Data processing method and device, computer equipment and storage medium

Abstract

The embodiment of the invention relates to a data processing method and device, computer equipment and a storage medium. The method comprises the steps of obtaining regulation information for data in a regulation database; obtaining attribute information of each piece of data in a target database, wherein the attribute information represents the sensitive degree and type of the data; determining a storage strategy of each piece of data according to the regulation information and the attribute information; and storing the data according to the storage strategy. Therefore, the storage strategy of the data can be determined according to the regulation information and the attribute information of the data to store the data, it is guaranteed that data storage accords with regulations, and the data storage safety is improved by improving the compliance of data storage.

Description

Technical Field

[0001] The embodiments of the present invention relate to the field of data processing technology, and in particular to a data processing method, apparatus, computer equipment and storage medium. Background Art

[0002] As global data protection regulations become increasingly stringent and complex, enterprises and organizations are facing more and more compliance challenges in the process of data storage and transmission. Data protection regulations vary from country to country, and the content of the regulations may be updated at any time, which requires enterprises to constantly adjust their data storage strategies to comply with the latest regulatory requirements. Traditional data storage methods are difficult to respond quickly to changes in regulations, which can easily lead to data leakage or illegal storage, thus bringing security and economic risks.

[0003] For example, in the smart home business scenario, it is necessary to store the working parameters, work logs, logged-in account information, bound user personal information, etc. generated by smart home devices. Usually, the data is directly stored in the target location, and the storage strategy cannot be determined based on regulations and the current sensitivity of the data. The security of data storage is low. Therefore, how to improve the security of data storage has become an urgent problem to be solved. Summary of the invention

[0004] In view of this, in order to solve the above-mentioned technical problem of improving the security of data storage, an embodiment of the present invention provides a data processing method, apparatus, computer equipment and storage medium.

[0005] In a first aspect, an embodiment of the present invention provides a data processing method, including:

[0006] Obtain regulatory information for data in the regulatory database;

[0007] Acquire attribute information of each data in the target database, wherein the attribute information represents the sensitivity and type of the data;

[0008] Determine a storage strategy for each of the data according to the regulatory information and the attribute information;

[0009] The data is stored according to the storage policy.

[0010] In a possible implementation manner, obtaining the attribute information of each data in the target database includes:

[0011] Obtaining the data source of each data in the target database at a preset time interval;

[0012] Determine the data type and sensitive information of the data according to the data source;

[0013] The data type and the sensitive information are used as the attribute information.

[0014] In a possible implementation manner, determining a storage strategy for each data according to the regulatory information and the attribute information includes:

[0015] Determine the storage location, encryption algorithm and access rights of each data as an initial storage strategy according to the data type and the sensitive information;

[0016] The initial storage strategy of each of the data is adjusted according to the regulatory information to obtain the storage strategy.

[0017] In a possible implementation, determining the storage location, encryption algorithm, and access rights of each data as an initial storage strategy according to the data type and the sensitive information includes:

[0018] Determine a sensitivity level of each data according to the data type and the sensitive information;

[0019] When the sensitivity level is high, the initial storage strategy is determined as follows: the storage location is local storage, the encryption algorithm is a high-level encryption algorithm, and the access permission is to open access permission to the target object;

[0020] When the sensitivity level is medium, the initial storage strategy is determined as follows: the storage location is local storage, or the target cloud storage, the encryption algorithm is a medium encryption algorithm, and the access permission is to open access permission to objects of target attributes;

[0021] When the sensitivity level is low, the initial storage strategy is determined as follows: the storage location is cloud storage, the encryption algorithm is a low-level encryption algorithm, or the data is not encrypted, and the access permission is to open access permissions to all objects.

[0022] In a possible implementation, adjusting the initial storage strategy of each data according to the regulatory information includes:

[0023] For each of the data, obtaining a target regulation corresponding to the data type of the data from the regulatory information;

[0024] When the target regulation is to adjust the attribute information of the data, new attribute information is determined according to the target regulation, so as to determine a new sensitivity level according to the new attribute information, so as to adjust the initial storage strategy of the data according to the new sensitivity level;

[0025] When the target regulation is to adjust the storage policy corresponding to the sensitivity level, the initial storage policy is adjusted according to the target regulation.

[0026] In a possible implementation, the method further includes:

[0027] When it is detected that new regulatory information is added to the regulatory database, the data type and the sensitive information are updated according to the new regulatory information to obtain a new data type and new sensitive information;

[0028] The storage policy is updated according to the new regulatory information, the new data type, and the new sensitive information.

[0029] In a possible implementation manner, before obtaining regulatory information on the data in a regulatory database, the method further includes:

[0030] Obtaining regulatory change information through multiple target interfaces at preset intervals, wherein the regulatory change information includes: newly added regulations, deleted regulations, and modified regulations;

[0031] When the regulatory change information exists, updating the regulatory database according to the regulatory change information;

[0032] When the updated regulatory information is associated with the data in the target database, the step of obtaining the regulatory information for the data in the regulatory database is performed.

[0033] In a second aspect, an embodiment of the present invention provides a data processing device, including:

[0034] A first acquisition module is used to acquire regulatory information on data in a regulatory database;

[0035] A second acquisition module is used to acquire attribute information of each data in the target database, wherein the attribute information represents the sensitivity and type of the data;

[0036] A determination module, used to determine a storage strategy for each of the data according to the regulatory information and the attribute information;

[0037] A storage module is used to store the data according to the storage strategy.

[0038] In a third aspect, an embodiment of the present invention provides a computer device, comprising: a processor and a memory, wherein the processor is used to execute a data processing program stored in the memory to implement the data processing method described in any one of the first aspects above.

[0039] In a fourth aspect, an embodiment of the present invention provides a storage medium, wherein the storage medium stores one or more programs, and the one or more programs can be executed by one or more processors to implement the data processing method described in any one of the first aspects above.

[0040] The data processing scheme provided by the embodiment of the present invention obtains the regulatory information for the data in the regulatory database; obtains the attribute information of each data in the target database, wherein the attribute information represents the sensitivity and type of the data; determines the storage strategy of each data according to the regulatory information and the attribute information; and stores the data according to the storage strategy. Thus, the data storage strategy can be determined according to the regulatory information and the attribute information of the data to store the data, thereby ensuring that the data storage complies with the regulations, and improving the compliance of the data storage, thereby improving the security of the data storage. BRIEF DESCRIPTION OF THE DRAWINGS

[0041] Figure 1 A flowchart of a data processing method provided by an embodiment of the present invention;

[0042] Figure 2 A schematic diagram of a flow chart of another data processing method provided by an embodiment of the present invention;

[0043] Figure 3 A schematic diagram of the structure of a data processing device provided by an embodiment of the present invention;

[0044] Figure 4 A schematic diagram of the structure of a computer device provided by an embodiment of the present invention;

[0045] Figure 5 A flowchart of another data processing method provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0046] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0047] To facilitate understanding of the embodiments of the present invention, specific embodiments will be further explained below in conjunction with the accompanying drawings. The embodiments do not constitute a limitation on the embodiments of the present invention.

[0048] Figure 1 A flow chart of a data processing method provided by an embodiment of the present invention is as follows: Figure 1 As shown, the method specifically includes:

[0049] S11. Obtain regulatory information on the data from the regulatory database.

[0050] The data processing method provided by the embodiment of the present invention is applied to a computer device, which may include but is not limited to: a server, a desktop computer, a tablet computer, a smart home device, etc. The data storage strategy is determined based on the obtained regulatory information and the attribute information of the data to store the data, so as to ensure that the data storage complies with the regulations and improve the security of the data storage.

[0051] In this embodiment, the data may include, but is not limited to, data generated by different businesses (mobile phone numbers, bank accounts, email addresses, etc. generated in financial businesses), data generated by different devices (for example, device identification, communication addresses, login accounts, working parameters, work logs, etc. of smart home devices), etc. A plurality of laws and regulations for data are pre-stored in the regulatory database, each of which is a piece of regulatory information. Specifically, changes in data protection laws and regulations published on regulatory websites, news platforms, etc. around the world can be monitored in real time through web crawlers, API interfaces, etc. When changes in laws and regulations are found, the regulatory database can be updated. Among them, regulatory information can also be pre-set rules for data, and the rules may include, but are not limited to, storage rules, access rights, encryption rules, etc.

[0052] Further, all regulatory information contained in the regulatory database is obtained at intervals of a preset time, or, whenever there is an update of regulatory information in the regulatory database, all regulatory information contained in the regulatory database is obtained.

[0053] S12. Obtain attribute information of each data in the target database, where the attribute information represents the sensitivity and type of the data.

[0054] In this embodiment, the target database is a database of different information data collected in advance, and the data may include but is not limited to: personal information under different services (for example, ID number, bank account information, personal email, telephone number, etc.), family information (home equipment identification, home address, zip code, etc.), corporate information (company profile, product introduction, etc.), etc. The data in the target database can be pre-set according to the specific needs of the business storing data. The method of obtaining data may include but is not limited to: identifying common sensitive information such as telephone number, email address, ID number, etc. through regular expressions, identifying personal information such as name, address, etc. through keyword matching, and obtaining complex data classification through machine learning models, such as natural language processing models to identify personal information. The data is stored in the target database (for example, PostgreSQL, MongoDB, etc.).

[0055] Each data will carry attribute information when stored in the target database. The attribute information may include: data type, sensitive information representing the degree of sensitivity, etc. The data type can be classified according to the source of the data or the business to which the data corresponds (for example, data types can be divided into: financial business, video business, etc. according to the business, and can be divided into: personal data, corporate data, etc. according to the source of the data).

[0056] Different data has different sensitivity levels, and the sensitivity level represents the importance of the data. The more sensitive the data, the more secure the storage method needs to be. Since the sensitivity of the same data in different business scenarios is different (for example, the sensitivity of the phone number in personal data is higher than that in corporate data, and the sensitivity of the ID number in financial business is higher than that of the video business), or the sensitivity of the same data obtained from different sources is different (for example, the sensitivity of the phone number obtained through the client is higher than that of the phone number obtained through the cloud), the initial sensitivity of each data can be pre-set as sensitive information, that is, the sensitivity of each data without considering the data type. The initial sensitivity can be adjusted according to the data type later (for example, the initial sensitivity of the user's mailbox is low. After combining the data type, it is determined that the source of the user's mailbox is obtained from the client and the business involved is company business. At this time, the sensitive information of the user's mailbox can be updated to a higher sensitivity level).

[0057] In addition, the data type and sensitive information corresponding to each data can be pre-set through the data source and business. Usually, there is a one-to-one correspondence between the data source, business, data type and sensitive information, and they can be freely adjusted according to needs. (For example, the source is the client, the business is financial business, and the data is a bank account. The corresponding data type is determined to be: bank account in financial business, and the sensitive information is determined to be high-level sensitive data, which needs to be stored in the most secure storage method).

[0058] S13. Determine the storage strategy for each data based on the regulatory information and attribute information.

[0059] In this embodiment, storage strategies corresponding to different attribute information are preset, that is, there is a one-to-one correspondence between data types, sensitive information and storage strategies. The storage strategy may include, but is not limited to: data storage location, encryption algorithm and access rights (for example, when the sensitive information is the highest level of sensitive data and the data type is: bank account in financial business, the storage strategy is determined to be: the safest storage strategy, that is, the storage location is local storage, the storage method is to encrypt the data using an advanced encryption algorithm, and the access rights are set to only be accessible to authenticated objects). The sensitivity level corresponding to data of different sensitive information in different data types can also be preset, that is, based on the initial sensitivity of the sensitive information, the initial sensitivity is adjusted in combination with the data type, and the adjusted sensitivity is used as the sensitivity level (for example, the sensitivity is divided into high, medium and low, the initial sensitivity is medium, and it is adjusted to high after combining the data type). When it is necessary to determine the storage strategy, first determine the sensitivity level of the data, and then determine the storage strategy corresponding to the sensitivity level.

[0060] Furthermore, the regulatory information may include adjustments to the sensitivity of different data, and may also include adjustments to storage strategies for data of different name levels. Adjustments to the initially determined storage strategy based on the regulatory information may include: adjusting data sensitivity, adjusting storage strategies corresponding to different sensitivities, etc., so as to combine regulatory information with data attribute information to determine the storage strategy.

[0061] S14. Store the data according to the storage strategy.

[0062] In this embodiment, storing data according to the final storage strategy may include: storing the data in a determined storage location (for example, a target cloud, a public cloud, or locally), encrypting and storing the data using encryption algorithms with different security levels, setting different access rights (for example, accessible to all personnel, accessible to one or more target objects), etc.

[0063] The data processing method provided by the embodiment of the present invention obtains the regulatory information for data in the regulatory database; obtains the attribute information of each data in the target database, wherein the attribute information represents the sensitivity and type of the data; determines the storage strategy of each data according to the regulatory information and the attribute information; and stores the data according to the storage strategy. Thus, the data storage strategy can be determined according to the regulatory information and the attribute information of the data to store the data, thereby ensuring that the data storage complies with the regulations, and improving the compliance of the data storage, thereby improving the security of the data storage.

[0064] Figure 2 A flow chart of another data processing method provided by an embodiment of the present invention is as follows: Figure 2As shown, the method specifically includes:

[0065] S21. Obtain regulatory change information through multiple target interfaces at preset intervals, where the regulatory change information includes: newly added regulations, deleted regulations, and modified regulations; when there is regulatory change information, update the regulatory database according to the regulatory change information.

[0066] In this embodiment, the system sets a preset time interval (for example, daily, weekly, monthly, etc.), and regularly obtains data protection regulations change information from all over the world through multiple target interfaces. Specifically, the acquisition method can be to obtain open data sources such as various regulatory publishing platforms and regulatory organization websites through the target interface, store the obtained regulatory information in the regulatory database, and re-acquire regulatory change information at each preset period. The regulatory change information may include new regulations, deleted regulations, and modifications to existing regulations. By parsing the obtained regulatory change information, newly added, deleted, and modified regulatory provisions are identified. For example, when a region issues a new data protection law, the system will identify the new regulations; when certain provisions are deleted or modified, the system will identify and extract the specific changes.

[0067] Furthermore, for new regulations, the system will add the regulatory content to the regulatory database and mark the corresponding effective date and applicable areas. For deleted regulations, the system will delete or mark the deleted regulatory provisions to ensure that the regulatory content in the regulatory database is accurate. For modified regulations, the system will update the corresponding provisions, replace the old content, and record the version information before and after the change. In addition, the system can automatically generate a change log to save the regulatory update record to ensure that the update process is traceable.

[0068] After the regulatory database is updated, the system will send an update notification to enable the computer device to obtain the latest regulatory information and perform operations to determine the data storage policy.

[0069] In one possible implementation, it is possible to determine in advance whether the currently updated regulatory change information is for data in the current target database. When it is for any data in the target database, it is determined that the updated regulatory information is associated with the data in the target database. When the updated regulatory information is associated with the data in the target database, the step of obtaining the regulatory information for the data in the regulatory database is executed.

[0070] S22. Obtain regulatory information on the data from a regulatory database.

[0071] In this embodiment, similar to step S11, the specific Figure 1 For the sake of brevity, the relevant content will not be elaborated here.

[0072] S23. Obtain the data source of each data in the target database at a preset time interval; determine the data type and sensitive information of the data according to the data source; and use the data type and sensitive information as attribute information.

[0073] In this embodiment, since the data in the target database can be continuously updated, the attribute information of each data in the target database needs to be re-acquired at every preset time interval.

[0074] Specifically, the data source of each data and the business corresponding to the data are obtained, and the data source and / or data business are used as the data type (for example, client data of financial business, cloud data of corporate business), and the pre-set sensitivity of each data is obtained as sensitive information (for example, the sensitivity of bank account is high, the sensitivity of email is medium, and the sensitivity of company address is low, etc.). The sensitive information and data type are used as attribute information.

[0075] S24. Determine the storage location, encryption algorithm and access rights of each data as an initial storage strategy based on the data type and sensitive information; adjust the initial storage strategy of each data based on regulatory information to obtain a storage strategy.

[0076] In this embodiment, the storage strategy includes: data storage location, encryption algorithm and access rights. The initial storage strategy is first determined based on attribute information, and then the initial storage strategy is adjusted based on data regulatory information in the target database to obtain the storage strategy.

[0077] The storage location, encryption algorithm, and access rights of each data are determined as the initial storage strategy based on the data type and sensitive information, including:

[0078] The sensitivity level of each data is determined according to the data type and sensitive information; when the sensitivity level is high, the initial storage strategy is determined as follows: the storage location is local storage, the encryption algorithm is a high-level encryption algorithm, and the access permission is to open the access permission to the target object; when the sensitivity level is medium, the initial storage strategy is determined as follows: the storage location is local storage, or the target cloud storage, the encryption algorithm is a medium-level encryption algorithm, and the access permission is to open the access permission to the object of the target attribute; when the sensitivity level is low, the initial storage strategy is determined as follows: the storage location is cloud storage, the encryption algorithm is a low-level encryption algorithm, or the data is not encrypted, and the access permission is to open the access permission to all objects.

[0079] Specifically, since different data may affect the sensitivity of the data when they belong to different data types, the sensitivity of the sensitive information can be adjusted according to the determined data type to obtain the sensitivity level. The sensitivity levels corresponding to different data types and sensitive information can also be pre-set to obtain the corresponding relationship, and the current sensitivity level can be determined from the corresponding relationship. The sensitivity level may include: high, medium and low. For example, high-level data may include: ID card number, bank account information, etc., which require the highest level of protection. Intermediate data may include: telephone number, email address, etc., which require medium-level protection. Low-level data may include: company profile, product introduction, etc., which can be protected at a lower level.

[0080] As an example, data with a high sensitivity level is stored locally to prevent security risks caused by cross-border data transmission. Asymmetric encryption (such as RSA) is used to ensure the security of data during transmission and storage. And role-based access control (RBAC) is implemented so that only users with specific roles can access it.

[0081] For data with medium sensitivity level, local storage or controlled cloud storage is used to ensure that the data is in a secure environment, and symmetric encryption (such as AES) is performed to improve the efficiency of encryption and decryption. In addition, attribute-based access control (ABAC) is used to control access based on user attributes (such as department, position).

[0082] Data with low sensitivity levels can be stored in the cloud for easy access and sharing. It can be unencrypted or use simple encryption to ensure data accessibility. And permission-based access control (PBAC) allows public access, but access logs need to be recorded.

[0083] The initial storage strategy for each data is adjusted according to regulatory information, including:

[0084] For each data, the target regulation corresponding to the data type of the data is obtained from the regulatory information; when the target regulation is to adjust the attribute information of the data, new attribute information is determined according to the target regulation, and a new sensitivity level is determined according to the new attribute information, so as to adjust the initial storage strategy of the data according to the new sensitivity level; when the target regulation is to adjust the storage strategy corresponding to the sensitivity level, the initial storage strategy is adjusted according to the target regulation.

[0085] Specifically, it is identified whether each piece of regulatory information is related to any data in the target database, that is, it is identified whether the regulatory information is for a certain type of data (for example, regulations for the sensitivity of telephone numbers in financial services, regulations for storage policies for data of different sensitivity levels, etc.). The regulatory information related to the data is determined as the target regulation, and the content of the target regulation that needs to be adjusted is identified. When the attribute information of the data needs to be adjusted, the new sensitivity level is determined according to the adjusted new attribute information, and then the initial storage policy is adjusted to obtain the storage policy corresponding to the data. When the target regulation is the storage policy corresponding to the adjusted sensitivity level, that is, the data attribute information is not adjusted, and only the storage policy corresponding to the sensitivity level is adjusted (for example, the access rights of intermediate data are adjusted to public according to the target regulation), the initial storage policy is adjusted according to the target regulation. If the regulatory information is not related to each data, the initial storage policy can be determined as the storage policy.

[0086] S25. Store the data according to the storage strategy.

[0087] In this embodiment, similar to step S14, the details can be referred to Figure 1 For the sake of brevity, the relevant content will not be elaborated here.

[0088] S26. When it is detected that new regulatory information is added to the regulatory database, the data type and sensitive information are updated according to the new regulatory information to obtain new data types and new sensitive information; the storage strategy is updated according to the new regulatory information, the new data type and the new sensitive information.

[0089] In this embodiment, when it is detected that new regulatory information is added to the regulatory database, the storage strategy needs to be adjusted to identify whether the new regulatory information is related to the attribute information of any data in the target database. If so, the data type and / or sensitive information is updated according to the content that needs to be modified in the regulatory information to obtain a new data type and new sensitive information; the storage strategy is updated according to the new regulatory information, the new data type and the new sensitive information, and the updating step is similar to S24.

[0090] In one possible implementation, security audits are conducted on the database and data and storage policies on a regular basis. The audit content may include: Data acquisition is audited as follows: Data source verification: Ensure that the regulatory information obtained comes from a reliable and authoritative institution or platform. Data integrity: Verify whether the acquired data is complete and has no omissions. Data update frequency: Check whether the frequency of data acquisition meets the set periodic tasks (such as daily, weekly).

[0091] The following audits are conducted during classification: Classification accuracy: Verify the accuracy of the classification tool to ensure that sensitive and non-sensitive data, personal information and non-personal information are correctly classified. Classification rules: Check whether the classification rules comply with regulatory requirements and internal standards. Classification updates: Ensure that the classification tool can be updated according to the latest regulatory developments.

[0092] The following audits are performed when data is stored: Storage location: Verify whether the data is stored in the specified local or cross-border location. Encryption algorithm: Check whether the data uses the specified encryption algorithm (symmetric or asymmetric). Access control: Ensure that the data access control policy (based on roles or attributes) is correctly implemented.

[0093] The following audits are performed when accessing data: Access control implementation: Check whether the access control policy is implemented correctly to ensure that only authorized users can access specific data. Access log: Review the access log to ensure that all access behaviors are recorded and audited. Permission management: Check whether the user's permission allocation is reasonable to avoid permission abuse.

[0094] The following audits are conducted during regulatory information monitoring: Regulatory information integrity: Verify that regulatory information is complete and without omissions. Regulatory information update: Check that regulatory information is updated in a timely manner and complies with the latest regulatory requirements. Regulatory classification: Ensure that regulatory information is correctly classified to facilitate subsequent processing and application.

[0095] Other audit contents: Trigger mechanism: Check whether the regulatory update can correctly trigger the evaluation and adjustment of the data storage policy. Adjustment log: Review the adjustment log to ensure that all adjustment behaviors are recorded and audited. Policy effectiveness: Verify whether the adjusted data storage policy is effective and meets the latest regulatory requirements.

[0096] As an example, Figure 5A flow chart of another data processing method provided by an embodiment of the present invention, firstly, by developing a regulatory monitoring module, through a web crawler and an API interface, regularly obtains information on changes in data protection regulations around the world, and updates the regulatory database. Ensure that regulatory data is updated as soon as possible. Secondly, regularly scan the data in the database, and classify the data according to the sensitivity and type of the data, and generate classification results. For example, personal information, device family information, etc., are classified into confidential, sensitive, public, etc. according to data sensitivity. Secondly, the storage policy module formulates corresponding storage policies including data storage location (local storage or cross-border storage), data encryption method (symmetric encryption or asymmetric encryption) and access control policy (role-based access control or attribute-based access control) according to the data classification results. Thirdly, the dynamic adjustment module regularly captures regulatory information based on the latest regulatory information provided by the regulatory monitoring module: set periodic tasks, such as daily, weekly, etc., and capture regulatory dynamics through web crawler technology. The acquired regulatory information is integrated into a special regulatory database for preliminary review and classification. Classify according to the attributes and sensitivity of the data, use automatic scanning tools to regularly check the data in the database, and identify different categories of information. Distinguish between sensitive data and non-sensitive data, personal information and non-personal information, etc. In combination with regulatory requirements and internal standards, rate the data and determine the compliance requirements for data storage and processing. Based on the data classification results, formulate data storage location (local or cross-border), encryption algorithm (symmetric or asymmetric), and access control (role-based or attribute-based) policies. Set triggers to trigger the evaluation and automatic adjustment of data storage policies based on regulatory updates. Secondly, conduct security audits regularly to ensure the security and compliance of each module of the system. The audit content includes the accuracy of data classification, storage policy execution, access control compliance, etc. Generate a compliance report to record the system adjustment process and results.

[0097] The embodiment of the present invention provides a data processing method, which can dynamically adjust the data storage strategy according to the latest regulatory information and data attribute information to ensure the compliance and security of data storage, thereby improving the compliance and security of data storage. The storage strategy can be updated and adapted by updating the regulatory database, which can be used in various scenarios where dynamic adjustment of data storage strategies is required. The legal and economic risks caused by regulatory changes are reduced. The security of data storage is improved, and the confidentiality and integrity of data during transmission and storage are ensured by dynamically adjusting the storage strategy. The efficiency of data management is improved, and manual intervention and operational errors are reduced through automated regulatory monitoring and storage strategy adjustment.

[0098] Figure 3 A structural diagram of a data processing device provided by an embodiment of the present invention is shown in FIG. Figure 3 As shown, the device specifically includes:

[0099] A first acquisition module 31 is used to acquire regulatory information for data in a regulatory database;

[0100] A second acquisition module 32 is used to acquire attribute information of each data in the target database, wherein the attribute information represents the sensitivity and type of the data;

[0101] A determination module 33, configured to determine a storage strategy for each of the data according to the regulatory information and the attribute information;

[0102] The storage module 34 is used to store the data according to the storage strategy.

[0103] In a possible implementation manner, the second acquisition module is specifically configured to acquire the data source of each data in the target database at intervals of a preset time length;

[0104] Determine the data type and sensitive information of the data according to the data source;

[0105] The data type and the sensitive information are used as the attribute information.

[0106] In a possible implementation manner, the determination module is specifically configured to determine the storage location, encryption algorithm and access permission of each data as an initial storage strategy according to the data type and the sensitive information;

[0107] The adjustment module 35 is used to adjust the initial storage strategy of each data according to the regulatory information to obtain the storage strategy.

[0108] In a possible implementation manner, the determination module is specifically configured to determine a sensitivity level of each of the data according to the data type and the sensitive information;

[0109] When the sensitivity level is high, the initial storage strategy is determined as follows: the storage location is local storage, the encryption algorithm is a high-level encryption algorithm, and the access permission is to open access permission to the target object;

[0110] When the sensitivity level is medium, the initial storage strategy is determined as follows: the storage location is local storage, or the target cloud storage, the encryption algorithm is a medium encryption algorithm, and the access permission is to open access permission to objects of target attributes;

[0111] When the sensitivity level is low, the initial storage strategy is determined as follows: the storage location is cloud storage, the encryption algorithm is a low-level encryption algorithm, or the data is not encrypted, and the access permission is to open access permissions to all objects.

[0112] In a possible implementation manner, the adjustment module is specifically configured to obtain, for each of the data, a target regulation corresponding to a data type of the data from the regulatory information;

[0113] When the target regulation is to adjust the attribute information of the data, new attribute information is determined according to the target regulation, so as to determine a new sensitivity level according to the new attribute information, so as to adjust the initial storage strategy of the data according to the new sensitivity level;

[0114] When the target regulation is to adjust the storage policy corresponding to the sensitivity level, the initial storage policy is adjusted according to the target regulation.

[0115] In a possible implementation, the updating module 36 is configured to update the data type and the sensitive information according to the new regulatory information to obtain a new data type and new sensitive information when detecting that new regulatory information is added to the regulatory database;

[0116] The storage policy is updated according to the new regulatory information, the new data type, and the new sensitive information.

[0117] In a possible implementation manner, the update module is further used to obtain regulatory change information through multiple target interfaces at preset intervals, and the regulatory change information includes: newly added regulations, deleted regulations, and modified regulations;

[0118] When the regulatory change information exists, updating the regulatory database according to the regulatory change information;

[0119] When the updated regulatory information is associated with the data in the target database, the step of obtaining the regulatory information for the data in the regulatory database is performed.

[0120] The device provided in this embodiment can be as follows Figure 4 The device shown in FIG. 1 can perform the following steps: Figure 1-2 All steps of the data processing method in Figure 1-2 For details on the technical effects of the data processing method shown, please refer to Figure 1-2 For the sake of brevity, the relevant description is not repeated here.

[0121] Figure 4 A schematic diagram of the structure of a computer device provided by an embodiment of the present invention, Figure 4The computer device 400 shown includes: at least one processor 401, a memory 402, at least one network interface 404 and other user interfaces 403. The various components in the computer device 400 are coupled together via a bus system 405. It is understood that the bus system 405 is used to achieve connection and communication between these components. In addition to the data bus, the bus system 405 also includes a power bus, a control bus and a status signal bus. However, for the sake of clarity, the bus system 405 is not shown in FIG. Figure 4 Various buses are labeled as bus system 405 .

[0122] The user interface 403 may include a display, a keyboard, or a pointing device (eg, a mouse, a trackball, a touch pad, or a touch screen).

[0123] It can be understood that the memory 402 in the embodiment of the present invention can be a volatile memory or a non-volatile memory, or can include both volatile and non-volatile memories. Among them, the non-volatile memory can be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory can be a random access memory (RAM), which is used as an external cache. By way of example but not limitation, many forms of RAM are available, such as static random access memory (SRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDRSDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link dynamic random access memory (SLDRAM), and direct RAM bus random access memory (DRRAM). The memory 402 described herein is intended to include, but is not limited to, these and any other suitable types of memory.

[0124] In some implementations, the memory 402 stores the following elements, executable units or data structures, or a subset thereof, or an extended set thereof: an operating system 4021 and application programs 4022 .

[0125] The operating system 4021 includes various system programs, such as a framework layer, a core library layer, a driver layer, etc., which are used to implement various basic services and process hardware-based tasks. The application 4022 includes various application programs, such as a media player (Media Player), a browser (Browser), etc., which are used to implement various application services. The program for implementing the method of the embodiment of the present invention can be included in the application 4022.

[0126] In the embodiment of the present invention, by calling the program or instruction stored in the memory 402, specifically, the program or instruction stored in the application 4022, the processor 401 is used to execute the method steps provided by each method embodiment, for example, including:

[0127] Obtain regulatory information for data in the regulatory database;

[0128] Acquire attribute information of each data in the target database, wherein the attribute information represents the sensitivity and type of the data;

[0129] Determine a storage strategy for each of the data according to the regulatory information and the attribute information;

[0130] The data is stored according to the storage policy.

[0131] In a possible implementation, the data source of each data in the target database is obtained at intervals of a preset time length;

[0132] Determine the data type and sensitive information of the data according to the data source;

[0133] The data type and the sensitive information are used as the attribute information.

[0134] In a possible implementation, a storage location, an encryption algorithm, and an access right for each of the data are determined as an initial storage strategy according to the data type and the sensitive information;

[0135] The initial storage strategy of each of the data is adjusted according to the regulatory information to obtain the storage strategy.

[0136] In a possible implementation, determining a sensitivity level of each data according to the data type and the sensitive information;

[0137] When the sensitivity level is high, the initial storage strategy is determined as follows: the storage location is local storage, the encryption algorithm is a high-level encryption algorithm, and the access permission is to open access permission to the target object;

[0138] When the sensitivity level is medium, the initial storage strategy is determined as follows: the storage location is local storage, or the target cloud storage, the encryption algorithm is a medium encryption algorithm, and the access permission is to open access permission to objects of target attributes;

[0139] When the sensitivity level is low, the initial storage strategy is determined as follows: the storage location is cloud storage, the encryption algorithm is a low-level encryption algorithm, or the data is not encrypted, and the access permission is to open access permissions to all objects.

[0140] In a possible implementation, for each of the data, a target regulation corresponding to the data type of the data is obtained from the regulatory information;

[0141] When the target regulation is to adjust the attribute information of the data, new attribute information is determined according to the target regulation, so as to determine a new sensitivity level according to the new attribute information, so as to adjust the initial storage strategy of the data according to the new sensitivity level;

[0142] When the target regulation is to adjust the storage policy corresponding to the sensitivity level, the initial storage policy is adjusted according to the target regulation.

[0143] In a possible implementation, when it is detected that new regulatory information is added to the regulatory database, the data type and the sensitive information are updated according to the new regulatory information to obtain a new data type and new sensitive information;

[0144] The storage policy is updated according to the new regulatory information, the new data type, and the new sensitive information.

[0145] In a possible implementation, regulatory change information is obtained through multiple target interfaces at preset intervals, and the regulatory change information includes: newly added regulations, deleted regulations, and modified regulations;

[0146] When the regulatory change information exists, updating the regulatory database according to the regulatory change information;

[0147] When the updated regulatory information is associated with the data in the target database, the step of obtaining the regulatory information for the data in the regulatory database is performed.

[0148] The method disclosed in the above embodiment of the present invention can be applied to the processor 401, or implemented by the processor 401. The processor 401 may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method can be completed by the hardware integrated logic circuit in the processor 401 or the instruction in the form of software. The above processor 401 can be a general processor, a digital signal processor (Digital Signal Processor, DSP), an application specific integrated circuit (Application Specific Integrated Circuit, ASIC), a field programmable gate array (Field Programmable Gate Array, FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components. The methods, steps and logic block diagrams disclosed in the embodiments of the present invention can be implemented or executed. The general processor can be a microprocessor or the processor can also be any conventional processor, etc. The steps of the method disclosed in the embodiment of the present invention can be directly embodied as a hardware decoding processor to execute, or the hardware and software units in the decoding processor can be executed. The software unit can be located in a mature storage medium in the field such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory or an electrically erasable programmable memory, a register, etc. The storage medium is located in the memory 402, and the processor 401 reads the information in the memory 402 and completes the steps of the above method in combination with its hardware.

[0149] It is understood that the embodiments described herein may be implemented in hardware, software, firmware, middleware, microcode, or a combination thereof. For hardware implementation, the processing unit may be implemented in one or more application specific integrated circuits (ASIC), digital signal processors (DSP), digital signal processing devices (DSPDevice, DSPD), programmable logic devices (PLD), field programmable gate arrays (FPGA), general purpose processors, controllers, microcontrollers, microprocessors, other electronic units for performing the functions described in the present application, or a combination thereof.

[0150] For software implementation, the technology described herein can be implemented by a unit that performs the functions described herein. The software code can be stored in a memory and executed by a processor. The memory can be implemented in the processor or outside the processor.

[0151] The computer device provided in this embodiment may be Figure 4 The computer device shown in , can execute Figure 1-2 All steps of the data processing method in Figure 1-2 For details on the technical effects of the data processing method shown, please refer to Figure 1-2 For the sake of brevity, the relevant description is not repeated here.

[0152] The embodiment of the present invention also provides a storage medium (computer-readable storage medium). The storage medium here stores one or more programs. The storage medium may include a volatile memory, such as a random access memory; the memory may also include a non-volatile memory, such as a read-only memory, a flash memory, a hard disk or a solid-state drive; the memory may also include a combination of the above-mentioned types of memory.

[0153] When one or more programs in the storage medium can be executed by one or more processors, the data processing method executed on the device side can be implemented.

[0154] The processor is used to execute the data processing program stored in the memory to implement the following steps of the data processing method performed on the device side:

[0155] Obtain regulatory information for data in the regulatory database;

[0156] Acquire attribute information of each data in the target database, wherein the attribute information represents the sensitivity and type of the data;

[0157] Determine a storage strategy for each of the data according to the regulatory information and the attribute information;

[0158] The data is stored according to the storage policy.

[0159] In a possible implementation, the data source of each data in the target database is obtained at intervals of a preset time length;

[0160] Determine the data type and sensitive information of the data according to the data source;

[0161] The data type and the sensitive information are used as the attribute information.

[0162] In a possible implementation, a storage location, an encryption algorithm, and an access right for each of the data are determined as an initial storage strategy according to the data type and the sensitive information;

[0163] The initial storage strategy of each of the data is adjusted according to the regulatory information to obtain the storage strategy.

[0164] In a possible implementation, determining a sensitivity level of each data according to the data type and the sensitive information;

[0165] When the sensitivity level is high, the initial storage strategy is determined as follows: the storage location is local storage, the encryption algorithm is a high-level encryption algorithm, and the access permission is to open access permission to the target object;

[0166] When the sensitivity level is medium, the initial storage strategy is determined as follows: the storage location is local storage, or the target cloud storage, the encryption algorithm is a medium encryption algorithm, and the access permission is to open access permission to objects of target attributes;

[0167] When the sensitivity level is low, the initial storage strategy is determined as follows: the storage location is cloud storage, the encryption algorithm is a low-level encryption algorithm, or the data is not encrypted, and the access permission is to open access permissions to all objects.

[0168] In a possible implementation, for each of the data, a target regulation corresponding to the data type of the data is obtained from the regulatory information;

[0169] When the target regulation is to adjust the attribute information of the data, new attribute information is determined according to the target regulation, so as to determine a new sensitivity level according to the new attribute information, so as to adjust the initial storage strategy of the data according to the new sensitivity level;

[0170] When the target regulation is to adjust the storage policy corresponding to the sensitivity level, the initial storage policy is adjusted according to the target regulation.

[0171] In a possible implementation, when it is detected that new regulatory information is added to the regulatory database, the data type and the sensitive information are updated according to the new regulatory information to obtain a new data type and new sensitive information;

[0172] The storage policy is updated according to the new regulatory information, the new data type, and the new sensitive information.

[0173] In a possible implementation, regulatory change information is obtained through multiple target interfaces at preset intervals, and the regulatory change information includes: newly added regulations, deleted regulations, and modified regulations;

[0174] When the regulatory change information exists, updating the regulatory database according to the regulatory change information;

[0175] When the updated regulatory information is associated with the data in the target database, the step of obtaining the regulatory information for the data in the regulatory database is performed.

[0176] The professionals should further realize that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented by electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the composition and steps of each example have been generally described in the above description according to the function. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professionals and technicians can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention.

[0177] The steps of the method or algorithm described in conjunction with the embodiments disclosed herein may be implemented using hardware, a software module executed by a processor, or a combination of the two. The software module may be placed in a random access memory (RAM), a memory, a read-only memory (ROM), an electrically programmable ROM, an electrically erasable programmable ROM, a register, a hard disk, a removable disk, a CD-ROM, or any other form of storage medium known in the art.

[0178] The specific implementation methods described above further illustrate the objectives, technical solutions and beneficial effects of the present invention in detail. It should be understood that the above description is only a specific implementation method of the present invention and is not intended to limit the scope of protection of the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the scope of protection of the present invention.

Claims

1. A data processing method, characterized in that: include: Obtain regulatory information for data in the regulatory database; Acquire attribute information of each data in the target database, wherein the attribute information represents the sensitivity and type of the data; Determine a storage strategy for each of the data according to the regulatory information and the attribute information; The data is stored according to the storage policy.

2. The method according to claim 1, characterized in that The step of obtaining the attribute information of each data in the target database includes: Obtaining the data source of each data in the target database at a preset time interval; Determine the data type and sensitive information of the data according to the data source; The data type and the sensitive information are used as the attribute information.

3. The method according to claim 2, characterized in that The step of determining a storage strategy for each data according to the regulatory information and the attribute information includes: Determine the storage location, encryption algorithm and access rights of each data as an initial storage strategy according to the data type and the sensitive information; The initial storage strategy of each of the data is adjusted according to the regulatory information to obtain the storage strategy.

4. The method according to claim 3, characterized in that The step of determining the storage location, encryption algorithm and access permission of each data as an initial storage strategy according to the data type and the sensitive information includes: Determine a sensitivity level of each data according to the data type and the sensitive information; When the sensitivity level is high, the initial storage strategy is determined as follows: the storage location is local storage, the encryption algorithm is a high-level encryption algorithm, and the access permission is to open access permission to the target object; When the sensitivity level is medium, the initial storage strategy is determined as follows: the storage location is local storage, or the target cloud storage, the encryption algorithm is a medium encryption algorithm, and the access permission is to open access permission to objects of target attributes; When the sensitivity level is low, the initial storage strategy is determined as follows: the storage location is cloud storage, the encryption algorithm is a low-level encryption algorithm, or the data is not encrypted, and the access permission is to open access permissions to all objects.

5. The method according to claim 3, characterized in that: The adjusting the initial storage strategy of each data according to the regulatory information includes: For each of the data, obtaining a target regulation corresponding to the data type of the data from the regulatory information; When the target regulation is to adjust the attribute information of the data, new attribute information is determined according to the target regulation, so as to determine a new sensitivity level according to the new attribute information, so as to adjust the initial storage strategy of the data according to the new sensitivity level; When the target regulation is to adjust the storage policy corresponding to the sensitivity level, the initial storage policy is adjusted according to the target regulation.

6. The method according to claim 2, characterized in that The method further comprises: When it is detected that new regulatory information is added to the regulatory database, the data type and the sensitive information are updated according to the new regulatory information to obtain a new data type and new sensitive information; The storage policy is updated according to the new regulatory information, the new data type, and the new sensitive information.

7. The method according to claim 1, characterized in that Before obtaining regulatory information about the data in the regulatory database, the method further includes: Obtaining regulatory change information through multiple target interfaces at preset intervals, wherein the regulatory change information includes: newly added regulations, deleted regulations, and modified regulations; When the regulatory change information exists, updating the regulatory database according to the regulatory change information; When the updated regulatory information is associated with the data in the target database, the step of obtaining the regulatory information for the data in the regulatory database is performed.

8. A data processing device, characterized in that: include: A first acquisition module is used to acquire regulatory information on data in a regulatory database; A second acquisition module is used to acquire attribute information of each data in the target database, wherein the attribute information represents the sensitivity and type of the data; A determination module, used to determine a storage strategy for each of the data according to the regulatory information and the attribute information; A storage module is used to store the data according to the storage strategy.

9. A computer device, characterized in that: include: A processor and a memory, wherein the processor is used to execute a data processing program stored in the memory to implement the data processing method according to any one of claims 1 to 7.

10. A storage medium, characterized in that: The storage medium stores one or more programs, and the one or more programs can be executed by one or more processors to implement the data processing method according to any one of claims 1 to 7.

Images