Method for protecting private data and computing device

Abstract

The invention provides a method for protecting private data and computing equipment. The method comprises the following steps: constructing a target country and region mapping relation table reflecting a relation between a user and a deployment region; stripping data in the application system to obtain private data and non-private data; and according to a mapping rule of the target country and region mapping relation table, independently deploying the privacy data and the privacy offline data, locally storing the privacy data and the privacy offline data to a privacy system in a regionalization manner, and performing cluster data full-amount synchronization on the non-privacy data in a deployment region. According to the technical scheme of the invention, data security in an application system can be enhanced, personal privacy information can be protected, trust crisis caused by privacy data leakage can be avoided, and privacy data information can be better managed.

Description

Technical Field

[0001] The present invention relates to the technical field of software development, and in particular to a method for protecting privacy data and a computing device. Background Art

[0002] The e-commerce industry has shown strong development momentum and broad market prospects in recent years. Among them, cross-border e-commerce, as a representative of the new foreign trade business format, has shown strong growth momentum. When the e-commerce application system software in Country Z develops e-commerce globally, due to different policies, laws, and requirements in different target countries, especially for user privacy data, there are extremely high requirements. Different countries have different regulations on data sovereignty and cross-border transmission. Country Z of the O Alliance requires data to be stored locally or restricts cross-border transmission, increasing the compliance difficulty. During cross-border transmission and storage, data faces higher security risks, and strong encryption technology needs to be used to protect data to ensure data security.

[0003] Therefore, a technical solution is needed to strengthen the data security in the application system, protect personal privacy information, avoid the trust crisis caused by the leakage of privacy data, and better manage privacy data information. Summary of the Invention

[0004] The present invention aims to provide a method for protecting privacy data and a computing device, which can strengthen the data security in the application system, protect personal privacy information, avoid the trust crisis caused by the leakage of privacy data, and better manage privacy data information.

[0005] According to one aspect of the present invention, there is provided a method for protecting privacy data, the method comprising:

[0006] Constructing a target country and region mapping relationship table reflecting the relationship between the user and the deployment region;

[0007] Stripping the data in the application system to obtain privacy data and non-privacy data;

[0008] According to the mapping rules of the target country and region mapping relationship table, independently deploying the privacy data and storing it locally in the privacy system in the local region, and performing full-volume synchronization of the cluster data for the non-privacy data,

[0009] wherein, the non-privacy data includes routing information generated according to the privacy data. When the application system obtains data through the privacy system, the privacy system obtains the storage location of the user privacy data through the routing information; a privacy identifier corresponding to the application identifier is stored in the application system, and the privacy identifier is bi-directionally mapped with the privacy data.

[0010] According to some embodiments, the target country information is obtained through the registration information filled in by the user when registering on the website;

[0011] Determine the routing calculation logic according to the registration information;

[0012] Perform data storage according to the registration location in the registration information in combination with the target country and region mapping relationship table.

[0013] According to some embodiments, determining the routing calculation logic according to the registration information includes:

[0014] Calculate according to the registration information and the mapping rules to generate an offline routing table;

[0015] Fully return the data of the registration information to the routing database.

[0016] According to some embodiments, determining the routing calculation logic according to the registration information further includes:

[0017] For the registration information of real-time incremental users, calculate the routing information through messages and update it to the routing database, and provide routing information services for all members in each region.

[0018] According to some embodiments, when the application calls the privacy data, obtain the corresponding privacy information snapshot by calling the snapshot privacy query service of the privacy system.

[0019] According to some embodiments, the part of the user's personal privacy data that completely overlaps with the membership data in the privacy data is stored separately in the membership data;

[0020] The query service for the personal privacy data in the privacy data is provided by the membership data.

[0021] According to some embodiments, the application system log selects the corresponding region and collects and configures it on different log management components of the log service;

[0022] Based on the data open data table of the application system log, it is provided for security audits in different regions to ensure the security and correctness of the cross-region transmission of the privacy data.

[0023] According to some embodiments, the data in the application system is combined with the real-time data dual writing method and the offline data synchronization method to achieve fast data migration and prevent the application system from melting down.

[0024] According to another aspect of the present invention, there is provided a computer program product including a computer program, and when the computer program is executed by a processor, the computer program executes the method described in any one of the above.

[0025] According to another aspect of the present invention, there is provided a computing device including:

[0026] A processor; and

[0027] A memory stores a computer program, which, when executed by the processor, causes the processor to execute the method described in any one of the above.

[0028] According to an embodiment of the present invention, a target country and region mapping relationship table reflecting the relationship between the user and the deployment area is constructed, and privacy data information is stored regionally based on the policy requirements, laws and regulations of each target country. By stripping the data in the application system, privacy data and non-privacy data are obtained, and the privacy data and non-privacy data are managed separately, which can better protect personal privacy information and avoid trust crises caused by the leakage of privacy data. According to the mapping rules of the target country and region mapping relationship table, the privacy data and privacy offline data are independently deployed and locally stored, and the non-privacy data is fully synchronized in a cluster in the deployment area, which can strengthen the data security in the application system and better manage the privacy data information.

[0029] According to some embodiments, by locally storing privacy data, legal risks caused by cross-border data transmission can be effectively avoided, such as the strict regulations of the O Alliance GDPR, meeting the requirements of data sovereignty and cross-border transmission. Independently deploying privacy data can more conveniently implement strict access control policies, such as role-based access control (RBAC) and multi-factor authentication (MFA), improving data access control.

[0030] According to some embodiments, clearly distinguishing privacy data and non-privacy data and adopting different storage strategies can avoid costly local storage for all data, thereby reducing compliance costs. At the same time, local storage of privacy data reduces the risk of being intercepted or leaked during cross-border data transmission.

[0031] According to some embodiments, full-scale synchronization of cluster data of non-privacy data in the deployment area can ensure low latency and high availability of user data access. Separating the storage of privacy data and non-privacy data can flexibly expand storage and computing resources according to different data types and access requirements.

[0032] According to some embodiments, separating the storage of privacy data and non-privacy data can simplify the data management process and improve data management efficiency. Storing non-privacy data on cloud services with lower costs can reduce operating costs.

[0033] It should be understood that the above general description and the following detailed description are only exemplary and do not limit the present invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] To more clearly illustrate the technical solutions in the embodiments of the present invention, the following will briefly introduce the accompanying drawings required for the description of the embodiments.

[0035] Figure 1 A flowchart showing a method for protecting private data according to an exemplary embodiment.

[0036] Figure 2 A schematic diagram showing the mapping relationship between target countries and regions according to an exemplary embodiment.

[0037] Figure 3 A schematic diagram showing regionalized deployment according to an exemplary embodiment.

[0038] Figure 4 A schematic diagram showing snapshot privacy according to an exemplary embodiment.

[0039] Figure 5 A schematic diagram showing global routing according to an exemplary embodiment.

[0040] Figure 6 A schematic diagram showing the application system log according to an exemplary embodiment.

[0041] Figure 7 A schematic diagram showing the system architecture according to an exemplary embodiment.

[0042] Figure 8 A block diagram showing a computing device according to an exemplary embodiment. Detailed implementation manners

[0043] Example embodiments will now be described more fully with reference to the accompanying drawings. However, the example embodiments can be implemented in various forms and should not be construed as limited to the embodiments set forth herein; rather, these embodiments are provided so that this invention will be thorough and complete, and will fully convey the concept of the example embodiments to those skilled in the art. Like reference numerals in the figures denote like or similar parts, and thus their repetitive description will be omitted.

[0044] In addition, the described features, structures, or characteristics may be combined in any suitable manner in one or more embodiments. In the following description, numerous specific details are provided to give a thorough understanding of the embodiments of the present invention. However, those skilled in the art will realize that the technical solutions of the present invention can be practiced without one or more of the specific details, or other methods, components, devices, steps, etc. may be employed. In other cases, well-known methods, devices, implementations, or operations are not shown or described in detail to avoid obscuring aspects of the present invention.

[0045] The block diagrams shown in the drawings are only functional entities and do not necessarily correspond to physically independent entities. That is, these functional entities can be implemented in software form, or implemented in one or more hardware modules or integrated circuits, or implemented in different networks and / or processor devices and / or microcontroller devices.

[0046] The flowcharts shown in the drawings are only illustrative and do not necessarily include all the content and operations / steps, nor do they have to be executed in the order described. For example, some operations / steps can be decomposed, while some operations / steps can be combined or partially combined. Therefore, the actual execution order may change according to the actual situation.

[0047] It should be understood that although terms such as first, second, and third may be used herein to describe various components, these components should not be limited by these terms. These terms are used to distinguish one component from another. Therefore, the first component discussed below can be referred to as the second component without departing from the teachings of the inventive concept. As used herein, the term "and / or" includes any one of the associated listed items and all combinations of one or more of them.

[0048] The user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data for analysis, stored data, displayed data, etc.) involved in the present invention are all information and data authorized by the user or fully authorized by all parties. Moreover, the collection, use, and processing of the relevant data need to comply with the relevant laws, regulations, and standards of the relevant target countries and regions, and corresponding operation entrances are provided for users to choose to authorize or reject.

[0049] Those skilled in the art can understand that the drawings are only schematic diagrams of exemplary embodiments, and the modules or processes in the drawings are not necessarily essential for implementing the present invention. Therefore, they cannot be used to limit the protection scope of the present invention.

[0050] The booming development of cross-border e-commerce has brought about the cross-border flow of a vast amount of user data, and at the same time, it has also posed challenges to user privacy and security. The increasingly strict data protection regulations in various countries, such as the General Data Protection Regulation (GDPR) of the O Alliance and the Personal Information Protection Law (PIPL) of Country Z, have put forward higher requirements for the data collection, storage, use, and transmission of cross-border e-commerce platforms. Different target countries and regions have different laws and regulations regarding data sovereignty and cross-border transmission. Cross-border e-commerce platforms need to ensure that the storage and processing of user data comply with local regulatory requirements to avoid legal risks. User data faces security risks such as leakage and tampering during cross-border transmission and storage, and technical means such as encryption, desensitization, and access control need to be adopted to ensure data security. Therefore, the entire life cycle of user data from collection, storage, use to destruction needs to be securely managed to prevent data leakage and abuse.

[0051] To this end, the present invention proposes a method for protecting private data, which can strengthen data security in the application system, protect personal privacy information, avoid trust crises caused by the leakage of private data, and better manage private data information.

[0052] The exemplary embodiments of the present invention will be described below with reference to the accompanying drawings.

[0053] Figure 1 A flowchart of a method for protecting private data according to an exemplary embodiment is shown.

[0054] See Figure 1 , in S101, construct a target country and region mapping relationship table reflecting the relationship between the user and the deployment region.

[0055] According to some embodiments, in order to construct the ability to manage the relationship query between the user and the deployment region, it is necessary to create and maintain a target country and region mapping relationship table to specify in which region the user's private data is stored. See Figure 2 , Figure 2 shows the target country and region mapping relationship. The mapping rule of the target country and region mapping relationship table stipulates that member states of the O alliance are routed to country D, member states of the W alliance are routed to country M, country Z is routed to country Z, and the rest are routed to country X. The mapping rule of the target country and region mapping is shown in Table 1.

[0056] Table 1

[0057] Destination Country Code Area Code Status Description FI DE Valid Route users in Country F to Country D CN HZ Valid Route users in Country Z to Country Z US US Valid Route users in Country M to Country M AU US Valid Route users in Country A to Country M ...... ...... ...... ......

[0058] According to some embodiments, partitioned storage is performed according to the tenant field in the private data. There is a tenant field in different regions. For example, it is stipulated that the tenant field value of country H is equal to 1, and the tenant field value of country Y is equal to 2. 1 and 2 belong to different tenants, that is, different regions.

[0059] In S103, strip the data in the application system to obtain private data and non-private data.

[0060] According to some embodiments, stripping the private data from the data in the application system for unified management and deployment can effectively isolate the user's private data.

[0061] See Figure 3 , Figure 3 shows a schematic diagram of regionalized deployment, differentiating the data in the incremental application system and the data in the full-scale application system, storing the private data regionally, and synchronizing the non-private data in full.

[0062] According to some embodiments, the privacy data in the application system is stripped out and stored independently according to the tenant identifier and the user identifier (userId), and the privacy offline data is also independently deployed. The non-privacy data is fully synchronized in the cluster data of the four regions of China, the United States, Singapore, and Germany, and the privacy data is stored locally to achieve data isolation.

[0063] According to some embodiments, for the part where the user's personal privacy data in the privacy data completely overlaps with the membership data, it is stored separately in the membership data, and the query service for the personal privacy data in the privacy data is provided by the membership data.

[0064] According to an embodiment, a privacy identifier corresponding to the application identifier is stored in the application system, and the privacy identifier and the privacy data are mapped bidirectionally.

[0065] See Figure 4 , Figure 4 shows the generation process of the snapshot privacy table. According to some embodiments, when the privacy information is called based on the application system, the corresponding privacy information snapshot is obtained by calling the snapshot privacy query service of the privacy system.

[0066] For example, when a buyer places an order, the order needs to record data such as the buyer's userId, account, contact information, and delivery point. However, these belong to privacy data and cannot be stored in the order system. They need to be stripped out and stored in the privacy system. Therefore, only the snapshot privacy ID mapped to the order ID is stored in the order system. When privacy data needs to be obtained, the snapshot privacy query service of the privacy system is called to obtain the privacy snapshot of the order. The snapshot privacy is stored through the user snapshot privacy library table (user_snapshot_privacy), see Table 2.

[0067] Table 2

[0068] Field Type Description id bigint Primary key (also privacy ID) user_id bigint User ID biz_id varchar Application ID biz_type varchar Application type content varchar Snapshot privacy content gmt_create timestamp Creation time gmt_modified timestamp Modification time

[0069] The content of the privacy data that needs to be mapped can be seen in the content shown in the privacy mapping library table (privacy_mapping_single), see Table 3.

[0070] Table 3

[0071] Field Type Description id bigint Primary key (also privacy ID) privacy varchar Application ID privacy_type varchar Application type gmt_create timestamp Creation time gmt_modified timestamp Modification time

[0072] According to some embodiments, the application system privacy data further includes personal privacy data. The personal privacy data includes data that can be used to locate an individual, such as contact information, email, account passwords, biometric information, operation records, address database, etc. This data completely overlaps with the member data. Therefore, this part of the personal privacy data will be directly merged into the member data and stored separately. The query service for personal privacy data is provided by the member data side, which not only ensures privacy isolation but also saves data storage space.

[0073] In S105, according to the mapping rules of the target country and region mapping relationship table, the privacy data is independently deployed and stored locally in the region, and the non-privacy data is synchronized in full volume for cluster data.

[0074] According to the embodiment, the privacy data includes privacy offline data.

[0075] According to some embodiments, the non-privacy data includes routing information generated based on the privacy data. When the application system obtains data through the privacy system, the privacy system obtains the storage location of the user's privacy data through the routing information.

[0076] According to some embodiments, the target country information is obtained through the registration information filled in by the user when registering on the website. The routing calculation logic is determined according to the registration information, and data storage is performed based on the registration location in the registration information in combination with the target country and region mapping relationship table.

[0077] According to some embodiments, calculations are performed based on the registration information and the mapping rules to generate an offline routing table, and the full volume of the registration information data is returned to the routing database. For the real-time incremental registration information of users, after calculating the routing information through messages, it is updated to the routing database to provide routing information services for all members in each region.

[0078] See Figure 5 , Figure 5 which shows the global routing and the routing calculation logic of the data in the application system.

[0079] According to some embodiments, for the routing calculation of the existing offline link, first, the user registration information is calculated with the mapping rules to generate an offline routing table. The offline routing table includes user information (user privacy data such as user ID, user name, etc.), tenant information (tenant ID, tenant name, etc.), and target country site information. Then, the data is fully returned to the routing database (mysql). Since the routing table does not involve user privacy information, the cross-region replication ability of the data risk control service (DRC) is used to synchronize the data to the four regional tables in China, the United States, Singapore, and Germany.

[0080] According to some embodiments, for the routing calculation of the incremental real-time link, the incremental users newly registered every day are used to calculate the routing information through messages, and the routing table in MySQL is updated to provide the routing information service for all members in each region. Among them, the format of the message is user privacy data including the user ID. According to information such as the user ID, the target country site, and the tenant, it is calculated that the data should be routed to the corresponding database table for storage.

[0081] According to some embodiments, when the application system calls the privacy service to obtain data, the privacy service will internally obtain the storage location of the user privacy data through routing data, and then obtain the data from the corresponding database.

[0082] According to some embodiments, the application system logs of the application system select the corresponding region and are collected and configured on different log management components of the log service. Based on the data open data table of the application system logs, it is provided for security audits in different regions to ensure the security and correctness of the cross-region transmission of privacy data.

[0083] See Figure 6 , Figure 6 shows the acquisition process of the application system logs. The log service (SLS) usually uses the SLS middleware to collect the application system logs. If the middleware is not configured properly, there will be non-compliant situations in the cross-region transmission of privacy data. Therefore, the log services in different computer rooms should be collected and configured on different log data management components (loghub) of the SLS, select the corresponding region, and at the same time, the logs are formed into an open data table (ODPS) for security audits in different regions.

[0084] According to some embodiments, the data in the application system is combined with the real-time data dual-writing method and the offline data synchronization method to achieve fast data migration and prevent the application system from fusing.

[0085] According to some embodiments, considering that there is a high probability that the computer rooms in each target country will be decommissioned due to some reasons, in the event of an emergency decommissioning, how to quickly migrate the privacy data of the decommissioned target country to other regions to prevent the application system from fusing requires a clear plan. The present invention adopts the method of real-time data dual-writing + offline data synchronization. When migrating data, for example, transferring the data in the decommissioned computer room to other computer rooms, the original routing can be changed to achieve the transfer of requests + data.

[0086] Figure 7 shows a schematic diagram of the system architecture according to an example embodiment.

[0087] See Figure 7 , the privacy data management of the application system of the present invention is realized through the application system privacy data system. The system includes a compliance control platform, an application system module, a routing table database, and regionalized deployment and data isolation.

[0088] The combined energy management platform includes data control and compliance auditing, and is responsible for data management and scheduling of the entire system. The data control manages routing rules, ensures the fuse withdrawal ability, and performs permission management. The compliance auditing can perform privacy link scanning and also undertakes the work of online auditing and offline auditing.

[0089] The application system module includes an online application system and an offline application system. The online application system includes registered members, shopping guides, user addition, search, product recommendation, etc. The offline application system manages offline ODPS tables and strips information that can locate users, etc.

[0090] The routing table database provides calculation logic and rules for data routing. Regionalized deployment and data isolation store the data in the application system in partitions according to regions.

[0091] The present invention supports independent storage of privacy data for each tenant. The privacy ID and privacy data have a two-way mapping, and the privacy ID can be used to replace the privacy data, thereby protecting user privacy. The present invention can also query privacy data according to the privacy ID and reverse query the privacy ID according to the privacy data, so as to realize the analysis of user data.

[0092] According to an embodiment of the present invention, the application system privacy management system supports constructing a target country and region mapping relationship table reflecting the relationship between users and deployment regions, and stores privacy data information in different regions based on the policy requirements and laws and regulations of each target country. By stripping the data in the application system to obtain privacy data and non-privacy data, and separately managing the privacy data and non-privacy data, personal privacy information can be better protected, and the trust crisis caused by the leakage of privacy data can be avoided. According to the mapping rules of the target country and region mapping relationship table, the privacy data and privacy offline data are independently deployed and stored locally in the region, and the non-privacy data is synchronously replicated in full volume in the cluster in the deployment area, which can strengthen the data security in the application system and better manage the privacy data information.

[0093] Figure 8 A block diagram of a computing device according to an example embodiment is shown.

[0094] As Figure 8 shown, the computing device 30 includes a processor 12 and a memory 14. The computing device 30 may further include a bus 22, a network interface 16, and an I / O interface 18. The processor 12, the memory 14, the network interface 16, and the I / O interface 18 can communicate with each other through the bus 22.

[0095] The processor 12 may include one or more general-purpose CPUs (Central Processing Units), microprocessors, or application-specific integrated circuits, etc., for executing relevant program instructions. According to some embodiments, the computing device 30 may further include a high-performance display adapter (GPU) 20 for accelerating the processor 12.

[0096] The memory 14 may include a machine system-readable medium in the form of volatile memory, such as random access memory (RAM), read-only memory (ROM), and / or cache memory. The memory 14 is used to store one or more programs containing instructions as well as data. The processor 12 can read the instructions stored in the memory 14 to execute the methods according to the embodiments of the present invention described above.

[0097] The computing device 30 can also communicate with one or more networks through the network interface 16. The network interface 16 can be a wireless network interface.

[0098] The bus 22 may include an address bus, a data bus, a control bus, etc. The bus 22 provides a path for exchanging information between components.

[0099] It should be noted that in the specific implementation process, the computing device 30 may further include other components necessary for normal operation. In addition, those skilled in the art can understand that the above devices may also only include the components necessary to implement the solution of the embodiments of this specification, and do not necessarily include all the components shown in the figure.

[0100] The present invention also provides a computer-readable storage medium, on which a computer program is stored. When the program is executed by a processor, the steps of the above method are implemented. The computer-readable storage medium may include, but is not limited to, any type of disk, including floppy disks, optical disks, DVDs, CD-ROMs, microdrives, and magneto-optical disks, ROMs, RAMs, EPROMs, EEPROMs, DRAMs, VRAMs, flash memory devices, magnetic or optical cards, nanosystems (including molecular memory ICs), network storage devices, cloud storage devices, or any type of medium or device suitable for storing instructions and / or data.

[0101] The embodiments of the present invention also provide a computer program product, which includes a non-transitory computer-readable storage medium storing a computer program. The computer program is operable to cause a computer to execute some or all of the steps of any one of the methods described in the above method embodiments.

[0102] Those skilled in the art can clearly understand that the technical solution of the present invention can be realized by means of software and / or hardware. The "units" and "modules" in this specification refer to software and / or hardware that can independently complete or cooperate with other components to complete specific functions, where the hardware can be, for example, a field programmable gate array, an integrated circuit, etc.

[0103] It should be noted that, for the foregoing method embodiments, for the sake of simple description, they are all expressed as a series of action combinations. However, those skilled in the art should know that the present invention is not limited by the described action sequence, because according to the present invention, some steps can be performed in other sequences or simultaneously. Secondly, those skilled in the art should also know that the embodiments described in the specification are all preferred embodiments, and the actions and modules involved are not necessarily essential to the present invention.

[0104] In the above embodiments, the descriptions of the various embodiments have their own emphases. For the parts not detailed in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0105] In several embodiments provided by the present invention, it should be understood that the disclosed device can be implemented in other ways. For example, the device embodiments described above are only illustrative. For example, the division of units is only a logical function division. In actual implementation, there can be other division methods. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the displayed or discussed coupling or direct coupling or communication connection between each other can be through some service interfaces. The indirect coupling or communication connection of the device or unit can be in an electrical or other form.

[0106] The units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they can be located in one place, or distributed to multiple network units. Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0107] In addition, the functional units in each embodiment of the present invention can be integrated into one processing unit, or each unit can exist physically alone, or two or more units can be integrated into one unit. The above integrated units can be implemented in the form of hardware or in the form of software functional units.

[0108] When the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable memory. Based on such an understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a memory and includes several instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the methods of the various embodiments of the present invention.

[0109] In the above embodiments, the descriptions of the various embodiments each have their own focuses. For the parts not detailed in a certain embodiment, reference may be made to the relevant descriptions of other embodiments.

[0110] The above specifically shows and describes the exemplary embodiments of the present invention. It should be understood that the present invention is not limited to the detailed structures, setting manners, or implementation methods described herein; on the contrary, the present invention is intended to cover various modifications and equivalent settings included within the spirit and scope of the appended claims.

Claims

1. A method for protecting private data, characterized in that, The method includes: Constructing a mapping relationship table of target countries and regions that reflects the relationship between users and deployment regions; Stripping the data in the application system to obtain privacy data and non-privacy data; According to the mapping rules of the mapping relationship table of target countries and regions, independently deploying the privacy data and storing it locally in the privacy system in a regionalized manner, and performing full-volume synchronization of the cluster data for the non-privacy data; Wherein, the non-privacy data includes routing information generated based on the privacy data. When the application system obtains data through the privacy system, the privacy system obtains the storage location of the user's privacy data through the routing information; the application system stores a privacy identifier corresponding to the application identifier, and the privacy identifier is in a two-way mapping with the privacy data.

2. The method according to claim 1, wherein: The target country information is obtained through the registration information filled in by the user when registering on the website; Determining the routing calculation logic according to the registration information; According to the registration location in the registration information, in combination with the mapping relationship table of target countries and regions, performing data storage.

3. The method according to claim 2, wherein Determining the routing calculation logic according to the registration information includes: Calculating according to the registration information and the mapping rules to generate an offline routing table; Fully flowing back the data of the registration information to the routing database.

4. The method according to claim 3, wherein Determining the routing calculation logic according to the registration information further includes: Real-time incrementally adding the user's registration information, calculating the routing information through messages and updating it to the routing database, and providing routing information services for all members in each region.

5. The method according to claim 1, wherein: When the privacy data is called based on the application, obtaining a corresponding privacy information snapshot by calling the snapshot privacy query service of the privacy system.

6. The method according to claim 5, wherein: The part of the user's personal privacy data in the privacy data that completely overlaps with the member data is stored separately in the member data; The query service for the personal privacy data in the privacy data is provided by the member data.

7. The method according to claim 1, characterized in that It further includes: Selecting corresponding regions for the application system logs and collecting and configuring them on different log management components of the log service; Based on the data open data table of the application system logs, providing it for security audits in different regions to ensure the security and correctness of the cross-region transmission of the privacy data.

8. The method according to claim 1, wherein: The data in the application system is migrated through a combination of real-time data dual writing and offline data synchronization to prevent the application system from melting down.

9. A computer program product, characterized in that, Including a computer program, when the computer program is executed by a processor, it implements the method according to any one of claims 1-8.

10. A computing device, characterized in that, Including: A processor; And A memory storing a computer program, when the computer program is executed by the processor, causing the processor to execute the method according to any one of claims 1-8.

Images