Mail data processing method and device, computer equipment, readable storage medium and program product

Abstract

The invention relates to a mail data processing method and device, computer equipment, a readable storage medium and a program product. The method is applied to an application program and comprises the steps of detecting an operation event; if the operation event meets a preset outgoing operation condition, identifying mail data corresponding to the operation event, so that the terminal detects the mail data based on a preset security policy to obtain a detection result of the mail data; and processing the operation event based on the detection result to obtain an execution result corresponding to the operation event. By adopting the method, the accuracy of mail data detection can be improved, and the security of mail outgoing operation is improved.

Description

Technical Field

[0001] The present application relates to the field of data protection technology, and in particular to a method, apparatus, computer equipment, readable storage medium and program product for processing mail data. Background Art

[0002] With the rapid development of the Internet, email has become an indispensable communication tool in people's daily life and work. Both individual users and enterprises rely on email for information transmission. Compared with traditional client mailboxes, web mailboxes have the following characteristics: easy to use, cross-platform compatibility, real-time synchronization, and a wide variety of types. However, the above characteristics will pose a threat to data security, such as accidentally or maliciously leaking sensitive files through mailboxes.

[0003] In the related art, in order to prevent data leakage through email, manual auditing or data leakage prevention security products are often used. However, the efficiency and accuracy of manual auditing are low. Common data leakage prevention security products include terminal data leakage prevention. When controlling web mailboxes, terminal data leakage prevention can only identify sensitive files on the terminal that are uploaded to specific web pages by users through browsers, and then classify email categories by web page addresses; therefore, the accuracy of email data detection in the related art is low. Summary of the invention

[0004] Based on this, it is necessary to provide a method, apparatus, computer device, readable storage medium and program product for processing email data that can improve the accuracy of email data detection in response to the above technical problems.

[0005] In a first aspect, the present application provides a method for processing mail data, which is applied to an application program, comprising:

[0006] Detecting operational events;

[0007] If the operation event meets the preset outgoing operation condition, the email data corresponding to the operation event is identified, so that the terminal detects the email data based on the preset security policy to obtain the detection result of the email data;

[0008] The operation event is processed based on the detection result to obtain an execution result corresponding to the operation event.

[0009] In one of the embodiments, if the operation event satisfies a preset outbound operation condition, the method further includes:

[0010] Prevents the described action event.

[0011] In one embodiment, the email data includes one or more of recipient information, email subject content, email body information, and email attachment information, and the processing of the operation event based on the detection result to obtain the execution result corresponding to the operation event includes:

[0012] If there is sensitive information in the email data, the received detection result indicates that the email data does not comply with the preset security policy, and the operation event is blocked.

[0013] In one embodiment, the processing the operation event based on the detection result to obtain the execution result corresponding to the operation event includes:

[0014] If the sensitive information does not exist in the email data, the received detection result is that the email data complies with the preset security policy, and the operation event is re-triggered.

[0015] In one embodiment, the method further comprises:

[0016] A detection result is determined based on the event type and / or target element of the operation event as whether the operation event satisfies the preset outgoing operation condition.

[0017] In one embodiment, the method further comprises:

[0018] The mail data is sent to the terminal via a preset communication channel, where the preset communication channel is established based on a secure communication protocol.

[0019] In a second aspect, the present application further provides a method for processing mail data, which is applied to a terminal, and the method comprises:

[0020] Receive email data, and detect the email data based on a preset security policy to obtain a detection result of the email data, so that the application can process the operation event based on the detection result. The email data is obtained by the application detecting the operation event and identifying the email corresponding to the operation event if the operation event meets a preset outgoing operation condition.

[0021] In a third aspect, the present application further provides a device for processing mail data, which is applied to an application program, and the device comprises:

[0022] A detection module, used for detecting operation events;

[0023] an identification module, configured to identify the email data corresponding to the operation event if the operation event meets the preset outgoing operation condition, so that the terminal detects the email data based on the preset security policy and obtains the detection result of the email data;

[0024] A processing module is used to process the operation event based on the detection result to obtain an execution result corresponding to the operation event.

[0025] In a fourth aspect, the present application further provides a mail data processing device, applied to a terminal, the device comprising:

[0026] The receiving module is used to receive email data and detect the email data based on the preset security policy to obtain the detection result of the email data so that the application can process the operation event based on the detection result. The email data is obtained by the application detecting the operation event. If the operation event meets the preset outgoing operation conditions, the email corresponding to the operation event is identified.

[0027] In a fifth aspect, the present application further provides a computer device, comprising a memory and a processor, wherein the memory stores a computer program, and when the processor executes the computer program, the following steps are implemented:

[0028] Detecting operational events;

[0029] If the operation event meets the preset outgoing operation condition, the email data corresponding to the operation event is identified, so that the terminal detects the email data based on the preset security policy to obtain the detection result of the email data;

[0030] The operation event is processed based on the detection result to obtain an execution result corresponding to the operation event.

[0031] In a sixth aspect, the present application further provides a computer-readable storage medium having a computer program stored thereon, wherein when the computer program is executed by a processor, the following steps are implemented:

[0032] Detecting operational events;

[0033] If the operation event meets the preset outgoing operation condition, the email data corresponding to the operation event is identified, so that the terminal detects the email data based on the preset security policy to obtain the detection result of the email data;

[0034] The operation event is processed based on the detection result to obtain an execution result corresponding to the operation event.

[0035] In a seventh aspect, the present application further provides a computer program product, including a computer program, which implements the following steps when executed by a processor:

[0036] Detecting operational events;

[0037] If the operation event meets the preset outgoing operation condition, the email data corresponding to the operation event is identified, so that the terminal detects the email data based on the preset security policy to obtain the detection result of the email data;

[0038] The operation event is processed based on the detection result to obtain an execution result corresponding to the operation event.

[0039] The above-mentioned email data processing method, device, computer equipment, readable storage medium and program product can improve the accuracy of email data detection on the web page, detect email data before email is sent out, ensure that emails are effectively managed and monitored during transmission, even if the emails are encrypted, improve the reliability of email outbound detection, and thus improve the security of emails. BRIEF DESCRIPTION OF THE DRAWINGS

[0040] In order to more clearly illustrate the technical solutions in the embodiments of the present application or related technologies, the drawings required for use in the embodiments of the present application or related technical descriptions will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0041] Figure 1 An application environment diagram of a method for processing mail data in an embodiment;

[0042] Figure 2 A schematic diagram of a flow chart of a method for processing mail data in one embodiment;

[0043] Figure 3 A schematic diagram of a flow chart of a method for processing mail data in one embodiment;

[0044] Figure 4 A schematic diagram of a flow chart of a method for processing mail data in one embodiment;

[0045] Figure 5 is a structural block diagram of a device for processing mail data in an embodiment;

[0046] Figure 6 is a structural block diagram of a device for processing mail data in an embodiment;

[0047] Figure 7 FIG. 4 is a diagram showing the internal structure of a computer device in one embodiment. DETAILED DESCRIPTION

[0048] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0049] The mail data processing method provided in the embodiment of the present application can be applied to Figure 1 In the application environment shown, the application 10 and the terminal 20 communicate. The application 10 can be deployed to the browser side, and the browser side needs to support JavaScript; the application can include a web mailbox, and the browser side where the web mailbox is located can insert a JavaScript (JS) script. The terminal 20 can be a data leakage prevention (DLP) device, and the terminal 20 can include a desktop computer, a laptop computer, a mobile device, a workstation, a server, a network attachment storage device, a printer, a multi-function device, a Universal Serial Bus (USB) drive, a smart device, a virtual desktop infrastructure device, a cloud terminal, a dedicated terminal, and a mobile workstation, etc.; wherein the mobile device can include a smart phone and a tablet computer, and the smart device can include an Internet of Things device.

[0050] In an exemplary embodiment, Figure 2 As shown, a method for processing mail data is provided. This embodiment is applied to Figure 1 In the application program in this embodiment, the method includes the following steps:

[0051] Step 201: Detect an operation event.

[0052] Among them, the operation event can be an event related to email sending, and email sending can at least include the behavior of sending an email outward and saving an email draft. The operation event can be a Document Object Model Event (DOM) event, for example, a click event triggered by a user clicking a Hyper Text Markup Language Elements (HTML) element, a keydown event triggered by a user pressing any key on the keyboard, and a submit event triggered when a user submits a form.

[0053] Specifically, the application can monitor the user's operations on the web page through JS scripts, and detect all email-related operation events.

[0054] For example, the application may detect the operation event of the user clicking the “Send” button through a JS script.

[0055] Step 202: If the operation event meets the preset outgoing operation condition, the email data corresponding to the operation event is identified, so that the terminal detects the email data based on the preset security policy to obtain the detection result of the email data.

[0056] The preset outgoing operation condition may represent initiating an outgoing email operation.

[0057] Specifically, the application can detect whether the operation event meets the preset outgoing operation conditions. If the operation event meets the preset outgoing operation event, the application can determine that the current operation event meets the email outgoing event, access the HTML page corresponding to the operation event through the JS script, and identify the DOM structure of the HTML page. The application can extract the corresponding different areas of the HTML page through the JS script, and identify the email data in each area. The application can send the email data to the terminal. The terminal can detect the email data based on the preset security policy and obtain the detection result of the email data. If the current operation event does not meet the preset outgoing conditions, the application will not process the operation event and continue to listen for other operation events.

[0058] In addition, the application may use an encapsulation tool to encapsulate the email data to obtain the encapsulated email data, and send the encapsulated email data to the terminal. For example, the encapsulated email data may be a message object in JavaScript Object Notation (JSON) or other formats. The encapsulation tool may be a tool such as Jackson or Gson, and it should be understood that the encapsulation tool is not limited here.

[0059] Exemplarily, the application extracts the recipient area, the email subject area, the text compiler area, and the attachment area of ​​the HTML page through a JS script. The application can identify the recipient's email address from the corresponding input field in the recipient area and determine the recipient's email address as the recipient information; the application can obtain the subject content from the title input box in the email subject area and determine the subject content as the email subject content; the application can extract the body content from the text compiler area and determine the body content as the email body information; the application can extract the attachment file name and the attachment attributes from the attachment area and determine the attachment file name and the attachment data as the attachment information. In addition, the application can use a keyword extraction tool to extract keywords from the body content and determine the keywords as the email subject content. The application can also detect the number of words in the body content. If the number of words in the body content reaches a specified number, a keyword extraction algorithm is used to extract keywords from the body content. The keyword extraction tool can be a keyword extraction algorithm or a natural language processing tool, etc. The text editor area can be a text area (textarea) or a rich text editor.

[0060] Step 203: Process the operation event based on the detection result to obtain an execution result corresponding to the operation event.

[0061] The execution result may reflect whether to stop the current operation event or to continue to execute the current operation event.

[0062] Specifically, the application program may receive the detection result sent by the terminal and may determine whether to continue blocking the current operation event based on the detection result.

[0063] The above-mentioned method for processing email data can improve the accuracy of email data detection on the web page by identifying the email data corresponding to the operation event that meets the preset outgoing operation conditions, and processing the operation event based on the detection result of the email data to obtain the execution result corresponding to the operation event. It can detect the email data before the email is sent out, ensure that the email can be effectively managed and monitored during the transmission process even if the email is encrypted, improve the reliability of outgoing email detection, and thus improve the security of the email.

[0064] In an exemplary embodiment, if the operation event satisfies the preset outgoing operation condition, the method further includes:

[0065] Blocking action events.

[0066] Specifically, after the application detects through the JS script that the current operation event meets the preset outgoing operation conditions, the JS script can call the preset event blocking algorithm to prevent the default behavior of the operation event and the event propagation (prevent the outgoing email behavior). For example, the preset event blocking algorithm can be event.preventDefault() or event.stopPropagation(), etc.

[0067] In this embodiment, after the operation event meets the preset outgoing operation conditions, the operation event is blocked and the outgoing operation of the mail is temporarily intercepted, so as to check the mail data corresponding to the operation event and improve the security of the outgoing mail.

[0068] In an exemplary embodiment, the specific implementation process of step 203 "processing the operation event based on the detection result to obtain the execution result corresponding to the operation event" may include:

[0069] If there is sensitive information in the email data, the received detection result is that the email data does not comply with the preset security policy, and the operation event is blocked.

[0070] Sensitive information may include sensitive words, unauthorized external recipients, confidential documents, etc. For example, sensitive words may include financial data, personal information, etc. Email data includes one or more of recipient information, email subject content, email body information, and email attachment information.

[0071] Specifically, the terminal can pre-store sensitive information, and the terminal can set a corresponding preset security policy based on the stored sensitive information. The terminal can perform content review on the email data based on the preset security policy to determine whether there is sensitive information in the email data. If the terminal detects that there is sensitive information in the email data, the detection result is that it does not comply with the preset security policy. The terminal sends the detection result to the application, and the application determines that the detection result is that the email data does not comply with the preset security policy. The event blocking state continues to be maintained through the JS script, and the email sending is permanently blocked. At the same time, the terminal can perform a pop-up prompt on the display module, that is, the prompt information is displayed in the form of a pop-up window on the terminal, and the prompt information includes the first information and the second information. The first information is the prompt information that the operation event is intercepted, for example, it can be "the outgoing email is intercepted", and the second information is the interception reason information, for example, the interception reason information is "the email contains sensitive information".

[0072] Exemplarily, if the terminal detects that the recipient information in the email data is an unauthorized external recipient, it determines that sensitive information exists in the email data; if the terminal detects that sensitive words exist in the email subject content and / or email body information in the email data, it determines that sensitive information exists in the email data; if the terminal detects that the attachment name of the email attachment information in the email data contains sensitive words or determines that it is a confidential file based on the attachment name and attributes, it determines that sensitive information exists in the email data. If the terminal detects that sensitive information exists in any email data, it determines that the detection result does not comply with the preset security policy. Specific sensitive information can be set according to different application scenarios and is not specifically limited here.

[0073] In this embodiment, by preventing the operation event when the email data does not comply with the preset security policy, the security of the email data is guaranteed, and the security requirements of different scenarios can be met.

[0074] In an exemplary embodiment, the specific implementation process of step 203 "processing the operation event based on the detection result to obtain the execution result corresponding to the operation event" may include:

[0075] If there is no sensitive information in the email data, the received detection result is that the email data complies with the preset security policy, and the operation event is re-triggered.

[0076] Specifically, the terminal can perform content review on the email data based on the preset security policy to determine whether there is sensitive information in the email data. If the terminal detects that there is no sensitive information in the email data, it determines that the detection result is in compliance with the preset security policy. The terminal sends the detection result to the application, and the application determines that the detection result is that the email data complies with the preset security policy. The application re-triggers the operation event through the JS script. The application can call the original browser application programming interface (Application Programming Interface, API) to re-trigger the user's operation event and allow the email to operate normally. At the same time, in the re-triggered operation event, the JS script no longer performs a blocking operation.

[0077] In this embodiment, by detecting that the email data complies with the preset security policy, the operation event is re-triggered to ensure that the email is sent to the email server normally.

[0078] In an exemplary embodiment, the method for processing mail data further includes:

[0079] It is determined whether the operation event satisfies a preset outgoing operation condition based on the event type and / or the target element of the operation event.

[0080] The event type may be a specific action or behavior of an operation event, such as an event of a user clicking a mouse, an event of a user pressing or releasing a keyboard, an event of a user submitting a form, a touch screen event, etc. The target element may be an element of an operation event, such as a send button or a form submit button, etc.

[0081] Specifically, the application can identify the operation type and target element of the operation event through the JS script. If the operation type and target element meet the requirements of the outgoing mail operation, the application determines that the operation event meets the preset outgoing operation conditions. If the operation type and target element do not meet the requirements of the outgoing mail operation, the application determines that the operation event meets the preset outgoing operation conditions.

[0082] For example, if the operation type of the operation event is an event in which the user clicks the mouse, and the target element is a send button, then the current operation event and the target element satisfy the outgoing email operation, and it is determined that the operation event satisfies the preset outgoing operation condition. If the operation type of the operation event is an event in which the user clicks the mouse, and the target element is another button on the page that does not represent email sending, then the current operation event and the target element do not satisfy the outgoing email operation, and it is determined that the operation event does not satisfy the preset outgoing operation condition. It should be understood that the description here is for example only and does not constitute a specific limitation.

[0083] In one embodiment, the method for processing email data further includes: sending the email data to the terminal through a preset communication channel. The preset communication channel may be established based on a secure communication protocol. For example, the secure communication protocol may be Hyper Text Transfer Protocol Secure (HTTPS) or a WebSocket protocol.

[0084] Specifically, a preset communication channel can be established between the application and the terminal through a secure communication protocol, and information can be transmitted based on the preset communication channel. The application can send email data to the terminal through the preset communication channel. In addition, the application can also send packaged email data to the terminal through the preset communication channel.

[0085] In this embodiment, a preset communication channel is established through a secure communication protocol to achieve secure transmission of email data while ensuring the integrity of the email data.

[0086] In an exemplary embodiment, Figure 3 As shown, a method for processing mail data is provided. This embodiment is applied to Figure 1 In the terminal in the present embodiment, the method comprises the following steps:

[0087] Step 301: Receive email data, and detect the email data based on a preset security policy to obtain a detection result of the email data, so that the application can process the operation event based on the detection result.

[0088] The mail data is obtained by detecting an operation event through an application program, and if the operation event meets a preset outgoing operation condition, identifying the mail corresponding to the operation event.

[0089] Specifically, the terminal can pre-store sensitive information, and the terminal can set a corresponding preset security policy based on the stored sensitive information. The terminal can receive email data sent by the application, and the terminal can perform content review on the email data based on the preset security policy to determine whether there is sensitive information in the email data. If the terminal detects that there is sensitive information in the email data, the detection result is that it does not comply with the preset security policy. The terminal sends the detection result to the application, and the application determines that the detection result is that the email data does not comply with the preset security policy, and continues to maintain the event blocking state through the JS script, and the email sending is permanently blocked.

[0090] If the terminal detects that there is no sensitive information in the email data, it determines that the detection result is in compliance with the preset security policy. The terminal sends the detection result to the application, and the application determines that the detection result is that the email data is in compliance with the preset security policy. The application re-triggers the operation event through the JS script.

[0091] In addition, the terminal can record the log information during the email data review process and store the log information in the control platform. The control platform can adjust the preset security policy based on the log information.

[0092] The above-mentioned method for processing email data can improve the accuracy of email data detection on the web page by detecting the email data and obtaining the detection result. The email data is detected before the email is sent out, ensuring that the email can be effectively managed and monitored during the transmission process even if the email is encrypted, thereby improving the reliability of email outbound detection and thus improving the security of the email.

[0093] In one embodiment, Figure 4 As shown, a method for processing mail data is provided, which specifically includes the following steps:

[0094] The DLP device inserts a JS script into the application; the JS script monitors DOM events in the application; the application determines whether the DOM event meets the preset outgoing operation conditions; if the preset outgoing operation conditions are met, the application temporarily blocks the operation event; the application parses the HTML page to obtain the email data corresponding to the HTML page; the application sends the email data to the terminal through a preset communication channel; the terminal detects the email data based on the preset security policy, obtains the detection result, sends the detection result to the application, and determines whether the detection result meets the preset security policy; if the detection result is that the email data does not meet the preset security policy, the application continues to keep the operation event blocked and reminds the user that the email is intercepted through a display device; if the detection result is that the email data meets the preset security policy, the application regenerates the DOM event for outgoing email through the JS script and allows the email to be sent normally; if the DOM event does not meet the preset outgoing operation conditions, the application continues to monitor other DOM events.

[0095] In this embodiment, the accuracy of email data detection on the web page can be improved, and email data can be detected before the email is sent out, ensuring that the email can be effectively managed and monitored during the transmission process even if the email is encrypted, thereby improving the reliability of email outbound detection and thus improving the security of the email.

[0096] This embodiment can be run on any browser that supports JavaScript and has wide compatibility.

[0097] It should be understood that, although the various steps in the flowcharts involved in the above-mentioned embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps does not have a strict order restriction, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above-mentioned embodiments can include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily to be carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0098] Based on the same inventive concept, the embodiment of the present application also provides a mail data processing device for implementing the mail data processing method involved above. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme recorded in the above method, so the specific limitations in the one or more mail data processing device embodiments provided below can refer to the limitations of the mail data processing method above, and will not be repeated here.

[0099] In an exemplary embodiment, Figure 5 As shown, a mail data processing device 50 is provided, which is applied to an application program and includes: a detection module 51, an identification module 52 and a processing module 53, wherein:

[0100] A detection module 51, used for detecting operation events;

[0101] The identification module 52 is used to identify the email data corresponding to the operation event if the operation event meets the preset outgoing operation condition, so that the terminal detects the email data based on the preset security policy and obtains the detection result of the email data;

[0102] The processing module 53 is used to process the operation event based on the detection result to obtain the execution result corresponding to the operation event.

[0103] In one embodiment, the identification module 52 is further configured to prevent an operation event.

[0104] In one embodiment, the processing module 53 is used to, if there is sensitive information in the email data, receive a detection result that the email data does not comply with a preset security policy and keep blocking the operation event.

[0105] In one embodiment, the processing module 53 is used to, if there is no sensitive information in the email data, receive a detection result that the email data complies with a preset security policy, and re-trigger the operation event.

[0106] In one embodiment, the identification module 52 is further configured to determine whether the operation event satisfies a preset outgoing operation condition based on the event type and / or target element of the operation event.

[0107] In one embodiment, the identification module 52 is further configured to send the email data to the terminal via a preset communication channel, where the preset communication channel is established based on a secure communication protocol.

[0108] In an exemplary embodiment, Figure 6 As shown, a mail data processing device 60 is provided, which is applied to a terminal and comprises: a receiving module 61;

[0109] The receiving module 61 is used to receive email data and detect the email data based on a preset security policy to obtain a detection result of the email data so that the application can process the operation event based on the detection result. The email data is obtained by the application detecting the operation event. If the operation event meets the preset outgoing operation conditions, the email corresponding to the operation event is identified.

[0110] Each module in the above-mentioned mail data processing device can be implemented in whole or in part by software, hardware or a combination thereof. Each module can be embedded in or independent of a processor in a computer device in the form of hardware, or can be stored in a memory in a computer device in the form of software, so that the processor can call and execute operations corresponding to each module.

[0111] In an exemplary embodiment, a computer device is provided. The computer device may be a terminal, and its internal structure diagram may be as shown in FIG. Figure 7 As shown. The computer device includes a processor, a memory, an input / output interface, a communication interface, a display unit and an input device. The processor, the memory and the input / output interface are connected through a system bus, and the communication interface, the display unit and the input device are connected to the system bus through the input / output interface. The processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The input / output interface of the computer device is used to exchange information between the processor and an external device. The communication interface of the computer device is used to communicate with an external terminal in a wired or wireless manner, and the wireless manner can be implemented through WIFI, a mobile cellular network, near field communication (NFC) or other technologies. When the computer program is executed by the processor, a method for processing mail data is implemented. The display unit of the computer device is used to form a visually visible picture, which can be a display screen, a projection device or a virtual reality imaging device. The display screen can be a liquid crystal display screen or an electronic ink display screen, and the input device of the computer device can be a touch layer covering the display screen, or a button, trackball or touchpad set on the computer device shell, or an external keyboard, touchpad or mouse.

[0112] Those skilled in the art will understand that Figure 7 The structure shown in the figure is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0113] In an exemplary embodiment, a computer device is provided, including a memory and a processor, wherein a computer program is stored in the memory, and when the processor executes the computer program, the following steps are implemented:

[0114] Detecting operational events;

[0115] If the operation event meets the preset outgoing operation condition, the email data corresponding to the operation event is identified, so that the terminal detects the email data based on the preset security policy to obtain the detection result of the email data;

[0116] The operation event is processed based on the detection result to obtain an execution result corresponding to the operation event.

[0117] In one embodiment, when the processor executes the computer program, the processor further implements the following steps:

[0118] Prevents the described action event.

[0119] In one embodiment, when the processor executes the computer program, the processor further implements the following steps:

[0120] If sensitive information exists in the email data, the received detection result is that the email data does not comply with the preset security policy, and the operation event is blocked.

[0121] In one embodiment, when the processor executes the computer program, the processor further implements the following steps:

[0122] If the sensitive information does not exist in the email data, the received detection result is that the email data complies with the preset security policy, and the operation event is re-triggered.

[0123] In one embodiment, when the processor executes the computer program, the processor further implements the following steps:

[0124] Determine whether the operation event satisfies the preset outgoing operation condition based on the event type and / or the target element of the operation event.

[0125] In one embodiment, when the processor executes the computer program, the processor further implements the following steps:

[0126] The mail data is sent to the terminal via a preset communication channel, where the preset communication channel is established based on a secure communication protocol.

[0127] In an exemplary embodiment, a computer device is provided, including a memory and a processor, wherein a computer program is stored in the memory, and when the processor executes the computer program, the following steps are implemented:

[0128] Receive email data, and detect the email data based on a preset security policy to obtain a detection result of the email data, so that the application can process the operation event based on the detection result. The email data is obtained by the application detecting the operation event and identifying the email corresponding to the operation event if the operation event meets a preset outgoing operation condition.

[0129] In one embodiment, a computer readable storage medium is provided, on which a computer program is stored, and when the computer program is executed by a processor, the following steps are implemented:

[0130] Detecting operational events;

[0131] If the operation event meets the preset outgoing operation condition, the email data corresponding to the operation event is identified, so that the terminal detects the email data based on the preset security policy to obtain the detection result of the email data;

[0132] The operation event is processed based on the detection result to obtain an execution result corresponding to the operation event.

[0133] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:

[0134] Prevents the described action event.

[0135] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:

[0136] If sensitive information exists in the email data, the received detection result is that the email data does not comply with the preset security policy, and the operation event is blocked.

[0137] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:

[0138] If the sensitive information does not exist in the email data, the received detection result is that the email data complies with the preset security policy, and the operation event is re-triggered.

[0139] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:

[0140] Determine whether the operation event satisfies the preset outgoing operation condition based on the event type and / or the target element of the operation event.

[0141] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:

[0142] The mail data is sent to the terminal via a preset communication channel, where the preset communication channel is established based on a secure communication protocol.

[0143] In one embodiment, a computer readable storage medium is provided, on which a computer program is stored, and when the computer program is executed by a processor, the following steps are implemented:

[0144] Receive email data, and detect the email data based on a preset security policy to obtain a detection result of the email data, so that the application can process the operation event based on the detection result. The email data is obtained by the application detecting the operation event and identifying the email corresponding to the operation event if the operation event meets a preset outgoing operation condition.

[0145] In one embodiment, a computer program product is provided, comprising a computer program, which, when executed by a processor, implements the following steps:

[0146] Detecting operational events;

[0147] If the operation event meets the preset outgoing operation condition, the email data corresponding to the operation event is identified, so that the terminal detects the email data based on the preset security policy to obtain the detection result of the email data;

[0148] The operation event is processed based on the detection result to obtain an execution result corresponding to the operation event.

[0149] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:

[0150] Prevents the described action event.

[0151] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:

[0152] If sensitive information exists in the email data, the received detection result is that the email data does not comply with the preset security policy, and the operation event is blocked.

[0153] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:

[0154] If the sensitive information does not exist in the email data, the received detection result is that the email data complies with the preset security policy, and the operation event is re-triggered.

[0155] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:

[0156] Determine whether the operation event satisfies the preset outgoing operation condition based on the event type and / or the target element of the operation event.

[0157] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:

[0158] The mail data is sent to the terminal via a preset communication channel, where the preset communication channel is established based on a secure communication protocol.

[0159] In one embodiment, a computer program product is provided, comprising a computer program, which, when executed by a processor, implements the following steps:

[0160] Receive email data, and detect the email data based on a preset security policy to obtain a detection result of the email data, so that the application can process the operation event based on the detection result. The email data is obtained by the application detecting the operation event and identifying the email corresponding to the operation event if the operation event meets a preset outgoing operation condition.

[0161] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with relevant regulations.

[0162] A person of ordinary skill in the art can understand that all or part of the processes in the above-mentioned embodiment method can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in the present application can include at least one of non-volatile memory and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, an artificial intelligence (AI) processor, etc., but are not limited to this.

[0163] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this application.

[0164] The above-described embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A method for processing mail data, characterized in that: Applied to an application program, the method comprises: Detecting operational events; If the operation event meets the preset outgoing operation condition, the email data corresponding to the operation event is identified, so that the terminal detects the email data based on the preset security policy to obtain the detection result of the email data; The operation event is processed based on the detection result to obtain an execution result corresponding to the operation event.

2. The method according to claim 1, characterized in that If the operation event satisfies the preset outgoing operation condition, the method further includes: Prevents the described action event.

3. The method according to claim 2, characterized in that The email data includes one or more of recipient information, email subject content, email body information, and email attachment information. The processing of the operation event based on the detection result to obtain the execution result corresponding to the operation event includes: If sensitive information exists in the email data, the received detection result is that the email data does not comply with the preset security policy, and the operation event is kept blocked.

4. The method according to claim 3, characterized in that The processing of the operation event based on the detection result to obtain an execution result corresponding to the operation event includes: If the sensitive information does not exist in the email data, the received detection result is that the email data complies with the preset security policy, and the operation event is re-triggered.

5. The method according to claim 1, characterized in that The method further comprises: Determine whether the operation event satisfies the preset outgoing operation condition based on the event type and / or the target element of the operation event.

6. A method for processing mail data, characterized in that: Applied to a terminal, the method comprises: Receive email data, and detect the email data based on a preset security policy to obtain a detection result of the email data, so that the application can process the operation event based on the detection result. The email data is obtained by the application detecting the operation event and identifying the email corresponding to the operation event if the operation event meets a preset outgoing operation condition.

7. A mail data processing device, characterized in that: Applied to an application program, the device comprises: A detection module, used for detecting operation events; an identification module, configured to identify the email data corresponding to the operation event if the operation event meets the preset outgoing operation condition, so that the terminal detects the email data based on the preset security policy and obtains the detection result of the email data; A processing module is used to process the operation event based on the detection result to obtain an execution result corresponding to the operation event.

8. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 6 are implemented.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

10. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

Images