Data protection method and system, computer equipment and storage medium

Abstract

The invention relates to the technical field of information security, and discloses a data protection method and system, computer equipment and a storage medium, and the method comprises the steps that a terminal collects terminal data, and uploads the terminal data to a third-party resource pool with a preset IP address; the enterprise side sends the data processing platform to a third-party resource pool through a data exchange gateway; accessing the data processing platform by using the desktop picture transmitted by the operating platform, reading the terminal data through the data processing platform, and processing the terminal data to obtain a target processing result corresponding to the terminal data; and the third-party resource pool filters the target processing result by using the data scanning system, and pushes the filtered target processing result to the terminal. According to the invention, it is technically ensured that an enterprise cannot illegally process the collected user information and important data, the data and derivatives generated by data processing cannot be transmitted out of the scene, and it is ensured that the user data is not lost after the enterprise is closed, so that the personal information security and the national security of users are ensured.

Description

Technical Field

[0001] The present invention relates to the field of information security technology, and in particular to a data protection method, system, computer equipment and storage medium. Background Art

[0002] With the development and popularization of smart terminals such as the Internet of Things and smart cars, the demand for user data collection, storage, analysis and processing by smart terminals has become increasingly strong, and even a data-driven smart business model has been formed: data collection -> data storage -> data analysis and processing -> terminal deployment -> data re-collection. In this model, user-oriented smart terminals collect data and upload the data to the storage resource pool specified by the terminal. The enterprise is responsible for data storage and management; the enterprise's data analysis and processing system will analyze and process the data in the storage resource pool, and if necessary, send the processing results to the terminal for deployment and operation. In this scenario, the enterprise has a strong demand for data collection and processing, and its business operations partially rely on the processing of data. Since the data is completely stored and managed by the enterprise, user data is at risk of being illegally processed by the enterprise and illegally transmitted abroad, and it is difficult for regulatory agencies to discover it, and there is a risk of data loss when the enterprise goes bankrupt.

[0003] Among the relevant technologies, most of the emphasis is on protecting data during data collection, data transmission, and data access through encryption, identity authentication, permission management, etc. to prevent data leakage. However, there is a lack of effective means to prevent the companies that collect data from abusing data, processing data in violation of regulations, transmitting data in violation of regulations, and leaking users' personal sensitive information. Summary of the invention

[0004] In view of this, the present invention provides a data protection method, system, computer device and storage medium to solve the problem of lack of effective means for data abuse, illegal processing, illegal transmission and leakage of user personal sensitive information by the enterprises that collect data.

[0005] In a first aspect, the present invention provides a data protection method, which is applied to a third-party resource pool, and the method comprises:

[0006] Obtain terminal data collected and uploaded by the terminal, and store the terminal data to a preset IP address;

[0007] In response to the data upload request from the enterprise side, the data processing platform that obtains the data uploaded by the enterprise side is obtained through the data exchange gateway;

[0008] In response to the data processing request from the enterprise side, the desktop screen is transmitted to the enterprise side by using the operation console, so that the enterprise side can access the data processing platform through the desktop screen, read the terminal data through the data processing platform, process the terminal data, and obtain the target processing result corresponding to the terminal data;

[0009] The target processing results are filtered by the data scanning system and pushed to the terminal.

[0010] In the present invention, the terminals of the enterprise and the client are separated by a third-party resource pool, and the data of the terminals are only allowed to be processed in the third-party resource pool, so as to achieve the normal collection and processing of data by the enterprise under the permission of relevant laws and regulations, without interfering with the daily operations of the enterprise and the user experience of domestic users. It is technically guaranteed that the enterprise cannot illegally process the collected user information and important data, and cannot transmit the data and derivatives generated by the data processing out of the country, thereby avoiding the abuse of data, illegal processing, illegal transmission and leakage of user personal sensitive information by the data collecting enterprise itself, ensuring that user data is not lost after the enterprise goes bankrupt, thereby ensuring the user's personal information security and national security.

[0011] In an optional implementation, the data exchange gateway includes a data gateway server and a data gateway client. The data gateway server is provided with an external network interface and an internal network interface. The data exchange gateway is used to obtain the data processing platform uploaded by the enterprise end, including:

[0012] When it is detected that the enterprise accesses the data gateway server from the external network interface through the data gateway client, the enterprise is provided with the function of writing data to the data gateway server;

[0013] When it is detected that the enterprise accesses the data gateway server from the intranet interface through the data gateway client, the function of reading data from the data gateway server is provided to the enterprise.

[0014] In this mode, when the enterprise accesses the data exchange gateway server from the external network interface through the data gateway client, it can only write data to the data exchange gateway server, but cannot read data; when the enterprise accesses through the internal network interface, it can only read data, but cannot write data. Through the data exchange gateway, the enterprise can upload data from the external network interface to the data exchange gateway server, and then download the data from the internal network interface to the data processing platform for use, thus realizing the one-way inflow capability of data only in but not out.

[0015] In an optional implementation, the operation console includes an operation console client and an operation console server, and the desktop screen is transmitted to the enterprise end by using the operation console, including:

[0016] Log in the enterprise end to the operation console server end through the operation console client;

[0017] Using the console server, the data processing platform and the desktop screen corresponding to the process of the data processing platform processing the terminal data are transmitted back to the console client;

[0018] The desktop screen is transmitted to the enterprise end through the operation console client.

[0019] In this method, since only mouse and keyboard signals and desktop images are allowed to be transmitted between the console client and the console server, and no other data can be transmitted, the enterprise side cannot take the terminal data away from the data processing platform. This provides an effective method in which data is visible but unavailable, which provides both convenience and security.

[0020] In an optional embodiment, the method further includes:

[0021] The desktop screen is made into a desktop video file by using the operation console server, and the desktop video file is stored in the operation console server.

[0022] In this method, by making the desktop screen data into a video file and storing it on the server, all operations of the enterprise on the desktop of the console server are recorded, thereby realizing the monitoring of the enterprise's operating behavior without the enterprise being aware of it. The console provides an effective method in which data is visible but unavailable, which provides convenience and ensures security while providing an effective monitoring method for the enterprise's operating behavior.

[0023] In a second aspect, the present invention provides a data protection method, which is applied to an enterprise end, and the method includes:

[0024] Send a data upload request to the third-party resource pool, and send the data processing platform to the third-party resource pool through the data exchange gateway;

[0025] Send a data processing request to the third-party resource pool, use the desktop screen transmitted by the console to access the data processing platform, read the terminal data through the data processing platform, process the terminal data, and obtain the target processing result corresponding to the terminal data.

[0026] In the present invention, the enterprise side can only access the data processing platform located in the third-party resource pool through the data exchange gateway, and the terminal data stored in the third-party resource pool is processed in the third-party resource pool. The enterprise side cannot download and obtain terminal data. The data collected by the terminal is stored and managed by a trusted third party. The enterprise can only legally access and legally process the data in the resource pool managed by the third party under monitoring. On the one hand, it ensures that the enterprise does not have the ability to obtain personal sensitive information and fully protects the data security of users; on the other hand, it can meet the enterprise's needs for terminal data processing and the normal operation of the business.

[0027] In a third aspect, the present invention provides a data protection method, applied to a terminal, the method comprising:

[0028] Collect terminal data and upload it to a third-party resource pool with a preset IP address based on the preset access control policy;

[0029] The filtered target processing result corresponding to the received terminal data is obtained by the third-party resource pool in response to the data upload request of the enterprise side, and the data processing platform uploaded by the enterprise side is obtained through the data exchange gateway; in response to the data processing request of the enterprise side, the desktop screen is transmitted to the enterprise side by the operation console, so that the enterprise side can access the data processing platform through the desktop screen; the terminal data is read through the data processing platform, and the terminal data is processed to obtain the target processing result corresponding to the terminal data; the target processing result is obtained by filtering the target processing result using the data scanning system.

[0030] In the present invention, by restricting the terminal, the data collected by the terminal can only be uploaded to a third-party resource pool with a preset IP address. The terminal and the enterprise end cannot communicate directly. The data uploaded by the terminal is only allowed to be operated by the enterprise end in the third-party resource pool and cannot be downloaded to the enterprise end. The filtering of the data filtering system ensures that the personal sensitive information and important data collected by the terminal will not be obtained by the enterprise, ensuring that the enterprise cannot illegally process the collected user information and important data, and cannot transmit the data and derivatives generated by the data processing out of the country, avoiding the abuse of data, illegal processing, illegal transmission and leakage of user personal sensitive information by the data collecting enterprise itself, ensuring that user data is not lost after the enterprise goes bankrupt, thereby ensuring the user's personal information security and national security.

[0031] In a fourth aspect, the present invention provides a data protection system, the system comprising a terminal, an enterprise terminal and a third-party resource pool:

[0032] The terminal collects terminal data and uploads the terminal data to a third-party resource pool with a preset IP address based on the preset access control policy;

[0033] The enterprise sends a data upload request to the third-party resource pool, and sends the data processing platform to the third-party resource pool through the data exchange gateway; sends a data processing request to the third-party resource pool, uses the desktop screen transmitted by the console to access the data processing platform, reads the terminal data through the data processing platform, processes the terminal data, and obtains the target processing result corresponding to the terminal data;

[0034] The third-party resource pool uses a data scanning system to filter the target processing results and pushes the filtered target processing results to the terminal.

[0035] In the present invention, the data collected by the terminal can only be uploaded to a third-party resource pool with a preset IP address. The data uploaded by the terminal is only allowed to be operated by the enterprise side in the third-party resource pool. The terminals of the enterprise side and the client side are separated by the third-party resource pool, thereby achieving normal data collection and processing of the enterprise under the permission of relevant laws and regulations, without interfering with the daily operations of the enterprise and without affecting the user experience of domestic users. It is technically guaranteed that the enterprise cannot illegally process the collected user information and important data, and cannot transmit the data and derivatives generated by data processing out of the country, thereby avoiding the abuse, illegal processing, illegal transmission of data and the leakage of user personal sensitive information by the data collecting enterprise itself, ensuring that user data is not lost after the enterprise goes bankrupt, thereby ensuring the user's personal information security and national security.

[0036] In a fifth aspect, the present invention provides a computer device, comprising: a memory and a processor, the memory and the processor are communicatively connected to each other, computer instructions are stored in the memory, and the processor executes the data protection method of the first aspect or any corresponding embodiment thereof, or executes the data protection method of the second aspect, or executes the data protection method of the third aspect by executing the computer instructions.

[0037] In a sixth aspect, the present invention provides a computer-readable storage medium having computer instructions stored thereon, the computer instructions being used to enable a computer to execute the data protection method of the first aspect or any corresponding embodiment thereof, or to execute the data protection method of the second aspect, or to execute the data protection method of the third aspect.

[0038] In the seventh aspect, the present invention provides a computer program product, including computer instructions, which are used to enable a computer to execute the data protection method of the first aspect or any corresponding embodiment thereof, or execute the data protection method of the second aspect, or execute the data protection method of the third aspect. BRIEF DESCRIPTION OF THE DRAWINGS

[0039] In order to more clearly illustrate the specific implementation methods of the present invention or the technical solutions in the prior art, the drawings required for use in the specific implementation methods or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some implementation methods of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0040] Figure 1 is a schematic diagram of the structure of a data protection system according to an embodiment of the present invention.

[0041] Figure 2 It is an interactive schematic diagram of a data protection system according to an embodiment of the present invention.

[0042] Figure 3 4 is a schematic diagram of the architecture of a data protection system for smart terminals according to an embodiment of the present invention.

[0043] Figure 4 It is a schematic diagram of terminal data uploading according to an embodiment of the present invention.

[0044] Figure 5 The present invention is a schematic diagram of data transmission of a data exchange gateway according to an embodiment of the present invention.

[0045] Figure 6 A schematic diagram of data transmission of an operating console according to an embodiment of the present invention.

[0046] Figure 7 A structural diagram of a data protection system in a smart car application scenario according to an embodiment of the present invention.

[0047] Figure 8 It is a schematic diagram of the hardware structure of a computer device according to an embodiment of the present invention. DETAILED DESCRIPTION

[0048] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of the present invention.

[0049] In the related technologies, most of the emphasis is on protecting data during data collection, data transmission, and data access through encryption, identity authentication, and authority management to prevent data leakage, but there is a lack of effective means to prevent the abuse, illegal processing, illegal transmission, and leakage of user personal sensitive information by the data collecting companies themselves. For example: Existing technical solution 1 "A vehicle data protection method, system, device, and storage medium" uses data encryption and blockchain technology to prevent data from being leaked and tampered during storage and transmission. However, car companies have the ability to arbitrarily process personal data on the vehicle side, and have the ability to arbitrarily use and transmit the data processing results, which will cause great data security risks to users' personal data. Existing technical solution 2 "A data management method, device, equipment, and storage medium" generates authority management information based on identity category and data security level, and manages authority management information by establishing an authority management information library, so as to achieve efficient control of data authority and reduce the time cost of data security protection. Similar to solution 1, car companies pose a great security threat to users' personal data and do not fundamentally protect users' personal data security.

[0050] In order to solve the above problems, a data protection system is provided in an embodiment of the present invention, which is applicable to scenarios where data uploaded by smart terminals are protected. Through the data protection system provided by the present invention, the data collected by the terminal can only be uploaded to a third-party resource pool with a preset IP address, and the data uploaded by the terminal is only allowed to be operated by the enterprise end in the third-party resource pool. The enterprise end and the client end are separated by the third-party resource pool, which realizes the normal collection and processing of data by the enterprise under the permission of relevant laws and regulations, and does not interfere with the daily operation of the enterprise and does not affect the user experience of domestic users. It is technically guaranteed that the enterprise cannot illegally process the collected user information and important data, and cannot transmit the data and the derivatives generated by the data processing out of the country, avoiding the abuse, illegal processing, illegal transmission of the data by the enterprise itself and the leakage of the user's personal sensitive information, ensuring that the user data is not lost after the enterprise goes bankrupt, thereby ensuring the user's personal information security and national security.

[0051] In this embodiment, a data protection system is provided. Figure 1 is a schematic diagram of the structure of a data protection system according to an embodiment of the present invention. Figure 1 As shown, the system includes a terminal 1, an enterprise terminal 2 and a third-party resource pool 3.

[0052] Figure 2 is an interactive schematic diagram of a data protection system according to an embodiment of the present invention, such as Figure 2 As shown, terminal 1 is used to execute step S101, enterprise terminal 2 is used to execute steps S201 to S202, and the third-party resource pool is used to execute step S301.

[0053] Step S101 , collecting terminal data, and uploading the terminal data to a third-party resource pool at a preset IP address based on a preset access control policy.

[0054] Step S201, sending a data upload request to a third-party resource pool, and sending the data processing platform to the third-party resource pool through a data exchange gateway.

[0055] Step S202, sending a data processing request to a third-party resource pool, using the desktop screen transmitted by the console to access the data processing platform, reading the terminal data through the data processing platform, processing the terminal data, and obtaining the target processing result corresponding to the terminal data.

[0056] Step S301: Filter the target processing results by using the data scanning system, and push the filtered target processing results to the terminal.

[0057] In an optional implementation, the data exchange gateway includes a data gateway server and a data gateway client. The data gateway server is provided with an external network interface and an internal network interface. The data exchange gateway is used to obtain the data processing platform uploaded by the enterprise end, including:

[0058] When it is detected that the enterprise accesses the data gateway server from the external network interface through the data gateway client, the function of writing data to the data gateway server is provided for the enterprise.

[0059] When it is detected that the enterprise accesses the data gateway server from the intranet interface through the data gateway client, the function of reading data from the data gateway server is provided to the enterprise.

[0060] In this mode, when the enterprise accesses the data exchange gateway server from the external network interface through the data gateway client, it can only write data to the data exchange gateway server, but cannot read data; when the enterprise accesses through the internal network interface, it can only read data, but cannot write data. Through the data exchange gateway, the enterprise can upload data from the external network interface to the data exchange gateway server, and then download the data from the internal network interface to the data processing platform for use, thus realizing the one-way inflow capability of data only in but not out.

[0061] In an optional implementation, the operation console includes an operation console client and an operation console server, and the desktop screen is transmitted to the enterprise end by using the operation console, including:

[0062] Use the console client to log in to the console server from the enterprise side.

[0063] The operation console server is used to transmit the data processing platform and the desktop screen corresponding to the process of the data processing platform processing the terminal data back to the operation console client.

[0064] The desktop screen is transmitted to the enterprise end through the operation console client.

[0065] In this method, since only mouse and keyboard signals and desktop images are allowed to be transmitted between the console client and the console server, and no other data can be transmitted, the enterprise side cannot take the terminal data away from the data processing platform. This provides an effective method in which data is visible but unavailable, which provides both convenience and security.

[0066] In an optional implementation, the method further includes: utilizing the operation console server to create a desktop image into a desktop video file, and storing the desktop video file in the operation console server.

[0067] In this method, by making the desktop screen data into a video file and storing it on the server, all operations of the enterprise on the desktop of the console server are recorded, thereby realizing the monitoring of the enterprise's operating behavior without the enterprise being aware of it. The console provides an effective method in which data is visible but unavailable, which provides convenience and ensures security while providing an effective monitoring method for the enterprise's operating behavior.

[0068] In one example, Figure 3 is a schematic diagram of the architecture of a data protection system for smart terminals according to an embodiment of the present invention. Figure 3 As shown, the data protection system for intelligent terminals includes six parts: terminal, data processing platform, resource pool, data exchange gateway, operation console, and data scanning system.

[0069] 1. Terminal: When the terminal is sold to the customer, it will have a built-in traffic card. The traffic card is strictly limited to the IP addresses or domain names that can be accessed. Figure 4 is a schematic diagram of a terminal data upload according to an embodiment of the present invention, such as Figure 4 As shown, the data collected by the terminal can only be uploaded to the resource pool of the specified IP address, and the terminal and the enterprise cannot communicate directly.

[0070] 2. Data processing platform. The data processing platform is a system composed of software and hardware, generally provided by the enterprise, to meet the enterprise's needs for data access, processing, and management. It is deployed in a resource pool provided by a neutral operator.

[0071] 3. Resource pool. The resource pool is a dedicated cloud provided by a neutral operator, which provides both storage and computing capabilities. It uses 3AZ high-availability technology to ensure service availability of no less than 99.95%, data reliability of no less than 99.99999999999% (13 nines), and performs hardware encryption on data to ensure data security.

[0072] 4. Data exchange gateway. The data exchange gateway is a system that facilitates enterprises to transfer data from the outside to the resource pool. The data exchange gateway consists of a data exchange gateway client and a data exchange gateway server. Figure 5 is a schematic diagram of data transmission of a data exchange gateway according to an embodiment of the present invention, such as Figure 5As shown, the enterprise uploads and downloads data through the data exchange gateway client. The data exchange gateway server has two types of network interfaces, one is the external network interface and the other is the internal network interface. When the enterprise accesses the data exchange gateway server from the external network interface through the data exchange gateway client, it can only write data to the data exchange gateway server but cannot read data; when the enterprise accesses the data exchange gateway server through the internal network interface, it can only read data but cannot write data. Through the data exchange gateway, the enterprise can upload data (including programs) from the external network interface to the data exchange gateway server, and then download the data (including programs) from the internal network interface to the data processing platform for use, thereby realizing the one-way inflow capability of "data only in, not out".

[0073] 5. Operation platform. The operation platform is a system that allows enterprises to remotely operate the data processing platform. The system consists of a client and a server. Figure 6 A schematic diagram of data transmission of an operation console according to an embodiment of the present invention is shown in FIG. Figure 6 As shown in the figure, the console client is a software that can run on various mainstream operating systems, such as Windows, Mac, Linux, Android, etc. The console server runs many desktop operating systems (desktop for short), such as Windows, Linux, etc. When the enterprise needs to remotely operate the data processing platform in the resource pool, it needs to use the console client to log in to the desktop of the console server, and then use the desktop of the console server as a springboard to access the data processing platform in the resource pool. Since only mouse and key signals and desktop images are transmitted between the console client and the console server, and no other data is transmitted, the enterprise cannot download data from the data processing platform. In addition, when the console server transmits the desktop image back to the console client, it will make the desktop image data into a video file and store it on the server. In this way, all operations of the enterprise on the desktop of the server are recorded, and the monitoring of the enterprise's operation behavior is realized, and the enterprise is unaware of this. In summary, the console provides an effective method of "data is visible but not available", which not only provides convenience, but also ensures security and provides a monitoring method.

[0074] 6. Data scanning system. It is used to parse and scan the data traffic between the terminal and the data processing platform to determine the legitimacy of the data, strictly restrict the data flowing out of the data processing platform, and only allow the legal data required for the operation of the terminal software to flow out of the data processing platform. In order for the data scanning system to "understand" the data, the enterprise side needs to provide the data communication protocol to the operator of the data scanning system. The resource pool first checks whether the protocol is legal, and then designs the scanning rules according to the protocol. During normal operation, when the data scanning system finds that there is data flowing out that does not comply with the rules, it will block it to prevent illegal data from flowing out. In this way, the normal operation of the enterprise business is guaranteed, and the leakage of illegal data is prevented.

[0075] Specifically, the data collection, storage and processing process is as follows: First, the smart terminal collects data and uploads it to the resource pool operated by the neutral operator through the built-in traffic card for storage; second, the enterprise uploads its own data processing platform to the resource pool through the data exchange gateway, and remotely logs in to the resource pool through the console to complete the deployment, operation and maintenance of the data processing platform in the resource pool; finally, the data processing platform reads the terminal data stored in the resource pool for processing.

[0076] The interaction process between smart terminals and enterprises is as follows: First, smart terminals cannot communicate directly with enterprises and cannot directly transmit data; second, there are two scenarios where data needs to be transmitted between smart terminals and enterprises: one is when the software of the smart terminal needs to be updated; the second is when the results of data processing by the data processing platform need to be pushed to the smart terminal. For the first scenario, the enterprise first needs to upload the software update package to the resource pool through the data exchange gateway, and copy the software update package to the data processing platform through the console. Next, the processing methods of these two scenarios are the same, and the data processing platform pushes the data or software package to the smart terminal after scanning by the data scanning system. The scanning rules of the data scanning system are designed by the data communication protocol provided by the enterprise. Only data or software packages that meet the scanning rules can be transmitted out of the resource pool.

[0077] In one implementation scenario, Figure 7 A structural diagram of a data protection system in a smart car application scenario according to an embodiment of the present invention is shown in FIG. Figure 7 As shown, in this embodiment, the terminal is a smart car; the resource pool is a 3AZ exclusive cloud resource pool built across three data centers, which not only provides object storage supporting the S3 protocol, but also provides elastic and scalable computing capabilities; the data exchange gateway is an FTP server that provides data upload services; the operating console is a cloud computer, and the enterprise end operates the data processing platform in the exclusive cloud resource pool through the cloud computer, such as Figure 5 shown.

[0078] The car terminal collects in-cabin user data, vehicle driving status data, and external environment data, and uploads the data to the exclusive cloud operated by a neutral operator by calling the S3 protocol interface through the built-in traffic card according to certain strategies. Each car has a built-in traffic card when it leaves the factory. The traffic card is configured with access control policies by the neutral operator through its core network capabilities, and is restricted to accessing only the exclusive cloud and other specified preset IP addresses or domain names. In other words, the data collected by the car terminal can only be uploaded to the exclusive cloud resource pool storage system, and cannot be uploaded to the car company. The car terminal is restricted from communicating directly with the car company.

[0079] The exclusive cloud resource pool operated by a neutral operator provides both storage and computing capabilities, and uses 3AZ high-availability technology to ensure service availability of no less than 99.95%, data reliability of no less than 99.99999999999% (13 nines), and performs hardware encryption on data to ensure data security.

[0080] The enterprise first uploads its own data processing platform to the dedicated cloud resource pool through the FTP server, then logs in to the resource pool through the cloud computer and deploys the data processing platform to the dedicated computing hardware in the resource pool. The data processing platform reads the terminal data stored in the resource pool to complete the analysis and processing.

[0081] All operations performed by the enterprise through the local terminal of the cloud computer in the resource pool are recorded without the enterprise being aware of it. This can not only regulate the behavior of the enterprise and prevent violations such as data leakage, but the operation records can also be used as a basis for subsequent review, making them traceable and traceable.

[0082] The processing results generated by the data processing platform when processing the vehicle-side data are pushed to the vehicle-side after being scanned and filtered by the data filtering system to complete the upgrade of the vehicle-side software. The filtering rules of the data filtering system are set according to the data communication protocol between the vehicle-side and the data processing platform provided by the car manufacturer. Only data that meets the rules can flow out of the resource pool, otherwise it will be intercepted to prevent user sensitive information and other important information from being leaked. Similarly, since direct communication between the vehicle-side and the car manufacturer is prohibited, when the car manufacturer needs to upgrade the vehicle-side software, it first needs to upload the software upgrade package to the data processing platform through the data exchange gateway, and then push it to the vehicle-side after filtering by the data filtering system.

[0083] In the data protection system provided by this embodiment, the data collected by the terminal can only be uploaded to the third-party resource pool of the designated IP address. The data uploaded by the terminal is only allowed to be operated by the enterprise side in the third-party resource pool. The enterprise side and the client side terminals are separated by the third-party resource pool, thereby realizing the normal collection and processing of data by the enterprise under the permission of relevant laws and regulations, without interfering with the daily operations of the enterprise and the user experience of domestic users. It is technically guaranteed that the enterprise cannot illegally process the collected user information and important data, and cannot transmit the data and derivatives generated by the data processing out of the country, thereby avoiding the abuse of data, illegal processing, illegal transmission and leakage of user personal sensitive information by the data collecting enterprise itself, ensuring that user data is not lost after the enterprise goes bankrupt, thereby ensuring the user's personal information security and national security.

[0084] The embodiment of the present invention also provides a computer device, see Figure 8 , Figure 8 is a schematic diagram of the structure of a computer device provided by an optional embodiment of the present invention, such as Figure 8 As shown, the computer device includes: one or more processors 10, a memory 20, and interfaces for connecting various components, including high-speed interfaces and low-speed interfaces. Various components are connected to each other using different buses for communication, and can be installed on a common mainboard or installed in other ways as needed. The processor can process the instructions executed in the computer device, including instructions stored in or on the memory to display the graphical information of the GUI on an external input / output device (such as, a display device coupled to the interface). In some optional embodiments, if necessary, multiple processors and / or multiple buses can be used together with multiple memories and multiple memories. Similarly, multiple computer devices can be connected, and each device provides some necessary operations (for example, as a server array, a group of blade servers, or a multi-processor system). Figure 8 A processor 10 is taken as an example.

[0085] The processor 10 may be a central processing unit, a network processor or a combination thereof. The processor 10 may further include a hardware chip. The hardware chip may be a dedicated integrated circuit, a programmable logic device or a combination thereof. The programmable logic device may be a complex programmable logic device, a field programmable gate array, a general purpose array logic or any combination thereof.

[0086] The memory 20 stores instructions executable by at least one processor 10, so that the at least one processor 10 executes the method shown in the above embodiment.

[0087] The memory 20 may include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application required for at least one function; the data storage area may store data created according to the use of the computer device, etc. In addition, the memory 20 may include a high-speed random access memory, and may also include a non-transient memory, such as at least one disk storage device, a flash memory device, or other non-transient solid-state storage device. In some optional embodiments, the memory 20 may optionally include a memory remotely arranged relative to the processor 10, and these remote memories may be connected to the computer device via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0088] The memory 20 may include a volatile memory, such as a random access memory; the memory may also include a non-volatile memory, such as a flash memory, a hard disk or a solid state drive; the memory 20 may also include a combination of the above types of memory.

[0089] The computer device also includes an input device 30 and an output device 40. The processor 10, the memory 20, the input device 30 and the output device 40 may be connected via a bus or other means. Figure 8 The example of connecting through bus is taken in the following.

[0090] The input device 30 can receive input digital or character information, and generate key signal input related to the user settings and function control of the computer device, such as a touch screen, a keypad, a mouse, a track pad, a touch pad, an indicator bar, one or more mouse buttons, a trackball, a joystick, etc. The output device 40 may include a display device, an auxiliary lighting device (e.g., an LED) and a tactile feedback device (e.g., a vibration motor), etc. The above-mentioned display device includes but is not limited to a liquid crystal display, a light emitting diode, a display and a plasma display. In some optional embodiments, the display device can be a touch screen.

[0091] The embodiment of the present invention also provides a computer-readable storage medium. The method according to the embodiment of the present invention can be implemented in hardware, firmware, or can be implemented as a computer code that can be recorded in a storage medium, or can be implemented as a computer code that is originally stored in a remote storage medium or a non-temporary machine-readable storage medium and will be stored in a local storage medium through a network download, so that the method described herein can be stored in such software processing on a storage medium using a general-purpose computer, a dedicated processor, or programmable or dedicated hardware. Among them, the storage medium can be a magnetic disk, an optical disk, a read-only storage memory, a random access memory, a flash memory, a hard disk or a solid-state hard disk, etc.; further, the storage medium can also include a combination of the above types of memories. It can be understood that a computer, a processor, a microprocessor controller, or programmable hardware includes a storage component that can store or receive software or computer code. When the software or computer code is accessed and executed by a computer, a processor, or hardware, the method shown in the above embodiment is implemented.

[0092] A part of the present invention may be applied as a computer program product, such as a computer program instruction, which, when executed by a computer, can call or provide the method and / or technical solution according to the present invention through the operation of the computer. Those skilled in the art should understand that the existence of the computer program instruction in a computer-readable medium includes, but is not limited to, a source file, an executable file, an installation package file, etc., and accordingly, the way in which the computer program instruction is executed by the computer includes, but is not limited to: the computer directly executes the instruction, or the computer compiles the instruction and then executes the corresponding compiled program, or the computer reads and executes the instruction, or the computer reads and installs the instruction and then executes the corresponding installed program. Here, the computer-readable medium may be any available computer-readable storage medium or communication medium accessible to the computer.

[0093] Although the embodiments of the present invention have been described in conjunction with the accompanying drawings, those skilled in the art may make various modifications and variations without departing from the spirit and scope of the present invention, and such modifications and variations are all within the scope defined by the appended claims.

Claims

1. A data protection method, characterized in that: Applied to a third-party resource pool, the method includes: Acquire terminal data collected and uploaded by the terminal, and store the terminal data to a preset IP address; In response to a data upload request from an enterprise, obtaining a data processing platform uploaded by the enterprise through a data exchange gateway; In response to the data processing request of the enterprise end, the desktop screen is transmitted to the enterprise end by using the operation console, so that the enterprise end accesses the data processing platform through the desktop screen, reads the terminal data through the data processing platform, processes the terminal data, and obtains the target processing result corresponding to the terminal data; The target processing result is filtered by using a data scanning system, and the filtered target processing result is pushed to the terminal.

2. The method according to claim 1, characterized in that The data exchange gateway includes a data gateway server and a data gateway client. The data gateway server is provided with an external network interface and an internal network interface. The data exchange gateway is used to obtain the data processing platform uploaded by the enterprise end, including: When it is detected that the enterprise end accesses the data gateway server end through the data gateway client end from the external network interface, providing the enterprise end with a function of writing data to the data gateway server end; When it is detected that the enterprise side accesses the data gateway server side from the intranet interface through the data gateway client side, a function of reading data from the data gateway server side is provided for the enterprise side.

3. The method according to claim 1, characterized in that The operation console includes an operation console client and an operation console server. The use of the operation console to transmit the desktop screen to the enterprise end includes: Log the enterprise end into the operation console server end through the operation console client end; Using the operation console server, the data processing platform and the desktop screen corresponding to the process of the data processing platform processing the terminal data are transmitted back to the operation console client; The desktop screen is transmitted to the enterprise end through the operation console client.

4. The method according to claim 3, characterized in that The method further comprises: The desktop image is made into a desktop video file by using the operation console server, and the desktop video file is stored in the operation console server.

5. A data protection method, characterized in that: Applied to the enterprise side, the method includes: Send a data upload request to a third-party resource pool, and send the data processing platform to the third-party resource pool through a data exchange gateway; A data processing request is sent to the third-party resource pool, the data processing platform is accessed using the desktop screen transmitted by the console, the terminal data is read through the data processing platform, the terminal data is processed, and the target processing result corresponding to the terminal data is obtained.

6. A data protection method, characterized in that: Applied to a terminal, the method comprises: Collect terminal data and upload the terminal data to a third-party resource pool at a preset IP address based on a preset access control policy; Receive the filtered target processing result corresponding to the terminal data, the filtered target processing result is the data processing platform uploaded by the enterprise side obtained by the third-party resource pool in response to the data upload request of the enterprise side through the data exchange gateway; in response to the data processing request of the enterprise side, transmit the desktop screen to the enterprise side using the operation console, so that the enterprise side accesses the data processing platform through the desktop screen; read the terminal data through the data processing platform, process the terminal data, and obtain the target processing result corresponding to the terminal data; the target processing result is obtained by filtering the target processing result using the data scanning system.

7. A data protection system, characterized in that: The system includes terminals, enterprise terminals and third-party resource pools: The terminal collects terminal data and uploads the terminal data to a third-party resource pool at a preset IP address based on a preset access control policy; The enterprise sends a data upload request to the third-party resource pool, and sends the data processing platform to the third-party resource pool through the data exchange gateway; sends a data processing request to the third-party resource pool, accesses the data processing platform using the desktop screen transmitted by the console, reads the terminal data through the data processing platform, processes the terminal data, and obtains the target processing result corresponding to the terminal data; The third-party resource pool filters the target processing results by using a data scanning system, and pushes the filtered target processing results to the terminal.

8. A computer device, characterized in that: include: A memory and a processor, wherein the memory and the processor are communicatively connected to each other, the memory stores computer instructions, and the processor executes the data protection method according to any one of claims 1 to 6 by executing the computer instructions.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a computer to execute the data protection method according to any one of claims 1 to 6.

10. A computer program product, characterized in that The method comprises computer instructions for causing a computer to execute the data protection method according to any one of claims 1 to 6.

Images