Data multi-level security desensitization method and system

Abstract

The invention provides a data multilevel security desensitization method and system, and the method comprises the steps: obtaining first data which is business data; obtaining sensitivity and business requirements of the first data; determining a corresponding data desensitization algorithm from a first preset desensitization strategy according to the sensitivity and the service demand; performing data desensitization processing on first data according to the data desensitization algorithm to obtain second data; outputting the second data to an RPA mechanism; according to an RPA mechanism, performing vertical segmentation on second data according to the corresponding data desensitization algorithm to obtain a plurality of data subsets; according to the method, the data subsets are stored and managed respectively, and the encryption algorithm is adopted to encrypt the data subsets respectively, so that the desensitization degree of the data is controlled more finely, data access permissions of different levels are provided for different users, sensitive information is ensured to be effectively protected, and the user experience is improved. And more reliable and credible services are provided for the user.

Description

Technical Field

[0001] The present invention relates to the field of digital security technology, and in particular to a data multi-level security desensitization method and system. Background Art

[0002] Data desensitization is crucial in the field of data security. It is a key method to protect personal privacy, business secrets, and meet compliance requirements. Traditional data desensitization often uses a unified desensitization strategy to process all attributes in a data set, ignoring that different attributes have different security levels and sensitivities. For highly sensitive attributes, only basic desensitization strategies may be used, which is not enough to protect the privacy of data and increases the risk of data leakage.

[0003] The existing data desensitization has the following shortcomings: First, the existing data desensitization is not divided into levels. No corresponding desensitization strategy is formulated according to the sensitivity of the data and business needs for hierarchical desensitization, and all desensitized data are stored in the same place, which increases the risk of data leakage and is inconvenient for data classification, retrieval and use; Second, it lacks flexibility. Traditional methods usually operate based on predefined rules or strategies, and it is difficult to formulate refined desensitization strategies based on the specific attributes of the data and business scenarios. This leads to a lack of sufficient flexibility in protecting data privacy, and at the same time, it also limits the normal use and value of data. Third, the formulation of traditional data desensitization strategies can often only configure desensitization rules for a certain table or field one by one, and the processing efficiency is low. In the big data environment, the security processing of massive data requires frequent desensitization tasks. Artificial sensitive data processing rules urgently need to move from manual compilation and one-by-one processing to batch and automation. Summary of the invention

[0004] The embodiment of the present invention provides a multi-level security desensitization method and system for data, which solves the technical problems that the data desensitization technology in the prior art does not distinguish the confidentiality level of the data, performs uniform desensitization processing on all data, has a relatively single usage method, limits the flexibility and effectiveness of data desensitization, and has low processing efficiency. It achieves the technical effect of more finely controlling the degree of data desensitization, providing different levels of data access rights for different users, ensuring that sensitive information is effectively protected, and providing users with more reliable and trustworthy services.

[0005] In view of the above problems, an embodiment of the present application is proposed to provide a multi-level data security desensitization method and system.

[0006] In a first aspect, the present invention provides a multi-level security desensitization method for data, the method comprising: obtaining first data, wherein the first data is business data; obtaining the sensitivity and business requirements of the first data; determining a corresponding data desensitization algorithm from a first preset desensitization strategy based on the sensitivity and the business requirements; performing data desensitization processing on the first data according to the data desensitization algorithm to obtain second data; outputting the second data to an RPA mechanism; according to the RPA mechanism, vertically splitting the second data according to the corresponding data desensitization algorithm to obtain multiple data subsets; storing and managing the multiple data subsets respectively, and encrypting the multiple data subsets respectively using an encryption algorithm.

[0007] Furthermore, the first preset desensitization strategy is specifically as follows: first-level desensitization, the first-level desensitization is used for data with a first sensitivity level, wherein the first-level desensitization algorithm corresponding to the first-level desensitization is: complete replacement with placeholders or specific strings to ensure that the data cannot be recovered or identified; second-level desensitization, the second-level desensitization is used for data with a second sensitivity level, wherein the second-level desensitization algorithm corresponding to the second-level desensitization is: retaining part of the information, and replacing or blurring the sensitive information; third-level desensitization, the third-level desensitization is used for data with a third sensitivity level, wherein the third-level desensitization algorithm corresponding to the third-level desensitization is: retaining the format of the data and replacing the information of the data; fourth-level desensitization, the fourth-level desensitization is used for data with a fourth sensitivity level, wherein the fourth-level desensitization algorithm corresponding to the fourth-level desensitization is: no desensitization is required, or, slight desensitization is performed.

[0008] Furthermore, the sensitivities of the first sensitivity level, the second sensitivity level, the third sensitivity level, and the fourth sensitivity level are arranged in descending order.

[0009] Furthermore, after performing data desensitization processing on the first data according to the data desensitization algorithm, obtaining the second data includes: obtaining multiple characteristic fields of the first data, and desensitizing the multiple characteristic fields separately when performing data desensitization processing on the first data according to the data desensitization algorithm corresponding to the multiple characteristic fields.

[0010] Furthermore, the outputting of the second data to the RPA mechanism specifically includes: obtaining an automated task plan according to the business needs through a collection plan generator, wherein the automated task plan includes: task content information, execution sequence information, and required resource information; scheduling and optimizing the details of the automated task plan according to system resources and task priorities through a collection detail scheduler; and executing the automated task according to the instructions of the collection detail scheduler through a collection task executor to complete the automated processing of the business process.

[0011] Furthermore, the vertical segmentation specifically includes: the second data D includes attributes {X1, ..., X d}, vertically divide the second data D into data subsets D1, data subsets D2, data subsets D3, and data subsets D4, wherein the data subset D1 contains attributes The data subset D2 contains the attributes The data subset D3 contains the attributes The data subset D4 contains the attributes in, | D 1| + | D2+D 3| +D 4| >D | .

[0012] Furthermore, the storing and managing the multiple data subsets separately and encrypting the multiple data subsets separately with an encryption algorithm also includes: storing and managing the multiple data subsets separately according to storage levels, wherein the storage levels include a first level, a second level, a third level, and a fourth level, wherein the first level, the second level, the third level, and the fourth level are arranged in descending order.

[0013] Furthermore, after the multiple data subsets are stored and managed separately and the multiple data subsets are encrypted separately using an encryption algorithm, it also includes: determining the access permission level according to the user level, wherein the user level includes a first level, a second level, a third level, and a fourth level, the first level has a first access level, the second level has a second access level, the third level has a third access level, and the fourth level has a fourth access level, wherein the user permissions of the first level, the second level, the third level, and the fourth level are arranged in descending order.

[0014] In a second aspect, the present invention provides a data multi-level security desensitization system, the system comprising:

[0015] A first obtaining unit, the first obtaining unit is used to obtain first data, wherein the first data is business data;

[0016] a second obtaining unit, the second obtaining unit being used to obtain the sensitivity and business requirements of the first data;

[0017] A first determining unit, the first determining unit being used to determine a corresponding data desensitization algorithm from a first preset desensitization strategy according to the sensitivity and the business requirement;

[0018] A first execution unit, the first execution unit is used to obtain second data after performing data desensitization processing on the first data according to the data desensitization algorithm;

[0019] a first output unit, the first output unit being configured to output the second data to an RPA mechanism;

[0020] a second execution unit, the second execution unit being configured to vertically split the second data according to the corresponding data desensitization algorithm according to the RPA mechanism to obtain multiple data subsets;

[0021] The third execution unit is used to store and manage the multiple data subsets respectively, and encrypt the multiple data subsets respectively by using an encryption algorithm.

[0022] In a third aspect, the present invention provides a multi-level security desensitization system for data, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the steps of the method of the first aspect when executing the program.

[0023] The above one or more technical solutions in the embodiments of the present application have at least one or more of the following technical effects:

[0024] An embodiment of the present invention provides a data multi-level security desensitization method and system, the method comprising: obtaining first data, wherein the first data is business data; obtaining the sensitivity and business requirements of the first data; determining a corresponding data desensitization algorithm from a first preset desensitization strategy according to the sensitivity and the business requirements; performing data desensitization processing on the first data according to the data desensitization algorithm to obtain second data; outputting the second data to an RPA mechanism; according to the RPA mechanism, vertically dividing the second data according to the corresponding data desensitization algorithm to obtain multiple data subsets; storing and managing the multiple data subsets respectively, and encrypting the multiple data subsets respectively using an encryption algorithm, and performing data desensitization processing on the first data according to the business requirements; According to the sensitivity of the business data and business needs, the desensitization strategy encapsulated by different desensitization algorithms is selected for processing. Then, the system administrator uses the RPA mechanism to vertically divide the collected desensitized data according to the desensitization policy level, stores them separately, and uses encryption algorithms to encrypt the stored data at each level. This solves the technical problem that the data desensitization technology in the existing technology does not distinguish the confidentiality level of the data, performs unified desensitization processing on all data, has a relatively single usage method, limits the flexibility and effectiveness of data desensitization, and has low processing efficiency. It achieves a more fine-grained control of the degree of data desensitization, provides different levels of data access rights for different users, ensures that sensitive information is effectively protected, and provides users with more reliable and trustworthy services.

[0025] The above description is only an overview of the technical solution of the present invention. In order to more clearly understand the technical means of the present invention, it can be implemented according to the contents of the specification. In order to make the above and other purposes, features and advantages of the present invention more obvious and easy to understand, the specific implementation methods of the present invention are listed below. BRIEF DESCRIPTION OF THE DRAWINGS

[0026] Figure 1 A schematic diagram of a process flow of a multi-level data security desensitization method in an embodiment of the present invention;

[0027] Figure 2 Another schematic diagram of a multi-level data security desensitization method according to an embodiment of the present invention;

[0028] Figure 3 It is another flow chart of a multi-level data security desensitization method in an embodiment of the present invention;

[0029] Figure 4 This is an RPA collection structure diagram of a data multi-level security desensitization method in an embodiment of the present invention;

[0030] Figure 5 A schematic diagram of vertical segmentation processing of a multi-level data security desensitization method in an embodiment of the present invention;

[0031] Figure 6 A schematic diagram of encryption processing of a multi-level data security desensitization method in an embodiment of the present invention;

[0032] Figure 7 This is a schematic diagram of the structure of a data multi-level security desensitization system in an embodiment of the present invention;

[0033] Figure 8 FIG. 4 is a schematic diagram of the structure of another exemplary electronic device in an embodiment of the present invention.

[0034] Explanation of the reference numerals: first obtaining unit 11 , second obtaining unit 12 , first determining unit 13 , first executing unit 14 , first output unit 15 , second executing unit 16 , third executing unit 17 , receiver 301 , processor 302 , transmitter 303 , memory 304 , bus interface 306 . DETAILED DESCRIPTION

[0035] The embodiment of the present invention provides a multi-level security data desensitization method and system, which is used to solve the technical problems that the data desensitization technology in the prior art does not distinguish the confidentiality level of the data, performs uniform desensitization processing on all data, and has a relatively single usage method, which limits the flexibility and effectiveness of data desensitization and has low processing efficiency.

[0036] The technical solution in the embodiment of the present invention has the following general idea:

[0037] An embodiment of the present invention provides a data multi-level security desensitization method and system, which obtains first data, wherein the first data is business data; obtains the sensitivity and business requirements of the first data; determines a corresponding data desensitization algorithm from a first preset desensitization strategy according to the sensitivity and the business requirements; obtains second data after performing data desensitization processing on the first data according to the data desensitization algorithm; outputs the second data to an RPA mechanism; according to the RPA mechanism, vertically divides the second data according to the corresponding data desensitization algorithm to obtain multiple data subsets; stores and manages the multiple data subsets respectively, and encrypts the multiple data subsets respectively using an encryption algorithm, thereby achieving a more refined control of the degree of data desensitization, providing different levels of data access rights for different users, ensuring that sensitive information is effectively protected, and providing users with more reliable and trustworthy services.

[0038] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0039] Embodiment 1

[0040] Figure 1 FIG. 1 is a flow chart of a multi-level data security desensitization method according to an embodiment of the present invention. Figure 1 , Figure 2 As shown, an embodiment of the present invention provides a data multi-level security desensitization method, wherein the method includes:

[0041] Step 1: Obtain first data, wherein the first data is business data.

[0042] Step 2: Obtain the sensitivity and business requirements of the first data.

[0043] Specifically, the data desensitization in the present invention needs to select a suitable data desensitization algorithm for data desensitization processing according to the sensitivity of the original business data set and business requirements. Therefore, it is necessary to obtain the first data, which is the business data, and then obtain the sensitivity and business requirements corresponding to the business data.

[0044] Step 3: According to the sensitivity and the business requirements, determine a corresponding data desensitization algorithm from a first preset desensitization strategy.

[0045] Furthermore, the first preset desensitization strategy is specifically as follows: first-level desensitization, the first-level desensitization is used for data with a first sensitivity level, wherein the first-level desensitization algorithm corresponding to the first-level desensitization is: complete replacement with placeholders or specific strings to ensure that the data cannot be recovered or identified; second-level desensitization, the second-level desensitization is used for data with a second sensitivity level, wherein the second-level desensitization algorithm corresponding to the second-level desensitization is: retaining part of the information, and replacing or blurring the sensitive information; third-level desensitization, the third-level desensitization is used for data with a third sensitivity level, wherein the third-level desensitization algorithm corresponding to the third-level desensitization is: retaining the format of the data and replacing the information of the data; fourth-level desensitization, the fourth-level desensitization is used for data with a fourth sensitivity level, wherein the fourth-level desensitization algorithm corresponding to the fourth-level desensitization is: no desensitization is required, or, slight desensitization is performed.

[0046] Furthermore, the sensitivities of the first sensitivity level, the second sensitivity level, the third sensitivity level, and the fourth sensitivity level are arranged in descending order.

[0047] Specifically, after obtaining the sensitivity and business requirements of the business data, you can then select a suitable data desensitization algorithm to perform data desensitization processing, that is, determine the corresponding data desensitization algorithm from the first preset desensitization strategy.

[0048] Furthermore, according to the sensitivity of the data, four levels of desensitization algorithms can be defined, as follows: Level 1 desensitization (complete desensitization): Applicable to the most sensitive data, such as passwords, credit card numbers, etc. The strategy is to completely replace with placeholders or specific strings to ensure that the data cannot be recovered or identified; Level 2 desensitization (partial desensitization): Applicable to moderately sensitive data, such as email addresses, phone numbers, etc. The strategy is to retain some information, but replace or blur the sensitive parts. For example, the email address can only retain the prefix or suffix, and the phone number can only retain the first or last few digits; Level 3 desensitization (format desensitization): Applicable to relatively insensitive data but with certain format requirements, such as ID card numbers, dates, etc. The strategy is to retain the format of the data, but replace the specific content. For example, the ID card number can retain the first and last few digits, and the middle part can be replaced with an asterisk (*); the date can only retain the year or month; Level 4 desensitization (no desensitization or slight desensitization): Applicable to insensitive or public data. The strategy is that desensitization may not be required, or only slight desensitization processing is performed, such as removing spaces, replacing special characters, etc.

[0049] When a desensitization operation needs to be initiated, the system administrator enters the desensitization system through the unified login platform interface. The desensitization system obtains the target data from the target data source, selects a desensitization strategy based on the desensitization requirements, and submits a desensitization task application. After the application is uploaded to the OA system for approval, the system begins to perform sensitive data discovery and data desensitization operations on the target data, and outputs the desensitized data to the RPA mechanism, such as Figure 3 shown.

[0050] Commonly used data desensitization algorithms are shown in the following table.

[0051] Table 1. Commonly used data desensitization algorithms

[0052]

[0053]

[0054] Configuration of desensitization strategy: Supports system administrators to customize desensitization strategies and change appropriate desensitization algorithms. In data processing, different desensitization algorithms will be used according to data sensitivity and business needs to ensure data security and privacy.

[0055] Step 4: After performing data desensitization processing on the first data according to the data desensitization algorithm, the second data is obtained.

[0056] Furthermore, after performing data desensitization processing on the first data according to the data desensitization algorithm, obtaining the second data includes: obtaining multiple characteristic fields of the first data, and desensitizing the multiple characteristic fields separately when performing data desensitization processing on the first data according to the data desensitization algorithm corresponding to the multiple characteristic fields.

[0057] Specifically, after determining the data desensitization algorithm, it is necessary to perform data desensitization processing on the first data according to the target data desensitization algorithm, and then obtain the second data. Since sensitive data has multiple characteristic fields, each field has a corresponding data desensitization algorithm. Therefore, when desensitizing sensitive data, each sensitive field is desensitized separately. In other words, it is necessary to obtain multiple characteristic fields of the first data, and then according to the data desensitization algorithms corresponding to the multiple characteristic fields, when desensitizing the first data, the multiple characteristic fields are desensitized separately.

[0058] Step 5: Output the second data to the RPA mechanism;

[0059] Furthermore, the outputting of the second data to the RPA mechanism specifically includes: obtaining an automated task plan according to the business needs through a collection plan generator, wherein the automated task plan includes: task content information, execution sequence information, and required resource information; scheduling and optimizing the details of the automated task plan according to system resources and task priorities through a collection detail scheduler; and executing the automated task according to the instructions of the collection detail scheduler through a collection task executor to complete the automated processing of the business process.

[0060] Specifically, after obtaining the desensitized second data, the second data needs to be output to the RPA mechanism. The RPA collection process is mainly divided into three steps: collection plan generator, collection detail scheduler, and collection task executor. Figure 4As shown in the figure, after the desensitized data is processed, the RPA mechanism will automatically collect the desensitized data according to the preset timing and fixed-point rules. Specifically: Collection plan generator: The collection plan generator is the starting point of the RPA process. It is responsible for generating specific automation task plans according to business needs. These plans contain information such as the content of the task, the execution order, and the required resources, providing clear guidance for subsequent automation execution; Collection detail scheduler: The collection detail scheduler is responsible for scheduling and optimizing the plan details according to system resources and task priorities. It ensures that the tasks can be executed according to the scheduled time and order, while maximizing the use of system resources and improving the efficiency of automation processing; Collection task executor: The collection task executor is the core execution part of the RPA system. It is responsible for actually executing the automation tasks according to the instructions of the scheduler and completing the automation of the business process.

[0061] Step 6: According to the RPA mechanism, vertically segment the second data according to the corresponding data desensitization algorithm to obtain multiple data subsets;

[0062] Furthermore, the vertical segmentation specifically includes: the second data D includes attributes {X1,...,X d}, vertically divide the second data D into data subsets D1, data subsets D2, data subsets D3, and data subsets D4, wherein the data subset D1 contains attributes The data subset D2 contains the attributes The data subset D3 contains the attributes The data subset D4 contains the attributes in, | D 1| + | D2+D 3| +D 4| >D | .

[0063] Specifically, according to the RPA mechanism, after the collected second data is vertically segmented according to the corresponding data desensitization algorithm, multiple data subsets are obtained, that is, the desensitized data is vertically segmented, that is, the data is split into different subsets according to its desensitization level.

[0064] Furthermore, data vertical segmentation is a database optimization technology that can significantly improve query performance, optimize storage space, improve data security, improve scalability, and simplify data management. Data vertical segmentation technology can further achieve multi-level data desensitization. According to different data desensitization strategies, desensitized data is vertically segmented and the data confidentiality level is defined for hierarchical storage. The vertical segmentation method and data structure design are as follows: the data set D, that is, the second data D, contains the attributes {X1,...,X d}. Now vertically split the data set D into four sub-data sets: data set D1, data set D2, data set D3, and data set D4. Among them, sub-data set D1 contains attributes D2 contains attributes D3 contains attribute D4 contains attributes in:

[0065] D1 | + | D2+ | D3 | +D4 | >D | .

[0066] Furthermore, the vertically segmented data subsets can be stored and managed independently, thereby improving the efficiency of data processing and query, so as to manage and control data more finely. At the same time, the system will encrypt each data block to ensure that even if the data is illegally obtained, its content cannot be easily read. By introducing the RPA mechanism, the timed and fixed-point acquisition of desensitized data for vertical segmentation is achieved, which improves the accuracy and efficiency of data processing, while ensuring the security and privacy protection of data, making sensitive data processing move towards batch and automated direction, and solving the security and efficiency problems of processing massive data in the big data environment.

[0067] Step 7: Store and manage the multiple data subsets separately, and encrypt the multiple data subsets separately using an encryption algorithm.

[0068] Furthermore, the storing and managing the multiple data subsets separately and encrypting the multiple data subsets separately using an encryption algorithm also includes: storing and managing the multiple data subsets separately according to storage levels, wherein the storage levels include a first level, a second level, a third level, and a fourth level, wherein the first level, the second level, the third level, and the fourth level are arranged in descending order.

[0069] Specifically, after the data is vertically divided to obtain multiple data subsets, the multiple data subsets need to be stored and managed separately, and the multiple data subsets are encrypted separately using encryption algorithms. In this embodiment, according to different desensitization strategies, the vertically divided data is defined as four levels: the first level of confidentiality (top secret), the second level of confidentiality (confidential), the third level of confidentiality (secret), and the fourth level of confidentiality (public), and stored. In order to ensure the security of data at all levels, data at all levels are encrypted using a data encryption algorithm.

[0070] After vertical segmentation, the stored data has four levels: top secret, confidential, secret, and public. As shown in Table 2. Level I corresponds to top secret, the highest level; Level II corresponds to confidential; Level III corresponds to secret; Level IV corresponds to public, the lowest level. The system can introduce the idea of ​​vertical segmentation technology into data desensitization, and split the collected data into data blocks according to the desensitization strategy level. At the same time, with data encryption, there is no need to encrypt all data, saving encryption and decryption time and ensuring the security of data sharing.

[0071] Table 2. Storage data levels

[0072]

[0073] Furthermore, after the multiple data subsets are stored and managed separately and the multiple data subsets are encrypted separately using an encryption algorithm, it also includes: determining the access permission level according to the user level, wherein the user level includes a first level, a second level, a third level, and a fourth level, the first level has a first access level, the second level has a second access level, the third level has a third access level, and the fourth level has a fourth access level, wherein the user permissions of the first level, the second level, the third level, and the fourth level are arranged in descending order.

[0074] Specifically, after encrypting multiple data subsets, different users can be granted access rights, as shown in Table 3 below, which are divided into four categories.

[0075] Table 3. Access rights for different users

[0076]

[0077] Among them, Level 1 users have the highest authority, with Level I access level, and can access top secret information. Level 2 users have the second highest authority, with Level II access level, and can access confidential information. Level 3 users have lower authority, with Level III access level, and can access secret information. Level 4 users have the lowest authority, with Level IV access level, and can only access public data, while the other three types of users can not only access their own corresponding level of data but also access other lower-level data.

[0078] Users at different levels have different permissions to access corresponding data, which further prevents sensitive data from being used directly in an unreliable environment. This ensures the security of data in the business database and does not damage the data information and data features in the database.

[0079] The data encryption algorithm is an algorithm used to protect the confidentiality and security of data. It uses a specific algorithm and key to encrypt data so that unauthorized personnel cannot read or tamper with the data. It can protect the data collected by RPA from unauthorized access and leakage, ensuring the security and privacy of the data.

[0080] It can be seen that the data desensitization method in the present invention can select desensitization strategies encapsulated by different desensitization algorithms for processing according to the sensitivity of business data and business needs. Then, the system administrator vertically divides the collected desensitized data according to the desensitization strategy level through the RPA mechanism, stores them separately, and uses encryption algorithms to encrypt the stored data at each level, and the corresponding levels are four confidentiality levels: top secret (high confidentiality), confidential (medium confidentiality), secret (low confidentiality) and public (no confidentiality). Set corresponding access rights for personnel of different levels, which are four levels: level I access level, level II access level, level III access level and level IV access level, among which level I access level is the highest, which is gradually reduced to achieve fine-grained access control, which can well solve the security and efficiency problems of data when sharing. According to the sensitivity of the data and business needs, different attributes of the same data object can be processed using different desensitization algorithms, and vertical segmentation technology is introduced to divide different security levels for different attributes, and hierarchical storage is performed. At the same time, with data encryption, multi-level security desensitization of user data is achieved. It solves the privacy issues in the process of data use, thereby providing users with more reliable and trustworthy services.

[0081] Furthermore, the present invention solves the current problem of hierarchical data access management and efficient and secure sharing. Considering the management authority requirements of important data security levels, vertical segmentation technology is introduced to divide data into data blocks of different confidentiality levels, and different permissions are granted to users for different data blocks. This processing method not only ensures the availability of data, but also effectively protects sensitive information from being leaked, realizes hierarchical storage and management of data; and solves the problem of lack of flexibility in existing data desensitization strategies. In view of the lack of flexibility of traditional data desensitization strategies, it is impossible to formulate refined desensitization strategies according to the specific attributes of data and business scenarios. An automatically configurable desensitization strategy is introduced, which can flexibly adjust and optimize the desensitization strategy dynamically according to the sensitivity of data attributes and specific business needs to meet different data desensitization needs; it solves the security and efficiency problems of processing massive data in a big data environment. Therefore, the RPA mechanism is introduced to realize the vertical segmentation of desensitized data obtained at a fixed time and point, improve the accuracy and efficiency of data processing, and ensure the security and privacy protection of data at the same time, so that sensitive data processing moves towards batch and automated directions.

[0082] Further flexibility is achieved: the existing data desensitization is not divided into levels. Vertical segmentation technology is introduced to divide data into data blocks with different confidentiality levels, and refined data desensitization processing is achieved, thereby more flexibly meeting business needs and security requirements; data security is improved: the idea of ​​vertical data segmentation technology is introduced into data desensitization, and combined with data encryption, hierarchical access management of user data is achieved, which solves the privacy problem in the process of data use, thereby providing users with more reliable and trustworthy services.

[0083] Embodiment 2

[0084] The embodiment of the present invention also provides another data multi-level security desensitization method, which is as follows:

[0085] Data management practice of a large digital medical institution. The medical institution has a large amount of user health data. The health data set includes basic user information data (mobile phone, name, ID card, etc.). According to the data sensitivity and the data confidentiality level corresponding to the business needs, the physical examination data is divided into basic test data, secret data, confidential data and top secret data. Among them, basic test data (equipment, equipment ID, time, height) is represented by S0, secret data (skin / eye / other results, respiratory system results, motor system results) is represented by S1, confidential data (endocrine system results, circulatory system results, digestive system results) is represented by S2, and top secret data (neurological system results, urinary and reproductive system results) is represented by S3, and graded desensitization is performed.

[0086] Among them, S3 is suitable for the most sensitive data and uses a first-level desensitization algorithm. Completely replace with placeholders or specific strings to ensure that the data cannot be restored or identified. For example, urogenital system results: for raw data like "prostatitis, mild", after desensitization, it can be urogenital status: unknown, without revealing the specific diagnosis. S2 is suitable for moderately sensitive data and uses a second-level desensitization algorithm. Keep some information, but replace or blur the sensitive part. For example, blur the specific blood pressure value (such as 140 / 90mmHg) into level one hypertension. S1 is suitable for relatively insensitive data but with certain format requirements, using a third-level desensitization algorithm. Keep the format of the data, but replace the specific content. For example, replace skin eczema with skin abnormality. S0 is suitable for insensitive or public data and uses a fourth-level desensitization algorithm. Desensitization may not be required, or only slight desensitization is performed.

[0087] The desensitized data is collected by the RPA mechanism and vertically segmented, such as Figure 5 shown.

[0088] After the data is vertically segmented, the symmetric encryption algorithm AES is used to encrypt the segmented data blocks. The AES algorithm is a widely used symmetric encryption algorithm with high security and reliability. It divides the encrypted fields (plaintext) into groups of equal length, encrypts one group of data each time until the entire plaintext is encrypted, and then splices the ciphertext blocks together to form ciphertext. For example, let the AES encryption function be E, then C=E(K+P), where P is the plaintext, K is the key, and C is the ciphertext. In other words, if the plaintext P and the key K are input as parameters of the encryption function, the encryption function E will output the ciphertext C. The encryption and decryption keys are the same. If decryption is to be performed, let the AES decryption function be D, then P=D(K+C), where C is the ciphertext, K is the key, and P is the plaintext. In other words, if the ciphertext C and the key K are input as parameters of the decryption function, the decryption function will output the plaintext P.

[0089] First, add a different key to each data block header, store and manage the key corresponding to each data block, and use the symmetric encryption algorithm AES for encryption. Figure 6 As shown, Key1, Key2, Key3, and Key4 are encrypted using the AES algorithm.

[0090] When a user requests access to a block of data, the system first verifies the user's identity and permissions.

[0091] Based on the user's permissions, the system will determine which keys to assign to the user and provide them to the user. The user uses the provided key to decrypt the data block and access the data in it. The system must be highly secure to prevent unauthorized access and key leakage. Authentication and authorization of users ensure that only authorized users can access the encrypted data. The desensitized data blocks are reassembled into new data sets or tables for subsequent use.

[0092] By combining vertical segmentation and block desensitization, the degree of data desensitization can be more finely controlled, providing different levels of data access rights to different users. This ensures that sensitive information is effectively protected while retaining the original structure and content of the data as much as possible to meet data analysis and other business needs.

[0093] Embodiment 3

[0094] Based on the same inventive concept as the multi-level data security desensitization method in the aforementioned embodiment, the present invention also provides a multi-level data security desensitization system, such as Figure 7 As shown, the system comprises:

[0095] A first obtaining unit 11, the first obtaining unit 11 is used to obtain first data, wherein the first data is business data;

[0096] A second obtaining unit 12, the second obtaining unit 12 is used to obtain the sensitivity and business requirements of the first data;

[0097] A first determining unit 13, the first determining unit 13 is used to determine a corresponding data desensitization algorithm from a first preset desensitization strategy according to the sensitivity and the business requirements;

[0098] A first execution unit 14, the first execution unit 14 is used to obtain second data after performing data desensitization processing on the first data according to the data desensitization algorithm;

[0099] A first output unit 15, the first output unit 15 is used to output the second data to the RPA mechanism;

[0100] A second execution unit 16, the second execution unit 16 is used to obtain multiple data subsets after vertically dividing the second data according to the corresponding data desensitization algorithm according to the RPA mechanism;

[0101] The third execution unit 17 is used to store and manage the multiple data subsets respectively, and encrypt the multiple data subsets respectively by using an encryption algorithm.

[0102] Furthermore, the system also includes: the first preset desensitization strategy is specifically: first-level desensitization, the first-level desensitization is used for data with a first sensitivity level, wherein the first-level desensitization algorithm corresponding to the first-level desensitization is: complete replacement with placeholders or specific strings to ensure that the data cannot be recovered or identified; second-level desensitization, the second-level desensitization is used for data with a second sensitivity level, wherein the second-level desensitization algorithm corresponding to the second-level desensitization is: retaining part of the information, and replacing or blurring the sensitive information; third-level desensitization, the third-level desensitization is used for data with a third sensitivity level, wherein the third-level desensitization algorithm corresponding to the third-level desensitization is: retaining the format of the data and replacing the information of the data; fourth-level desensitization, the fourth-level desensitization is used for data with a fourth sensitivity level, wherein the fourth-level desensitization algorithm corresponding to the fourth-level desensitization is: no desensitization is required, or, a slight desensitization process is performed.

[0103] Furthermore, the system also includes: the sensitivities of the first sensitivity level, the second sensitivity level, the third sensitivity level, and the fourth sensitivity level are arranged in descending order.

[0104] Furthermore, the system also includes: a third obtaining unit, which is used to obtain multiple characteristic fields of the first data, and when desensitizing the first data according to the data desensitizing algorithm corresponding to the multiple characteristic fields, the multiple characteristic fields are desensitized separately.

[0105] Furthermore, the system further comprises: a fourth execution unit, the fourth execution unit being used to obtain an automated task plan according to the business requirements through a collection plan generator, wherein the automated task plan comprises: task content information, execution sequence information, and required resource information;

[0106] A fifth execution unit, the fifth execution unit is used to schedule and optimize the details of the automation task plan according to system resources and task priorities through a collection detail scheduler;

[0107] The sixth execution unit is used to execute the automation task through the collection task executor according to the instructions of the collection detail scheduler to complete the automation processing of the business process.

[0108] Furthermore, the system further comprises: the second data D comprises attributes {X1,...,X d}, vertically divide the second data D into data subsets D1, data subsets D2, data subsets D3, and data subsets D4, wherein the data subset D1 contains attributes The data subset D2 contains the attributes The data subset D3 contains the attributes The data subset D4 contains the attributes in, | D 1| + | D2+D 3| +D 4| >D | .

[0109] Furthermore, the system also includes: a seventh execution unit, which is used to store and manage the multiple data subsets respectively according to storage levels, wherein the storage levels include a first level, a second level, a third level, and a fourth level, wherein the first level, the second level, the third level, and the fourth level are arranged in descending order.

[0110] Furthermore, the system also includes: an eighth execution unit, which is used to determine the access permission level according to the user level, wherein the user level includes a first level, a second level, a third level, and a fourth level, the first level has a first access level, the second level has a second access level, the third level has a third access level, and the fourth level has a fourth access level, wherein the user permissions of the first level, the second level, the third level, and the fourth level are arranged in descending order.

[0111] The foregoing Figure 1 The various variations and specific examples of a multi-level data security desensitization method in Example 1 are also applicable to a multi-level data security desensitization system in this embodiment. Through the above detailed description of a multi-level data security desensitization method, those skilled in the art can clearly know the implementation method of a multi-level data security desensitization system in this embodiment, so for the sake of brevity of the specification, it will not be described in detail here.

[0112] Embodiment 4

[0113] Based on the same inventive concept as the multi-level data security desensitization method in the aforementioned embodiment, the present invention also provides an exemplary electronic device, such as Figure 8 As shown, it includes a memory 304, a processor 302, and a computer program stored in the memory 304 and executable on the processor 302. When the processor 302 executes the program, the steps of any one of the methods of the multi-level data security desensitization method described above are implemented.

[0114] Among them, Figure 8 In the embodiment of the present invention, a bus architecture (represented by bus 300) is shown, which may include any number of interconnected buses and bridges, and bus 300 links various circuits including one or more processors represented by processor 302 and memory represented by memory 304. Bus 300 may also link various other circuits such as peripherals, voltage regulators, and power management circuits, which are well known in the art and are therefore not further described herein. Bus interface 306 provides an interface between bus 300 and receiver 301 and transmitter 303. Receiver 301 and transmitter 303 may be the same element, namely a transceiver, providing a unit for communicating with various other devices over a transmission medium. Processor 302 is responsible for managing bus 300 and general processing, while memory 304 may be used to store data used by processor 302 when performing operations.

[0115] The above one or more technical solutions in the embodiments of the present application have at least one or more of the following technical effects:

[0116] An embodiment of the present invention provides a data multi-level security desensitization method and system, the method comprising: obtaining first data, wherein the first data is business data; obtaining the sensitivity and business requirements of the first data; determining a corresponding data desensitization algorithm from a first preset desensitization strategy according to the sensitivity and the business requirements; performing data desensitization processing on the first data according to the data desensitization algorithm to obtain second data; outputting the second data to an RPA mechanism; according to the RPA mechanism, vertically dividing the second data according to the corresponding data desensitization algorithm to obtain multiple data subsets; storing and managing the multiple data subsets respectively, and encrypting the multiple data subsets respectively using an encryption algorithm, and performing data desensitization processing on the first data according to the business requirements; According to the sensitivity of the business data and business needs, the desensitization strategy encapsulated by different desensitization algorithms is selected for processing. Then, the system administrator uses the RPA mechanism to vertically divide the collected desensitized data according to the desensitization policy level, stores them separately, and uses encryption algorithms to encrypt the stored data at each level. This solves the technical problem that the data desensitization technology in the existing technology does not distinguish the confidentiality level of the data, performs unified desensitization processing on all data, has a relatively single usage method, limits the flexibility and effectiveness of data desensitization, and has low processing efficiency. It achieves a more fine-grained control of the degree of data desensitization, provides different levels of data access rights for different users, ensures that sensitive information is effectively protected, and provides users with more reliable and trustworthy services.

[0117] Those skilled in the art will appreciate that embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0118] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems) and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the process in the flowchart. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0119] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0120] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0121] Obviously, those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalents, the present invention is also intended to include these modifications and variations.

Claims

1. A data multi-level security desensitization method, characterized in that: The method comprises: Obtaining first data, wherein the first data is business data; Obtaining sensitivity and business requirements of the first data; Determining a corresponding data desensitization algorithm from a first preset desensitization strategy according to the sensitivity and the business requirement; After performing data desensitization processing on the first data according to the data desensitization algorithm, second data is obtained; outputting the second data to the RPA mechanism; According to the RPA mechanism, vertically segmenting the second data according to the corresponding data desensitization algorithm to obtain multiple data subsets; The multiple data subsets are stored and managed separately, and encryption algorithms are used to encrypt the multiple data subsets separately.

2. The data multi-level security desensitization method according to claim 1, characterized in that: The first preset desensitization strategy is specifically: First-level desensitization, the first-level desensitization is used for data with a first sensitivity level, wherein the first-level desensitization algorithm corresponding to the first-level desensitization is: completely replacing with placeholders or specific strings to ensure that the data cannot be restored or identified; Second-level desensitization, the second-level desensitization is used for data with a second sensitivity level, wherein the second-level desensitization algorithm corresponding to the second-level desensitization is: retaining part of the information and replacing or blurring the sensitive information; The third level desensitization is used for data with a third sensitivity level, wherein the third level desensitization algorithm corresponding to the third level desensitization is: retaining the format of the data and replacing the information of the data; The fourth level desensitization is used for data with a fourth sensitivity level, wherein the fourth level desensitization algorithm corresponding to the fourth level desensitization is: no desensitization is required, or a slight desensitization is performed.

3. The data multi-level security desensitization method according to claim 2, characterized in that: The sensitivities of the first sensitivity level, the second sensitivity level, the third sensitivity level, and the fourth sensitivity level are arranged in descending order.

4. The data multi-level security desensitization method according to claim 1, characterized in that: The step of performing data desensitization processing on the first data according to the data desensitization algorithm to obtain second data includes: A plurality of characteristic fields of the first data are obtained, and when desensitizing the first data according to a data desensitizing algorithm corresponding to the plurality of characteristic fields, the plurality of characteristic fields are desensitized respectively.

5. The data multi-level security desensitization method according to claim 1, characterized in that: The outputting the second data to the RPA mechanism specifically includes: By collecting the plan generator, according to the business requirements, an automated task plan is obtained, wherein the automated task plan includes: task content information, execution sequence information, and required resource information; By collecting the detailed scheduler, the details of the automated task plan are scheduled and optimized according to system resources and task priorities; The automated task is executed by the collection task executor according to the instruction of the collection detail scheduler to complete the automated processing of the business process.

6. The data multi-level security desensitization method according to claim 1, characterized in that: The vertical segmentation specifically includes: The second data D includes attributes {X1,...,X d }, vertically divide the second data D into data subsets D1, data subsets D2, data subsets D3, and data subsets D4, wherein the data subset D1 contains attributes The data subset D2 contains the attributes The data subset D3 contains the attributes The data subset D4 contains the attributes Among them, D1 | + | D2 | + | D3 | + | D4 | >D | .

7. The multi-level security desensitization method for data according to claim 1, characterized in that: The storing and managing the multiple data subsets respectively and encrypting the multiple data subsets respectively by using an encryption algorithm further includes: The multiple data subsets are stored and managed respectively according to storage levels, wherein the storage levels include a first level, a second level, a third level, and a fourth level, wherein the first level, the second level, the third level, and the fourth level are arranged in descending order.

8. The data multi-level security desensitization method according to claim 7, characterized in that: After storing and managing the plurality of data subsets respectively and encrypting the plurality of data subsets respectively by using an encryption algorithm, the method further includes: The access permission level is determined according to the user level, wherein the user level includes a first level, a second level, a third level, and a fourth level, wherein the first level has a first access level, the second level has a second access level, the third level has a third access level, and the fourth level has a fourth access level, wherein the user permissions of the first level, the second level, the third level, and the fourth level are arranged in descending order.

9. A data multi-level security desensitization system, characterized in that: The system comprises: A first obtaining unit, the first obtaining unit is used to obtain first data, wherein the first data is business data; a second obtaining unit, the second obtaining unit being used to obtain the sensitivity and business requirements of the first data; A first determining unit, the first determining unit being used to determine a corresponding data desensitization algorithm from a first preset desensitization strategy according to the sensitivity and the business requirement; A first execution unit, the first execution unit is used to obtain second data after performing data desensitization processing on the first data according to the data desensitization algorithm; a first output unit, the first output unit being configured to output the second data to an RPA mechanism; a second execution unit, the second execution unit being configured to vertically split the second data according to the corresponding data desensitization algorithm according to the RPA mechanism to obtain multiple data subsets; The third execution unit is used to store and manage the multiple data subsets respectively, and encrypt the multiple data subsets respectively by using an encryption algorithm.

10. A data multi-level security desensitization system, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the program, the steps of the method according to any one of claims 1 to 8 are implemented.

Images