A privacy information security protection method and system of a life service platform

Abstract

The application relates to the technical field of data processing, in particular to a privacy information security protection method and system of a life service platform. The method comprises the following steps: acquiring a front dependency strength vector of a business process of the life service platform; acquiring a role permission coefficient vector of the life service platform; acquiring a basic mask demand matrix of the life service platform; acquiring a mask strength matrix of privacy data of the life service platform according to the front dependency strength vector, the role permission coefficient vector and the basic mask demand matrix; constructing a business scene model of the life service platform according to the mask strength matrix; and determining a mask strategy of the privacy data of the life service platform according to the business scene model. By constructing the business scene model of the life service platform, adaptive data masking is performed on the privacy data of the user according to the business scene model, the mask strategy is coordinated in the whole process on the life service platform, and therefore the security protection effect of the privacy data of the user is improved.

Description

Technical Field

[0001] This application belongs to the field of data processing technology, specifically relating to a method and system for protecting the privacy information security of a life service platform. Background Technology

[0002] With the rapid development of internet technology, lifestyle service platforms (such as food delivery, housekeeping, and transportation) have become an indispensable part of people's daily lives. While providing convenient services, these platforms collect and process large amounts of users' personal information, including sensitive data such as names, contact information, geographical location, and payment information. Among existing technologies, data masking, as a commonly used data security protection method, is widely applied to the privacy protection of lifestyle service platforms. Data masking reduces the risk of privacy leaks while ensuring data availability by replacing real data with virtual or indeterminate forms.

[0003] However, the data masking process in existing lifestyle service platforms is disconnected from the business process. In the complex business scenarios of lifestyle service platforms, privacy data needs to flow through multiple stages (such as requesting, processing, storing, and displaying). However, existing technologies lack a collaborative masking strategy for the entire process, which leads to the exposure of plaintext information in some stages, creating security vulnerabilities. Summary of the Invention

[0004] To address the aforementioned issues, this application provides a method and system for protecting the privacy information of a lifestyle service platform.

[0005] According to a first aspect of the embodiments of this application, a method for protecting the privacy information security of a life service platform is provided, the method comprising:

[0006] Obtain the pre-dependency strength vector of the business processes of the aforementioned life service platform;

[0007] Obtain the role permission coefficient vector of the aforementioned life service platform;

[0008] Obtain the basic mask requirement matrix of the aforementioned life service platform;

[0009] Based on the aforementioned pre-dependency strength vector, the aforementioned role permission coefficient vector, and the aforementioned basic mask requirement matrix, obtain the mask strength matrix of the privacy data of the life service platform;

[0010] Based on the mask strength matrix, construct the business scenario model of the life service platform;

[0011] Based on the business scenario model, determine the masking strategy for the privacy data of the lifestyle service platform.

[0012] In one implementation, obtaining the pre-dependency strength vector of the business process of the life service platform includes:

[0013] Obtain the business process sequence of the aforementioned life service platform;

[0014] Obtain the number of preceding business processes for any business process in the business process sequence;

[0015] Obtain the total number of business processes in the business process sequence;

[0016] Based on the number of preceding business processes and the total number of business processes, the preceding dependency strength of any business process of the life service platform is obtained.

[0017] Based on the pre-dependency strength of any given business process, obtain the pre-dependency strength vector of the business processes of the life service platform.

[0018] In one implementation, obtaining the role permission coefficient vector of the life service platform includes:

[0019] Obtain the ratio of the amount of privacy data that any role on the life service platform is allowed to access to to the total amount of privacy data;

[0020] Based on the ratio, obtain the permission coefficient of the arbitrary role;

[0021] The data sequence formed by the permission coefficients of all roles on the life service platform is used as the role permission coefficient vector of the life service platform.

[0022] In one implementation, obtaining the basic mask demand matrix of the lifestyle service platform includes:

[0023] Obtain the business group of the aforementioned life service platform;

[0024] Obtain the information retrieval rate of the aforementioned business group;

[0025] Based on the information retrieval rate of the business group, obtain the information retrieval matrix of the life service platform;

[0026] Based on the information retrieval matrix, obtain the basic mask requirement matrix of the life service platform.

[0027] In one implementation, the business group that acquires the services from the lifestyle service platform includes:

[0028] Obtain the set of business processes of the life service platform, wherein the set of business processes includes all business processes of the life service platform;

[0029] Obtain the set of roles of the life service platform, the set of roles including all roles that process any privacy data of the life service platform;

[0030] The combination of any business process in the set of business processes and any role in the set of roles is taken as a business group of the life service platform.

[0031] In one implementation, obtaining the information retrieval rate of the business group includes:

[0032] Obtain the strength of the prerequisite dependencies for any business process of the aforementioned life service platform;

[0033] Obtain the sensitivity weight of any privacy data from the aforementioned lifestyle service platform;

[0034] The number of times the business group of the aforementioned life service platform retrieves user privacy data within a preset time period;

[0035] The number of times the business process of the business group occurs within the preset time period is obtained;

[0036] The information retrieval rate of the business group is obtained based on the aforementioned prerequisite dependency strength, the aforementioned sensitivity weight, the aforementioned number of times user privacy data is retrieved, and the aforementioned number of occurrences.

[0037] In one implementation, the sensitivity weight for acquiring any privacy data from the lifestyle service platform includes:

[0038] A compliance adjustment factor for obtaining any privacy data of users of the aforementioned life service platform, wherein the compliance adjustment factor is a priori value;

[0039] Obtain the number of times any of the privacy data has been accessed without authorization;

[0040] Obtain the total number of times all of the user's privacy data has been accessed without authorization;

[0041] The sensitivity weight of any privacy data of the life service platform is obtained based on the compliance adjustment factor, the number of times any privacy data is accessed without authorization, and the total number of times all of the user's privacy data is accessed without authorization.

[0042] In one implementation, constructing the business scenario model of the life service platform based on the mask strength matrix includes:

[0043] The matrix elements of the mask strength matrix are linearly normalized to obtain normalized mask strength elements;

[0044] The normalized mask strength elements are processed as follows to obtain the business scenario model matrix of the life service platform:

[0045] If the value of the normalized mask strength element is less than the first mask strength threshold, then the value of the matrix service element at the corresponding position of the normalized mask strength element is set to the first value.

[0046] If the value of the normalized mask strength element is greater than or equal to the first mask strength threshold and less than the second mask strength threshold, then the value of the matrix service element at the corresponding position of the normalized mask strength element is set to the second value.

[0047] If the value of the normalized mask strength element is greater than or equal to the second mask strength threshold, then the value of the matrix service element at the corresponding position of the normalized mask strength element is set to a third value, wherein the first value is less than the second value, and the second value is less than the third value.

[0048] In one implementation, determining the privacy data masking strategy of the lifestyle service platform based on the business scenario model includes:

[0049] The sensitive categories of the privacy data of the life service platform are obtained. The privacy data of the life service platform includes Class I sensitive data and Class II sensitive data. The damage caused by the leakage of Class I sensitive data is greater than the damage caused by the leakage of Class II sensitive data.

[0050] The masking strategy for the privacy data is determined based on the values ​​of the matrix business elements in the business scenario model, the sensitive categories of the privacy data, and whether the privacy data is accessed by the business group of the matrix business elements authorized by the life service platform.

[0051] According to a second aspect of the embodiments of this application, a privacy information security protection system for a life service platform is provided, the system comprising a service platform, the service platform including:

[0052] A memory on which computer programs are stored;

[0053] A processor for executing the computer program in the memory to implement the steps of the method of any one of the first aspects.

[0054] The embodiments of this application have the following beneficial effects: This application provides a method for protecting the privacy information security of a life service platform. The method includes: obtaining a pre-dependency strength vector of the business process of the life service platform; obtaining a role permission coefficient vector of the life service platform; obtaining a basic masking requirement matrix of the life service platform; obtaining a masking strength matrix of the privacy data of the life service platform based on the pre-dependency strength vector, the role permission coefficient vector, and the basic masking requirement matrix; constructing a business scenario model of the life service platform based on the masking strength matrix; and determining a masking strategy for the privacy data of the life service platform based on the business scenario model. This application, by constructing a business scenario model of the life service platform and adaptively masking user privacy data based on this model, achieves full-process masking strategy coordination on the life service platform, avoiding the problem of plaintext exposure of user privacy data in multiple business processes, thereby improving the security protection effect of user privacy data. Attached Figure Description

[0055] To more clearly illustrate the implementation schemes of this application, the accompanying drawings used in the implementation schemes will be briefly introduced below. It should be understood that the accompanying drawings only show some implementation schemes of this application and should not be regarded as a limitation of the scope. For those skilled in the art, other related drawings can be obtained from the accompanying drawings without creative effort.

[0056] Figure 1 This is a flowchart illustrating a method for protecting the privacy information security of a lifestyle service platform according to an exemplary embodiment.

[0057] Figure 2 This is a flowchart illustrating a method for obtaining the pre-dependency strength vector of a business process of a life service platform, according to an exemplary embodiment.

[0058] Figure 3 This is a flowchart illustrating a method for obtaining a role permission coefficient vector of a life service platform according to an exemplary embodiment.

[0059] Figure 4 This is a flowchart illustrating a method for obtaining a basic mask demand matrix of a life service platform according to an exemplary embodiment.

[0060] Figure 5 This is a flowchart illustrating a method for obtaining business groups from a life services platform according to an exemplary embodiment.

[0061] Figure 6 This is a flowchart illustrating a method for obtaining the information retrieval rate of a business group according to an exemplary embodiment.

[0062] Figure 7 This is a flowchart illustrating a method for obtaining sensitivity weights of any privacy data from a lifestyle service platform, according to an exemplary embodiment.

[0063] Figure 8 This is a flowchart illustrating a method for constructing a business scenario model of a life service platform based on a mask strength matrix, according to an exemplary embodiment.

[0064] Figure 9 This is a flowchart illustrating a method for determining a masking strategy for privacy data of a life service platform based on a business scenario model, according to an exemplary embodiment.

[0065] Figure 10 This is a block diagram illustrating a privacy information security protection system for a lifestyle service platform according to an exemplary embodiment.

[0066] Figure 11 This is a block diagram illustrating a service platform according to an exemplary embodiment. Detailed Implementation

[0067] To clearly illustrate the technical features of this solution, the following detailed description, in conjunction with specific implementation methods and accompanying drawings, will provide a comprehensive explanation of this application.

[0068] Embodiments of this application will now be described in more detail with reference to the accompanying drawings. While some embodiments of this application are shown in the drawings, it should be understood that this application can be implemented in various forms and should not be construed as limited to the embodiments set forth herein. Rather, these embodiments are provided to provide a more thorough and complete understanding of this application. It should be understood that the accompanying drawings and embodiments are for illustrative purposes only and are not intended to limit the scope of protection of this application.

[0069] It should be understood that the steps described in the method embodiments of this application may be performed in different orders and / or in parallel. Furthermore, the method embodiments may include additional steps and / or omit the steps shown. The scope of this application is not limited in this respect.

[0070] The term "comprising" and its variations as used herein are open-ended inclusions, meaning "including but not limited to". The term "based on" means "at least partially based on". The term "one embodiment" means "at least one embodiment"; the term "another embodiment" means "at least one additional embodiment"; the term "some embodiments" means "at least some embodiments". Definitions of other terms will be given in the description below.

[0071] It should be noted that the concepts of "first" and "second" mentioned in this application are only used to distinguish different devices, modules or units, and are not used to limit the order of functions performed by these devices, modules or units or their interdependencies.

[0072] It should be noted that the terms "one" and "multiple" used in this application are illustrative rather than restrictive. Those skilled in the art should understand that, unless explicitly stated in the context, they should be interpreted as "one or more". In the description of this application, unless otherwise stated, "multiple" refers to two or more than two, and other quantifiers are similar; "at least one item", "one item or multiple items", or similar expressions refer to any combination of these items, including any combination of single or plural items. For example, at least one item 'a' can represent any number of 'a's; as another example, one or more of a, b, and c can represent: a, b, c, ab, ac, bc, or abc, where a, b, and c can be single or multiple; "and / or" describes the relationship between related objects, indicating that three relationships can exist. For example, A and / or B can represent: A alone, A and B simultaneously, and B alone, where A and B can be singular or plural.

[0073] Although operations or steps are described in a specific order in the accompanying drawings in the embodiments of this application, this should not be construed as requiring these operations or steps to be performed in the specific order or serial order shown, or requiring all of the shown operations or steps to be performed to obtain the desired result. In the embodiments of this application, these operations or steps may be performed serially; they may be performed in parallel; or a portion of these operations or steps may be performed.

[0074] Meanwhile, it is understood that the data involved in this technical solution (including but not limited to the data itself, the acquisition or use of the data) shall comply with the requirements of relevant laws, regulations and related provisions.

[0075] First, the application scenario of this application is explained. To achieve contextual association in data masking of user privacy information, thereby ensuring that the plaintext of user privacy information is not easily exposed when it flows through multiple stages of business processes on the life service platform, this method selects to obtain business process-related data involved in the flow of user privacy information through multiple business stages on the life service platform. This allows for the subsequent establishment of corresponding adaptive masking strategies for user privacy data based on business processes, thus better protecting user privacy information on the life service platform.

[0076] For example, on food delivery platforms, during the process of a user ordering food, the platform records the user's account information, recipient's name, gender, contact number, detailed address, payment method, and other private data. While users can usually view this private data without difficulty on the platform, delivery drivers and merchants need to mask this data to prevent them from accessing too much detailed information (since user data contains their real information, the platform account, contact number, and payment method are usually masked, and a corresponding virtual phone number is generated) to protect user privacy. The following describes this application with specific embodiments.

[0077] Figure 1 This is a flowchart illustrating a method for protecting the privacy information security of a lifestyle service platform according to an exemplary embodiment. Figure 1 As shown in the figure, this application provides a method for protecting the privacy information security of a life service platform, which may include the following steps:

[0078] In step S10, the pre-dependency strength vector of the business process of the life service platform is obtained.

[0079] In this step, the pre-dependency strength vector of the business processes of the life service platform is obtained. For example, the business process sequence of the life service platform can be obtained first, then the number of pre-dependent business processes of any business process in the business process sequence can be obtained, then the total number of business processes in the business process sequence can be obtained, then the pre-dependency strength of any business process of the life service platform can be obtained based on the number of pre-dependent business processes and the total number of business processes, and finally the pre-dependency strength vector of the business processes of the life service platform can be obtained based on the pre-dependency strength of any business process.

[0080] In step S20, the role permission coefficient vector of the life service platform is obtained.

[0081] In this step, the role permission coefficient vector of the life service platform is obtained. For example, the ratio of the amount of privacy data that any role on the life service platform is allowed to access to to the total amount of privacy data can be obtained first. Then, based on this ratio, the permission coefficient of any role can be obtained. Finally, the data sequence formed by the permission coefficients of all roles on the life service platform is used as the role permission coefficient vector of the life service platform.

[0082] In step S30, the basic mask demand matrix of the life service platform is obtained.

[0083] In this step, the basic mask demand matrix of the life service platform is obtained. For example, the business groups of the life service platform can be obtained first, then the information retrieval rate of the business groups can be obtained, then the information retrieval matrix of the life service platform can be obtained based on the information retrieval rate of the business groups, and finally the basic mask demand matrix of the life service platform can be obtained based on the information retrieval matrix.

[0084] In step S40, the mask strength matrix of the privacy data of the life service platform is obtained based on the pre-dependency strength vector, the role permission coefficient vector, and the basic mask requirement matrix.

[0085] In this step, based on the prior dependency strength vector Y and the role permission coefficient vector... and the basic mask requirement matrix Mask strength matrix for obtaining privacy data from lifestyle service platforms For example, the mask strength matrix of privacy data on a lifestyle service platform. It can be obtained from the following formula:

[0086] Formula 1

[0087] in, This indicates that the element value is 1 and the size is [value]. column vectors, This indicates that the element value is 1 and the size is [value]. The row vector, This represents the Hadamard product (used to multiply matrices element by element).

[0088] In step S50, a business scenario model of the life service platform is constructed based on the mask strength matrix.

[0089] In this step, a business scenario model for the life service platform is constructed based on the mask strength matrix. For example, the matrix elements of the mask strength matrix can first be linearly normalized to obtain normalized mask strength elements. If the value of a normalized mask strength element is less than a first mask strength threshold, the value of the matrix business element at the corresponding position of the normalized mask strength element is set to the first value. If the value of a normalized mask strength element is greater than or equal to the first mask strength threshold and less than a second mask strength threshold, the value of the matrix business element at the corresponding position of the normalized mask strength element is set to the second value. If the value of a normalized mask strength element is greater than or equal to the second mask strength threshold, the value of the matrix business element at the corresponding position of the normalized mask strength element is set to the third value. Here, the first value is less than the second value, and the second value is less than the third value.

[0090] In step S60, the privacy data masking strategy of the life service platform is determined according to the business scenario model.

[0091] In this step, a masking strategy for the privacy data of the lifestyle service platform is determined based on the business scenario model. For example, the sensitive categories of the privacy data of the lifestyle service platform can be obtained first. The privacy data of the lifestyle service platform includes Category I sensitive data and Category II sensitive data. The damage caused by the leakage of Category I sensitive data is greater than the damage caused by the leakage of Category II sensitive data. Then, based on the values ​​of the matrix business elements in the business scenario model, the sensitive categories of the privacy data, and whether the privacy data has been authorized by the lifestyle service platform to be accessed by the business groups of the matrix business elements, a masking strategy for the privacy data is determined.

[0092] The embodiments of this application have the following beneficial effects: This application provides a method for protecting the privacy information security of a life service platform. The method includes: obtaining a pre-dependency strength vector of the business process of the life service platform; obtaining a role permission coefficient vector of the life service platform; obtaining a basic masking requirement matrix of the life service platform; obtaining a masking strength matrix of the privacy data of the life service platform based on the pre-dependency strength vector, the role permission coefficient vector, and the basic masking requirement matrix; constructing a business scenario model of the life service platform based on the masking strength matrix; and determining a masking strategy for the privacy data of the life service platform based on the business scenario model. This application, by constructing a business scenario model of the life service platform and adaptively masking user privacy data based on this model, achieves full-process masking strategy coordination on the life service platform, avoiding the problem of plaintext exposure of user privacy data in multiple business processes, thereby improving the security protection effect of user privacy data.

[0093] Figure 2 This is a flowchart illustrating a method for obtaining the pre-dependency strength vector of a business process on a lifestyle service platform, according to an exemplary embodiment. Figure 2 As shown, obtaining the pre-dependency strength vector of the business process of the life service platform may include the following steps:

[0094] In step S101, the business process sequence of the life service platform is obtained.

[0095] In this step, the business process sequence of the life service platform is obtained. For example, the business process data sequence of the life service platform can be obtained first. The business process data sequence contains several business processes, including at least: order generation, merchant shipment, goods delivery, goods receipt, order completion, and after-sales service.

[0096] Then, the system obtains the user's privacy information, which includes several pieces of the user's privacy data, including at least the user's platform account, recipient's name, gender, contact number, detailed address, and payment method.

[0097] Secondly, the roles involved on the life service platform are identified, including at least: users, merchants, delivery personnel, and platform customer service.

[0098] Finally, by using the information retrieval logs of the life service platform, we obtained the retrieval records of any private data in the user's privacy information in each business process. These records show the retrieval time of each user's privacy data by each role in each business process, as well as the unauthorized access time of each privacy data.

[0099] In step S102, the number of preceding business processes for any business process in the business process sequence is obtained.

[0100] In this step, the number of preceding business processes for any business process i in the business process sequence is obtained. For example, Indicates the first step in the business process sequence The number of preceding processes for each business process. Taking the business process sequence [order generation, merchant shipment, goods delivery, goods receipt, order completion, after-sales service] as an example, the number of preceding processes for the goods receipt business process is 3.

[0101] In step S103, the total number of business processes in the business process sequence is obtained.

[0102] In this step, the total number of business processes p in the business process sequence is obtained. For example, taking the business process sequence [order generation, merchant shipment, goods delivery, goods receipt, order completion, after-sales service] as an example, the total number of business processes in this business process sequence is 6.

[0103] In step S104, the pre-dependency strength of any business process of the life service platform is obtained based on the number of pre-process business processes and the total number of business processes.

[0104] In this step, based on the number of preceding business processes And the number of business processes n, to obtain the pre-dependency strength of any business process i on the life service platform. For example, the strength of the pre-dependencies of any business process i on a lifestyle service platform. It can be obtained from the following formula:

[0105] Formula 2

[0106] Where n is greater than 1.

[0107] Since there is usually a sequential order in the business processes of a life service platform, the later a business process is, the more easily the demand for user information under that business process is affected by the preceding processes. For example, goods delivery depends on order generation and merchant shipment, so obtaining user information needs to be based on the preceding processes. Therefore, this method chooses to reflect the degree of influence of preceding processes on the acquisition of user privacy information under that business process by obtaining the preceding dependency strength of each business process in the business process sequence, or in other words, the dependence on preceding processes.

[0108] In step S105, the pre-dependency strength vector of the business process of the life service platform is obtained according to the pre-dependency strength of the arbitrary business process.

[0109] In this step, the strength of the pre-dependencies of any business process is considered. Obtain the pre-dependency strength vector of the business processes of the life service platform. For example, the pre-dependency strength vector of a life service platform's business processes. It can be represented as , where n is the number of business processes.

[0110] Figure 3 This is a flowchart illustrating a method for obtaining a role permission coefficient vector of a life service platform according to an exemplary embodiment. Figure 3 As shown, obtaining the role permission coefficient vector of the life service platform may include the following steps:

[0111] In step S201, the ratio of the amount of privacy data that any role on the life service platform is allowed to access to to the total amount of privacy data is obtained.

[0112] In this step, the ratio of the amount of privacy data that any role on the lifestyle service platform is allowed to access to is obtained to the total amount of privacy data. .

[0113] In step S202, the permission coefficient of the arbitrary role is obtained based on the ratio.

[0114] In this step, based on the ratio Obtain the permission coefficient of any role .

[0115] In step S203, the data sequence formed by the permission coefficients of all roles on the life service platform is used as the role permission coefficient vector of the life service platform.

[0116] In this step, the data sequence formed by the permission coefficients of all roles on the life service platform is used as the role permission coefficient vector of the life service platform. Role permission coefficient vector for A matrix of dimension, where, The number of roles for lifestyle service platforms.

[0117] Figure 4 This is a flowchart illustrating a method for obtaining a basic mask demand matrix of a life service platform according to an exemplary embodiment. Figure 4 As shown, obtaining the basic mask demand matrix of the life service platform may include the following steps:

[0118] In step S301, the business group of the life service platform is obtained.

[0119] In this step, the business groups of the life service platform are obtained. For example, the business process set of the life service platform can be obtained first, which includes all business processes of the life service platform. Then, the role set of the life service platform can be obtained, which includes all roles that process any privacy data of the life service platform. Then, the combination formed by any business process in the business process set and any role in the role set is taken as a business group of the life service platform.

[0120] In step S302, the information retrieval rate of the service group is obtained.

[0121] In this step, the information retrieval rate of the business group is obtained. For example, the strength of the prerequisite dependencies of any business process of the life service platform can be obtained first, then the sensitivity weight of any privacy data of the life service platform can be obtained, then the number of times the business group of the life service platform retrieves user privacy data within a preset time period can be obtained, then the number of times the business process of the business group occurs within the preset time period can be obtained, and finally, the information retrieval rate of the business group is obtained based on the strength of the prerequisite dependencies, the sensitivity weight, the number of times user privacy data is retrieved, and the number of times it occurs.

[0122] In step S303, the information retrieval matrix of the life service platform is obtained based on the information retrieval rate of the business group.

[0123] In this step, the information retrieval rate of the business group is used as a basis. Information retrieval matrix of life service platforms For example, a matrix. Size is Furthermore, the elements in the matrix are arrays, with each array corresponding to a business group and the information retrieval rate of that business group. Furthermore, all business groups within any row of the matrix have the same roles, and the business processes within all business groups in any row are arranged in chronological order. Additionally, all business groups in any column have the same business processes. For the number of characters, This indicates the number of business processes. Indicates the first Each business process Indicates the first Each character.

[0124] As a concrete example, the information retrieval matrix It can be represented as: .

[0125] In step S304, the basic mask requirement matrix of the life service platform is obtained by retrieving the information matrix.

[0126] In this step, the matrix is ​​retrieved based on the information. Obtain the basic mask demand matrix of the life service platform For example, it can be... As in the For the first business process Masking requirement coefficient when an individual obtains private data. Utilize the mask requirement coefficients corresponding to all business processes and roles Formation and Information Retrieval Matrix A matrix of the same size is used as the base mask requirement matrix. .

[0127] The business processes of a lifestyle service platform have temporal dependencies (e.g., "goods delivery" must follow "merchant shipment"). Subsequent processes have varying degrees of information dependency on preceding processes, leading to dynamic changes in masking requirements. Furthermore, access permissions to privacy information for different roles (users, merchants, delivery personnel, etc.) should typically be handled differently. Therefore, this method processes the information retrieval matrix by acquiring the strength of the preceding dependencies in the business processes and the access authorization status of different roles on the platform for user privacy information, thereby constructing a basic masking requirement matrix. Then, based on the basic mask requirement matrix Construct the mask strength matrix Then based on the mask strength matrix Construct a business scenario model matrix.

[0128] Figure 5 This is a flowchart illustrating a method for obtaining business groups from a lifestyle service platform according to an exemplary embodiment. Figure 5As shown, the process of acquiring the business group of the life service platform may include the following steps:

[0129] In step S3011, the business process set of the life service platform is obtained, and the business process set includes all the business processes of the life service platform.

[0130] In this step, the set of business processes of the life service platform is obtained, which includes all business processes of the life service platform.

[0131] In step S3012, the role set of the life service platform is obtained, and the role set includes all roles that process any privacy data of the life service platform.

[0132] In this step, the set of roles on the lifestyle service platform is obtained, which includes all roles that process any privacy data on the lifestyle service platform.

[0133] In step S3013, a combination of any business process in the business process set and any role in the role set is taken as a business group of the life service platform.

[0134] In this step, the combination of any business process i in the business process set and any role j in the role set is taken as a business group ij of the life service platform.

[0135] Figure 6 This is a flowchart illustrating a method for obtaining the information retrieval rate of a service group according to an exemplary embodiment. For example... Figure 6 As shown, obtaining the information retrieval rate of the business group may include the following steps:

[0136] In step S3021, the strength of the prerequisite dependencies of any business process of the life service platform is obtained.

[0137] In this step, the strength of the pre-dependencies of any business process i on the life service platform is obtained. For example, the strength of the prerequisite dependencies of any business process i in a lifestyle service platform. The method can be referred to Formula 2, and will not be elaborated here.

[0138] In step S3022, the sensitivity weight of any privacy data of the life service platform is obtained.

[0139] In this step, the sensitivity weight of any privacy data from the lifestyle service platform is obtained. For example, the compliance adjustment factor of any privacy data of a user on the lifestyle service platform can be obtained first, with the compliance adjustment factor as a priori value. Then, the number of times any privacy data has been accessed without authorization is obtained. Next, the total number of times all of the user's privacy data has been accessed without authorization is obtained. Finally, based on the compliance adjustment factor, the number of times any privacy data has been accessed without authorization, and the total number of times all of the user's privacy data has been accessed without authorization, the sensitivity weight of any privacy data from the lifestyle service platform is obtained.

[0140] In step S3023, the number of times the business group of the life service platform retrieves user privacy data within a preset time period is obtained.

[0141] In this step, the number of times the business group ij of the life service platform retrieves user privacy data within a preset time period is recorded. For example, the preset time can be 24 hours.

[0142] In step S3024, the number of times the business process of the business group occurs within the preset time period is obtained.

[0143] In this step, the number of times business process i of the business group occurs within a preset time period is obtained. For example, the preset time can be 24 hours.

[0144] In step S3025, the information retrieval rate of the business group is obtained based on the prior dependency strength, the sensitivity weight, the number of times user privacy data is retrieved, and the number of occurrences.

[0145] In this step, based on the strength of the preceding dependencies Sensitivity weights Number of times user privacy data is accessed And the number of times business process i of the business group occurs within a preset time. Get the information retrieval rate of business group ij For example, the information retrieval rate of business group ij. It can be obtained from the following formula:

[0146] Formula 3

[0147] Where k represents the k-th piece of user privacy data, and K represents the total number of user privacy data. For normalization function, It can be any small positive number. In embodiments of the present invention, it can be set to... The value is set to 0.01 to avoid the situation where the ratio is meaningless due to a zero denominator.

[0148] Information retrieval rate describes the degree to which a specific role within a business group retrieves user information within a given business process. A higher retrieval rate indicates that the role needs to fully understand user information to meet user service needs on the platform (i.e., shopping, delivery, and after-sales service). Therefore, the need for masking user privacy information in subsequent processing should be reduced to avoid insufficient information acquisition due to excessive masking, which could compromise the platform's life service functions. Conversely, a lower information retrieval rate indicates a higher risk of privacy exposure, requiring a stronger masking strategy (e.g., upgrading from partial to full masking). This reflects the role's actual business needs within the business process. The higher the value, the more frequently the role needs to access private information within that process, indicating a high degree of dependence on business functions. This indicates the risk constraints under the current business scenario. This value is used to assess the level of accumulated risk of privacy information in the current business scenario. The higher the value, the higher the level of accumulated risk, and the more powerful the data masking processing is required.

[0149] Figure 7 This is a flowchart illustrating a method for obtaining sensitivity weights of any privacy data from a lifestyle service platform, according to an exemplary embodiment. Figure 7 As shown, the sensitivity weighting of obtaining any privacy data from the lifestyle service platform may include the following steps:

[0150] In step S30221, the compliance adjustment factor of any privacy data of the user of the life service platform is obtained, and the compliance adjustment factor is a priori value.

[0151] In this step, a compliance adjustment factor is obtained for any privacy data k of a user on the lifestyle service platform. Compliance adjustment factor These are prior values. For example, based on experience, the following privacy data can be preset: the compliance adjustment factors for platform account, recipient's name, gender, contact number, detailed address, and deduction method are 0.5, 0.6, 0.3, 0.8, 0.7, and 0.4, respectively.

[0152] In step S30222, the number of times any of the privacy data has been accessed without authorization is obtained.

[0153] In this step, the number of times any privacy data k has been accessed without authorization is obtained. .

[0154] In step S30223, the total number of times all of the user's privacy data has been accessed without authorization is obtained.

[0155] In this step, the total number of times all of the user's private data has been accessed without authorization is obtained. .

[0156] In step S30224, the sensitivity weight of any privacy data of the life service platform is obtained based on the compliance adjustment factor, the number of times any privacy data is accessed without authorization, and the total number of times all privacy data of the user is accessed without authorization.

[0157] In this step, based on the compliance adjustment factor Number of times any privacy data has been accessed without authorization And the total number of times all of a user's privacy data has been accessed without authorization. This involves acquiring the sensitivity weight of any private data k from a lifestyle service platform. For example, the sensitivity weight... The calculation formula is:

[0158] Formula 4

[0159] in, Not zero.

[0160] Figure 8 This is a flowchart illustrating a method for constructing a business scenario model of a life service platform based on a mask strength matrix, according to an exemplary embodiment. Figure 8 As shown, constructing the business scenario model of the life service platform based on the mask strength matrix may include the following steps:

[0161] In step S501, the matrix elements of the mask strength matrix are linearly normalized to obtain normalized mask strength elements.

[0162] In this step, the matrix elements of the mask strength matrix are linearly normalized to obtain normalized mask strength elements.

[0163] In step S502, if the value of the normalized mask strength element is less than the first mask strength threshold, then the value of the matrix service element at the corresponding position of the normalized mask strength element is set to the first value.

[0164] In this step, if the value of the normalized mask strength element is less than the first mask strength threshold, then the value of the business element in the business scenario model matrix at the corresponding position of the normalized mask strength element is set to the first value. For example, the first mask strength threshold can be 0.3, and the first value can be 0.

[0165] In step S503, if the value of the normalized mask strength element is greater than or equal to the first mask strength threshold and less than the second mask strength threshold, then the value of the matrix service element at the corresponding position of the normalized mask strength element is set to the second value.

[0166] In this step, if the value of the normalized mask strength element is greater than or equal to the first mask strength threshold and less than the second mask strength threshold, then the value of the business element in the business scenario model matrix at the corresponding position of the normalized mask strength element is set to the second value. For example, the second mask strength threshold can be 0.7, and the second value can be 1.

[0167] In step S504, if the value of the normalized mask strength element is greater than or equal to the second mask strength threshold, then the value of the matrix service element at the corresponding position of the normalized mask strength element is set to a third value, wherein the first value is less than the second value, and the second value is less than the third value.

[0168] In this step, if the value of the normalized mask strength element is greater than or equal to the second mask strength threshold, then the value of the business element in the business scenario model matrix at the corresponding position of the normalized mask strength element is set to the third value, where the first value is less than the second value, and the second value is less than the third value. For example, the third value can be 2.

[0169] At this point, we can obtain a business scenario model matrix of the same size as the mask strength matrix, which is of size [size missing]. Each business element corresponds to a business group.

[0170] Since user privacy data is accessed by different roles in different business processes, some roles may be able to view user privacy information in multiple business processes. When user privacy information flows through multiple business processes, it involves business scenarios formed by the corresponding business processes and roles. For example, in the business group formed by goods delivery and delivery personnel, the corresponding scenario is that the delivery personnel will deliver goods through the user's contact information and detailed address. Therefore, each of the above business groups corresponds to a business scenario. Thus, in this method, a business scenario model is constructed based on the business group.

[0171] Figure 9 This is a flowchart illustrating a method for determining a masking strategy for privacy data on a lifestyle service platform based on a business scenario model, according to an exemplary embodiment. Figure 9 As shown, determining the privacy data masking strategy of the life service platform based on the business scenario model may include the following steps:

[0172] In step S601, the sensitive categories of the privacy data of the life service platform are obtained. The privacy data of the life service platform includes Class I sensitive data and Class II sensitive data. The damage caused by the leakage of Class I sensitive data is greater than the damage caused by the leakage of Class II sensitive data.

[0173] In this step, the sensitive categories of the privacy data of the life service platform are obtained. The privacy data of the life service platform may include Category I sensitive data and Category II sensitive data. Among them, the damage caused by the leakage of Category I sensitive data is greater than the damage caused by the leakage of Category II sensitive data.

[0174] In step S602, the masking strategy for the privacy data is determined based on the values ​​of the matrix business elements in the business scenario model, the sensitive category of the privacy data, and whether the privacy data is accessed by the role of the business group authorized by the life service platform to the matrix business elements.

[0175] In this step, a masking strategy for privacy data is determined based on the values ​​of the matrix business elements in the business scenario model, the sensitive categories of privacy data, and whether the privacy data is accessed by the business group of the matrix business elements authorized by the life service platform.

[0176] For example, when the matrix business element value of the business scenario model corresponding to the business group is 2, for the privacy data to be obtained by the corresponding role in the business group, if the privacy data is Class I sensitive data and has not been authorized by the platform to be accessed by the role, the privacy data will be fully masked; if the privacy data is Class I sensitive data and has been authorized by the platform to be accessed by the role, the privacy data will be partially masked; if the privacy data is Class II sensitive data and has not been authorized by the platform to be accessed by the role, the privacy data will be partially masked; if the privacy data is Class II sensitive data and has been authorized by the platform to be accessed by the role, the privacy data will not be masked.

[0177] When the value of the matrix business element in the business scenario model corresponding to the business group is 1, for the privacy data to be obtained by the corresponding role in the business group, if the privacy data is Class I sensitive data and has not been authorized by the platform to be accessed by the role, the privacy data will be fully masked; if the privacy data is Class I sensitive data and has been authorized by the platform to be accessed by the role, the privacy data will be partially masked; if the privacy data is Class II sensitive data, the privacy data will not be masked.

[0178] When the value of the matrix business element in the business scenario model corresponding to the business group is 0, for the privacy data to be obtained by the corresponding role in the business group, if the privacy data is Class I sensitive data and has not been authorized by the platform to be accessed by the role, the privacy data will be partially masked; if the privacy data is Class II sensitive data, or if it is Class I sensitive data and has been authorized by the platform to be accessed by the role, the privacy data will not be masked.

[0179] The process of implementing the privacy data masking policy of the aforementioned lifestyle service platform can be as follows:

[0180] First, deploy event listeners in the core business system of the life service platform. These event listeners monitor the following business process events: business process start events (such as order generation, merchant shipment, etc.), business process transition events (such as transitioning from "merchant shipment" to "goods delivery"), and role authentication events (such as delivery personnel logging into the system). Key information captured by the event listeners includes: the current business process identifier. Current data processing role identifier Privacy data access request content, request timestamp, etc.

[0181] Then, when a business process event is captured, the event listener generates a business scenario context object, which contains: a business process index. Character Index The set of privacy data types requested.

[0182] Finally, based on the business process index Character Index Identify the corresponding business group and obtain the corresponding business element in the business scenario model matrix. Based on the value of the business element and in combination with the masking strategy, perform data masking processing on the corresponding privacy data.

[0183] This application also provides a computer-readable storage medium storing computer program instructions thereon, which, when executed by a processor, implement the steps of the privacy information security protection method of the life service platform provided in this application.

[0184] Figure 10 This is a block diagram illustrating a privacy information security protection system for a lifestyle service platform according to an exemplary embodiment. Figure 10 As shown in the figure, this application embodiment provides a privacy information security protection system 1000 for a life service platform, including a service platform 1100.

[0185] Figure 11 This is a block diagram illustrating a service platform according to an exemplary embodiment. For example, service platform 1100 may be provided as a server. (Refer to...) Figure 11The service platform 1100 includes a processor 1122, which further includes one or more processors, and memory resources represented by memory 1132 for storing instructions executable by the processor 1122, such as applications. The applications stored in memory 1132 may include one or more modules, each corresponding to a set of instructions. Furthermore, the processor 1122 is configured to execute instructions to perform the aforementioned privacy information security protection method of the life service platform.

[0186] The service platform 1100 may also include a power supply component 1126 configured to perform power management of the service platform 1100, a communication component 1150 configured to connect the service platform 1100 to a network, and an input / output interface 1158. The service platform 1100 can operate on an operating system stored in memory 1132.

[0187] In another exemplary embodiment, a computer program product is also provided, which includes a computer program executable by a programmable electronic device, the computer program having a code portion for performing the privacy information security protection method of the above-described life service platform when executed by the programmable electronic device.

[0188] The embodiments described above are merely illustrative of several implementation methods of this application, and while the descriptions are specific and detailed, they should not be construed as limiting the scope of this application. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of this application, and these modifications and improvements all fall within the protection scope of this application.

Claims

1. A method for protecting privacy information security of a life service platform, characterized in that, The method comprises: obtaining a pre-requisite dependency strength vector of a business process of the life service platform; obtaining a role permission coefficient vector of the life service platform; obtaining a basic mask demand matrix of the life service platform; obtaining a mask strength matrix of private data of the life service platform according to the pre-requisite dependency strength vector, the role permission coefficient vector, and the basic mask demand matrix; constructing a business scenario model of the life service platform according to the mask strength matrix; determining a mask strategy of the private data of the life service platform according to the business scenario model; wherein the method for constructing the business scenario model of the life service platform is: performing linear normalization processing on the matrix elements of the mask strength matrix to obtain normalized mask strength elements; and performing the following processing on the normalized mask strength elements to obtain the business scenario model matrix of the life service platform: if the value of the normalized mask strength element is less than a first mask strength threshold, setting the value of the matrix business element at the position corresponding to the normalized mask strength element to a first value; if the value of the normalized mask strength element is greater than or equal to the first mask strength threshold and less than a second mask strength threshold, setting the value of the matrix business element at the position corresponding to the normalized mask strength element to a second value; and if the value of the normalized mask strength element is greater than or equal to the second mask strength threshold, setting the value of the matrix business element at the position corresponding to the normalized mask strength element to a third value, wherein the first value is less than the second value, and the second value is less than the third value. 2.The method of claim 1, wherein, The method comprises: obtaining a pre-requisite dependency strength vector of a business process of the life service platform; obtaining a role permission coefficient vector of the life service platform; obtaining a basic mask demand matrix of the life service platform; obtaining a mask strength matrix of private data of the life service platform according to the pre-requisite dependency strength vector, the role permission coefficient vector, and the basic mask demand matrix; constructing a business scenario model of the life service platform according to the mask strength matrix; 3.The method of claim 1, wherein, determining a mask strategy of the private data of the life service platform according to the business scenario model; wherein the method for constructing the business scenario model of the life service platform is: performing linear normalization processing on the matrix elements of the mask strength matrix to obtain normalized mask strength elements; and performing the following processing on the normalized mask strength elements to obtain the business scenario model matrix of the life service platform: if the value of the normalized mask strength element is less than a first mask strength threshold, setting the value of the matrix business element at the position corresponding to the normalized mask strength element to a first value; if the value of the normalized mask strength element is greater than or equal to the first mask strength threshold and less than a second mask strength threshold, setting the value of the matrix business element at the position corresponding to the normalized mask strength element to a second value; and if the value of the normalized mask strength element is greater than or equal to the second mask strength threshold, setting the value of the matrix business element at the position corresponding to the normalized mask strength element to a third value, wherein the first value is less than the second value, and the second value is less than the third value. The method comprises: obtaining a pre-requisite dependency strength vector of a business process of the life service platform; 4.The method of claim 1, wherein, obtaining a role permission coefficient vector of the life service platform; obtaining a basic mask demand matrix of the life service platform; obtaining a mask strength matrix of private data of the life service platform according to the pre-requisite dependency strength vector, the role permission coefficient vector, and the basic mask demand matrix; constructing a business scenario model of the life service platform according to the mask strength matrix; determining a mask strategy of the private data of the life service platform according to the business scenario model; 5.The method of claim 4, wherein, wherein the method for constructing the business scenario model of the life service platform is: performing linear normalization processing on the matrix elements of the mask strength matrix to obtain normalized mask strength elements; and performing the following processing on the normalized mask strength elements to obtain the business scenario model matrix of the life service platform: if the value of the normalized mask strength element is less than a first mask strength threshold, setting the value of the matrix business element at the position corresponding to the normalized mask strength element to a first value; if the value of the normalized mask strength element is greater than or equal to the first mask strength threshold and less than a second mask strength threshold, setting the value of the matrix business element at the position corresponding to the normalized mask strength element to a second value; and if the value of the normalized mask strength element is greater than or equal to the second mask strength threshold, setting the value of the matrix business element at the position corresponding to the normalized mask strength element to a third value, wherein the first value is less than the second value, and the second value is less than the third value. The method comprises: obtain a business process set of the life service platform, the business process set comprising all business processes of the life service platform; obtain a role set of the life service platform, the role set comprising all roles processing any private data of the life service platform; form a combination of any business process in the business process set and any role in the role set as a business group of the life service platform. 6.The method of claim 4, wherein, The information retrieval rate of the business group comprises: obtain a pre-dependence intensity of any business process of the life service platform; obtain a sensitivity weight of any private data of the life service platform; obtain a number of times of retrieving user private data of the business group of the life service platform within a preset time; obtain a number of times of occurrence of the business process of the business group within the preset time; obtain the information retrieval rate of the business group according to the pre-dependence intensity, the sensitivity weight, the number of times of retrieving user private data, and the number of times of occurrence. 7.The method of claim 6, wherein, The sensitivity weight of any private data of the life service platform comprises: obtain a compliance adjustment factor of any private data of a user of the life service platform, the compliance adjustment factor being a priori value; obtain a number of times of unauthorized access of the private data; obtain a total number of times of unauthorized access of all private data of the user; obtain the sensitivity weight of any private data of the life service platform according to the compliance adjustment factor, the number of times of unauthorized access of the private data, and the total number of times of unauthorized access of all private data of the user. 8.The method of claim 1, wherein, The determination of the masking strategy of the private data of the life service platform according to the business scenario model comprises: obtain a sensitive category of the private data of the life service platform, the private data of the life service platform comprising a first sensitive data and a second sensitive data, wherein a damage caused by leakage of the first sensitive data is greater than a damage caused by leakage of the second sensitive data; determine the masking strategy of the private data according to a numerical value of a matrix business element of the business scenario model, the sensitive category of the private data, and whether the private data is authorized by the life service platform to be retrieved by a role of a business group of the matrix business element.

9. A privacy information security protection system of a life service platform, characterized in that, The system comprises a service platform, and the service platform comprises: a memory having a computer program stored thereon; a processor configured to execute the computer program in the memory to implement the steps of the method according to any one of claims 1-8.

Images