Data detection method, device, non-volatile storage medium and electronic device

Abstract

The present invention discloses a data detection method, device, non-volatile storage medium and electronic device. The method comprises: obtaining request data sent by a client, wherein the request data is sensitive information of a target user; matching the request data with a detection strategy in a database to obtain a target detection strategy, wherein the database supports online configuration of a new detection strategy; desensitizing the request data according to the target detection strategy to obtain desensitized request data; performing a security check again on the desensitized request data, and sending the desensitized request data that has passed the security check again to the client, wherein the security check again is used to detect the integrity of the desensitized request data. The present invention solves the technical problem that the prior art cannot effectively ensure the security of the application and the integrity of the data.

Description

Technical Field

[0001] The present invention relates to the field of information technology, and in particular to a data detection method, device, non-volatile storage medium and electronic equipment. Background Art

[0002] In the current era of rapid development of informatization, applications, as the core components of Internet services, are facing increasingly severe security threats. These threats include not only traditional network attacks, such as man-in-the-middle attacks, DDoS attacks (distributed denial of service attacks), etc., but also application-level vulnerabilities, such as XSS (cross-site scripting) attacks, CSRF (cross-site request forgery) attacks, etc. These vulnerabilities may arise from unsafe coding practices or configuration errors. In addition, data security issues are becoming increasingly prominent, and the protection of sensitive data has become the focus of attention for enterprises and individuals, especially the leakage of user privacy information may bring serious legal and reputation risks.

[0003] To address the above-mentioned problems, no effective solution has been proposed yet. Summary of the invention

[0004] The embodiments of the present invention provide a data detection method, device, non-volatile storage medium and electronic device to at least solve the technical problem that the prior art cannot effectively ensure the security of applications and guarantee the integrity of data.

[0005] According to one aspect of an embodiment of the present invention, there is provided a data detection method, comprising: obtaining request data sent by a client, wherein the request data is sensitive information of a target user; matching the request data with a detection strategy in a database to obtain a target detection strategy, wherein the database supports online configuration of a new detection strategy; desensitizing the request data according to the target detection strategy to obtain desensitized request data; performing a security re-detection on the desensitized request data, and sending the desensitized request data that passes the security re-detection to the client, wherein the security re-detection is used to detect the integrity of the desensitized request data.

[0006] Optionally, the request data is matched with the detection strategies in the database to obtain the target detection strategy, including: parsing the request data to determine the request type and business type corresponding to the request data; according to the request type and business type corresponding to the request data, matching the request data with the detection strategies in the database to obtain the target detection strategy.

[0007] Optionally, according to the request type and business type corresponding to the request data, the request data is matched with the detection strategy in the database to obtain the target detection strategy, including: in the database, determining that the detection strategy whose request type and business type are consistent with the request type and business type corresponding to the request data is the target detection strategy.

[0008] Optionally, according to the target detection strategy, the request data is desensitized to obtain the desensitized request data, including: determining part of the data to be deleted in the request data according to the desensitization conditions included in the target detection strategy; deleting the part of the data to be deleted to obtain the desensitized request data.

[0009] Optionally, the masked request data is subjected to a second security check, and the masked request data that passes the second security check is sent to the client, including: detecting whether there are missing values ​​in the masked request data; detecting whether the format of the masked request data complies with a predetermined format; if there are no missing values ​​in the masked request data and the format of the masked request data complies with a predetermined format, determining that the masked request data passes the second security check, and sending the masked request data to the client.

[0010] Optionally, it also includes: obtaining a new detection strategy, wherein the request type and business type corresponding to the new detection strategy are not completely the same as the request type and business type corresponding to the detection strategy in the database; storing the new detection strategy in the database to obtain an updated database; and performing detection on other received request data based on the updated database.

[0011] According to another aspect of an embodiment of the present invention, a data detection device is provided, including: an acquisition module, used to acquire request data sent by a client, wherein the request data is sensitive information of a target user; a matching module, used to match the request data with a detection strategy in a database to obtain a target detection strategy, wherein the database supports online configuration of a new detection strategy; a desensitizing module, used to desensitize the request data according to the target detection strategy to obtain desensitized request data; a sending module, used to perform a re-security check on the desensitized request data, and send the desensitized request data that passes the re-security check to the client, wherein the re-security check is used to detect the integrity of the desensitized request data.

[0012] According to another aspect of an embodiment of the present invention, a non-volatile storage medium is provided. The non-volatile storage medium stores a plurality of instructions, and the instructions are suitable for being loaded by a processor and executing any one of the data detection methods.

[0013] According to another aspect of an embodiment of the present invention, there is provided an electronic device, comprising: one or more processors and a memory, the memory being used to store one or more programs, wherein when the one or more programs are executed by the one or more processors, the one or more processors implement any one of the data detection methods.

[0014] According to yet another aspect of an embodiment of the present invention, a computer program product is provided, including a computer program, and when the computer program is executed by a processor, any one of the above data detection methods is implemented.

[0015] In an embodiment of the present invention, an acquisition module is used to acquire request data sent by a client, wherein the request data is sensitive information of a target user; a matching module is used to match the request data with a detection strategy in a database to obtain a target detection strategy, wherein the database supports online configuration of a new detection strategy; a desensitizing module is used to desensitize the request data according to the target detection strategy to obtain desensitized request data; a sending module is used to perform a re-security check on the desensitized request data, and send the desensitized request data that has passed the re-security check to the client, wherein the re-security check is used to detect the integrity of the desensitized request data, thereby solving the technical problem that the prior art cannot effectively ensure the security of the application and ensure the integrity of the data, thereby achieving the technical effect of improving the security of the application and the ability to protect user data. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] The drawings described herein are used to provide a further understanding of the present invention and constitute a part of this application. The exemplary embodiments of the present invention and their descriptions are used to explain the present invention and do not constitute an improper limitation of the present invention. In the drawings:

[0017] Figure 1 is a flow chart of a data detection method provided according to an embodiment of the present invention;

[0018] Figure 2 is a schematic diagram of a data detection device provided according to an embodiment of the present invention;

[0019] Figure 3 is a schematic diagram of an electronic device provided according to an embodiment of the present invention. DETAILED DESCRIPTION

[0020] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0021] It should be noted that the terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0022] According to an embodiment of the present invention, a method embodiment of data detection is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0023] Figure 1 is a flow chart of a data detection method according to an embodiment of the present invention. Figure 1 As shown, the method comprises the following steps:

[0024] Step S102, obtaining request data sent by the client, wherein the request data is sensitive information of the target user;

[0025] In this step, during the interaction between the client and the server, the server receives the user's request data, which contains sensitive information of the target user, such as personal identity information, financial data, login credentials, etc.

[0026] Step S104, matching the request data with the detection strategy in the database to obtain the target detection strategy, wherein the database supports online configuration of new detection strategies;

[0027] In this step, after receiving the request data, the server will compare it with the detection strategy pre-stored in the database to determine the specific detection strategy applicable to the current request. Target detection strategy refers to a set of security rules customized for different request types and business types. For example, the detection strategy for login requests may focus on verifying the correctness of login credentials, while the detection strategy for banking transactions or online shopping may focus more on preventing cross-site scripting attacks. This way of dynamically configuring detection strategies enables the security protection mechanism to respond more agilely to the ever-changing network environment and security challenges, improving the security and stability of the system.

[0028] In an optional embodiment, the request data is matched with the detection strategies in the database to obtain the target detection strategy, including: parsing the request data to determine the request type and business type corresponding to the request data; according to the request type and business type corresponding to the request data, matching the request data with the detection strategies in the database to obtain the target detection strategy.

[0029] Optionally, when processing the request data sent by the client, the server will first parse the data to identify the type of request (such as login, query or transfer) and the business type involved in the request (such as banking transactions or online shopping). Based on the request type and business type obtained through the analysis, the server will query the predefined detection strategy set in its database to find the security rules that best meet the characteristics of the current request. The detection strategies in the database are customized according to different request types and business types, and include security protection measures for specific situations, such as input validation, permission control, data encryption, etc. By matching the request data with these strategies, the server can determine the target detection strategy that is most suitable for the current request.

[0030] In an optional embodiment, the request data is matched with the detection strategies in the database according to the request type and business type corresponding to the request data to obtain a target detection strategy, including: in the database, determining that the detection strategy whose request type and business type are consistent with the request type and business type corresponding to the request data is the target detection strategy.

[0031] Optionally, each detection policy in the database is associated with specific request type and business type labels, which reflect the scope and purpose of the policy. For example, one policy is designed to handle all types of login requests, while another policy is specifically designed for online shopping type payment requests. After the server parses the type and type of the request data, it uses this information as query conditions to filter out matching policies from the database. If one or more policies are found in the database, and their marked request types and business types are exactly the same as the current request, then these policies are identified as target detection policies, that is, security rules used to process and protect the current request data. This process ensures that the system can accurately apply the most relevant security policies, improving the targetedness and efficiency of protection.

[0032] Step S106, desensitizing the request data according to the target detection strategy to obtain desensitized request data;

[0033] In this step, once the target detection strategy applicable to the request data is determined, the server will process the sensitive information contained in the request data, such as the user's bank card number, phone number, ID number, etc., according to the desensitization rules defined in these strategies to protect the user's privacy and data security. Through dynamically configured security protection rules, the server can intelligently identify which data needs to be desensitized and apply corresponding strategies, such as replacing part of the bank card number with a random string or covering part of the phone number with a mask, thereby generating desensitized request data. This process significantly enhances data security without affecting business functions.

[0034] In an optional embodiment, the request data is desensitized according to the target detection strategy to obtain the desensitized request data, including: determining part of the data to be deleted in the request data according to the desensitization conditions included in the target detection strategy; deleting the part of the data to be deleted to obtain the desensitized request data.

[0035] Optionally, after the server determines the target detection strategy applicable to the request data, it will analyze which parts of the request data are considered sensitive information and need to be desensitized based on the desensitization conditions defined in this strategy. Desensitization conditions may include but are not limited to data types, data locations, data patterns, etc. For example, if the request data contains the user's bank card number, and the target detection strategy indicates that the bank card number should be desensitized, then the bank card number will be identified as part of the data to be deleted or processed. Next, the server will directly delete the part of the request data marked as sensitive, or process it using techniques such as substitution, masking, and hashing. The practice of deleting sensitive data ensures that this information will not be leaked or misused in subsequent processing, thereby generating desensitized request data.

[0036] Step S108, performing a security check again on the desensitized request data, and sending the desensitized request data that passes the security check again to the client, wherein the security check again is used to detect the integrity of the desensitized request data.

[0037] Optionally, after desensitizing the request data, the server needs to perform a secondary security check on the desensitized data. The focus of this test is to ensure that the integrity of the data is not damaged by the desensitization process. Only when the desensitized request data passes the integrity test, proving that the data has not been tampered with or destroyed during the desensitization process, will the server safely send it back to the client for subsequent business processing. The second security test supplements and improves the data desensitization mechanism, ensuring that the desensitization operation will not have a negative impact on the validity of the data and business processes while effectively protecting the user's sensitive information.

[0038] In an optional embodiment, the masked request data is subjected to a second security check, and the masked request data that passes the second security check is sent to the client, including: detecting whether there are missing values ​​in the masked request data; detecting whether the format of the masked request data complies with a predetermined format; if there are no missing values ​​in the masked request data and the format of the masked request data complies with a predetermined format, determining that the masked request data passes the second security check, and sending the masked request data to the client.

[0039] Optionally, after the request data is desensitized, the server will perform a secondary security check on the desensitized data to ensure the integrity of the data and the correctness of the format. This detection process includes two main steps: First, the server will check whether any necessary fields or values ​​are missing in the desensitized request data. The presence of missing values ​​may mean that an error occurred in the original data during the desensitization process, such as some sensitive data was not properly processed when replaced, or the desensitization operation inadvertently deleted non-sensitive but business-required information. Instead, it verifies whether the desensitized request data still meets the predetermined format requirements. Errors in the data format will cause the data to be unable to be correctly parsed or applied in subsequent processing, thereby affecting the normal operation of the system or causing security risks. By ensuring the correctness of the data format, the system can maintain the smoothness of the business process and the security of data processing.

[0040] In an optional embodiment, it also includes: obtaining a new detection strategy, wherein the request type and business type corresponding to the new detection strategy are not completely the same as the request type and business type corresponding to the detection strategy in the database; storing the new detection strategy in the database to obtain an updated database; and detecting other received request data based on the updated database.

[0041] Optionally, once a new detection policy is created, it will be stored in the system database and become part of the database detection policy collection. After the database is updated, the system will use the detection policy in the updated database to perform more comprehensive and accurate security detection on other request data received subsequently. This means that whether it is for emerging attack patterns or specific security requirements for specific business processes, the system can respond in a timely manner and provide effective protection measures to ensure the security and compliance of data during transmission and processing.

[0042] The request data sent by the client is obtained through the above-mentioned method, wherein the request data is sensitive information of the target user; the request data is matched with the detection strategy in the database to obtain the target detection strategy, wherein the database supports online configuration of new detection strategies; according to the target detection strategy, the request data is desensitized to obtain desensitized request data; the desensitized request data is subjected to a second security check, and the desensitized request data that passes the second security check is sent to the client, wherein the second security check is used to detect the integrity of the desensitized request data, thereby solving the technical problem that the prior art cannot effectively ensure the security of the application and ensure the integrity of the data, thereby achieving the technical effect of improving the security of the application and the ability to protect user data.

[0043] Based on the above embodiments and optional embodiments, the present invention proposes an optional implementation manner.

[0044] Step S1, obtaining request data sent by the client, wherein the request data is sensitive information of the target user.

[0045] Optionally, during the interaction between the client and the server, the server receives request data from the user, and the request data contains sensitive information of the target user, such as personal identity information, financial data, login credentials, etc.

[0046] Step S2, matching the request data with the detection strategies in the database to obtain the target detection strategy, including: parsing the request data to determine the request type and business type corresponding to the request data; matching the request data with the detection strategies in the database according to the request type and business type corresponding to the request data to obtain the target detection strategy.

[0047] Optionally, when processing the request data sent by the client, the server will first parse the data to identify the type of request (such as login, query or transfer) and the business type involved in the request (such as banking transactions or online shopping). Based on the request type and business type obtained through the analysis, the server will query the predefined detection strategy set in its database to find the security rules that best meet the characteristics of the current request. The detection strategies in the database are customized according to different request types and business types, and include security protection measures for specific situations, such as input validation, permission control, data encryption, etc. By matching the request data with these strategies, the server can determine the target detection strategy that is most suitable for the current request.

[0048] Step S21, according to the request type and business type corresponding to the request data, matches the request data with the detection strategy in the database to obtain the target detection strategy, including: in the database, determining that the detection strategy whose request type and business type are consistent with the request type and business type corresponding to the request data is the target detection strategy.

[0049] Optionally, each detection policy in the database is associated with specific request type and business type labels, which reflect the scope and purpose of the policy. For example, one policy is designed to handle all types of login requests, while another policy is specifically designed for online shopping type payment requests. After the server parses the type and type of the request data, it uses this information as query conditions to filter out matching policies from the database. If one or more policies are found in the database, and their marked request types and business types are exactly the same as the current request, then these policies are identified as target detection policies, that is, security rules used to process and protect the current request data. This process ensures that the system can accurately apply the most relevant security policies, improving the targetedness and efficiency of protection.

[0050] Step S3, according to the target detection strategy, desensitizes the request data to obtain the desensitized request data, including: determining part of the data to be deleted in the request data according to the desensitization conditions included in the target detection strategy; deleting the part of the data to be deleted to obtain the desensitized request data.

[0051] Optionally, after the server determines the target detection strategy applicable to the request data, it will analyze which parts of the request data are considered sensitive information and need to be desensitized based on the desensitization conditions defined in this strategy. Desensitization conditions may include but are not limited to data types, data locations, data patterns, etc. For example, if the request data contains the user's bank card number, and the target detection strategy indicates that the bank card number should be desensitized, then the bank card number will be identified as part of the data to be deleted or processed. Next, the server will directly delete the part of the request data marked as sensitive, or process it using techniques such as substitution, masking, and hashing. The practice of deleting sensitive data ensures that this information will not be leaked or misused in subsequent processing, thereby generating desensitized request data.

[0052] Step S4, performing a second security check on the masked request data, and sending the masked request data that passes the second security check to the client, including: detecting whether there are missing values ​​in the masked request data; detecting whether the format of the masked request data complies with a predetermined format; if there are no missing values ​​in the masked request data, and the format of the masked request data complies with a predetermined format, determining that the masked request data passes the second security check, and sending the masked request data to the client.

[0053] Optionally, after the request data is desensitized, the server will perform a secondary security check on the desensitized data to ensure the integrity of the data and the correctness of the format. This detection process includes two main steps: First, the server will check whether any necessary fields or values ​​are missing in the desensitized request data. The presence of missing values ​​may mean that an error occurred in the original data during the desensitization process, such as some sensitive data was not properly processed when replaced, or the desensitization operation inadvertently deleted non-sensitive but business-required information. Instead, it verifies whether the desensitized request data still meets the predetermined format requirements. Errors in the data format will cause the data to be unable to be correctly parsed or applied in subsequent processing, thereby affecting the normal operation of the system or causing security risks. By ensuring the correctness of the data format, the system can maintain the smoothness of the business process and the security of data processing.

[0054] Step S5 also includes: obtaining a new detection strategy, wherein the request type and business type corresponding to the new detection strategy are not completely the same as the request type and business type corresponding to the detection strategy in the database; storing the new detection strategy in the database to obtain an updated database; and detecting other received request data based on the updated database.

[0055] Optionally, once a new detection policy is created, it will be stored in the system database and become part of the database detection policy collection. After the database is updated, the system will use the detection policy in the updated database to perform more comprehensive and accurate security detection on other request data received subsequently. This means that whether it is for emerging attack patterns or specific security requirements for specific business processes, the system can respond in a timely manner and provide effective protection measures to ensure the security and compliance of data during transmission and processing.

[0056] The request data sent by the client is obtained through the above-mentioned method, wherein the request data is sensitive information of the target user; the request data is matched with the detection strategy in the database to obtain the target detection strategy, wherein the database supports online configuration of new detection strategies; according to the target detection strategy, the request data is desensitized to obtain desensitized request data; the desensitized request data is subjected to a second security check, and the desensitized request data that passes the second security check is sent to the client, wherein the second security check is used to detect the integrity of the desensitized request data, thereby solving the technical problem that the prior art cannot effectively ensure the security of the application and ensure the integrity of the data, thereby achieving the technical effect of improving the security of the application and the ability to protect user data.

[0057] The above optional implementation achieves at least the following effects: solving the technical problem that the prior art cannot effectively ensure the security of applications and guarantee the integrity of data, thereby achieving the technical effect of improving the security of applications and the ability to protect user data.

[0058] It should be noted that the steps shown in the flowcharts of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and that, although a logical order is shown in the flowcharts, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0059] In the present embodiment, a data detection device is also provided, which is used to implement the above-mentioned embodiments and preferred implementation modes, and the descriptions that have been made will not be repeated. As used below, the terms "module" and "device" can implement a combination of software and / or hardware of a predetermined function. Although the devices described in the following embodiments are preferably implemented in software, the implementation of hardware, or a combination of software and hardware is also possible and conceived.

[0060] According to an embodiment of the present invention, a device embodiment for implementing the data detection method is also provided. Figure 2 is a schematic diagram of a data detection device according to an embodiment of the present invention. Figure 2As shown, the above-mentioned data detection device includes an acquisition module 21, a matching module 22, a desensitization module 23, and a sending module 24. The device is described below.

[0061] The acquisition module 21 is used to acquire the request data sent by the client, wherein the request data is sensitive information of the target user;

[0062] The matching module 22 is connected to the acquisition module 21 and is used to match the request data with the detection strategy in the database to obtain the target detection strategy, wherein the database supports online configuration of new detection strategies;

[0063] The desensitization module 23 is connected to the matching module 22 and is used to perform desensitization processing on the request data according to the target detection strategy to obtain the desensitized request data;

[0064] The sending module 24 is connected to the desensitizing module 23, and is used to perform a re-security check on the desensitized request data, and send the desensitized request data that passes the re-security check to the client, wherein the re-security check is used to detect the integrity of the desensitized request data.

[0065] In a data detection device provided by an embodiment of the present invention, an acquisition module is set up to obtain request data sent by a client, wherein the request data is sensitive information of a target user; a matching module is used to match the request data with a detection strategy in a database to obtain a target detection strategy, wherein the database supports online configuration of a new detection strategy; a desensitizing module is used to desensitize the request data according to the target detection strategy to obtain desensitized request data; a sending module is used to perform a re-security check on the desensitized request data, and send the desensitized request data that passes the re-security check to the client, wherein the re-security check is used to detect the integrity of the desensitized request data, thereby solving the technical problem that the prior art cannot effectively ensure the security of the application and ensure the integrity of the data, thereby achieving the technical effect of improving the security of the application and the ability to protect user data.

[0066] It should be noted that the above modules can be implemented by software or hardware. For example, for the latter, it can be implemented in the following ways: the above modules can be located in the same processor; or the above modules can be located in different processors in any combination.

[0067] It should be noted that the acquisition module 21, matching module 22, desensitization module 23, and sending module 24 correspond to steps S102 to S108 in the embodiment, and the examples and application types implemented by the modules and the corresponding steps are the same, but are not limited to the contents disclosed in the above embodiment. It should be noted that the modules as part of the device can be run in a computer terminal.

[0068] It should be noted that the optional or preferred implementation of this embodiment can refer to the relevant description in the embodiment, which will not be repeated here.

[0069] The above-mentioned data detection device may also include a processor and a memory. The acquisition module 21, the matching module 22, the desensitization module 23, the sending module 24, etc. are all stored in the memory as program units, and the processor executes the above-mentioned program units stored in the memory to realize the corresponding functions.

[0070] The processor includes a kernel, which retrieves the corresponding program unit from the memory. There can be one or more kernels. The memory may include non-permanent memory in a computer-readable medium, random access memory (RAM) and / or non-volatile memory, such as read-only memory (ROM) or flash RAM, and the memory includes at least one storage chip.

[0071] An embodiment of the present invention provides a non-volatile storage medium on which a program is stored. When the program is executed by a processor, a data detection method is implemented.

[0072] like Figure 3 As shown, an embodiment of the present invention provides an electronic device, the electronic device 10 includes a processor, a memory, and a program stored in the memory and executable on the processor. When the processor executes the program, the following steps are implemented: the memory is used to store a computer program, wherein when the computer program is executed by the processor, the processor implements the above-mentioned data detection method. The device in this article may be a server, a PC, etc.

[0073] The present invention also provides a computer program product, which, when executed on a data processing device, is suitable for executing a program initialized with the following method steps: computer instructions are used by a processor to execute the above-mentioned data detection method.

[0074] Those skilled in the art will appreciate that embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0075] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0076] These computer program instructions may also be stored in a computer readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer readable memory produce an article of manufacture including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0077] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process in the computer or other programmable device. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0078] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0079] The memory may include non-permanent memory in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM. The memory is an example of a computer-readable medium.

[0080] Computer readable media include permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer readable media does not include temporary computer readable media (transitory media), such as modulated data signals and carrier waves.

[0081] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

[0082] It will be appreciated by those skilled in the art that embodiments of the present invention may be provided as methods, systems or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment or an embodiment combining software and hardware. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes.

[0083] The above are only embodiments of the present invention and are not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and variations. Any modification, equivalent substitution, improvement, etc. made within the spirit and principle of the present invention should be included in the scope of the claims of the present invention.

Claims

1. A data detection method, characterized in that: include: Obtaining request data sent by the client, wherein the request data is sensitive information of the target user; Matching the request data with the detection strategies in the database to obtain the target detection strategy, wherein the database supports online configuration of new detection strategies; According to the target detection strategy, the request data is desensitized to obtain desensitized request data; The desensitized request data is subjected to a second security check, and the desensitized request data that passes the second security check is sent to the client, wherein the second security check is used to detect the integrity of the desensitized request data.

2. The method according to claim 1, characterized in that The step of matching the request data with the detection strategies in the database to obtain the target detection strategy includes: Parsing the request data to determine the request type and business type corresponding to the request data; According to the request type and the business type corresponding to the request data, the request data is matched with the detection strategy in the database to obtain the target detection strategy.

3. The method according to claim 2, characterized in that The step of matching the request data with the detection strategy in the database according to the request type and the business type corresponding to the request data to obtain the target detection strategy includes: In the database, a detection strategy whose request type and service type are consistent with the request type and service type corresponding to the request data is determined as the target detection strategy.

4. The method according to claim 1, characterized in that: The desensitizing the request data according to the target detection strategy to obtain the desensitized request data includes: Determining, in the request data, part of the data to be deleted according to the desensitization conditions included in the target detection strategy; The part of the data to be deleted is deleted to obtain the desensitized request data.

5. The method according to claim 1, characterized in that The performing a security check again on the desensitized request data, and sending the desensitized request data that passes the security check again to the client, includes: Detect whether there are missing values ​​in the desensitized request data; Detecting whether the format of the desensitized request data conforms to a predetermined format; If there are no missing values ​​in the desensitized request data and the format of the desensitized request data conforms to a predetermined format, it is determined that the desensitized request data passes the re-security check and the desensitized request data is sent to the client.

6. The method according to any one of claims 1 to 5, characterized in that Also includes: Acquire a newly added detection strategy, wherein the request type and the service type corresponding to the newly added detection strategy are not completely the same as the request type and the service type corresponding to the detection strategy in the database; Storing the newly added detection strategy in the database to obtain an updated database; Based on the updated database, other received request data is detected.

7. A data detection device, characterized in that: include: An acquisition module, used to acquire request data sent by a client, wherein the request data is sensitive information of a target user; A matching module, used to match the request data with the detection strategies in the database to obtain a target detection strategy, wherein the database supports online configuration of new detection strategies; A desensitization module, used to perform desensitization processing on the request data according to the target detection strategy to obtain desensitized request data; A sending module is used to perform a re-security check on the desensitized request data, and send the desensitized request data that passes the re-security check to the client, wherein the re-security check is used to detect the integrity of the desensitized request data.

8. A non-volatile storage medium, characterized in that: The non-volatile storage medium stores a plurality of instructions, and the instructions are suitable for being loaded by a processor and executing the data detection method described in any one of claims 1 to 6.

9. An electronic device, characterized in that: include: One or more processors and a memory, wherein the memory is used to store one or more programs, wherein when the one or more programs are executed by the one or more processors, the one or more processors implement the data detection method described in any one of claims 1 to 6.

10. A computer program product comprising computer instructions, characterized in that: The computer instructions are executed by a processor to execute the data detection method according to any one of claims 1 to 6.

Images