Sensitive information security protection method and system

Abstract

The invention discloses a sensitive information safety protection method and system, and relates to the technical field of intelligent preoperative evaluation and planning of thoracic surgery, and the method comprises the steps: S1, receiving an environment sensing signal which comprises an access subject attribute, a target data attribute and an operation environment parameter; s2, generating a dynamic strategy signal and a dynamic strategy signal based on the environment sensing signal; s3, sending the dynamic strategy signal to an execution engine, and triggering the engine to generate an execution signal containing a field-level mask instruction or a record-level permission instruction; s4, performing real-time processing on the target data according to the execution signal, and generating an output signal containing a part of visible fields or a permission limited operation interface; and S5, binding the environment sensing signal and the dynamic strategy signal as an auditing traceability signal and storing the auditing traceability signal. According to the sensitive information security protection method and system, the problem of excessive protection or insufficient defense of sensitive information in a dynamic use scene due to a static protection strategy can be solved.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of data dynamic security protection and traceability mechanism in the technical field of information processing, and in particular to a sensitive information security protection method and system. BACKGROUND

[0002] Current sensitive information protection mainly relies on static rules, such as preset access permissions or fixed desensitization templates, which are difficult to cope with complex and variable business scenarios. For example, in a medical system, doctors need to differentially display sensitive fields when accessing medical records on different terminals, but traditional solutions only control in a coarse-grained manner according to roles, resulting in the possibility of high-privilege users accessing data beyond the scope. The financial sector faces similar problems. Traders can view complete customer information on office networks, but the same permissions pose a risk of leakage when working remotely. Existing technologies have introduced environmental awareness concepts, such as detecting device location or network type, but have failed to integrate data sensitivity, user behavior patterns, and real-time environmental parameters to generate dynamic strategies.

[0003] Although encryption technology can ensure storage security, it hinders data usability - homomorphic encryption has insufficient performance, and traditional decryption lacks fine-grained control during use. The audit process relies on operation log records, but logs are disconnected from protection actions, making it difficult to trace the execution context of strategies. For example, if data is leaked, it is difficult to quickly determine whether the problem is due to a strategy flaw or an execution anomaly. The most prominent contradiction is that strengthening protection (such as full-field encryption) reduces efficiency, and relaxing strategies increases the risk of leakage. SUMMARY

[0004] In view of the above shortcomings of the prior art, the purpose of the present application is to provide a sensitive information security protection method and system to solve the problem of excessive protection or insufficient defense of sensitive information in dynamic use scenarios due to static protection strategies. The present application generates a dynamic strategy signal by real-time collection of access subject attributes, target data characteristics, and environmental parameters, drives an execution engine to apply desensitization, access control, and encryption operations as needed, and binds environmental signals and strategy signals as audit traceability signals to achieve dynamic balance between protection strength and business needs and full-link operation tracking.

[0005] The present application provides a sensitive information security protection method, comprising:

[0006] S1: receiving an environmental awareness signal, the environmental awareness signal containing access subject attributes, target data attributes, and operation environment parameters;

[0007] S2: generating a dynamic strategy signal based on the environmental awareness signal, the dynamic strategy signal containing real-time calculated desensitization rule identifiers, access control levels, and encryption strength instructions;

[0008] S3: sending the dynamic policy signal to the execution engine to trigger the engine to generate an execution signal containing field-level mask instructions or record-level permission instructions;

[0009] S4: processing the target data in real time according to the execution signal to generate an output signal containing partially visible fields or a permission-restricted operation interface;

[0010] S5: binding the environment perception signal and the dynamic policy signal into an audit traceability signal for storage.

[0011] In an embodiment of the present application, the access subject attribute in the environment perception signal includes operator identity credentials, device security state features and historical operation behavior patterns, the target data attribute includes data sensitivity classification identification and field structure features, and the operation environment parameter includes network access type, geographic positioning information and current access time window; a device hardware fingerprint signal is synchronously collected when the environment perception signal is received, and the fingerprint signal is bound and verified with the access subject attribute, and the dynamic policy signal generation process is triggered when the verification is passed.

[0012] In an embodiment of the present application, generating the dynamic policy signal includes constructing a multi-dimensional risk assessment model, which receives the device security state features and network access type in the environment perception signal as a first input signal, and receives the sensitivity classification identification in the target data attribute as a second input signal; the real-time risk level value is calculated by fusing the first input signal and the second input signal, and the dynamic policy signal containing enhanced desensitization rule identification and the highest access control level is generated when the risk level value exceeds a preset threshold.

[0013] In an embodiment of the present application, after receiving the dynamic policy signal, the execution engine sends a key request signal to the key management module when detecting that the dynamic policy signal contains encryption strength instructions; the key management module generates a temporary session key signal in response to the request, and inputs the key signal and the encryption strength instructions in the dynamic policy signal into an encryption processor to generate a ciphertext output signal of the target data.

[0014] In an embodiment of the present application, a dynamic watermark generation mechanism is embedded in the audit traceability signal storage process: the first three feature codes of the operator identity credentials in the environment perception signal and the generation time stamp of the dynamic policy signal are extracted, and a unique watermark identification code is generated through a hash algorithm; the watermark identification code is converted into an invisible watermark signal and implanted into the data stream of the output signal, and the watermark extraction and traceability mechanism is triggered when the output signal is intercepted or forwarded.

[0015] In one embodiment of the present application, an operation interface permission locking mechanism is established when generating the output signal: according to the recorded level permission instruction in the execution signal, a shielding control signal is generated for the download button, print button and screenshot function in the target data operation interface; when the user triggers the shielded function, a secondary authorization request signal is generated, which needs to be verified through an independent authentication channel before the shielding is removed.

[0016] In one embodiment of the present application, the operation environment parameters include device temperature sensor readings and current fluctuation characteristics. When it is detected that the readings deviate from the reference value range or the current fluctuation characteristics are abnormal, a device abnormal state signal is generated; the signal triggers the dynamic strategy signal generation module to start the emergency protection mode, and injects a data self-destruction instruction identifier into the dynamic strategy signal.

[0017] In one embodiment of the present application, the desensitization rule identifier is associated with the version number of the dynamic rule library. When the execution engine receives an execution signal containing a desensitization rule identifier, a version check request signal is sent to the rule library; if the rule library returns a version expired warning signal, the real-time processing flow is interrupted and the online rule library update mechanism is triggered, and after the update is completed, the execution signal is regenerated.

[0018] In one embodiment of the present application, the dynamic strategy signal sets a survival time threshold. When the execution engine is not triggered beyond the threshold, a strategy invalidation signal is generated; the invalidation signal triggers the reacquisition process of the environment perception signal, and clears the generated dynamic strategy signal cache until a new environment perception signal is received and the strategy generation is restarted.

[0019] The present application also includes a sensitive information security protection system, comprising:

[0020] The acquisition module receives the environment perception signal, which includes access subject attributes, target data attributes and operation environment parameters.

[0021] The coordination module generates a dynamic strategy signal based on the environment perception signal, which includes real-time calculated desensitization rule identifier, access control level and encryption strength instruction.

[0022] The verification module sends the dynamic strategy signal to the execution engine, triggering the engine to generate an execution signal containing field-level mask instruction or record-level permission instruction.

[0023] The rehearsal module performs real-time processing on the target data according to the execution signal, and generates an output signal containing partially visible fields or permission-restricted operation interfaces.

[0024] The integration module binds the environment perception signal and the dynamic strategy signal into an audit traceability signal for storage.

[0025] The application provides a sensitive information security protection method and system, which generates a dynamic policy signal by collecting access subject attributes, target data characteristics and environment parameters in real time, drives an execution engine to apply desensitization, access control and encryption operations as needed, and binds the environment signal and the policy signal as an audit trace signal to realize dynamic balance of protection strength and business demand and full-link operation tracking. BRIEF DESCRIPTION OF DRAWINGS

[0026] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the following will briefly introduce the drawings needed to be used in the embodiment description. Obviously, the drawings in the following description are only some embodiments of the present application, and for those skilled in the art, other drawings can also be obtained without creative labor on the basis of these drawings.

[0027] Figure 1 It is a method flow chart of a sensitive information security protection method.

[0028] Figure 2 It is a schematic diagram of a sensitive information security protection method workflow.

[0029] Figure 3 It is a system architecture diagram of a sensitive information security protection system. DETAILED DESCRIPTION

[0030] The embodiments of the present application will be described below through specific concrete examples, and those skilled in the art can easily understand other advantages and effects of the present application from the content disclosed in the present description. The present application can also be implemented or applied through other different specific embodiments, and each detail in the present description can be modified or changed based on different views and applications without departing from the spirit of the present application. It should be noted that the following embodiments and features in the embodiments can be combined with each other without conflict.

[0031] It should be noted that the diagrams provided in the following embodiments only illustrate the basic concept of the present application in a schematic manner, and the diagrams only show the components related to the present application, not the number, shape and size of the components during actual implementation. The actual implementation of each component may be a random change, and the component layout pattern may also be more complex.

[0032] In the following description, a large number of details are discussed to provide a more thorough explanation of the embodiments of the present application, however, it is obvious to those skilled in the art that the embodiments of the present application can be implemented without these specific details, and in other embodiments, the known structures and devices are shown in the form of block diagrams rather than in the form of details, to avoid making the embodiments of the present application difficult to understand.

[0033] Please refer to Figures 1-3 , which shows a sensitive information security protection method and system. The sensitive information security protection method includes: S1: receiving an environment perception signal, the environment perception signal containing access subject attributes, target data attributes, and operation environment parameters; S2: generating a dynamic policy signal based on the environment perception signal, the dynamic policy signal containing a real-time calculated desensitization rule identifier, an access control level, and an encryption strength instruction; S3: sending the dynamic policy signal to an execution engine to trigger the engine to generate an execution signal containing field-level mask instructions or record-level permission instructions; S4: processing the target data in real time according to the execution signal to generate an output signal containing partially visible fields or a permission-restricted operation interface; and S5: binding the environment perception signal and the dynamic policy signal as an audit trace signal for storage.

[0034] As shown in Figure 1 , the core method flow of sensitive information security protection is constructed: first, an environment perception signal containing access subject attributes, target data attributes, and operation environment parameters is received, wherein the access subject attributes cover operator biometric identification codes and device security state identifiers, the target data attributes include data sensitivity classification labels and field structure feature codes, and the operation environment parameters involve network encryption protocol types and geographic coordinate information. These signals are input into a dynamic policy generation engine after normalization processing; the engine performs signal conversion based on a pre-set decision tree model, outputs a risk coefficient increment when detecting that a trusted execution environment is not enabled on the device, triggers a forced dynamic masking rule in combination with the top-secret level label of the target data, and upgrades the encryption strength to the AES-256 mode according to the public Wi-Fi network parameters, finally generating a dynamic policy signal containing a desensitization rule pointer address, a binary access control level code, and a composite encryption instruction; the signal is transmitted to the execution engine through a message queue, and the engine parses the policy and compiles the instruction set: if the desensitization rule points to a dynamic masking algorithm, a mask instruction containing a field offset address and a masking template ID is generated, a record-level whitelist hash value and an operation blacklist function code are generated when the access control level exceeds L5, and a temporary session key seed is generated by triggering a key derivation function; the execution signal drives a real-time processing unit to load the target data into the memory security area, performs field-level masking (such as displaying only the first and last characters of an ID number), record-level permission filtering (disabling the download button DOM node), and stream encryption based on the key seed, and outputs a structured signal containing a partially visible field JSON block, an interface control identifier bit, and optional ciphertext data packets; finally, the feature digest of the environment perception signal and the decision path code of the dynamic policy signal are aligned by timestamp, an operation session UUID is added, and an audit trace signal is formed and written into a blockchain node, each block stores environment feature hash, policy path code, and timestamp sequence to realize tamper-proof traceability.

[0035] Further, deepen the dynamic strategy generation mechanism: introduce a quantitative risk assessment model to receive three input signals - the first is the device security state feature and network risk level (such as public Wi-Fi marked as high risk), the second is the target data sensitivity quantitative value (top secret level = 10), and the third is the historical behavior analysis signal (operation frequency deviation); The model performs multi-dimensional fusion algorithm to calculate the risk score, and the device security coefficient is dynamically weighted according to the firmware version vulnerability exposure in the formula, the network risk parameter and the data sensitivity are linearly superimposed, and the behavior anomaly index adopts exponential amplification effect; When the risk score is in the 0-30 interval, generate the basic strategy (default desensitization template + L3 access control), 30-70 interval activates enhanced protection (dynamic shielding algorithm + L5 access + AES-192 encryption), and more than 70 points Start the highest protection (full field shielding + L8 access + AES-256 superimposed secondary biological authentication); The model has a real-time feedback loop, which immediately sends a risk correction signal to trigger a score recalculation when the execution engine detects high-frequency screenshot attempts, and at the same time, the strategy signal is set to have a 5-second survival period. If it is not executed, it will be forced to re-evaluate to respond to environmental mutations.

[0036] As shown in Figure 1 Focus on key life cycle management: After the execution engine parses the encrypted instruction field of the dynamic strategy signal (such as algorithm identification code 0xAE25 corresponding to AES-256), it generates a request signal containing the session context ID and key length requirement to the key management module; The module calls the hardware random number generator to generate a 256-bit entropy pool seed, generates a temporary session key plaintext by combining the session ID through the HMAC-SHA512 key derivation function, and then splits it into 5 fragments (any 3 can be reconstructed) using the Shamir secret sharing algorithm; After receiving the key fragment set in the execution signal, the encryption processor reconstructs the key in real time, initializes the AES-256-CBC encryption context according to the algorithm identification, and processes the data stream in blocks, and triggers the memory overwrite destruction mechanism at the end of the operation; When the device temperature sensor detects abnormal heating or current fluctuation exceeds the threshold (suspected side channel attack), immediately send a self-destruction signal to all fragment nodes and overwrite the memory key material three times, and generate a key invalidation event binding audit trace signal.

[0037] Further, the anti-leakage traceability capability of the enhanced output signal is strengthened: when generating the output signal containing the partially visible field, the dynamic watermark embedding process is started synchronously - the first three feature codes of the operator's identity certificate in the environment perception signal and the dynamic policy signal generation timestamp are extracted, and a 128-bit watermark identification code is generated by SHA-256 hash operation; the identification code is converted into a low-frequency carrier signal and implanted into the redundant check bits of the output data stream to form invisible watermarks; when the output signal is illegally intercepted or forwarded, the watermark detector automatically extracts the carrier signal in the data stream to restore the hash value, and matches the operator's identity and policy decision context by reverse query auditing the blockchain; for special protection of the printing operation, the watermark system converts the identification code into a visible dot matrix pattern and superimposes it on the edge of the printed document, and the dot matrix density is adaptively adjusted according to the document size to ensure that it can still be identified after scanning.

[0038] As shown in Figure 1 , the permission lock and emergency channel of the operation interface are established: according to the recorded level permission instruction in the execution signal, the DOM node hidden control signal is generated for the download button of the data operation interface, the print button is bound with the disabled state flag, and the screenshot function is injected with a system-level hook to intercept; when the user triggers the shielded function (such as clicking the gray print button), the interface locking module generates a secondary authorization request signal, which is transmitted to the authorization server through an authentication interface independent of the main business channel; the server verifies the matching degree of the operator's iris feature code and device hardware fingerprint contained in the request, and if the matching is successful, it issues a temporary unlock token to the target device; the unlock token is a time-based one-time password, which only allows single execution of the requested operation (such as this print) within the valid period, and the interface locking state is reset immediately after the operation is completed; for high-risk operations (such as batch export), the secondary authorization requires two different role operators to complete the biometric verification synchronously, and the verification process is encrypted throughout and generates a two-person audit log bound to the traceability signal.

[0039] As shown in Figure 2As shown, the permission lock and emergency access mechanism of the operation interface is established: according to the recorded level permission instruction in the execution signal, the interface element control signal set is generated, the DOM node hidden instruction is injected into the download button of the data operation interface, the disable state flag bit is bound for the print button, and the system level hook interception program is implanted in the screenshot function layer; when the user triggers the shielded function (such as clicking the gray print button or pressing the screenshot shortcut key), the interface lock module generates a secondary authorization request signal, which contains the operation session ID, the request function type code and the device hardware fingerprint hash value, and is transmitted to the authorization server through an encryption authentication interface independent of the business main channel; after the server receives the signal, it verifies the matching degree of the operator's iris feature code with the pre-stored template, and checks the continuity of the device hardware fingerprint with the historical login record, and when the double-factor verification is passed, a time-based one-time unlock token (validity period is 120 seconds) is issued; after the token is activated, only a single authorized operation (such as this print task) is allowed, and the interface state reset signal is triggered immediately after the operation is completed to restore the lock; for high-risk operations such as batch export, secondary authorization is forced to start multi-role collaborative verification - two operators with different permissions need to submit biological characteristics (such as fingerprint + voiceprint) at the same time, and the two-person audit log generated during the verification process is bound to the traceability signal block chain storage after digital signature, ensuring that the operation cannot be denied.

[0040] Specifically, the active protection of device physical state monitoring is introduced: in the operation environment parameter collection, the device sensor signal is expanded, including temperature sensor reading sequence, power current fluctuation frequency spectrum and accelerometer three-axis offset; a device normal state benchmark model is established, the moving average value of temperature reading is set to a dynamic threshold interval, and the current fluctuation characteristics are extracted by Fourier transform to extract the 50-60Hz fundamental harmonic energy distribution; when it is detected that the temperature exceeds the upper limit of the benchmark +5℃ for 3 seconds or the current harmonic energy abnormally decays by 30% (may be subject to hardware attack), an abnormal device state signal is generated and the threat level is marked; the signal triggers the emergency protection mode of the dynamic strategy generation module, and injects the data self-destruction instruction mark in the output dynamic strategy signal; when the execution engine parses the self-destruction mark, it sends an erase instruction signal to the target data storage node, which contains a hash chain table of data block physical addresses and an overwrite times parameter (default 3 times random overwrite), at the same time, injects a warning information rendering instruction (display a "device abnormal interrupt access" red warning box) into the output interface, and records the abnormal sensor data snapshot and self-destruction operation timestamp in the audit traceability signal.

[0041] As Figure 3As shown, the present invention relates to a sensitive information security protection system, which includes an acquisition module, which receives an environmental perception signal, and the environmental perception signal includes access subject attributes, target data attributes and operating environment parameters; a coordination module, which generates a dynamic policy signal based on the environmental perception signal, and the dynamic policy signal includes a desensitization rule identifier, access control level and encryption strength instruction calculated in real time; a verification module, which sends the dynamic policy signal to the execution engine, and triggers the engine to generate an execution signal including a field-level mask instruction or a record-level permission instruction; a rehearsal module, which processes the target data in real time according to the execution signal, and generates an output signal including some visible fields or a permission-restricted operation interface; and an integration module, which binds the environmental perception signal and the dynamic policy signal into an audit traceability signal for storage.

[0042] like Figure 3 As shown, the version collaborative update of the rule base is realized: the desensitized rule identification field is associated with the rule base version number metadata (such as v2.1.7). When the execution engine parses the execution signal containing the desensitized rule identification, it sends a version verification request signal (including the current local version number and the policy generation time) to the rule base server; the rule base server compares the requested version number with the latest released version number. If it detects that the local version lags behind the latest version and the difference level is ≥ 2 (the major version number is different), it returns a version expiration alarm signal (including a difference rule ID list and an emergency update flag); after receiving the alarm signal, the execution engine interrupts the real-time processing process and sends an incremental update request signal to the update agent module, which carries a difference rule ID list; the update agent downloads the rule patch package through a secure tunnel, verifies the patch digital signature in the trusted execution environment, and then hot replaces the local rule base; after the update is completed, the environment perception signal collection process is re-triggered to generate a new dynamic policy signal, and the mapping relationship between the rule versions before and after the update is recorded through the execution signal log, and the mapping relationship is bound to the audit traceability signal as additional metadata.

[0043] Specifically, a time control mechanism for setting the policy signal is provided: a timestamp and a lifetime parameter (default value 8 seconds) are embedded when the dynamic policy signal is generated, and a countdown monitoring thread is started to continuously detect the signal survival state; when the policy signal exceeds the lifetime and is not consumed by the execution engine (may be due to network delay or system jam), a policy invalidation signal is generated and a signal recovery process is triggered - the signal cache in the execution engine input queue is cleared, and a signal reset instruction is sent to the environment perception module; after receiving the reset instruction, the environment perception module re-collects the access subject attribute, target data attribute and operation environment parameter (especially refreshes the network connection state and device positioning data), generates a new environment perception signal input to the policy engine; the newly generated dynamic policy signal carries a version iteration identifier (such as rev_2), and records the previous invalidation reason code and time deviation value in the audit trace signal; for high-frequency policy invalidation scenarios (such as 3 consecutive timeouts), the system automatically extends the lifetime to 150% of the baseline value and generates an operation and maintenance warning signal until manual intervention to reset the parameters.

[0044] Further, the security of key derivation is strengthened: when the encryption strength instruction in the dynamic policy signal requires to upgrade the protection level (such as from AES-128 to AES-256), the key management module generates a key derivation request signal, which contains the initial key material pointer, the target key length and the derivation algorithm identifier; after receiving the request signal, the password derivation function component performs multi-stage processing: in the first stage, the initial key material and the generation timestamp of the dynamic policy signal are spliced, and an intermediate key is generated by iterating 1000 times through the PBKDF2 algorithm; in the second stage, the intermediate key is input into the HMAC-SHA3-512 function to calculate the message authentication code with the operation session ID as the salt value; in the third stage, the first 384 bits of the authentication code are intercepted and divided according to the target key length (256 bits for encryption and 128 bits for integrity check); the output enhanced key derivation signal contains the final key fragment and the check code, and the encryption processor uses the check code to verify the integrity of the key transmission before initializing the encryption context; for quantum computing threats, the derivation algorithm identifier can be specified as an anti-quantum algorithm (such as CRYSTALS-Kyber), at which time the post-quantum key encapsulation mechanism is started - the session key is encapsulated with the Kyber.CCAKEM algorithm, the encapsulated ciphertext is stored together with the dynamic policy signal, and is decrypted only for execution.

[0045] As Figure 3As shown, the leakage traceability response system is constructed: after the audit traceability signal is stored, it is connected to the strategy matching engine, which continuously monitors the data export behavior (such as HTTP file upload or printer data stream) in the output signal; when the export operation is detected, the feature summary signal (64-bit fingerprint generated by SimHash algorithm) of the export data packet is extracted, and the environment perception signal feature (such as device positioning hash) and dynamic strategy signal snapshot (such as risk score) of the current session are queried from the audit traceability blockchain; the feature summary signal and the audit signal are matched for similarity: first, the consistency of the desensitization mode of the data sensitive field (such as identity card shielding rule) is compared, and then the compliance of the operation environment and the strategy (such as whether to enable encryption in a public network environment) is verified; when the matching degree exceeds the dynamic threshold (initial value 85%), a data leakage early warning signal is triggered, which includes risk level evaluation (low / medium / high) and response action instruction set - low risk record audit log, medium risk real-time block export connection and notify security administrator, high risk immediately erase source data and locate operator terminal; the early warning response process generates a traceability report signal, including export data sample, matching degree calculation proof and disposal time axis, which is encrypted and stored in an independent audit storage pool and triggers a compliance alarm workflow.

[0046] The sensitive information security protection method and system of the present application generates a dynamic strategy signal by real-time collection of access subject attributes, target data characteristics and environment parameters, drives the execution engine to apply desensitization, access control and encryption operations as needed, and binds the environment signal and the strategy signal as an audit traceability signal, achieving dynamic balance of protection strength and business demand and full-link operation tracking.

[0047] Therefore, by the sensitive information security protection method and system of the present application, the problem of excessive protection or insufficient defense of sensitive information in dynamic use scenarios caused by static protection strategies can be solved.

[0048] The above embodiments only exemplarily illustrate the principles and effects of the present application, and are not used to limit the present application. Any person skilled in the art can modify or change the above embodiments without departing from the spirit and scope of the present application. Therefore, all equivalent modifications or changes made by those skilled in the art without departing from the spirit and technical thought disclosed by the present application should be covered by the claims of the present application.

Claims

1. A sensitive information security protection method, characterized in that: include: S1: Receive an environment perception signal, wherein the environment perception signal includes access subject attributes, target data attributes, and operating environment parameters; S2: Generate a dynamic policy signal based on the environmental perception signal, wherein the dynamic policy signal includes a desensitization rule identifier, an access control level, and an encryption strength instruction calculated in real time; S3: Sending the dynamic policy signal to the execution engine, triggering the engine to generate an execution signal including a field-level mask instruction or a record-level permission instruction; S4: Processing the target data in real time according to the execution signal to generate an output signal including some visible fields or an operation interface with limited permissions; S5: Bind the environmental perception signal and the dynamic policy signal into an audit traceability signal for storage.

2. The sensitive information security protection method according to claim 1, characterized in that: The access subject attributes in the environmental perception signal include operator identity credentials, device security status characteristics and historical operation behavior patterns, the target data attributes include data sensitivity classification identification and field structure characteristics, and the operating environment parameters include network access type, geographic positioning information and current access time window; when receiving the environmental perception signal, the device hardware fingerprint signal is synchronously collected, and the fingerprint signal is bound to the access subject attributes for verification, and when the verification is passed, the dynamic policy signal generation process is triggered.

3. The sensitive information security protection method according to claim 1, characterized in that: The generation of dynamic policy signals includes constructing a multi-dimensional risk assessment model, which receives the device security status characteristics and network access type in the environmental perception signal as a first input signal, and receives the sensitivity classification identifier in the target data attribute as a second input signal; calculates the real-time risk level value by fusing the first input signal and the second input signal, and generates a dynamic policy signal including an enhanced desensitization rule identifier and the highest access control level when the risk level value exceeds a preset threshold.

4. The sensitive information security protection method according to claim 1, characterized in that: After receiving the dynamic policy signal, the execution engine sends a key request signal to the key management module when it detects that the dynamic policy signal contains an encryption strength instruction; the key management module generates a temporary session key signal in response to the request, and inputs the key signal and the encryption strength instruction in the dynamic policy signal into the encryption processor to generate a ciphertext output signal of the target data.

5. The sensitive information security protection method according to claim 1, characterized in that: A dynamic watermark generation mechanism is embedded in the audit traceability signal storage process: the first three digits of the operator's identity credential and the generation timestamp of the dynamic policy signal are extracted from the environmental perception signal, and a unique watermark identification code is generated through a hash algorithm; the watermark identification code is converted into an invisible watermark signal and embedded into the data stream of the output signal. When the output signal is intercepted or forwarded, the watermark extraction and traceability mechanism is triggered.

6. The sensitive information security protection method according to claim 1, characterized in that: When the output signal is generated, an operation interface permission locking mechanism is established: based on the record-level permission instruction in the execution signal, a shielding control signal is generated for the download button, print button and screenshot function in the target data operation interface; when the user triggers the shielded function, a secondary authorization request signal is generated, which needs to be verified through an independent authentication channel before the shielding is lifted.

7. The sensitive information security protection method according to claim 1, characterized in that: The operating environment parameters include the device temperature sensor reading and current fluctuation characteristics. When it is detected that the reading deviates from the baseline value range or the current fluctuation characteristics are abnormal, an equipment abnormal status signal is generated; this signal triggers the dynamic strategy signal generation module to start the emergency protection mode and inject a data self-destruction instruction identifier into the dynamic strategy signal.

8. The sensitive information security protection method according to claim 7, characterized in that: The desensitizing rule identifier is associated with the dynamic rule base version number. When the execution engine receives an execution signal containing the desensitizing rule identifier, it sends a version verification request signal to the rule base; if the rule base returns a version expiration alarm signal, the real-time processing flow is interrupted and the rule base online update mechanism is triggered. After the update is completed, the execution signal is regenerated.

9. The sensitive information security protection method according to claim 8, characterized in that: The dynamic policy signal sets a survival time threshold, and generates a policy failure signal when the threshold is exceeded without triggering the execution engine; The failure signal triggers the re-collection process of the environmental perception signal and clears the generated dynamic strategy signal cache until the strategy generation is restarted after receiving a new environmental perception signal.

10. A preoperative assessment system using the sensitive information security protection method according to any one of claims 1 to 9, characterized in that: include: An acquisition module receives an environment perception signal, wherein the environment perception signal includes access subject attributes, target data attributes, and operating environment parameters; A coordination module, wherein the coordination module generates a dynamic policy signal based on the environmental perception signal, wherein the dynamic policy signal includes a desensitization rule identifier, an access control level, and an encryption strength instruction calculated in real time; a verification module, wherein the verification module sends the dynamic policy signal to the execution engine, triggering the engine to generate an execution signal including a field-level mask instruction or a record-level permission instruction; A preview module, which processes the target data in real time according to the execution signal and generates an output signal including a partially visible field or an operation interface with limited permissions; An integration module is used to bind the environmental perception signal and the dynamic strategy signal into an audit traceability signal for storage.

Images