Data desensitization method and device based on asynchronous replacement technology, equipment and medium

Abstract

The invention provides a data desensitization method and device based on an asynchronous replacement technology, equipment and a medium, and the method comprises the steps: obtaining text data, carrying out the recognition of the text data, and determining at least one piece of sensitive data in the text data; based on preset asynchronous permutation rules, determining an asynchronous permutation rule corresponding to each piece of sensitive data; for each piece of sensitive data, asynchronous permutation is carried out on the sensitive data according to an asynchronous permutation rule corresponding to the sensitive data, and desensitized data is obtained; and storing the data information of the at least one piece of desensitized data to the target storage position, wherein the data information comprises the asynchronous permutation rule and the data information of each piece of desensitized data. The data processing efficiency of the reversible desensitization technology is improved, and resource consumption is reduced.

Description

Technical Field

[0001] The present application relates to the field of data processing technology, and in particular to a data desensitization method, device, equipment and medium based on asynchronous replacement technology. Background Art

[0002] With the advent of the big data era, data has become an important asset for corporate and social development. However, the contradiction between open sharing of data and privacy protection has become increasingly prominent. Traditional data desensitization methods often directly delete or replace sensitive information. Although this can protect data privacy to a certain extent, it sacrifices the integrity and analyzability of the data. The emergence of reversible data desensitization technology provides a new approach to solving this problem, that is, while protecting data privacy, it retains the original structure and meaning of the data.

[0003] However, existing reversible desensitization technologies often have problems such as low processing efficiency and high resource consumption. Summary of the invention

[0004] In view of this, the purpose of the present application is to provide a data desensitization method, device, equipment and medium based on asynchronous substitution technology, which can identify sensitive data from text data, desensitize the data based on asynchronous substitution rules, and store the data information of the desensitized data to the target storage location, so as to facilitate the recovery of the desensitized data to achieve the effect of reversible desensitization, thereby improving the data processing efficiency of the reversible desensitization technology and reducing resource consumption.

[0005] In a first aspect, an embodiment of the present application provides a data desensitizing method based on asynchronous replacement technology, the method comprising: acquiring text data, identifying the text data, and determining at least one sensitive data in the text data; based on a pre-set asynchronous replacement rule, determining an asynchronous replacement rule corresponding to each sensitive data; for each sensitive data, asynchronously replacing the sensitive data according to an asynchronous replacement rule corresponding to the sensitive data to obtain a desensitized data; storing data information of at least one desensitized data to a target storage location, the data information comprising the asynchronous replacement rule and data information of each desensitized data.

[0006] Optionally, the method also includes: obtaining an asynchronous replacement rule and data information of at least one desensitized data from the target storage location; for each desensitized data, restoring the desensitized data to sensitive data corresponding to the desensitized data according to the asynchronous replacement rule and data information corresponding to the desensitized data.

[0007] Optionally, the step of determining an asynchronous replacement rule corresponding to each sensitive data includes: identifying a data type of the at least one sensitive data; for each sensitive data, determining a target asynchronous replacement rule corresponding to the data type of the sensitive data according to the data type of the sensitive data.

[0008] Optionally, the step of obtaining each desensitized data includes: generating an identifier and embedding the identifier into the text data; generating a desensitizing key corresponding to the identifier according to an asynchronous substitution rule corresponding to the sensitive data; performing multi-step encoding conversion and encryption operations on the sensitive data according to the desensitizing key to obtain the desensitized data.

[0009] Optionally, multiple sensitive data are asynchronously replaced through the following steps: based on a distributed computing platform, multiple sensitive data are asynchronously replaced, and the step of asynchronously replacing each sensitive data includes: for a field of the sensitive data, the sensitive data is asynchronously replaced according to an asynchronous replacement rule corresponding to the field of the sensitive data to obtain a desensitized data, and / or, for multiple sub-fields of the field of the sensitive data, the sub-field is asynchronously replaced according to an asynchronous replacement rule corresponding to each sub-field of the sensitive data to obtain multiple sub-desensitized data; based on the multiple sub-desensitized data, one desensitized data is obtained.

[0010] Optionally, the step of restoring each desensitized data to sensitive data corresponding to the desensitized data includes: obtaining an identifier of the desensitized data; determining, based on the identifier of the desensitized data, an asynchronous replacement rule and data information corresponding to the desensitized data; generating a restoration key based on the asynchronous replacement rule and data information corresponding to the desensitized data; restoring the desensitized data based on the restoration key to obtain a sensitive data corresponding to the desensitized data; and restoring the sensitive data to a position corresponding to the sensitive data.

[0011] In the second aspect, the present application also provides a data desensitization device based on asynchronous replacement technology, including a fault test data generation module, a data consistency problem monitoring module, a fault test stop module and a data repair module, the fault test data generation module is used to generate multiple fault test data based on a pre-trained target test fault generation model and according to the architecture and data flow of the distributed relational database;

[0012] A data consistency problem monitoring module, for each fault test data, injecting the fault test data into the distributed relational database, and performing data consistency problem monitoring on the distributed relational database based on a consistency detection algorithm;

[0013] A fault test stopping module, used for stopping the injection of the multiple test faults and stopping monitoring the data consistency problem of the distributed relational database when there is a data consistency problem in the distributed relational database;

[0014] The data repair module is used to generate a fault test report according to the data consistency problem occurring in the distributed relational database, and repair the data occurring in the distributed relational database with the data consistency problem.

[0015] In a third aspect, the present application further provides a computer device, including a memory and a processor, wherein the memory stores a computer program, and when the processor executes the computer program, the following steps are implemented:

[0016] Acquire text data, and identify the text data to determine at least one sensitive data in the text data;

[0017] Based on the preset asynchronous replacement rule, determine an asynchronous replacement rule corresponding to each sensitive data;

[0018] For each sensitive data, asynchronously replace the sensitive data according to an asynchronous replacement rule corresponding to the sensitive data to obtain a desensitized data;

[0019] Data information of at least one desensitized data is stored in a target storage location, wherein the data information includes an asynchronous replacement rule and data information of each desensitized data.

[0020] In a fourth aspect, the present application further provides a computer-readable storage medium having a computer program stored thereon, and when the computer program is executed by a processor, the following steps are implemented:

[0021] Acquire text data, and identify the text data to determine at least one sensitive data in the text data;

[0022] Based on the preset asynchronous replacement rule, determine an asynchronous replacement rule corresponding to each sensitive data;

[0023] For each sensitive data, asynchronously replace the sensitive data according to an asynchronous replacement rule corresponding to the sensitive data to obtain a desensitized data;

[0024] Data information of at least one desensitized data is stored in a target storage location, wherein the data information includes an asynchronous replacement rule and data information of each desensitized data.

[0025] In a fifth aspect, the present application further provides a computer program product, including a computer program, which implements the following steps when executed by a processor:

[0026] Acquire text data, and identify the text data to determine at least one sensitive data in the text data;

[0027] Based on the preset asynchronous replacement rule, determine an asynchronous replacement rule corresponding to each sensitive data;

[0028] For each sensitive data, asynchronously replace the sensitive data according to an asynchronous replacement rule corresponding to the sensitive data to obtain a desensitized data;

[0029] Data information of at least one desensitized data is stored in a target storage location, wherein the data information includes an asynchronous replacement rule and data information of each desensitized data.

[0030] The data desensitization method, device, equipment and medium based on asynchronous substitution technology provided in the embodiments of the present application can identify sensitive data from text data, desensitize the data based on asynchronous substitution rules, and store the data information of the desensitized data to the target storage location to facilitate the recovery of the desensitized data to achieve the effect of reversible desensitization, thereby improving the data processing efficiency of the reversible desensitization technology and reducing resource consumption.

[0031] In order to make the above-mentioned objects, features and advantages of the present application more obvious and easy to understand, preferred embodiments are specifically cited below and described in detail with reference to the attached drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings required for use in the embodiments will be briefly introduced below. It should be understood that the following drawings only show certain embodiments of the present application and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0033] Figure 1 A data desensitization method based on asynchronous replacement technology provided in an embodiment of the present application;

[0034] Figure 2 Another data desensitization method based on asynchronous replacement technology provided in an embodiment of the present application;

[0035] Figure 3 It is a structural block diagram of a data desensitization device based on asynchronous replacement technology in one embodiment;

[0036] Figure 4 FIG. 4 is a diagram showing the internal structure of a computer device in one embodiment. DETAILED DESCRIPTION

[0037] To make the purpose, technical scheme and advantages of the embodiments of the present application clearer, the technical scheme in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all of the embodiments. The components of the embodiments of the present application usually described and shown in the drawings here can be arranged and designed in various different configurations. Therefore, the following detailed description of the embodiments of the present application provided in the drawings is not intended to limit the scope of the application claimed for protection, but merely represents the selected embodiments of the present application. Based on the embodiments of the present application, each other embodiment obtained by those skilled in the art without making creative work belongs to the scope of protection of the present application.

[0038] First, the application scenarios to which this application is applicable are introduced. This application can be applied in the field of data processing and information security technology.

[0039] Research has found that with the advent of the big data era, data has become an important asset for corporate and social development. However, the contradiction between open sharing of data and privacy protection has become increasingly prominent. Traditional data desensitization methods often directly delete or replace sensitive information. Although this can protect data privacy to a certain extent, it sacrifices the integrity and analyzability of the data. The emergence of reversible data desensitization technology provides a new approach to solving this problem, that is, while protecting data privacy, it retains the original structure and meaning of the data.

[0040] However, existing reversible desensitization technologies often have problems such as low processing efficiency and high resource consumption.

[0041] Based on this, the embodiments of the present application provide a data desensitization method, device, equipment and medium based on asynchronous substitution technology, which can identify sensitive data from text data, desensitize the data based on asynchronous substitution rules, and store the data information of the desensitized data to the target storage location, so as to facilitate the recovery of the desensitized data to achieve the effect of reversible desensitization, thereby improving the data processing efficiency of the reversible desensitization technology and reducing resource consumption.

[0042] See also Figure 1 , Figure 1 This is a flow chart of a method for identifying an overload of an electronic scale provided in an embodiment of the present application. Figure 1 As shown in , the method for identifying an overload of an electronic scale provided in an embodiment of the present application includes:

[0043] S101. Acquire text data, identify the text data, and determine at least one sensitive data in the text data.

[0044] Among them, at least one sensitive data includes personal identity information, financial information, etc.

[0045] As an example, in this step, a Uuid can be generated and embedded in the file data. Specifically, a 128-bit random number can be generated for the desensitized file as the Uuid, and then the Uuid can be embedded and bound to the file body.

[0046] Here, UUID plays a unique role in identifying the file, and it can be used to accurately associate the relevant operations and data of a specific file during the subsequent encryption, decryption and data management processes.

[0047] S102: Based on the preset asynchronous replacement rules, determine an asynchronous replacement rule corresponding to each sensitive data.

[0048] Specifically, the step of determining an asynchronous replacement rule corresponding to each sensitive data includes: identifying the data type of the at least one sensitive data; for each sensitive data, determining a target asynchronous replacement rule corresponding to the data type of the sensitive data according to the data type of the sensitive data.

[0049] Specifically, multiple sensitive data are asynchronously replaced through the following steps: based on a distributed computing platform, multiple sensitive data are asynchronously replaced, and the step of asynchronously replacing each sensitive data includes: for a field of the sensitive data, the sensitive data is asynchronously replaced according to an asynchronous replacement rule corresponding to the field of the sensitive data to obtain a desensitized data, and / or, for multiple sub-fields of the field of the sensitive data, the sub-field is asynchronously replaced according to an asynchronous replacement rule corresponding to each sub-field of the sensitive data to obtain multiple sub-desensitized data; based on the multiple sub-desensitized data, one desensitized data is obtained.

[0050] Here, one or more sets of asynchronous replacement rules can be designed according to the characteristics of sensitive data and the requirements for desensitization, where the asynchronous replacement rules include but are not limited to dynamic replacement based on timestamps, encryption replacement based on hash algorithms, random replacement based on pseudo-random number generators, etc. The key is that these rules can support asynchronous processing, that is, different data fields or different parts of the same field can be replaced independently according to different rules.

[0051] S103: For each sensitive data, perform asynchronous replacement on the sensitive data according to an asynchronous replacement rule corresponding to the sensitive data to obtain a desensitized data.

[0052] Specifically, the steps of obtaining each desensitized data include: generating an identifier and embedding the identifier into the text data; generating a desensitizing key corresponding to the identifier according to an asynchronous substitution rule corresponding to the sensitive data; performing multi-step encoding conversion and encryption operations on the sensitive data according to the desensitizing key to obtain the desensitized data.

[0053] Here, asynchronous processing of data is achieved through parallel or distributed computing technology, which improves the desensitization efficiency.

[0054] As an example, the steps of generating a desensitized key include: obtaining a 128-bit working key, connecting it with the previously generated uuid, obtaining a 256-bit hash value by calculating the SM3 summary, and then performing an XOR operation on the front and back 128 bits of the hash value to obtain a 128-bit desensitized key.

[0055] In this way, the working key and UUID are used to generate a unique desensitizing key for the file through a specific hash algorithm and XOR operation, ensuring that each file has a unique and fixed encryption and decryption basis.

[0056] As an example, the steps of encoding conversion and encryption of a string include: first, the string to be desensitized (using GB2312 encoding) is encoded and converted. Since the total number of valid GB2312 characters is 7445, each character is converted into a numerical value of 0-7444, and then these numerical values ​​are connected to form a 7445-base number. Next, this 7445-base number is converted into a hexadecimal value. After that, the hexadecimal value is SM4 encrypted using the desensitizing key generated previously. Finally, the encrypted hexadecimal value is converted back to a 7445-base number, and each number is reversed to check the corresponding GB2312 character to form the corresponding encrypted desensitized string.

[0057] In this way, through multi-step encoding conversion and encryption operations, the original string is transformed according to specific rules, so that it exists in an encrypted and desensitized form during storage or transmission, protecting the privacy of the original data.

[0058] S104. Store data information of at least one desensitized data to a target storage location, wherein the data information includes an asynchronous replacement rule and data information of each desensitized data.

[0059] In this way, when the data needs to be restored later, the corresponding encrypted desensitized string can be accurately found according to the UUID for decryption and restoration operations, which also facilitates data management and query.

[0060] Optionally, see Figure 2 , Figure 2 This is a flow chart of another data desensitization method based on asynchronous replacement technology provided in an embodiment of the present application. Figure 2 As shown in , the data desensitization method based on asynchronous replacement technology provided in the embodiment of the present application includes:

[0061] S201. Obtain at least one asynchronous replacement rule and data information of desensitized data from the target storage location.

[0062] S202. For each desensitized data, according to the asynchronous replacement rule and data information corresponding to the desensitized data, restore the desensitized data to the sensitive data corresponding to the desensitized data.

[0063] Specifically, the step of restoring each desensitized data to sensitive data corresponding to the desensitized data includes: obtaining an identifier of the desensitized data; determining, based on the identifier of the desensitized data, an asynchronous replacement rule and data information corresponding to the desensitized data; generating a restoration key based on the asynchronous replacement rule and data information corresponding to the desensitized data; restoring the desensitized data based on the restoration key to obtain a sensitive data corresponding to the desensitized data; and restoring the sensitive data to a position corresponding to the sensitive data.

[0064] The identifier of the desensitized data may be Unid.

[0065] As an example, the steps to generate the restoration key include: obtaining a 128-bit working key from the desensitizing system, connecting it with the extracted uuid to calculate the 256-bit hash value of the SM3 summary, and then XORing the front and back 128 bits to obtain a 128-bit desensitizing key with one text and one secret.

[0066] In this way, the desensitizing key is regenerated according to the same rules as those used for encryption, ensuring that the encrypted data of the corresponding file can be correctly decrypted.

[0067] As an example, the steps for restoring desensitized data include: first, convert the desensitized string to be restored (also based on the understanding of GB2312 encoding). Convert each character into a value of 0-7444, connect them to form a 7445-base number, and then convert it into a hexadecimal value. Then, use the regenerated desensitization key to perform SM4 decryption on this hexadecimal value. Finally, convert the decrypted hexadecimal value into a 7445-base number, and reverse-check the corresponding GB2312 character for each number to form the corresponding desensitized decryption string.

[0068] In this way, through the reverse operation of the encryption process, the encoded form of the original string is gradually restored so that it can be restored to its original understandable state.

[0069] The data desensitization method, device, equipment and medium based on asynchronous substitution technology provided in the embodiments of the present application can identify sensitive data from text data, desensitize the data based on asynchronous substitution rules, and store the data information of the desensitized data to the target storage location to facilitate the recovery of the desensitized data to achieve the effect of reversible desensitization, thereby improving the data processing efficiency of the reversible desensitization technology and reducing resource consumption.

[0070] It should be understood that, although the various steps in the flowcharts involved in the above-mentioned embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps does not have a strict order restriction, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above-mentioned embodiments can include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily to be carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0071] Based on the same inventive concept, the embodiment of the present application also provides a data desensitization device based on asynchronous replacement technology for implementing the data desensitization method based on asynchronous replacement technology involved above. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme recorded in the above method, so the specific limitations in the embodiment of the data desensitization device based on asynchronous replacement technology provided below can be referred to the limitations of the data desensitization method based on asynchronous replacement technology above, and will not be repeated here.

[0072] Please refer to Figure 3 , In an exemplary embodiment, a data desensitization device based on asynchronous replacement technology is provided, comprising: a fault test data generation module 10, a data consistency problem monitoring module 20, a fault test stop module 30 and a data repair module 40, the fault test data generation module 10 is used to generate multiple fault test data based on a pre-trained target test fault generation model and according to the architecture and data flow of the distributed relational database;

[0073] A data consistency problem monitoring module 20 is used to inject each fault test data into the distributed relational database, and perform data consistency problem monitoring on the distributed relational database based on a consistency detection algorithm;

[0074] A fault test stopping module 30 is used to stop injecting the multiple test faults and stop monitoring the distributed relational database for data consistency problems when the distributed relational database has a data consistency problem;

[0075] The data repair module 40 is used to generate a fault test report according to the data consistency problem occurring in the distributed relational database, and repair the data occurring in the distributed relational database with the data consistency problem.

[0076] Each module in the above-mentioned data desensitization device based on asynchronous replacement technology can be implemented in whole or in part by software, hardware and their combination. Each of the above-mentioned modules can be embedded in or independent of the processor in the computer device in the form of hardware, or can be stored in the memory in the computer device in the form of software, so that the processor can call and execute the corresponding operations of each of the above modules.

[0077] In an exemplary embodiment, a computer device is provided, which may be a terminal. The computer device includes a processor, a memory, an input / output interface, a communication interface, a display unit, and an input device. The processor, the memory, and the input / output interface are connected via a system bus, and the communication interface, the display unit, and the input device are connected to the system bus via the input / output interface. The processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The input / output interface of the computer device is used to exchange information between the processor and an external device. The communication interface of the computer device is used to communicate with an external terminal in a wired or wireless manner, and the wireless manner can be implemented through WIFI, a mobile cellular network, near field communication (NFC) or other technologies. When the computer program is executed by the processor, a data desensitization method based on asynchronous permutation technology is implemented. The display unit of the computer device is used to form a visually visible picture, which may be a display screen, a projection device, or a virtual reality imaging device. The display screen can be a liquid crystal display screen or an electronic ink display screen, and the input device of the computer device can be a touch layer covering the display screen, or a button, trackball or touchpad set on the computer device shell, or an external keyboard, touchpad or mouse.

[0078] Those skilled in the art will understand that Figure 4 The structure shown in the figure is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0079] In an exemplary embodiment, a computer device is provided, including a memory and a processor, wherein a computer program is stored in the memory, and when the processor executes the computer program, the following steps are implemented:

[0080] Acquire text data, and identify the text data to determine at least one sensitive data in the text data;

[0081] Based on the preset asynchronous replacement rule, determine an asynchronous replacement rule corresponding to each sensitive data;

[0082] For each sensitive data, asynchronously replace the sensitive data according to an asynchronous replacement rule corresponding to the sensitive data to obtain a desensitized data;

[0083] Data information of at least one desensitized data is stored in a target storage location, wherein the data information includes an asynchronous replacement rule and data information of each desensitized data.

[0084] In one embodiment, a computer readable storage medium is provided, on which a computer program is stored, and when the computer program is executed by a processor, the following steps are implemented:

[0085] Acquire text data, and identify the text data to determine at least one sensitive data in the text data;

[0086] Based on the preset asynchronous replacement rule, determine an asynchronous replacement rule corresponding to each sensitive data;

[0087] For each sensitive data, asynchronously replace the sensitive data according to an asynchronous replacement rule corresponding to the sensitive data to obtain a desensitized data;

[0088] Data information of at least one desensitized data is stored in a target storage location, wherein the data information includes an asynchronous replacement rule and data information of each desensitized data.

[0089] In one embodiment, a computer program product is provided, comprising a computer program, which, when executed by a processor, implements the following steps:

[0090] Acquire text data, and identify the text data to determine at least one sensitive data in the text data;

[0091] Based on the preset asynchronous replacement rule, determine an asynchronous replacement rule corresponding to each sensitive data;

[0092] For each sensitive data, asynchronously replace the sensitive data according to an asynchronous replacement rule corresponding to the sensitive data to obtain a desensitized data;

[0093] Data information of at least one desensitized data is stored in a target storage location, wherein the data information includes an asynchronous replacement rule and data information of each desensitized data.

[0094] Those of ordinary skill in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in the present application can include at least one of non-volatile memory and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, an artificial intelligence (AI) processor, etc., but are not limited to this.

[0095] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this application.

[0096] Finally, it should be noted that the above-described embodiments are only specific implementation methods of the present application, which are used to illustrate the technical solutions of the present application, rather than to limit them. The protection scope of the present application is not limited thereto. Although the present application is described in detail with reference to the above-mentioned embodiments, ordinary technicians in the field should understand that any technician familiar with the technical field can still modify the technical solutions recorded in the above-mentioned embodiments within the technical scope disclosed in the present application, or can easily think of changes, or make equivalent replacements for some of the technical features therein; and these modifications, changes or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the embodiments of the present application, and should be included in the protection scope of the present application. Therefore, the protection scope of the present application shall be based on the protection scope of the claims.

Claims

1. A data desensitization method based on asynchronous replacement technology, characterized in that: The method comprises: Acquire text data, and identify the text data to determine at least one sensitive data in the text data; Based on the preset asynchronous replacement rule, determine an asynchronous replacement rule corresponding to each sensitive data; For each sensitive data, asynchronously replace the sensitive data according to an asynchronous replacement rule corresponding to the sensitive data to obtain a desensitized data; Data information of at least one desensitized data is stored in a target storage location, wherein the data information includes an asynchronous replacement rule and data information of each desensitized data.

2. According to claim 1, the data desensitization method based on asynchronous replacement technology is characterized in that: The method further comprises: Acquire at least one asynchronous replacement rule and data information of desensitized data from the target storage location; For each desensitized data, the desensitized data is restored to the sensitive data corresponding to the desensitized data according to the asynchronous replacement rule and data information corresponding to the desensitized data.

3. According to claim 1, the data desensitization method based on asynchronous replacement technology is characterized in that: The steps of determining an asynchronous substitution rule corresponding to each sensitive data include: identifying a data type of the at least one sensitive data; For each sensitive data, according to the data type of the sensitive data, a target asynchronous replacement rule corresponding to the data type of the sensitive data is determined.

4. According to claim 1, the data desensitization method based on asynchronous replacement technology is characterized in that: The steps to obtain each desensitized data include: generating a mark, and embedding the mark into the text data; Generate a desensitizing key corresponding to the identifier according to an asynchronous substitution rule corresponding to the sensitive data; The sensitive data is subjected to a multi-step encoding conversion and encryption operation according to the decryption key to obtain the desensitized data.

5. According to claim 1, the data desensitization method based on asynchronous replacement technology is characterized in that: Perform asynchronous replacement of multiple sensitive data by following the steps below: Based on the distributed computing platform, multiple sensitive data are asynchronously replaced. The step of asynchronously replacing each sensitive data includes: for the field of the sensitive data, asynchronously replacing the sensitive data according to an asynchronous replacement rule corresponding to the field of the sensitive data to obtain a desensitized data, And / or, for multiple subfields of the field of the sensitive data, the subfield is asynchronously replaced according to an asynchronous replacement rule corresponding to each subfield of the sensitive data to obtain multiple sub-desensitized data; based on the multiple sub-desensitized data, one desensitized data is obtained.

6. According to claim 1, the data desensitization method based on asynchronous replacement technology is characterized in that: The steps of restoring each desensitized data to the sensitive data corresponding to the desensitized data include: Obtaining the identifier of the desensitized data; Determine, according to the identifier of the desensitized data, the asynchronous replacement rule and data information corresponding to the desensitized data; Generate a restoration key according to the asynchronous replacement rule and data information corresponding to the desensitized data; The desensitized data is restored according to the restoration key to obtain sensitive data corresponding to the desensitized data; The one sensitive data is restored to a location corresponding to the one sensitive data.

7. A data desensitization device based on asynchronous replacement technology, characterized in that: The device comprises: A fault test data generation module, used to generate multiple fault test data based on a pre-trained target test fault generation model and according to the architecture and data flow of the distributed relational database; A data consistency problem monitoring module, for each fault test data, injecting the fault test data into the distributed relational database, and performing data consistency problem monitoring on the distributed relational database based on a consistency detection algorithm; A fault test stopping module, used for stopping the injection of the multiple test faults and stopping monitoring the data consistency problem of the distributed relational database when there is a data consistency problem in the distributed relational database; The data repair module is used to generate a fault test report according to the data consistency problem occurring in the distributed relational database, and repair the data occurring in the distributed relational database with the data consistency problem.

8. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 6 are implemented.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

10. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

Images