Document desensitization method and device, equipment and storage medium

Abstract

Embodiments of the invention provide a document desensitization method and apparatus, a device and a storage medium. The method comprises the steps of receiving a to-be-desensitized document; converting the document to be desensitized into a target document to be desensitized in a specified format; matching the target document to be desensitized with the sensitive identification strategy, and confirming a target sensitive identification strategy hit by the target document to be desensitized; and desensitizing the target document to be desensitized according to the target sensitive identification strategy to obtain a target desensitized document. According to the embodiment of the invention, firstly, the to-be-desensitized document is converted into the target to-be-desensitized document in the specified format, and in the specified format, the difficulty of content extraction and sensitive content recognition is remarkably reduced; according to the method and the device, the target to-be-desensitized document in the specified format is desensitized, so that the original format of the target desensitized document can be kept unchanged, meanwhile, the typesetting effect of the document is not influenced, and a better desensitization effect is realized.

Description

Technical Field

[0001] The present application relates to the technical field of sensitive information processing, and in particular to a document desensitization method and device, an electronic device and a storage medium. Background Art

[0002] With the progress of society and the development of science and technology, data security issues are receiving increasing attention. As a widely used data carrier in daily office work, Office series documents (i.e. office documents) store data of various types and levels. Therefore, in the use and transmission of Office documents, data security risks have become the focus of users. In order to effectively prevent these risks, technical means such as data encryption and data desensitization have emerged as an effective strategy to ensure the security of unstructured data. Although data encryption can provide high-intensity data protection, its readability and auditability are relatively poor. In contrast, data desensitization technology ensures data security while still allowing normal use of data, such as data analysis or software testing, through means such as masking and bionic conversion.

[0003] At present, the structured data desensitization technology on the market is relatively mature. However, due to the wide variety of unstructured data, data extraction and writing back are difficult, especially the desensitization technology of Office series documents is still weak, resulting in unsatisfactory desensitization effect. The existing Office series document desensitization technology first requires compatibility adaptation and content extraction of different types of documents. This process is technically difficult and complex. In addition, after the document content is desensitized, the original format is often changed when the file is written back, resulting in typesetting errors. Summary of the invention

[0004] The embodiment of the present application provides a document desensitization method to solve the problem in the prior art that it is difficult to extract document content when desensitizing Office series documents, and that the original format of the document will be changed when the document content is desensitized and modified and then written back to the file.

[0005] Correspondingly, the embodiment of the present application also provides a document desensitization device, an electronic device and a storage medium to ensure the implementation and application of the above method.

[0006] In order to solve the above problems, the embodiment of the present application discloses a document desensitization method, which is applied to a desensitization engine. The desensitization engine is provided with several sensitive identification strategies, each of which has a corresponding desensitization algorithm. The method includes:

[0007] Receive documents to be desensitized;

[0008] Convert the to-be-desensitized document into a target to-be-desensitized document in a specified format;

[0009] Matching the target document to be desensitized with the sensitive identification strategy, and confirming the target sensitive identification strategy hit by the target document to be desensitized;

[0010] The target document to be desensitized is desensitized according to the target sensitivity identification strategy to obtain a target desensitized document.

[0011] Optionally, the desensitization engine is communicatively connected to the server, and the method further includes:

[0012] Receive the several sensitive identification strategies issued by the server; the sensitive identification strategies are obtained by configuring the server to allow desensitization of preset document types, sensitive identification rules corresponding to different preset document types, and desensitization algorithms corresponding to different sensitive identification rules; the preset document types allowed for desensitization are document types that allow the desensitization engine to perform desensitization, and the sensitive identification rules are used to identify sensitive content in the target document to be desensitized.

[0013] Optionally, the desensitizing engine has a corresponding authentication account and a corresponding password, and the receiving of the plurality of sensitive identification strategies issued by the server includes:

[0014] Submit the authentication account and the corresponding password to the server, so that the server authenticates the desensitization engine according to the authentication account and the corresponding password;

[0015] When the server passes the authentication of the authentication account and the corresponding password, the server receives the plurality of sensitive identification policies issued by the server.

[0016] Optionally, matching the target document to be desensitized with the sensitivity identification strategy to confirm that the target document to be desensitized hits the target sensitivity identification strategy includes:

[0017] According to the document type of the target document to be desensitized and the preset document types corresponding to the plurality of sensitive identification strategies, a first target strategy is selected from the plurality of sensitive identification strategies;

[0018] Using the sensitive identification rules respectively corresponding to the first target strategies to identify the sensitive content in the target document to be desensitized;

[0019] According to the sensitive identification rule hit by the sensitive content in the target document to be desensitized, the target sensitive identification strategy hit by the target document to be desensitized is determined from the first target strategy.

[0020] The embodiment of the present application also discloses a document desensitization method, which is applied to a server, wherein the server is in communication connection with a desensitization engine, and the method further includes:

[0021] Configure preset document types that are allowed to be desensitized, sensitive identification rules corresponding to different preset document types, and desensitization algorithms corresponding to different sensitive identification rules, to obtain a sensitive identification strategy; the preset document types that are allowed to be desensitized are document types that are allowed to be desensitized by the desensitization engine, and the sensitive identification rules are used to identify sensitive content in the target document to be desensitized;

[0022] Receive an authentication request submitted by the desensitizing engine, wherein the authentication request includes an authentication account and a corresponding password corresponding to the desensitizing engine;

[0023] Authenticating the desensitizing engine according to the authentication account and the corresponding password;

[0024] When the authentication is passed, the sensitive identification strategy is sent to the desensitizing engine, so that the desensitizing engine desensitizes the target document to be desensitized according to the sensitive identification strategy.

[0025] Optionally, there is an engine list in the server, and the method further includes:

[0026] In response to an engine adding command for the desensitizing engine, adding engine information of the desensitizing engine to the engine list;

[0027] In response to an engine deletion command for the desensitizing engine, deleting the engine information of the desensitizing engine in the engine list;

[0028] In response to an engine modification command for the desensitizing engine, modifying engine information of the desensitizing engine in the engine list;

[0029] In response to an engine query command for the desensitizing engine, engine information of the desensitizing engine is queried in the engine list.

[0030] The embodiment of the present application further discloses a document desensitization device, which is applied to a desensitization engine. The desensitization engine is provided with a plurality of sensitive identification strategies, each of which has a corresponding desensitization algorithm. The device comprises:

[0031] A document receiving module, used for receiving documents to be desensitized;

[0032] A format conversion module, used for converting the to-be-desensitized document into a target to-be-desensitized document of a specified format;

[0033] A strategy matching module, used to match the target document to be desensitized with the sensitivity identification strategy, and confirm that the target document to be desensitized hits the target sensitivity identification strategy;

[0034] The document desensitization module is used to desensitize the target document to be desensitized according to the target sensitivity identification strategy to obtain a target desensitized document.

[0035] The embodiment of the present application also discloses a document desensitization device, which is applied to a server, and the server is connected to a desensitization engine for communication. The device includes:

[0036] A policy configuration module, used to configure preset document types that are allowed to be desensitized, sensitive identification rules corresponding to different preset document types, and desensitization algorithms corresponding to different sensitive identification rules, to obtain a sensitive identification policy; the preset document types that are allowed to be desensitized are document types that are allowed to be desensitized by the desensitization engine, and the sensitive identification rules are used to identify sensitive content in the target document to be desensitized;

[0037] A request receiving module, used to receive an authentication request submitted by the desensitizing engine, wherein the authentication request includes an authentication account and a corresponding password corresponding to the desensitizing engine;

[0038] An engine authentication module, used to authenticate the desensitizing engine according to the authentication account and the corresponding password;

[0039] The policy delivery module is used to deliver the sensitive identification policy to the desensitizing engine when the authentication is passed, so that the desensitizing engine desensitizes the target document to be desensitized according to the sensitive identification policy.

[0040] An embodiment of the present application also discloses an electronic device, including: a processor; and a memory, on which executable code is stored. When the executable code is executed, the processor executes the document desensitization method as described in one or more of the embodiments of the present application.

[0041] The embodiments of the present application also disclose one or more machine-readable media on which executable codes are stored. When the executable codes are executed, the processor executes the document desensitization method as described in one or more of the embodiments of the present application.

[0042] Compared with the prior art, the embodiments of the present application have the following advantages:

[0043] In an embodiment of the present application, a document to be desensitized is received; the document to be desensitized is converted into a target document to be desensitized in a specified format; the target document to be desensitized is matched with a sensitive identification strategy, and it is confirmed that the target document to be desensitized hits the target sensitive identification strategy; the target document to be desensitized is desensitized according to the target sensitive identification strategy to obtain a target desensitized document. In an embodiment of the present application, the document to be desensitized is first converted into a target document to be desensitized in a specified format. Under the specified format, the difficulty of content extraction and identification of sensitive content is significantly reduced; desensitizing the target document to be desensitized in the specified format can ensure that the original format of the target desensitized document remains unchanged, while not affecting the typesetting effect of the document, thereby achieving a better desensitization effect. BRIEF DESCRIPTION OF THE DRAWINGS

[0044] Figure 1 This is a flowchart of the steps of an embodiment of a document desensitization method of the present application;

[0045] Figure 2 It is a flowchart of another document desensitization method embodiment of the present application;

[0046] Figure 3 This is a system structure diagram of an embodiment of a document desensitization method of the present application;

[0047] Figure 4 It is an implementation logic diagram of an embodiment of a document desensitization method of the present application;

[0048] Figure 5 It is a structural block diagram of an embodiment of a document desensitization device of the present application;

[0049] Figure 6 It is a structural block diagram of another document desensitization device embodiment of the present application;

[0050] Figure 7 It is a schematic diagram of the structure of a device provided in one embodiment of the present application. DETAILED DESCRIPTION

[0051] In order to make the above-mentioned objects, features and advantages of the present application more obvious and easy to understand, the present application is further described in detail below in conjunction with the accompanying drawings and specific implementation methods.

[0052] Reference Figure 1 , is a flowchart of a document desensitization method embodiment of the present application, comprising the following steps:

[0053] Step 101: Receive the document to be desensitized.

[0054] A document desensitization method provided in this embodiment is applied to a desensitization engine, which is connected to a server by communication, and the server is responsible for managing several desensitization engines. Several sensitive identification strategies are set in the desensitization engine, and each sensitive identification strategy has a corresponding preset document type, sensitive identification rules and desensitization algorithm. These sensitive identification strategies are configured and issued by the server.

[0055] In step 101, the desensitizing engine receives the document to be desensitized uploaded by the user.

[0056] Among them, the document to be desensitized can be an Office document, and the types of Office documents can include word (Microsoft Word, Microsoft word processing software), excel (Microsoft Excel, Microsoft spreadsheet software), ppt (Microsoft PowerPoint, Microsoft presentation software), viso (Microsoft Visio, Microsoft chart and flowchart software), etc. The embodiment of the present application does not impose any restrictions on the specific types of Office documents that can be desensitized, and those skilled in the art can make relevant settings according to actual needs.

[0057] Step 102: convert the document to be desensitized into a target document to be desensitized in a specified format.

[0058] In step 102, the document to be desensitized is converted into a target document to be desensitized in a specified format.

[0059] In this embodiment, the Office document to be desensitized needs to be converted into a specified format before desensitization. In one embodiment, the specified format can be an xml (Extensible Markup Language) format, and the target document to be desensitized in the xml format can be opened normally by the Office software. Since the difficulty of extracting and identifying sensitive content in a document in the xml format is significantly reduced, and when the target document to be desensitized in the xml format is desensitized, it can be ensured that the original format of the target desensitized document remains unchanged, and the typesetting effect of the document is not affected, so this embodiment converts the document to be desensitized into the target document to be desensitized in the xml format before the desensitization process.

[0060] In one embodiment, the target document to be desensitized in xml format is obtained by saving the Office document to be desensitized in xml format. In fact, the data format of the document to be desensitized itself does not change.

[0061] Step 103: Match the target document to be desensitized with the sensitivity identification strategy to confirm the target sensitivity identification strategy hit by the target document to be desensitized.

[0062] In step 103, the target document to be desensitized is matched with several sensitive identification strategies in the desensitization engine to confirm the target sensitive identification strategy hit by the target document to be desensitized.

[0063] In this embodiment, several sensitive identification strategies are set in the desensitizing engine, each sensitive identification strategy includes preset document types that allow desensitization, sensitive identification rules corresponding to different preset document types, and desensitizing algorithms corresponding to different sensitive identification rules.

[0064] In an optional embodiment, the first target policy may be firstly selected based on the document type of the target document to be desensitized. For example, if the document type of the target document to be desensitized is word before conversion, the first target policy applicable to the word document is selected.

[0065] Afterwards, the sensitive content in the target document to be desensitized is identified according to the sensitive identification rules in the first target strategy, and the sensitive identification rules may include identification rules such as keyword identification and regular expressions. Sensitive content may include content such as ID card number and telephone number. The embodiment of the present application does not impose any restrictions on the specific setting method of the sensitive identification rules and the sensitive content that can be identified by the sensitive identification rules.

[0066] After the sensitive identification rule hits the sensitive content in the target document to be desensitized, the first target policy to which the sensitive identification rule belongs can be used as the target sensitive identification policy hit by the target document to be desensitized.

[0067] Step 104: desensitize the target document to be desensitized according to the target sensitivity identification strategy to obtain a target desensitized document.

[0068] In step 104, the target document to be desensitized is desensitized according to the target sensitivity identification strategy to obtain a target desensitized document.

[0069] The sensitive identification strategy specifies what kind of desensitization algorithm is executed for different categories of documents to be desensitized after hitting different sensitive identification rules. Therefore, after obtaining the target sensitive identification strategy that the target document to be desensitized hits, the corresponding desensitization algorithm in the target sensitive identification strategy can be used to desensitize the target document to be desensitized. In one embodiment, the target document to be desensitized in XML format is desensitized using the corresponding desensitization algorithm in the target sensitive identification strategy to ensure that the document structure is not destroyed.

[0070] In the embodiment of the present application, the desensitization algorithm may include bionic replacement, shielding, data masking, hash function, tokenization, generalization, randomization, noise addition, truncation, aggregation, fuzzification and other desensitization algorithms. The embodiment of the present application does not impose any restrictions on the specific type and setting method of the desensitization algorithm, and those skilled in the art can set it according to actual needs.

[0071] For example, the sensitive content in the target document to be desensitized in XML format can be desensitized through algorithms such as bionic replacement and direct replacement, and written back to the target document to be desensitized in XML format to complete the data desensitization of the document.

[0072] In one embodiment, after document desensitization is completed, the target desensitized document can be renamed and maintained in XML format without converting the target desensitized document to the original format.

[0073] In an embodiment of the present application, a document to be desensitized is received; the document to be desensitized is converted into a target document to be desensitized in a specified format; the target document to be desensitized is matched with a sensitive identification strategy, and it is confirmed that the target document to be desensitized hits the target sensitive identification strategy; the target document to be desensitized is desensitized according to the target sensitive identification strategy to obtain a target desensitized document. In an embodiment of the present application, the document to be desensitized is first converted into a target document to be desensitized in a specified format. Under the specified format, the difficulty of content extraction and identification of sensitive content is significantly reduced; desensitizing the target document to be desensitized in the specified format can ensure that the original format of the target desensitized document remains unchanged, while not affecting the typesetting effect of the document, thereby achieving a better desensitization effect.

[0074] In an optional embodiment of the present application, the desensitization engine is communicatively connected to the server, and the method further includes:

[0075] Receive the several sensitive identification strategies issued by the server; the sensitive identification strategies are obtained by configuring the server to allow desensitization of preset document types, sensitive identification rules corresponding to different preset document types, and desensitization algorithms corresponding to different sensitive identification rules; the preset document types allowed for desensitization are document types that allow the desensitization engine to perform desensitization, and the sensitive identification rules are used to identify sensitive content in the target document to be desensitized.

[0076] In this embodiment, before the desensitization engine receives the document to be desensitized, it needs to first receive several sensitive identification strategies issued by the server. These sensitive identification strategies are obtained by configuring the preset document types allowed for desensitization by the server, the sensitive identification rules corresponding to different preset document types, and the desensitization algorithms corresponding to different sensitive identification rules.

[0077] Among them, the preset document types allowed for desensitization are the document types that allow the desensitization engine to perform desensitization, that is, the server can configure the Office document types that allow the desensitization engine to perform desensitization. For example, if the server configures the Office document types that allow the desensitization engine to perform desensitization to be word and excel, then the sensitive identification strategy can only match the target desensitized documents in xml format converted from these two types of documents to be desensitized, and cannot desensitize documents to be desensitized other than word and excel. The above examples are for illustrative purposes only, and the embodiments of the present application do not impose any restrictions on the Office document types that the server configures to allow the desensitization engine to perform desensitization.

[0078] Sensitive identification rules are used to identify sensitive content in the target document to be desensitized. In one embodiment, the sensitive identification rules may include identification rules such as keyword identification and regular expressions, and the sensitive content may include content such as ID card numbers and telephone numbers. The embodiment of the present application does not impose any restrictions on the specific setting method of the sensitive identification rules and the sensitive content that can be identified by the sensitive identification rules.

[0079] The embodiment of the present application sets several sensitive identification strategies. When the target document to be desensitized hits the corresponding target sensitive identification strategy, the desensitization algorithm contained in the target sensitive identification strategy can be executed to desensitize the sensitive content in the target document to be desensitized that hits the corresponding sensitive identification rule, thereby achieving desensitization of the target document to be desensitized.

[0080] In an optional embodiment of the present application, the desensitization engine has a corresponding authentication account and a corresponding password, and the receiving of the plurality of sensitive identification strategies issued by the server includes:

[0081] Submit the authentication account and the corresponding password to the server, so that the server authenticates the desensitization engine according to the authentication account and the corresponding password;

[0082] When the server passes the authentication of the authentication account and the corresponding password, the server receives the plurality of sensitive identification policies issued by the server.

[0083] In this embodiment, each desensitizing engine has a corresponding authentication account and a corresponding password, which are used to obtain the sensitive identification policy configured on the server after authentication on the server.

[0084] Specifically, after the desensitization engine is started, it sends an authentication request to the server and submits the authentication account and the corresponding password to the server. The server authenticates the desensitization engine based on the authentication account and the corresponding password. When the server authenticates the authentication account and the corresponding password, it sends several sensitive identification strategies to the desensitization engine. After receiving these sensitive identification strategies, the desensitization engine can receive the documents to be desensitized and perform desensitization processing.

[0085] In the embodiment of the present application, the sensitive identification policy can be obtained only after the desensitizing engine has been authenticated, thereby preventing unauthorized access and policy leakage.

[0086] In an optional embodiment of the present application, matching the target document to be desensitized with the sensitivity identification strategy and confirming the target sensitivity identification strategy hit by the target document to be desensitized includes:

[0087] According to the document type of the target document to be desensitized and the preset document types corresponding to the plurality of sensitive identification strategies, a first target strategy is selected from the plurality of sensitive identification strategies;

[0088] Using the sensitive identification rules respectively corresponding to the first target strategies to identify the sensitive content in the target document to be desensitized;

[0089] According to the sensitive identification rule hit by the sensitive content in the target document to be desensitized, the target sensitive identification strategy hit by the target document to be desensitized is determined from the first target strategy.

[0090] In this embodiment, when matching the target document to be desensitized with the sensitive identification strategy, it is necessary to match the preset document type and the sensitive identification rule respectively.

[0091] Specifically, according to the document type of the target document to be desensitized and the preset document types corresponding to the plurality of sensitive identification strategies, a first target strategy is selected from the plurality of sensitive identification strategies. For example, if the document type of the target document to be desensitized is word before conversion, the first target strategy applicable to the word document is selected.

[0092] Afterwards, the sensitive identification rules corresponding to the first target strategy are used to identify the sensitive content in the target document to be desensitized. The sensitive identification rules may include keyword identification, regular expression and other identification rules. Sensitive content may include ID card number, telephone number and other content. The embodiment of the present application does not impose any restrictions on the specific setting method of the sensitive identification rules and the sensitive content that can be identified by the sensitive identification rules.

[0093] After the sensitive identification rule hits the sensitive content in the target document to be desensitized, the target sensitive identification strategy hit by the target document to be desensitized is determined from the first target strategy, and the first target strategy to which the sensitive identification rule belongs is used as the target sensitive identification strategy hit by the target document to be desensitized, thereby desensitizing the target document to be desensitized by utilizing different desensitization algorithms corresponding to different sensitive identification rules in the target sensitive identification strategy.

[0094] The embodiment of the present application matches the target document to be desensitized with the sensitivity identification strategy, obtains the target sensitivity identification strategy that hits the target document to be desensitized according to the preset document type and sensitivity identification rules, and then uses the corresponding desensitization algorithm in the target sensitivity identification strategy to complete the desensitization of the target document to be desensitized.

[0095] In an embodiment of the present application, a document to be desensitized is received; the document to be desensitized is converted into a target document to be desensitized in a specified format; the target document to be desensitized is matched with a sensitive identification strategy, and it is confirmed that the target document to be desensitized hits the target sensitive identification strategy; the target document to be desensitized is desensitized according to the target sensitive identification strategy to obtain a target desensitized document. In an embodiment of the present application, the document to be desensitized is first converted into a target document to be desensitized in a specified format. Under the specified format, the difficulty of content extraction and identification of sensitive content is significantly reduced; desensitizing the target document to be desensitized in the specified format can ensure that the original format of the target desensitized document remains unchanged, while not affecting the typesetting effect of the document, thereby achieving a better desensitization effect.

[0096] Reference Figure 2 , is a flowchart of another document desensitization method embodiment of the present application, comprising the following steps:

[0097] Step 201, configure the preset document types that are allowed to be desensitized, the sensitive identification rules corresponding to different preset document types, and the desensitization algorithms corresponding to different sensitive identification rules, to obtain a sensitive identification strategy; the preset document types that are allowed to be desensitized are the document types that are allowed to be desensitized by the desensitizing engine, and the sensitive identification rules are used to identify sensitive content in the target document to be desensitized.

[0098] A document desensitization method provided in this embodiment is used on a server side, and the server side is communicated with a plurality of desensitization engines.

[0099] In step 201, the server may configure preset document types that are allowed to be desensitized, sensitive identification rules corresponding to different preset document types, and desensitization algorithms corresponding to different sensitive identification rules, thereby obtaining a sensitive identification strategy.

[0100] The server configures several sensitive identification strategies based on the preset document types allowed for desensitization, the sensitive identification rules corresponding to different preset document types, and the desensitization algorithms corresponding to different sensitive identification rules. These strategies will then be sent to the desensitization engine so that the sensitive identification strategies can use these strategies to desensitize the target documents to be desensitized after the format conversion.

[0101] Among them, the preset document types allowed for desensitization are the document types that allow the desensitization engine to perform desensitization, that is, the server can configure the Office document types that allow the desensitization engine to perform desensitization. For example, if the server configures the Office document types that allow the desensitization engine to perform desensitization to be word and excel, then the sensitive identification strategy can only match the target desensitized documents in xml format converted from these two types of documents to be desensitized, and cannot desensitize documents to be desensitized other than word and excel. The above examples are for illustrative purposes only, and the embodiments of the present application do not impose any restrictions on the Office document types that the server configures to allow the desensitization engine to perform desensitization.

[0102] Sensitive identification rules are used to identify sensitive content in the target document to be desensitized. In one embodiment, the sensitive identification rules may include identification rules such as keyword identification and regular expressions, and the sensitive content may include content such as ID card numbers and telephone numbers. The embodiment of the present application does not impose any restrictions on the specific setting method of the sensitive identification rules and the sensitive content that can be identified by the sensitive identification rules.

[0103] Step 202: Receive an authentication request submitted by the desensitizing engine, wherein the authentication request includes an authentication account and a corresponding password corresponding to the desensitizing engine.

[0104] In step 202, the server receives an authentication request submitted by the desensitizing engine, which includes an authentication account and a corresponding password of the desensitizing engine.

[0105] After the desensitizing engine is started, it sends an authentication request to the server and submits the authentication account and the corresponding password to the server, so that the server authenticates the desensitizing engine based on the authentication account and the corresponding password.

[0106] Step 203: Authenticate the desensitizing engine according to the authentication account and the corresponding password.

[0107] In step 203, the server authenticates the desensitizing engine based on the authentication account and the corresponding password.

[0108] Step 204: When the authentication is passed, the sensitive identification strategy is sent to the desensitizing engine, so that the desensitizing engine desensitizes the target document to be desensitized according to the sensitive identification strategy.

[0109] In step 204, when the server passes the authentication of the authentication account and the corresponding password, it sends several sensitive identification strategies to the desensitization engine. After receiving these sensitive identification strategies, the desensitization engine can desensitize the target document to be desensitized according to the sensitive identification strategies.

[0110] In an embodiment of the present application, the preset document types that are allowed to be desensitized, the sensitive identification rules corresponding to different preset document types, and the desensitization algorithms corresponding to different sensitive identification rules are configured to obtain a sensitive identification strategy; the preset document types that are allowed to be desensitized are the document types that allow the desensitization engine to perform desensitization, and the sensitive identification rules are used to identify the sensitive content in the target document to be desensitized; the authentication request submitted by the desensitization engine is received, and the authentication request includes the authentication account and the corresponding password corresponding to the desensitization engine; the desensitization engine is authenticated according to the authentication account and the corresponding password; when the authentication is passed, the sensitive identification strategy is sent to the desensitization engine, so that the desensitization engine desensitizes the target document to be desensitized according to the sensitive identification strategy. The embodiment of the present application configures the sensitive identification strategy on the service end, and when the desensitization engine authentication is passed, the sensitive identification strategy is sent to the desensitization engine, so that the unified management and update of the sensitive identification strategy can be achieved, thereby ensuring the security and confidentiality of the sensitive identification strategy. Only the authenticated desensitization engine can obtain the sensitive identification strategy to prevent unauthorized access and policy leakage.

[0111] In an optional embodiment of the present application, there is an engine list in the server, and the method further includes:

[0112] In response to an engine adding command for the desensitizing engine, adding engine information of the desensitizing engine to the engine list;

[0113] In response to an engine deletion command for the desensitizing engine, deleting the engine information of the desensitizing engine in the engine list;

[0114] In response to an engine modification command for the desensitizing engine, modifying engine information of the desensitizing engine in the engine list;

[0115] In response to an engine query command for the desensitizing engine, engine information of the desensitizing engine is queried in the engine list.

[0116] In this embodiment, there is an engine list in the server, which records the engine information of all desensitizing engines. The server manages the desensitizing engines by managing the engine list, which may include operations such as engine addition, engine deletion, engine modification, and engine query.

[0117] Specifically, when it is necessary to add an engine to the desensitizing engine, the administrator sends an engine addition command for the desensitizing engine to the server, and the server responds to the engine addition command for the desensitizing engine and adds the engine information of the desensitizing engine to the engine list.

[0118] When it is necessary to delete the desensitizing engine, the administrator sends an engine deletion command for the desensitizing engine to the server. The server responds to the engine deletion command for the desensitizing engine and deletes the engine information of the desensitizing engine in the engine list.

[0119] When it is necessary to perform an engine modification operation on the desensitizing engine, the administrator sends an engine modification command for the desensitizing engine to the server, and the server responds to the engine modification command for the desensitizing engine and modifies the engine information of the desensitizing engine in the engine list.

[0120] When an engine query operation is required for the desensitizing engine, the administrator sends an engine query command for the desensitizing engine to the server. The server responds to the engine query command for the desensitizing engine and queries the engine information of the desensitizing engine in the engine list.

[0121] In an embodiment of the present application, the server manages the desensitizing engine by executing operations such as engine addition, engine deletion, engine modification, and engine query.

[0122] In an embodiment of the present application, the preset document types that are allowed to be desensitized, the sensitive identification rules corresponding to different preset document types, and the desensitization algorithms corresponding to different sensitive identification rules are configured to obtain a sensitive identification strategy; the preset document types that are allowed to be desensitized are the document types that allow the desensitization engine to perform desensitization, and the sensitive identification rules are used to identify the sensitive content in the target document to be desensitized; the authentication request submitted by the desensitization engine is received, and the authentication request includes the authentication account and the corresponding password corresponding to the desensitization engine; the desensitization engine is authenticated according to the authentication account and the corresponding password; when the authentication is passed, the sensitive identification strategy is sent to the desensitization engine, so that the desensitization engine desensitizes the target document to be desensitized according to the sensitive identification strategy. The embodiment of the present application configures the sensitive identification strategy on the service end, and when the desensitization engine authentication is passed, the sensitive identification strategy is sent to the desensitization engine, so that the unified management and update of the sensitive identification strategy can be achieved, thereby ensuring the security and confidentiality of the sensitive identification strategy. Only the authenticated desensitization engine can obtain the sensitive identification strategy to prevent unauthorized access and policy leakage.

[0123] In order to enable those skilled in the art to further understand the technical solutions of the embodiments of the present application, Figure 3 , Figure 4 A document desensitization method provided in an embodiment of the present application is described in more detail.

[0124] Reference Figure 3 , is a system structure diagram of an embodiment of a document desensitization method of the present application.

[0125] Figure 3 The system architecture of a document desensitization method of an embodiment of the present application is shown, which includes a server and a desensitization engine. The server can manage multiple desensitization engines, and only one of the desensitization engines is shown in the figure as an example.

[0126] like Figure 3 As shown, the server includes modules such as document type management, sensitive rule configuration, desensitization algorithm configuration, desensitization strategy management, engine management, interactive engine, log management and system management. Among them, document type management is used to configure preset document types that are allowed to be desensitized; sensitive rule configuration is used to configure sensitive identification rules corresponding to different preset document types; desensitization algorithm configuration is used to configure desensitization algorithms corresponding to different sensitive identification rules; desensitization strategy management is used to generate sensitive identification strategies according to the configuration of modules such as document type management, sensitive rule configuration, and desensitization algorithm configuration; engine management is used to support authentication management of each desensitization engine, and support management operations on the engine list; interactive engine is used to realize data interaction with the desensitization engine, such as receiving desensitization logs and issuing sensitive identification strategies; log management is used to manage desensitization logs uploaded by the desensitization engine; system management is used to manage system parameters of the server and each desensitization engine.

[0127] The desensitization engine includes modules such as data interaction module, desensitization interface, file conversion module and desensitization algorithm module. Among them, the data interaction module is used to interact with the server, such as engine authentication, sensitive identification policy reception, desensitization log reporting, etc. The desensitization interface is used to provide an external desensitization interface, receive documents to be desensitized, and return the target desensitized document; the file conversion module is used to convert Office files into the target desensitized document in XML format; the desensitization algorithm module is used to match the target sensitive identification policy and perform desensitization.

[0128] Reference Figure 4 , is an implementation logic diagram of an embodiment of a document desensitization method of the present application.

[0129] like Figure 4 As shown, Figure 4 The complete system interaction mode and desensitization step flow of a document desensitization method of an embodiment of the present application are demonstrated. The system structure mainly includes a server and a desensitization engine.

[0130] Administrators can configure sensitive identification policies in the server-side desensitization configuration, specifically, configuring the preset document types that are allowed to be desensitized, the sensitive identification rules corresponding to different preset document types, and the desensitization algorithms corresponding to different sensitive identification rules, thereby obtaining sensitive identification policies and storing the configuration of sensitive identification policies in the database. Sensitive identification policies can be sent to the desensitization engine through the data interaction module.

[0131] The server includes a log management module, which is used to receive desensitization logs from the desensitization engine through the data interaction module, and query and store desensitization logs. The desensitization log records various information in the desensitization process of the desensitization engine on the desensitized document. The log information can be stored in the database.

[0132] The server includes an engine management module, which is used to support management operations on the engine list, including engine addition, engine deletion, engine modification, and engine query operations. The engine list that records engine information is stored in the database.

[0133] The server also includes a system configuration module, which is used to manage the system parameters of the server and each desensitization engine, and implement functions such as parameter display, parameter modification, and parameter storage. System parameters can be stored in the database.

[0134] The desensitization engine can realize information interaction with the server through the data interaction module, such as engine authentication, sensitive identification policy reception, desensitization log reporting, etc. The document desensitization function of the desensitization engine can be described as follows.

[0135] The desensitizing engine receives the Office file to be desensitized through the desensitizing interface, and sends the Office file to be desensitized to the document conversion module.

[0136] After receiving the Office file to be desensitized, the document conversion module first identifies the document type of the Office file to be desensitized, and the user confirms whether to convert the document type. If the user confirms to convert the document type, the Apachepoi (a Java library for processing Microsoft Office documents) interface is called to convert the Office file to be desensitized into the target document to be desensitized in XML format; if the user refuses to convert the document type, the desensitization process ends.

[0137] In one embodiment, file format conversion can also be achieved through office file operation libraries such as Aspose.Cells for Java (a Java library for processing Excel files), LibreOffice (an office software suite similar to Microsoft Office that supports processing documents, spreadsheets, presentations, drawings, etc.), and jacob (a Java library for calling Microsoft Windows COM (Component Object Model, a software component architecture) components in Java applications).

[0138] The target document to be desensitized in XML format is sent to the desensitization algorithm module. The desensitization algorithm module selects a first target strategy from the plurality of sensitive identification strategies according to the document type of the target document to be desensitized and the preset document types corresponding to the plurality of sensitive identification strategies.

[0139] Afterwards, the sensitive identification rules corresponding to the first target strategy are used to identify the sensitive content in the target document to be desensitized, and to determine whether the document contains sensitive content.

[0140] When there is sensitive content in the document and the sensitive identification rule hits the sensitive content in the target document to be desensitized, the target sensitive identification strategy hit by the target document to be desensitized is determined from the first target strategy, and the target document to be desensitized is desensitized using different desensitization algorithms corresponding to different sensitive identification rules in the target sensitive identification strategy. After desensitization is completed, the target desensitized document in XML format is written back.

[0141] Return the target desensitized document in XML format through the desensitizing interface.

[0142] In an embodiment of the present application, a document to be desensitized is received; the document to be desensitized is converted into a target document to be desensitized in a specified format; the target document to be desensitized is matched with a sensitive identification strategy, and it is confirmed that the target document to be desensitized hits the target sensitive identification strategy; the target document to be desensitized is desensitized according to the target sensitive identification strategy to obtain a target desensitized document. In an embodiment of the present application, the document to be desensitized is first converted into a target document to be desensitized in a specified format. Under the specified format, the difficulty of content extraction and identification of sensitive content is significantly reduced; desensitizing the target document to be desensitized in the specified format can ensure that the original format of the target desensitized document remains unchanged, while not affecting the typesetting effect of the document, thereby achieving a better desensitization effect.

[0143] In an embodiment of the present application, the preset document types that are allowed to be desensitized, the sensitive identification rules corresponding to different preset document types, and the desensitization algorithms corresponding to different sensitive identification rules are configured to obtain a sensitive identification strategy; the preset document types that are allowed to be desensitized are the document types that allow the desensitization engine to perform desensitization, and the sensitive identification rules are used to identify the sensitive content in the target document to be desensitized; the authentication request submitted by the desensitization engine is received, and the authentication request includes the authentication account and the corresponding password corresponding to the desensitization engine; the desensitization engine is authenticated according to the authentication account and the corresponding password; when the authentication is passed, the sensitive identification strategy is sent to the desensitization engine, so that the desensitization engine desensitizes the target document to be desensitized according to the sensitive identification strategy. The embodiment of the present application configures the sensitive identification strategy on the service end, and when the desensitization engine authentication is passed, the sensitive identification strategy is sent to the desensitization engine, so that the unified management and update of the sensitive identification strategy can be achieved, thereby ensuring the security and confidentiality of the sensitive identification strategy. Only the authenticated desensitization engine can obtain the sensitive identification strategy to prevent unauthorized access and policy leakage.

[0144] It should be noted that, for the method embodiments, for the sake of simplicity, they are all expressed as a series of action combinations, but those skilled in the art should be aware that the embodiments of the present application are not limited by the described order of actions, because according to the embodiments of the present application, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all preferred embodiments, and the actions involved are not necessarily required by the embodiments of the present application.

[0145] On the basis of the above embodiments, this embodiment further provides a document desensitization device, which is applied to electronic devices such as terminal devices and servers.

[0146] Reference Figure 5 , shows a structural block diagram of an embodiment of a document desensitization device of the present application, which may specifically include the following modules:

[0147] The document receiving module 501 is used to receive the document to be desensitized;

[0148] A format conversion module 502, used for converting the to-be-desensitized document into a target to-be-desensitized document in a specified format;

[0149] A strategy matching module 503 is used to match the target document to be desensitized with the sensitivity identification strategy, and confirm that the target document to be desensitized hits the target sensitivity identification strategy;

[0150] The document desensitization module 504 is used to desensitize the target document to be desensitized according to the target sensitivity identification strategy to obtain a target desensitized document.

[0151] Optionally, the desensitization engine is communicatively connected to the server, and the device further comprises:

[0152] A policy receiving module is used to receive the multiple sensitive identification policies issued by the server; the sensitive identification policies are obtained by configuring the preset document types allowed for desensitization by the server, the sensitive identification rules corresponding to different preset document types, and the desensitization algorithms corresponding to different sensitive identification rules; the preset document types allowed for desensitization are document types that allow the desensitization engine to perform desensitization, and the sensitive identification rules are used to identify sensitive content in the target document to be desensitized.

[0153] Optionally, the desensitization engine has a corresponding authentication account and a corresponding password, and the policy receiving module includes:

[0154] An authentication submission submodule, used to submit the authentication account and the corresponding password to the server, so that the server authenticates the desensitization engine according to the authentication account and the corresponding password;

[0155] The authentication pass submodule is used to receive the several sensitive identification strategies issued by the server when the server passes the authentication of the authentication account and the corresponding password.

[0156] Optionally, the policy matching module 503 includes:

[0157] A policy screening submodule, configured to screen out a first target policy from the plurality of sensitive identification policies according to the document type of the target document to be desensitized and the preset document types corresponding to the plurality of sensitive identification policies respectively;

[0158] A sensitive content identification submodule, configured to identify the sensitive content in the target document to be desensitized by using the sensitive identification rules respectively corresponding to the first target strategies;

[0159] The strategy hit submodule is used to determine the target sensitive identification strategy hit by the target document to be desensitized from the first target strategy according to the sensitive identification rule hit by the sensitive content in the target document to be desensitized.

[0160] In an embodiment of the present application, a document to be desensitized is received; the document to be desensitized is converted into a target document to be desensitized in a specified format; the target document to be desensitized is matched with a sensitive identification strategy, and it is confirmed that the target document to be desensitized hits the target sensitive identification strategy; the target document to be desensitized is desensitized according to the target sensitive identification strategy to obtain a target desensitized document. In an embodiment of the present application, the document to be desensitized is first converted into a target document to be desensitized in a specified format. Under the specified format, the difficulty of content extraction and identification of sensitive content is significantly reduced; desensitizing the target document to be desensitized in the specified format can ensure that the original format of the target desensitized document remains unchanged, while not affecting the typesetting effect of the document, thereby achieving a better desensitization effect.

[0161] Reference Figure 6 , shows a structural block diagram of another document desensitization device embodiment of the present application, which may specifically include the following modules:

[0162] The policy configuration module 601 is used to configure the preset document types that are allowed to be desensitized, the sensitivity identification rules corresponding to different preset document types, and the desensitization algorithms corresponding to different sensitive identification rules, to obtain a sensitive identification policy; the preset document types that are allowed to be desensitized are document types that are allowed to be desensitized by the desensitization engine, and the sensitive identification rules are used to identify sensitive content in the target document to be desensitized;

[0163] The request receiving module 602 is used to receive the authentication request submitted by the desensitizing engine, wherein the authentication request includes the authentication account and the corresponding password corresponding to the desensitizing engine;

[0164] The engine authentication module 603 is used to authenticate the desensitization engine according to the authentication account and the corresponding password;

[0165] The policy delivery module 604 is used to deliver the sensitive identification policy to the desensitizing engine when the authentication is passed, so that the desensitizing engine desensitizes the target document to be desensitized according to the sensitive identification policy.

[0166] Optionally, there is an engine list in the server, and the device further includes:

[0167] An engine adding module, configured to respond to an engine adding command for the desensitizing engine and add engine information of the desensitizing engine to the engine list;

[0168] An engine deletion module, configured to delete the engine information of the desensitizing engine in the engine list in response to an engine deletion command for the desensitizing engine;

[0169] An engine modification module, configured to modify the engine information of the desensitizing engine in the engine list in response to an engine modification command for the desensitizing engine;

[0170] The engine query module is used to query the engine information of the desensitizing engine in the engine list in response to the engine query command for the desensitizing engine.

[0171] In an embodiment of the present application, the preset document types that are allowed to be desensitized, the sensitive identification rules corresponding to different preset document types, and the desensitization algorithms corresponding to different sensitive identification rules are configured to obtain a sensitive identification strategy; the preset document types that are allowed to be desensitized are the document types that allow the desensitization engine to perform desensitization, and the sensitive identification rules are used to identify the sensitive content in the target document to be desensitized; the authentication request submitted by the desensitization engine is received, and the authentication request includes the authentication account and the corresponding password corresponding to the desensitization engine; the desensitization engine is authenticated according to the authentication account and the corresponding password; when the authentication is passed, the sensitive identification strategy is sent to the desensitization engine, so that the desensitization engine desensitizes the target document to be desensitized according to the sensitive identification strategy. The embodiment of the present application configures the sensitive identification strategy on the service end, and when the desensitization engine authentication is passed, the sensitive identification strategy is sent to the desensitization engine, so that the unified management and update of the sensitive identification strategy can be achieved, thereby ensuring the security and confidentiality of the sensitive identification strategy. Only the authenticated desensitization engine can obtain the sensitive identification strategy to prevent unauthorized access and policy leakage.

[0172] The embodiment of the present application also provides a non-volatile readable storage medium, which stores one or more modules (programs). When the one or more modules are applied to a device, the device can execute instructions (instructions) of each method step in the embodiment of the present application.

[0173] The present application embodiment provides one or more machine-readable media on which instructions are stored, and when executed by one or more processors, an electronic device executes one or more of the methods described in the above embodiments. In the present application embodiment, the electronic device includes various types of devices such as terminal devices and servers (clusters).

[0174] The embodiments of the present disclosure may be implemented as a device configured as desired using any appropriate hardware, firmware, software, or any combination thereof, and the device may include electronic devices such as terminal devices and servers (clusters). Figure 7 An exemplary apparatus 700 that can be used to implement various embodiments described in this application is schematically illustrated.

[0175] For one embodiment, Figure 7An exemplary apparatus 700 is shown having one or more processors 702, a control module (chip set) 704 coupled to at least one of the processor(s) 702, a memory 706 coupled to the control module 704, a non-volatile memory (NVM) / storage device 708 coupled to the control module 704, one or more input / output devices 710 coupled to the control module 704, and a network interface 712 coupled to the control module 704.

[0176] The processor 702 may include one or more single-core or multi-core processors, and the processor 702 may include any combination of general-purpose processors or special-purpose processors (such as graphics processors, application processors, baseband processors, etc.). In some embodiments, the device 700 can be used as a terminal device, server (cluster), etc. described in the embodiments of the present application.

[0177] In some embodiments, the apparatus 700 may include one or more computer-readable media (e.g., memory 706 or NVM / storage device 708) having instructions 714 and one or more processors 702 combined with the one or more computer-readable media and configured to execute the instructions 714 to implement a module to perform the actions described in the present disclosure.

[0178] For one embodiment, the control module 704 may include any suitable interface controller to provide any suitable interface to at least one of the processor(s) 702 and / or any suitable device or component in communication with the control module 704 .

[0179] The control module 704 may include a memory controller module to provide an interface to the memory 706. The memory controller module may be a hardware module, a software module, and / or a firmware module.

[0180] The memory 706 may be used, for example, to load and store data and / or instructions 714 for the device 700. For one embodiment, the memory 76 may include any suitable volatile memory, such as a suitable DRAM. In some embodiments, the memory 706 may include double data rate type four synchronous dynamic random access memory (DDR4 SDRAM).

[0181] For one embodiment, control module 704 may include one or more input / output controllers to provide an interface to NVM / storage device 708 and input / output device(s) 710 .

[0182] For example, NVM / storage 708 may be used to store data and / or instructions 714. NVM / storage 708 may include any suitable non-volatile memory (e.g., flash memory) and / or may include any suitable non-volatile storage device(s) (e.g., one or more hard disk drives (HDDs), one or more compact disk (CD) drives, and / or one or more digital versatile disk (DVD) drives).

[0183] NVM / storage device 708 may include storage resources that are physically part of the device on which apparatus 700 is installed, or it may be accessible to the device without being part of the device. For example, NVM / storage device 708 may be accessed via input / output device(s) 710 over a network.

[0184] (One or more) input / output devices 710 may provide an interface for the apparatus 700 to communicate with any other appropriate device, and the input / output device 710 may include a communication component, an audio component, a sensor component, etc. The network interface 712 may provide an interface for the apparatus 700 to communicate through one or more networks, and the apparatus 700 may wirelessly communicate with one or more components of a wireless network according to any of one or more wireless network standards and / or protocols, for example, accessing a wireless network based on a communication standard, such as WiFi, 2G, 3G, 4G, 5G, etc., or a combination thereof for wireless communication.

[0185] For one embodiment, at least one of the processor(s) 702 may be packaged together with the logic of one or more controllers (e.g., a memory controller module) of the control module 704. For one embodiment, at least one of the processor(s) 702 may be packaged together with the logic of one or more controllers of the control module 704 to form a system-in-package (SiP). For one embodiment, at least one of the processor(s) 702 may be integrated on the same die with the logic of one or more controllers of the control module 704. For one embodiment, at least one of the processor(s) 702 may be integrated on the same die with the logic of one or more controllers of the control module 704 to form a system-on-chip (SoC).

[0186] In various embodiments, the apparatus 700 may be, but is not limited to, a terminal device such as a server, a desktop computing device, or a mobile computing device (e.g., a laptop computing device, a handheld computing device, a tablet computer, a netbook, etc.). In various embodiments, the apparatus 700 may have more or fewer components and / or a different architecture. For example, in some embodiments, the apparatus 700 includes one or more cameras, a keyboard, a liquid crystal display (LCD) screen (including a touch screen display), a non-volatile memory port, multiple antennas, a graphics chip, an application-specific integrated circuit (ASIC), and a speaker.

[0187] Among them, the main control chip can be used as a processor or control module in the detection device, sensor data, location information, etc. are stored in a memory or NVM / storage device, the sensor group can be used as an input / output device, and the communication interface may include a network interface.

[0188] As for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0189] The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the various embodiments can be referenced to each other.

[0190] The embodiments of the present application are described with reference to the flowcharts and / or block diagrams of the methods, terminal devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable document desensitization terminal device to produce a machine, so that the instructions executed by the processor of the computer or other programmable document desensitization terminal device generate instructions for implementing the process in the flowchart. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0191] These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable document desensitization terminal device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce a manufactured product including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0192] These computer program instructions may also be loaded onto a computer or other programmable document desensitization terminal device, so that a series of operating steps are executed on the computer or other programmable terminal device to produce a computer-implemented process, thereby providing instructions executed on the computer or other programmable terminal device for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0193] Although the preferred embodiments of the present application have been described, those skilled in the art may make additional changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the embodiments of the present application.

[0194] Finally, it should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or terminal device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or terminal device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or terminal device including the elements.

[0195] The document desensitization method and device, an electronic device and a storage medium provided by the present application are introduced in detail above. Specific examples are used in this article to illustrate the principles and implementation methods of the present application. The description of the above embodiments is only used to help understand the method of the present application and its core idea; at the same time, for general technical personnel in this field, according to the idea of ​​the present application, there will be changes in the specific implementation method and application scope. In summary, the content of this specification should not be understood as a limitation on the present application.

Claims

1. A document desensitization method, characterized in that: Applied to a desensitization engine, wherein the desensitization engine is provided with a plurality of sensitive identification strategies, each of which has a corresponding desensitization algorithm, the method comprises: Receive documents to be desensitized; Convert the to-be-desensitized document into a target to-be-desensitized document in a specified format; Matching the target document to be desensitized with the sensitive identification strategy, and confirming the target sensitive identification strategy hit by the target document to be desensitized; The target document to be desensitized is desensitized according to the target sensitivity identification strategy to obtain a target desensitized document.

2. The method according to claim 1, characterized in that The desensitization engine is connected to the server through communication, and the method further includes: Receive the several sensitive identification strategies issued by the server; the sensitive identification strategies are obtained by configuring the server to allow desensitization of preset document types, sensitive identification rules corresponding to different preset document types, and desensitization algorithms corresponding to different sensitive identification rules; the preset document types allowed for desensitization are document types that allow the desensitization engine to perform desensitization, and the sensitive identification rules are used to identify sensitive content in the target document to be desensitized.

3. The method according to claim 2, characterized in that The desensitizing engine has a corresponding authentication account and a corresponding password, and the receiving of the plurality of sensitive identification strategies issued by the server includes: Submit the authentication account and the corresponding password to the server, so that the server authenticates the desensitization engine according to the authentication account and the corresponding password; When the server passes the authentication of the authentication account and the corresponding password, the server receives the plurality of sensitive identification policies issued by the server.

4. The method according to claim 2, characterized in that: The step of matching the target document to be desensitized with the sensitive identification strategy and confirming that the target document to be desensitized hits the target sensitive identification strategy includes: According to the document type of the target document to be desensitized and the preset document types corresponding to the plurality of sensitive identification strategies, a first target strategy is selected from the plurality of sensitive identification strategies; Using the sensitive identification rules respectively corresponding to the first target strategies to identify the sensitive content in the target document to be desensitized; According to the sensitive identification rule hit by the sensitive content in the target document to be desensitized, the target sensitive identification strategy hit by the target document to be desensitized is determined from the first target strategy.

5. A document desensitization method, characterized in that: Applied to a server, the server is in communication connection with a desensitization engine, and the method further comprises: Configure preset document types that are allowed to be desensitized, sensitive identification rules corresponding to different preset document types, and desensitization algorithms corresponding to different sensitive identification rules, to obtain a sensitive identification strategy; the preset document types that are allowed to be desensitized are document types that are allowed to be desensitized by the desensitization engine, and the sensitive identification rules are used to identify sensitive content in the target document to be desensitized; Receive an authentication request submitted by the desensitizing engine, wherein the authentication request includes an authentication account and a corresponding password corresponding to the desensitizing engine; Authenticating the desensitizing engine according to the authentication account and the corresponding password; When the authentication is passed, the sensitive identification strategy is sent to the desensitizing engine, so that the desensitizing engine desensitizes the target document to be desensitized according to the sensitive identification strategy.

6. The method according to claim 5, characterized in that The server has an engine list, and the method further includes: In response to an engine adding command for the desensitizing engine, adding engine information of the desensitizing engine to the engine list; In response to an engine deletion command for the desensitizing engine, deleting the engine information of the desensitizing engine in the engine list; In response to an engine modification command for the desensitizing engine, modifying engine information of the desensitizing engine in the engine list; In response to an engine query command for the desensitizing engine, engine information of the desensitizing engine is queried in the engine list.

7. A document desensitization device, characterized in that: Applied to a desensitization engine, wherein the desensitization engine is provided with a plurality of sensitive identification strategies, each of which has a corresponding desensitization algorithm, and the device comprises: A document receiving module, used for receiving documents to be desensitized; A format conversion module, used for converting the to-be-desensitized document into a target to-be-desensitized document of a specified format; A strategy matching module, used to match the target document to be desensitized with the sensitivity identification strategy, and confirm that the target document to be desensitized hits the target sensitivity identification strategy; The document desensitization module is used to desensitize the target document to be desensitized according to the target sensitivity identification strategy to obtain a target desensitized document.

8. A document desensitization device, characterized in that: Applied to a server, the server is connected to a desensitization engine for communication, and the device includes: A policy configuration module, used to configure preset document types that are allowed to be desensitized, sensitive identification rules corresponding to different preset document types, and desensitization algorithms corresponding to different sensitive identification rules, to obtain a sensitive identification policy; the preset document types that are allowed to be desensitized are document types that are allowed to be desensitized by the desensitization engine, and the sensitive identification rules are used to identify sensitive content in the target document to be desensitized; A request receiving module, used to receive an authentication request submitted by the desensitizing engine, wherein the authentication request includes an authentication account and a corresponding password corresponding to the desensitizing engine; An engine authentication module, used to authenticate the desensitizing engine according to the authentication account and the corresponding password; The policy delivery module is used to deliver the sensitive identification policy to the desensitizing engine when the authentication is passed, so that the desensitizing engine desensitizes the target document to be desensitized according to the sensitive identification policy.

9. An electronic device, characterized in that: include: processor; and A memory having executable code stored thereon, which, when executed, enables the processor to execute the document desensitization method as described in any one of claims 1-4 or claims 5-6.

10. One or more machine-readable media having executable codes stored thereon, which, when executed, cause a processor to execute the document desensitization method as described in any one of claims 1-4 or claims 5-6.

Images