the full amount of information to be desensitized; the second determination module is used to determine a predetermined area in the original document, which includes a predetermined picture; the predetermined steganography processing module is used to steganographically process the original desensitized information identifier into a predetermined picture to generate a target desensitized information identifier.

[0148] According to an embodiment of the present disclosure, the predetermined steganography processing module includes an acquisition submodule, a first conversion processing submodule, a second conversion processing submodule and a steganography submodule.

[0149] The acquisition submodule is used to obtain the color channel value of each pixel in the predetermined image; the first conversion processing submodule is used to perform a first conversion processing on the first predetermined digit of each color channel value to obtain a target color channel value; the second conversion processing submodule is used to perform a second conversion processing on the original desensitized information identifier to obtain the target binary information corresponding to the original desensitized information identifier; the steganography submodule is used to steganographically write the original desensitized information identifier into the predetermined image based on the target color channel value and the target binary information.

[0150] According to an embodiment of the present disclosure, the document processing device also includes a third determination module, a second generation module, a fourth determination module, a temporary desensitization processing module and a second display module.

[0151] The third determination module is used to determine the temporary access information corresponding to the access request when it is determined that the user does not have fixed access rights to the original document; the second generation module is used to generate a temporary access right corresponding to the user based on the temporary access information; the fourth determination module is used to determine the temporary information to be desensitized corresponding to the temporary access right based on the target desensitized information identifier and the temporary access right; the temporary desensitization processing module is used to perform temporary desensitization processing on the original document based on the temporary information to be desensitized, and generate a second target document that matches the temporary access right; the second display module is used to display the second target document to the user based on the temporary access right.

[0152] According to an embodiment of the present disclosure, the second display module includes a determination submodule and a display submodule.

[0153] The determination submodule is used to determine the temporary accessible times and temporary accessible duration corresponding to the user based on the temporary access rights; the display submodule is used to display the second target document to the user, wherein the target display duration for displaying the second target document to the user is less than the temporary accessible duration, and the target display times for displaying the second target document to the user is less than the temporary accessible times.

[0154] According to an embodiment of the present disclosure, the display submodule is also used to stop displaying the second target document to the user when the target display duration is greater than or equal to the temporary accessible duration; or to stop displaying the second target document to the user when the target display number is greater than or equal to the temporary accessible number.

[0155] According to an embodiment of the present disclosure, any multiple modules of the reading module 610, the acquisition module 620, the predetermined desensitization processing module 630 and the first display module 640 can be combined in one module for implementation, or any one of the modules can be split into multiple modules. Alternatively, at least part of the functions of one or more of these modules can be combined with at least part of the functions of other modules and implemented in one module. According to an embodiment of the present disclosure, at least one of the reading module 610, the acquisition module 620, the predetermined desensitization processing module 630 and the first display module 640 can be at least partially implemented as a hardware circuit, such as a field programmable gate array (FPGA), a programmable logic array (PLA), a system on a chip, a system on a substrate, a system on a package, an application specific integrated circuit (ASIC), or can be implemented by hardware or firmware such as any other reasonable way of integrating or packaging the circuit, or by any one of the three implementation methods of software, hardware and firmware or by a suitable combination of any of them. Alternatively, at least one of the reading module 610, the acquisition module 620, the predetermined desensitization processing module 630 and the first display module 640 can be at least partially implemented as a computer program module, and when the computer program module is executed, the corresponding function can be executed.

[0156] Figure 7 A block diagram of an electronic device suitable for implementing a document processing method according to an embodiment of the present disclosure is schematically shown.

[0157] like Figure 7 As shown, the electronic device 700 according to an embodiment of the present disclosure includes a processor 701, which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) 702 or a program loaded from a storage part 708 to a random access memory (RAM) 703. The processor 701 may include, for example, a general-purpose microprocessor (such as a CPU), an instruction set processor and / or a related chipset and / or a special-purpose microprocessor (for example, an application-specific integrated circuit (ASIC)), etc. The processor 701 may also include an onboard memory for caching purposes. The processor 701 may include a single processing unit or multiple processing units for performing different actions of the method flow according to an embodiment of the present disclosure.

[0158] In RAM 703, various programs and data required for the operation of electronic device 700 are stored. Processor 701, ROM 702 and RAM 703 are connected to each other via bus 704. Processor 701 performs various operations of the method flow according to the embodiment of the present disclosure by executing the program in ROM 702 and / or RAM 703. It should be noted that the program can also be stored in one or more memories other than ROM 702 and RAM 703. Processor 701 can also perform various operations of the method flow according to the embodiment of the present disclosure by executing the program stored in one or more memories.

[0159] According to an embodiment of the present disclosure, the electronic device 700 may further include an input / output (I / O) interface 705, which is also connected to the bus 704. The electronic device 700 may further include one or more of the following components connected to the input / output (I / O) interface 705: an input portion 706 including a keyboard, a mouse, etc.; an output portion 707 including a cathode ray tube (CRT), a liquid crystal display (LCD), etc., and a speaker, etc.; a storage portion 708 including a hard disk, etc.; and a communication portion 709 including a network interface card such as a LAN card, a modem, etc. The communication portion 709 performs communication processing via a network such as the Internet. A drive 710 is also connected to the input / output (I / O) interface 705 as needed. A removable medium 711, such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, etc., is installed on the drive 710 as needed, so that a computer program read therefrom is installed into the storage portion 708 as needed.

[0160] The present disclosure also provides a computer-readable storage medium, which may be included in the device / apparatus / system described in the above embodiments; or may exist independently without being assembled into the device / apparatus / system. The above computer-readable storage medium carries one or more programs, and when the above one or more programs are executed, the method according to the embodiment of the present disclosure is implemented.

[0161] According to an embodiment of the present disclosure, the computer-readable storage medium may be a non-volatile computer-readable storage medium, for example, it may include but is not limited to: a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination thereof. In the present disclosure, a computer-readable storage medium may be any tangible medium containing or storing a program, which may be used by or in combination with an instruction execution system, an apparatus or a device. For example, according to an embodiment of the present disclosure, the computer-readable storage medium may include the ROM 702 and / or RAM 703 described above and / or one or more memories other than ROM 702 and RAM 703.

[0162] The embodiment of the present disclosure also includes a computer program product, which includes a computer program, and the computer program contains program code for executing the method shown in the flowchart. When the computer program product is run in a computer system, the program code is used to enable the computer system to implement the document processing method provided by the embodiment of the present disclosure.

[0163] The above functions defined in the system / device of the embodiment of the present disclosure are performed when the computer program is executed by the processor 701. According to the embodiment of the present disclosure, the system, device, module, unit, etc. described above can be implemented by a computer program module.

[0164] In one embodiment, the computer program may rely on tangible storage media such as optical storage devices, magnetic storage devices, etc. In another embodiment, the computer program may also be transmitted and distributed in the form of signals on a network medium, and downloaded and installed through the communication part 709, and / or installed from the removable medium 711. The program code contained in the computer program may be transmitted using any appropriate network medium, including but not limited to: wireless, wired, etc., or any suitable combination of the above.

[0165] In such an embodiment, the computer program can be downloaded and installed from the network through the communication part 709, and / or installed from the removable medium 711. When the computer program is executed by the processor 701, the above functions defined in the system of the embodiment of the present disclosure are performed. According to the embodiment of the present disclosure, the system, device, means, module, unit, etc. described above can be implemented by a computer program module.

[0166] According to an embodiment of the present disclosure, the program code for executing the computer program provided by the embodiment of the present disclosure can be written in any combination of one or more programming languages. Specifically, these computing programs can be implemented using high-level process and / or object-oriented programming languages, and / or assembly / machine languages. Programming languages ​​include, but are not limited to, Java, C++, python, "C" language or similar programming languages. The program code can be executed entirely on the user computing device, partially on the user device, partially on the remote computing device, or entirely on the remote computing device or server. In the case of a remote computing device, the remote computing device can be connected to the user computing device through any type of network, including a local area network (LAN) or a wide area network (WAN), or can be connected to an external computing device (for example, using an Internet service provider to connect through the Internet).

[0167] The flow charts and block diagrams in the accompanying drawings illustrate the possible architecture, functions and operations of the systems, methods and computer program products according to various embodiments of the present disclosure. In this regard, each box in the flow chart or block diagram can represent a module, a program segment, or a part of a code, and the above-mentioned module, program segment, or a part of a code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram or flow chart, and the combination of the boxes in the block diagram or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0168] It will be appreciated by those skilled in the art that the features described in the various embodiments of the present disclosure may be combined and / or combined in a variety of ways, even if such combinations or combinations are not explicitly described in the present disclosure. In particular, without departing from the spirit and teachings of the present disclosure, the features described in the various embodiments of the present disclosure may be combined and / or combined in a variety of ways. All of these combinations and / or combinations fall within the scope of the present disclosure.

[0169] The embodiments of the present disclosure are described above. However, these embodiments are only for illustrative purposes and are not intended to limit the scope of the present disclosure. Although the embodiments are described above, this does not mean that the measures in the various embodiments cannot be used in combination to advantage. Without departing from the scope of the present disclosure, those skilled in the art may make a variety of substitutions and modifications, which should all fall within the scope of the present disclosure.

Claims

1. A document processing method, characterized in that: The method comprises: In response to a user's access request to access an original document, a target desensitized information identifier is read from the original document, wherein the target desensitized information identifier is pre-steganographically written into a predetermined image, the predetermined image is located in a predetermined area in the original document, and the predetermined area is used to display additional document information; In the case where it is determined that the user has a fixed access right to the original document, based on the target desensitized information identifier and the fixed access right, obtaining the target information to be desensitized corresponding to the fixed access right; Based on the target information to be desensitized, perform a predetermined desensitization process on the original document to generate a first target document matching the fixed access authority; The first target document is displayed to the user.

2. The method according to claim 1, characterized in that The method further comprises: Determine the entire amount of information to be desensitized in the original document; Based on the full amount of information to be desensitized, generate an original desensitized information identifier; Determine the predetermined area in the original document, wherein the predetermined area includes the predetermined picture; Through a preset steganographic process, the original desensitized information identifier is steganographically written into the predetermined image to generate the target desensitized information identifier.

3. The method according to claim 1, characterized in that The predetermined area includes at least one of the following: a predetermined identification area and a predetermined supplementary description area in the original document.

4. The method according to claim 3, characterized in that The predetermined identification area includes: a header area; The predetermined supplementary description area includes: a footer area.

5. The method according to claim 2, characterized in that: The step of steganographically writing the original desensitized information identifier into the predetermined image through a preset steganographic process includes: Obtaining the color channel value of each pixel in the predetermined image; Performing a first conversion process on a first predetermined digit of each color channel value to obtain a target color channel value; Performing a second conversion process on the original desensitized information identifier to obtain target binary information corresponding to the original desensitized information identifier; Based on the target color channel value and the target binary information, the original desensitized information identifier is steganographically written into the predetermined image.

6. The method according to claim 1, characterized in that The method further comprises: In a case where it is determined that the user does not have the fixed access authority to the original document, determining temporary access information corresponding to the access request; Based on the temporary access information, generate a temporary access permission corresponding to the user; Based on the target desensitized information identifier and the temporary access permission, determining the temporary information to be desensitized corresponding to the temporary access permission; Based on the temporary information to be desensitized, temporarily desensitize the original document to generate a second target document matching the temporary access permission; Based on the temporary access permission, the second target document is displayed to the user.

7. The method according to claim 6, characterized in that The displaying the second target document to the user based on the temporary access permission includes: Based on the temporary access rights, determining the number of temporary access rights and the temporary access duration corresponding to the user; The second target document is displayed to the user, wherein a target display duration for displaying the second target document to the user is less than the temporary accessible duration, and a target display number of times for displaying the second target document to the user is less than the temporary accessible number of times.

8. The method according to claim 7, characterized in that The displaying the second target document to the user based on the temporary access permission further comprises: When the target display duration is greater than or equal to the temporary accessible duration, stop displaying the second target document to the user; or When the target display times is greater than or equal to the temporary accessible times, stop displaying the second target document to the user.

9. A document processing device, characterized in that: The device comprises: A reading module, configured to read a target desensitized information identifier from the original document in response to a user's access request to access the original document, wherein the target desensitized information identifier is pre-steganographically written into a predetermined image, the predetermined image is located in a predetermined area in the original document, and the predetermined area is used to display additional document information; An acquisition module, configured to acquire, when it is determined that the user has a fixed access right to the original document, the target information to be desensitized corresponding to the fixed access right based on the target desensitized information identifier and the fixed access right; a predetermined desensitization processing module, configured to perform a predetermined desensitization processing on the original document based on the target information to be desensitized, and generate a first target document matching the fixed access authority; and A first display module is used to display the first target document to the user.

10. An electronic device, comprising: one or more processors; a memory for storing one or more computer programs, It is characterized in that the one or more processors execute the one or more computer programs to implement the steps of the method according to any one of claims 1 to 8.

11. A computer-readable storage medium having a computer program or instruction stored thereon, characterized in that: When the computer program or instruction is executed by a processor, the steps of the method according to any one of claims 1 to 8 are implemented.

12. A computer program product comprising a computer program or instructions, characterized in that When the computer program or instruction is executed by a processor, the steps of the method according to any one of claims 1 to 8 are implemented.

Images