Data query method and device, electronic equipment and program product

Abstract

The invention discloses a data query method and device, electronic equipment and a program product, relates to the field of artificial intelligence, and is applied to the field of financial science and technology, the method comprises the following steps: receiving a query request of a target user, and inputting the query request into an intelligent agent, the query request being a data query request for various data storage systems; query instruction information is generated through the intelligent agent according to the query request, and the query instruction information at least comprises data source information, a read-only operation instruction and a desensitization rule; creating a data read-only connection through the data access interface according to the data source information; and performing data query based on the data read-only connection, the read-only operation instruction and the desensitization rule to obtain a target query result corresponding to the query request. By means of the data query method and device, the problem that in the related technology, when data are queried, a user needs to know query instructions of different data storage systems, and consequently the data query efficiency of the user is low is solved.

Description

TECHNICAL FIELD

[0001] The present application relates to the field of artificial intelligence, and is applied to the field of financial technology, in particular, relates to a data query method and device, an electronic device and a program product. BACKGROUND

[0002] The prior art solution mainly relies on manual operation or pre-set scripts and Robotic Process Automation (RPA) technology. In the manual operation mode, the operation and maintenance personnel must have in-depth professional knowledge, understand the specific storage location, access protocol and query syntax of each system, in order to locate and obtain the required log or data. This process not only consumes time and effort, but also is prone to operation errors, increasing the risk of data security. At the same time, due to the coarse granularity of permission management, directly operating the production environment data poses a high compliance risk.

[0003] On the other hand, although the pre-set scripts and RPA technology can automate certain routine tasks, their main drawback is poor flexibility and adaptability, making it difficult to respond to temporary and personalized query requirements from users, especially in cross-system query scenarios. Such solutions are particularly limited because they can usually only perform predefined tasks and cannot understand and respond to new query instructions in real time.

[0004] In view of the problem in the related art that when querying data, the user needs to understand the query instructions of different data storage systems, resulting in low efficiency of the user querying data, no effective solution has been proposed so far. SUMMARY

[0005] The main purpose of the present application is to provide a data query method, device, electronic device and program product, to solve the problem in the related art that when querying data, the user needs to understand the query instructions of different data storage systems, resulting in low efficiency of the user querying data.

[0006] In order to achieve the above-mentioned purpose, according to one aspect of the present application, a data query method is provided, the method comprising: receiving a query request of a target user and inputting the query request into an intelligent agent, wherein the query request is a data query request for multiple data storage systems; generating query instruction information according to the query request through the intelligent agent, wherein the query instruction information at least includes: data source information, read-only operation instructions, and desensitization rules; creating a data read-only connection according to the data source information through a data access interface; and performing data query based on the data read-only connection, the read-only operation instructions and the desensitization rules, to obtain a target query result corresponding to the query request.

[0007] Further, the intelligent agent generates query instruction information according to the query request, including: the intelligent agent identifies a query type and a query parameter of the query request, wherein the query type includes at least one of the following: a first type, a second type, and a third type, the first type represents an operation of obtaining a file, the second type is an operation of obtaining a data query result, and the third type is an operation of statistical processing on data, and the query parameter includes at least one of the following: a business type, the data source information, a query time range, a data filtering condition, and a desensitization rule; and the intelligent agent generates the query instruction information according to a target prompt word, the query type, and the query parameter, wherein the query instruction information includes a query instruction sequence, and the query instruction sequence includes at least one read-only operation instruction.

[0008] Further, data query is performed based on the data read-only connection, the read-only operation instruction, and the desensitization rule to obtain a target query result corresponding to the query request, including: the data access interface executes the read-only operation instruction based on the data read-only connection to obtain an initial query result; and the data access interface performs desensitization processing on the initial query result based on the desensitization rule to obtain the target query result, and pushes the target query result to the target user.

[0009] Further, the data access interface performs desensitization processing on the initial query result based on the desensitization rule to obtain the target query result, including: the desensitization rule is used to perform desensitization operation on the initial query result to obtain a desensitized query result; statistical processing operation is performed on the desensitized query result to obtain a processed query result, wherein the statistical processing operation includes at least one of the following: conversion operation, aggregation operation, and statistical calculation operation; and the processed query result is subjected to structured processing based on a preset format to obtain the target query result.

[0010] Further, the data access interface creates a data read-only connection according to the data source information, including: the data access interface maps the data source information in the query instruction information to obtain a mapping result, wherein the mapping result includes at least one of the following: file system information and database information; when the file system information includes the database information, a first read-only account is created, and the data read-only connection is created between the data access interface and the database according to the first read-only account; and when the file system information includes the file system information, a second read-only account is created, and the data read-only connection is created between the data access interface and the file system according to the second read-only account.

[0011] Further, the query instruction information at least includes query permission information, after creating a data read-only connection according to the data source information through a data access interface, the method further includes: obtaining the permission information of the target user; checking the permission information of the target user according to the query permission information to obtain a checking result; when the checking result indicates that the permission information of the target user does not include the query permission information, disconnecting the data read-only connection; when the checking result indicates that the permission information of the target user includes the query permission information, executing the read-only operation instruction through the data access interface to obtain an initial query result.

[0012] Further, pushing the target query result to the target user includes: generating an encrypted download link based on the target query result, configuring an effective time range of the encrypted download link, and sending the encrypted download link to the target user, wherein the encrypted download link points to a packaged file in a storage file isolation area; or, displaying the target query result on a preset front-end interactive interface and pushing the front-end interactive interface to the target user.

[0013] To achieve the above-mentioned purpose, according to another aspect of the present application, a data query device is provided, which includes: a receiving unit configured to receive a query request of a target user and input the query request into an intelligent agent, wherein the query request is a data query request for multiple data storage systems; a generating unit configured to generate query instruction information according to the query request through the intelligent agent, wherein the query instruction information at least includes data source information, read-only operation instruction and desensitization rule; a creating unit configured to create a data read-only connection according to the data source information through a data access interface; and a querying unit configured to perform data query based on the data read-only connection, the read-only operation instruction and the desensitization rule to obtain a target query result corresponding to the query request.

[0014] Further, the generating unit includes: an identifying sub-unit configured to identify the query type and query parameter of the query request through the intelligent agent, wherein the query type includes at least one of the following: first type, second type and third type, the first type represents an operation of obtaining a file, the second type is an operation of obtaining a data query result, and the third type is an operation of statistical processing on data, and the query parameter includes at least one of the following: business type, data source information, query time range, data filtering condition and desensitization rule; and a generating sub-unit configured to generate the query instruction information according to a target prompt word, the query type and the query parameter through the intelligent agent, wherein the query instruction information contains a query instruction sequence, and the query instruction sequence contains at least one read-only operation instruction.

[0015] Further, the query unit comprises: an execution subunit, configured to execute the read-only operation instruction based on the data read-only connection through the data access interface to obtain an initial query result; and a processing subunit, configured to perform desensitization processing on the initial query result based on the desensitization rule through the data access interface to obtain the target query result, and push the target query result to the target user.

[0016] Further, the processing subunit comprises: a first processing module, configured to perform desensitization operation on the initial query result based on the desensitization rule to obtain a desensitized query result; a second processing module, configured to perform statistical processing operation on the desensitized query result to obtain a processed query result, wherein the statistical processing operation comprises at least one of the following: conversion operation, aggregation operation, and statistical calculation operation; and a third processing module, configured to perform structured processing on the processed query result based on a preset format to obtain the target query result.

[0017] Further, the creation unit comprises: a mapping subunit, configured to map data source information in the query instruction information through the data access interface to obtain a mapping result, wherein the mapping result comprises at least one of the following: file system information and database information; a first creation subunit, configured to create a first read-only account when the file system information comprises the database information, and create the data read-only connection between the data access interface and the database according to the first read-only account; and a second creation subunit, configured to create a second read-only account when the file system information comprises the file system information, and create the data read-only connection between the data access interface and the file system according to the second read-only account.

[0018] Further, the query instruction information comprises at least query permission information, and the apparatus further comprises: an acquisition unit, configured to acquire permission information of the target user after creating the data read-only connection according to the data source information through the data access interface; a verification unit, configured to verify the permission information of the target user according to the query permission information to obtain a verification result; a disconnection unit, configured to disconnect the data read-only connection when the verification result indicates that the permission information of the target user does not comprise the query permission information; and an execution unit, configured to execute the step of executing the read-only operation instruction through the data access interface to obtain an initial query result when the verification result indicates that the permission information of the target user comprises the query permission information.

[0019] Further, the processing subunit comprises: a configuration module configured to generate an encrypted download link based on the target query result, configure a valid time range of the encrypted download link, and send the encrypted download link to the target user, wherein the encrypted download link points to a packaged file of a storage file isolation area; or a push module configured to display the target query result on a preset front-end interactive interface, and push the front-end interactive interface to the target user.

[0020] To achieve the above object, according to an aspect of the present application, a computer program product is provided, comprising a computer program which, when executed by a processor, implements any of the above data query methods, and the computer program, when executed by the processor, implements the steps of the data query method in each embodiment of the present application.

[0021] To achieve the above object, according to an aspect of the present application, a computer readable storage medium is provided, comprising stored computer instructions, wherein the computer instructions, when executed by a processor, implement any of the above data query methods.

[0022] To achieve the above object, according to an aspect of the present application, an electronic device is provided, comprising one or more processors and a memory, the memory being configured to store one or more programs, wherein the one or more programs, when executed by the one or more processors, cause the one or more processors to implement any of the above data query methods.

[0023] In the embodiments of the present application, by receiving a query request of a target user and inputting the query request into an intelligent agent, wherein the query request is a data query request for multiple data storage systems; by the intelligent agent generating query instruction information according to the query request, wherein the query instruction information at least comprises: data source information, read-only operation instruction, and desensitization rule; by a data access interface creating a data read-only connection according to the data source information; and by performing data query based on the data read-only connection, the read-only operation instruction, and the desensitization rule, obtaining a target query result corresponding to the query request, thereby solving the technical problem that when querying data, users need to understand the query instructions of different data storage systems, resulting in low efficiency of users querying data.

[0024] By receiving and analyzing the query request of the target user, the user's intention can be automatically understood, the query instruction information including the data source information, the read-only operation instruction and the desensitization rule is generated, and the technical effect of converting the natural language into specific and safe query operation is achieved. At the same time, the data access interface can accurately create a read-only connection according to the data source information through the instruction information generated by the intelligent agent, so that the user can safely access various data storage systems without learning the operation mode of the various data storage systems, and the safe query and fast query of the data are realized. Further, the operation instruction is executed based on the read-only connection and the desensitization rule is applied, which can ensure that the sensitive information is properly handled in the process of obtaining the query result, and the dual technical effects of meeting the user's query demand and protecting the data privacy are achieved, and the safety and compliance of the data storage are improved. BRIEF DESCRIPTION OF DRAWINGS

[0025] The accompanying drawings, which form a part of the present application, are intended to provide further understanding of the present application, and the illustrative embodiments of the present application and their description serve the purpose of explaining the present application. The accompanying drawings do not constitute an inappropriate limitation on the present application. In the drawings:

[0026] Figure 1 is a hardware structure block diagram of a computer terminal (or mobile device) for implementing a data query method according to embodiment 1 of the present application;

[0027] Figure 2 is a flowchart of an optional data query method according to embodiment 1 of the present application;

[0028] Figure 3 is a flowchart of an optional data query system according to embodiment 1 of the present application;

[0029] Figure 4 is a schematic diagram of a data query device according to embodiment 2 of the present application;

[0030] Figure 5 is a schematic diagram of a data query electronic device according to embodiment 3 of the present application. DETAILED DESCRIPTION

[0031] It should be noted that the embodiments and features in the present application can be combined with each other without conflict. The present application will be described in detail below with reference to the accompanying drawings and in combination with the embodiments.

[0032] It should be noted that the processing method, device, storage medium and electronic device of the present application file, and the method and device thereof can be used in the field of financial technology to improve the data query efficiency, and can also be used in any field other than the field of financial technology, and the application field of the processing method, device, storage medium and electronic device of the present application file is not limited.

[0033] It should be noted that the information collected (including but not limited to user device information, user personal information, collected data, used data, generated data, processed data, etc.) and data (including but not limited to data for analysis, stored data, displayed data, collected information, used information, generated information, processed information, etc.) involved in the present application are all information and data authorized by the user or authorized by all parties, and the collection, storage, use, processing, transmission, provision, disclosure and application of related data comply with relevant laws, regulations and standards of relevant countries and regions, necessary security measures are taken, it does not violate public order and good custom, and corresponding operation portal is provided for user to choose authorization or refusal. For example, the system and the interface between the related users or institutions are provided with the corresponding operation portal for the user to choose to agree or refuse the automatic decision result; if the user chooses to refuse, the expert decision process is entered.

[0034] Embodiment 1

[0035] According to the embodiments of the present application, a method embodiment of data query is also provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a group of computer executable instructions, and although the logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from here.

[0036] The method embodiment provided by the embodiment 1 of the present application can be executed in a mobile terminal, a computer terminal or a similar computing device. Figure 1 is a hardware structure block diagram of a computer terminal (or mobile device) for implementing the data query method according to the embodiment 1 of the present application. As shown in Figure 1 , the computer terminal 10 (or mobile device) can include one or more (in the figure, 102a, 102b, …, 102n are used to show) processors 102 (the processor 102 can include but not limited to processing devices such as microprocessor MCU or programmable logic device FPGA), a memory 104 for storing data, and a transmission device 106 for communication function. In addition, it can also include a display, an input / output interface (I / O interface), a universal serial bus (USB) port (which can be included as one of the ports of the BUS bus), a network interface, a power supply and / or a camera. Those skilled in the art can understand that Figure 1 The structure shown is only schematic, which does not limit the structure of the above-mentioned electronic device. For example, the computer terminal 10 can include more or less components than those shown in Figure 1 , or have a different configuration from Figure 1 .

[0037] It should be noted that the one or more processors 102 and / or other data processing circuitry described above can be referred to herein generally as "data processing circuitry". The data processing circuitry can be embodied in whole or in part as software, hardware, firmware, or any combination thereof. In addition, the data processing circuitry can be a single standalone processing module, or incorporated in whole or in part within any of the other elements of the computer terminal 10 (or mobile device). As referred to in embodiments of the present application, the data processing circuitry functions as a processor to control, for example, the selection of the variable resistance terminal path connected to the interface.

[0038] The memory 104 can be used to store software programs of application software and modules, such as program instructions / data storage means corresponding to the data query method in embodiments of the present application. The processor 102 executes various functional applications and data processing by running the software programs and modules stored in the memory 104, i.e. implements the data query method described above. The memory 104 can include a high-speed random access memory, and can further include a non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some examples, the memory 104 can further include a memory disposed remotely with respect to the processor 102, which can be connected to the computer terminal 10 through a network. Examples of the network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0039] The transmission device 106 is used to receive or send data via a network. Specific examples of the network can include a wireless network provided by a communication provider of the computer terminal 10. In one example, the transmission device 106 includes a network adapter (Network Interface Controller, NIC), which can be connected to other network devices through a base station so as to communicate with the Internet. In one example, the transmission device 106 can be a radio frequency (Radio Frequency, RF) module, which is used to communicate with the Internet in a wireless manner.

[0040] The display can be, for example, a touch screen type liquid crystal display (LCD), which can enable a user to interact with the user interface of the computer terminal 10 (or mobile device).

[0041] In the above operating environment, the present application provides a data query method as shown in Figure 2 Figure 2 is a flowchart of an optional data query method according to Embodiment 1 of the present application.

[0042] ​Step S201, receiving a query request of a target user and inputting the query request into an intelligent agent, wherein the query request is a data query request for multiple data storage systems.

[0043] In this embodiment 1, after receiving the query request submitted by the target user, the query request is delivered to the intelligent agent, which can also be referred to as an intent perception engine. The intelligent agent parses the query request and identifies the user's intent and key parameters such as the query object, time range, etc. The query request can be a natural language text (of multiple language types) of the target user querying data for multiple data storage systems (such as various file servers, various types of databases, etc.), for example, "Please export the log files associated with the Continuous Trading Platform (CTP) on the server yesterday", "Query the transaction response time exceeding 2 seconds in the past one hour in the core system of the branch in a certain region", or "Analyze the average usage rate of the database connection pool of all nodes in a certain region yesterday".

[0044] Step S202, generating query instruction information by the intelligent agent according to the query request, wherein the query instruction information at least includes: data source information, read-only operation instruction, and desensitization rule.

[0045] In this embodiment 1, when the intelligent agent receives the query request of the target user, the query request is parsed to determine the specific elements of the query. The intelligent agent generates structured query instruction information according to the parsing result, which includes the following key components: first, the data source information, which clearly indicates the target of the query, whether it is file server information or database information; second, the read-only operation instruction, which details the operation type performed on the data source, such as the SELECT query statement or the GET file command, ensuring that the operation is limited to reading; third, the desensitization rule, which indicates the operation information for processing sensitive data in the query result to comply with security specifications. In addition, the query instruction information can also include the permission information required for querying data.

[0046] The query instruction information generated by the intelligent agent is designed in a metadata format, which is used to safely execute queries with data access interfaces while applying necessary desensitization measures, thereby protecting data privacy and maintaining system security. The query request is analyzed and converted by the intelligent agent to ensure the safety and compliance of the operation, and then the processed data is delivered to a specialized security execution module for operation. This process effectively avoids the risk of users directly operating data.

[0047] Step S203, creating a data read-only connection according to the data source information through a data access interface.

[0048] In this embodiment 1, the intelligent agent parses the generated query instruction information, which explicitly specifies the data source information and locates the specific data storage location. Subsequently, a preset security policy is adopted to create a data read-only connection with the data source, ensuring that the connection only has the right to read data and cannot perform any write, modify, or delete operations.

[0049] The data access interface performs a secure query operation according to the received query instruction information, which is strictly limited to read-only mode. The data access interface accesses the log source or database system through a secure authentication protocol. The interface strictly performs read-only operations and supports extracting desensitized data or original log files (after desensitization) on demand according to the desensitization rules in the query instruction information. The data access interface is the only secure proxy layer that actually contacts the data.

[0050] Through this process, the data access interface, as a unified entrance, can transparently handle access to multiple data storage systems, ensuring the security and compliance of data queries, while simplifying the complexity of user cross-system data requests.

[0051] Step S204, based on the data read-only connection, read-only operation instruction, and desensitization rules, perform data query to obtain the target query result corresponding to the query request.

[0052] In this embodiment 1, after creating the data read-only connection, the data access interface performs a read operation on the specified data source according to the read-only operation instruction. This operation is limited to querying to obtain data associated with the user's query request. At the same time, during data acquisition, the data is automatically processed according to the preset desensitization rules to ensure that no sensitive information is included in the results. Finally, the interface returns the processed target query result, meeting the user's original query requirements while protecting data security.

[0053] Optionally, in the data query method provided in embodiment 1 of the present application, the intelligent agent generates query instruction information based on the query request, including: the intelligent agent identifies the query type and query parameters of the query request, wherein the query type includes at least one of the following: first type, second type, and third type, the first type represents an operation to obtain a file, the second type is an operation to obtain a data query result, and the third type is an operation to statistically process data, and the query parameters include at least one of the following: business type, data source information, query time range, data filtering condition, and desensitization rule; the intelligent agent generates query instruction information based on the target prompt word, the query type, and the query parameter, wherein the query instruction information contains a query instruction sequence, and the query instruction sequence contains at least one read-only operation instruction.

[0054] In this embodiment 1, in order to realize intelligent, safe and efficient query and analysis of operation logs and data, when the target user inputs a query request, the intelligent agent uses natural language processing technology to analyze the query request input by the user, and identifies the query type and query parameters contained therein. The query type may involve file acquisition, data query or statistical analysis, and the query parameters include business relevance, data source location, time window, filtering conditions, necessary desensitization rules, permission information required for query data and the like.

[0055] Then, the intelligent agent generates query instruction information according to the parsed query type and parameters, in combination with the target prompt word and the deep understanding of the user's intention. This process involves ensuring that the generated instruction accurately reflects the query requirements. At the same time, the design logic of the intelligent agent strictly limits the operation scope of the generated instruction, and only allows the generation of read-only operation instructions. The purpose of this is to ensure that the integrity of the data is not affected.

[0056] It should be noted that in the construction of query instruction information, the intelligent agent automatically generates a series of structured query instruction sequences. Each instruction is a clear definition of a read-only operation on a data source, including but not limited to querying specific log files, retrieving database records or performing statistical data analysis, and each instruction is accompanied by necessary desensitization rules to ensure that privacy protection measures are implemented during data access and processing.

[0057] Finally, the generated query instruction information is passed to the data access interface. This interface is specifically designed to receive and execute data access requests for various data storage systems. For example, read-only access to distributed log systems and databases.

[0058] Through the above steps, the technical effects of rapid positioning, safe query and privacy protection of operation logs and data are achieved. Through the intelligent agent, the operation efficiency is greatly improved, the manual errors are reduced, and at the same time, all data access behaviors comply with the read-only principle, and the desensitization rules required for desensitization processing are clearly defined, thereby fundamentally enhancing the security and compliance of data query.

[0059] Optionally, in the data query method provided in embodiment 1 of the present application, the data is queried based on the data read-only connection, the read-only operation instruction and the desensitization rule to obtain the target query result corresponding to the query request, including: executing the read-only operation instruction based on the data read-only connection through the data access interface to obtain an initial query result; and performing desensitization processing on the initial query result based on the desensitization rule through the data access interface to obtain the target query result, and pushing the target query result to the target user.

[0060] In this embodiment 1, in response to the query demand for specific data raised by the target user, first, based on the previously established data read-only connection, the read-only operation instruction matching the query request is executed through the data access interface. This instruction is converted into computer executable query logic according to the natural language form of the query request input by the user via the intelligent agent module, which is to guide the data access interface to accurately locate the log file or database table required by the user and query without modifying the original data, so as to obtain the preliminary result data set, i.e. the initial query result.

[0061] Then, since the initial query result may contain sensitive information such as customer personal information, account details or other confidential business data, it is necessary to perform desensitization processing on the initial query result based on the preset desensitization rules through the data access interface. This process involves identifying sensitive fields in the query result and using appropriate algorithms and technical means to convert them into an unidentifiable form, such as through masking, hashing or randomization, to ensure that even if the result contains sensitive data, it cannot be inferred from the real personal information or key business data, and this step strictly complies with the relevant regulations of financial data security.

[0062] Secondly, the initial query result after desensitization processing is converted into the target query result. The target query result no longer contains any information that can directly or indirectly expose user privacy or business privacy, and does not increase the risk of data leakage. Finally, the target query result is encapsulated and pushed to the target user in a secure manner.

[0063] Through the above steps, not only the data query request of the user is effectively responded, but also the security compliance of the data query process is ensured, achieving the technical effect of protecting sensitive data from unauthorized access and leakage while meeting the user's demand. This system design overcomes the inefficiency and security problems in traditional data query and analysis methods, and provides a more advanced and reliable solution for data query operations in the financial field.

[0064] Optionally, in the data query method provided in embodiment 1 of the present application, the initial query result is desensitized based on the desensitization rules through the data access interface to obtain the target query result, including: performing desensitization operation on the initial query result based on the desensitization rules to obtain the desensitized query result; performing statistical processing operation on the desensitized query result to obtain the processed query result, wherein the statistical processing operation at least includes one of the following: conversion operation, aggregation operation, statistical calculation operation; performing structured processing on the processed query result based on the preset format to obtain the target query result.

[0065] In this embodiment 1, in order to ensure that the information obtained from the data query process does not leak sensitive content before being delivered to the user, and to provide the data analysis results required by the user, first, the data set obtained by the preliminary query is desensitized based on the desensitization rules. Among them, the data source information is parsed by the intelligent agent according to the query request input by the target user, and the desensitization rules matched by the intelligent agent according to the data source information. The desensitization processing operation involves identifying sensitive fields that may be contained in the data set, such as personal information, financial data, etc., and applying various technical means such as covering, replacing, hash encryption, etc. to remove or mask these sensitive information, thereby outputting a desensitized query result, i.e. the desensitized query result.

[0066] Then, a series of statistical processing operations are performed on the desensitized query result, aiming to transform, aggregate and calculate the data in order to form more insightful analysis results. These operations may include data format conversion, such as converting date-time strings into uniform timestamp representation for time series analysis; aggregation operations, such as summarizing multiple related data records to calculate mean, sum, frequency distribution, etc. to extract key features of the data; statistical calculation operations to obtain mathematical descriptions of the data, such as standard deviation, median, etc. to help assess the overall trend and changes of the data.

[0067] Secondly, after completing the statistical processing operation, a processed query result is obtained, i.e. the initial query result described above, which contains desensitized, converted, aggregated and calculated data. However, in order to make the data results more easily understood and used by the user, further structured processing of the results based on pre-set formats is required. This step may involve organizing the data into tables, lists or charts to ensure that each piece of data has clear labels and categories, and may also include converting the data into standard formats such as JSON or XML for easy parsing and further program processing of the results.

[0068] Finally, through the above desensitization operation, statistical processing operation and structured processing, the target query result is obtained, i.e. a data set that meets both security requirements and user analysis needs.

[0069] Through the above steps, the technical solution achieves the technical effect of providing data query and analysis services while considering both data security and user convenience. Specifically, through the desensitization operation of the query result, the leakage of sensitive information is effectively prevented, ensuring the data privacy of enterprises and customers; and through the statistical processing operation and structured processing, the desensitized data is converted into a form that is easy for users to interpret and analyze, improving the efficiency of data processing and the user experience, enabling rapid response to user query requirements while ensuring data security, and providing the analysis results required by the user.

[0070] Optionally, in the data query method provided in Embodiment 1 of the present application, a data read-only connection is created according to the data source information through the data access interface, comprising: mapping the data source information in the query instruction information through the data access interface to obtain a mapping result, wherein the mapping result at least includes one of the following: file system information, database information; when the file system information includes the database information, creating a first read-only account and creating a data read-only connection between the data access interface and the database according to the first read-only account; when the file system information includes the file system information, creating a second read-only account and creating a data read-only connection between the data access interface and the file system according to the second read-only account.

[0071] In Embodiment 1, in order to ensure that the user query request can safely access the data, while avoiding any form of modification to the data, first, the data source information in the query instruction information is mapped through the data access interface. This mapping process aims to identify the specific data storage location pointed to by the query request, including but not limited to file system or database, such as log file path, database table name or database view information, accurately corresponding the abstract query requirement to the entity data source, and outputting the mapping result.

[0072] Then, according to the mapping result, targeted measures are taken to create a data read-only connection. When the mapping result indicates that the data source is a database, a first read-only account is created, which is given read-only permission to ensure that no write, modify or delete operations can be performed when connecting to the database for data query, thereby maintaining the integrity and security of the database. Subsequently, the read-only account is used to establish a data read-only connection between the data access interface and the database. The establishment of this connection means that the system can read the specified data in the database without affecting the original data.

[0073] Secondly, if the mapping result indicates that the data source is located in the file system, a second read-only account is created, which also has read-only permission to ensure that the file content or structure is not modified when extracting data from the file system. According to this read-only account, a data read-only connection is established between the data access interface and the file system to ensure that the data in the file system is not damaged when extracting log files or other documents, and also avoids the risk of unauthorized data leakage.

[0074] Finally, whether it is the first read-only connection for the database or the second read-only connection for the file system, it is ensured that only reading actions are taken when executing data query or file extraction, without any form of write operation intervention, thereby achieving the technical effect of meeting user query requirements while following the principle of least privilege and avoiding unauthorized access to sensitive information.

[0075] The intelligent agent parses the query instruction to generate instruction information containing data source information. Then, the data access interface creates a corresponding read-only connection according to the information, ensuring that the data reading operation is accurate and safe, avoiding any potential threat to the production data, and reducing the complexity of user operation, improving the operation and maintenance efficiency and data processing security.

[0076] Optionally, in the data query method provided in Embodiment 1 of the present application, the query instruction information at least includes query permission information. After creating a data read-only connection according to the data source information through the data access interface, the above method further includes: obtaining the permission information of the target user; verifying the permission information of the target user according to the query permission information to obtain a verification result; when the verification result indicates that the permission information of the target user does not include the query permission information, disconnecting the data read-only connection; and when the verification result indicates that the permission information of the target user includes the query permission information, executing the read-only operation instruction through the data access interface to obtain the initial query result.

[0077] In Embodiment 1, in order to protect the security and compliance of data access, first, the permission details of the target user are obtained from the account information of the target user, which involves reading the permission information of the target user in the business system. Then, the permission information of the target user is verified in detail to determine whether it contains the specific query permission required to execute the query instruction. This verification is based on the pre-set permission rules to ensure that the user can only access the data sources authorized within his responsibility range and perform the corresponding read-only operation. Secondly, if the verification result shows that the permission information of the target user does not contain the permission required to query the data, the established data read-only connection will be disconnected to prevent unauthorized access to the data, and this mechanism ensures that the security boundary of the system is not damaged by out-of-bound operations. Finally, when the verification result confirms that the target user has the permission to execute the query instruction, the query instruction information is sent to the data access interface based on the previously established data read-only connection to initiate data query or log file extraction to obtain the actual operation of the initial query result. This operation is limited to read-only access, ensuring the integrity of the data is not affected.

[0078] Through the above steps, the technical effects of fine-grained permission control and secure data access are achieved. By real-time verification of user permissions, unauthorized data access attempts are effectively prevented, and for users with corresponding permissions, data query services can be quickly and securely provided, ensuring data security, improving operation and maintenance efficiency and compliance. Dynamic management of data read-only connections further enhances the defense capability against illegal access attempts, improving data security.

[0079] Optionally, in the data query method provided in Embodiment 1 of the present application, the target query result is pushed to the target user, comprising: generating an encrypted download link based on the target query result, configuring an effective time range of the encrypted download link, and sending the encrypted download link to the target user, wherein the encrypted download link points to a packaged file stored in a file isolation area; or, displaying the target query result on a preset front-end interactive interface and pushing the front-end interactive interface to the target user.

[0080] In Embodiment 1, in order to ensure the safe delivery of query results and the protection of user privacy, first, structured data is generated based on the processed query results. This data is designed in a form that is easy to parse and use, such as JSON or CSV, and contains all the information required by the user, but the sensitive content has been removed through desensitization operation. Then, an encrypted download link is created, which points to a secure file isolation area where the packaged query results are stored. The generation of the encrypted link ensures that unauthorized users cannot access the link through guessing or brute force, thereby protecting the privacy of the data. Secondly, the effective time range of the encrypted download link is configured, for example, 2 hours. This measure aims to limit the use time of the link, so that even if the link is inadvertently leaked, it will automatically expire within a certain time, reducing the risk of data leakage. Finally, the generated encrypted download link is sent to the designated receiving channel of the target user, which may be an email, an instant message or a system notification.

[0081] In addition, the structured query result can also be displayed directly on the preset front-end interactive interface, and the user does not need to download, but can directly view and analyze the data on the interface. This push mechanism ensures that the user can obtain the query result in a timely and safe manner, meeting their business needs.

[0082] Through the above steps, the technical effects of safe, controllable and convenient data result delivery are achieved. The setting of encrypted download link and effective time range provides additional security for data transmission and storage, while the display of front-end interactive interface provides instant feedback and operational convenience, avoiding the tediousness of frequent file downloads. On the premise of not sacrificing data security, the efficiency of users obtaining information is optimized, and the data processing efficiency is effectively improved.

[0083] Optionally, in Embodiment 1 of the present application, Figure 3 is a flowchart of an optional data query system provided in Embodiment 1 of the present application. As shown in Figure 3As shown, first, the user proposes data query or analysis requirements through natural language, which are input into the intelligent agent, i.e., the intent perception engine. Then, the intent perception engine parses the user instructions, identifies the operation intent, and generates the corresponding safe read-only query instruction chain (i.e., the query instruction information described above), which clearly defines the scope and conditions of the read-only operation. Secondly, the generated instruction chain is passed to the log and data federation access interface (i.e., the data access interface described above), which is a security proxy layer responsible for performing permission verification to ensure that the user has access to the requested data source, and sends desensitization query requests or non-sensitive file extraction commands to the log source or database source according to the requirements of the instruction chain. Finally, the execution engine works with the result generator to process the returned desensitized data, including data conversion, aggregation or packaging, and finally delivers the results to the user in the form of structured data, visual reports or encrypted download links, with the links pointing to the non-sensitive file package stored in the secure isolation area, ensuring the security and compliance of the data. Through this process, the system realizes the automatic analysis and response of user intent, while ensuring the security and compliance of data access.

[0084] It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described herein can be executed in an order different from that shown.

[0085] In summary, the data query method provided by the embodiments of the present application receives a query request of a target user and inputs the query request into an intelligent agent, wherein the query request is a data query request for multiple data storage systems; the intelligent agent generates query instruction information according to the query request, wherein the query instruction information at least includes data source information, read-only operation instructions, and desensitization rules; a data access interface creates a data read-only connection according to the data source information; and data query is performed based on the data read-only connection, the read-only operation instructions, and the desensitization rules to obtain a target query result corresponding to the query request, thereby solving the problem in the related art that when querying data, the user needs to understand the query instructions of different data storage systems, resulting in low efficiency of the user querying data.

[0086] By receiving and analyzing the query request of the target user, the user's intention can be automatically understood, the query instruction information including the data source information, the read-only operation instruction and the desensitization rule is generated, and the technical effect of converting the natural language into specific and safe query operation is achieved. At the same time, through the instruction information generated by the intelligent agent, the data access interface can accurately create a read-only connection according to the data source information, so that the user can safely access various data storage systems without learning the operation mode of the various data storage systems, and the safe query and fast query of the data are realized. Further, the operation instruction is executed based on the read-only connection and the desensitization rule is applied, which can ensure that the sensitive information is properly handled in the process of obtaining the query result, and the dual technical effects of meeting the user's query demand and protecting the data privacy are achieved, and the safety and compliance of the data storage are improved.

[0087] Embodiment 2

[0088] The embodiment of the application further provides a data query device. It should be noted that the data query device of the embodiment of the application can be used to execute the data query method provided by the embodiment of the application. The data query device provided by the embodiment of the application is introduced below.

[0089] According to the embodiment of the application, a device for implementing the above-mentioned data query method is further provided, Figure 4 is a schematic diagram of the data query device provided by the embodiment 2 of the application. As shown in the figure, Figure 4 the device comprises a receiving unit 401, a generating unit 402, a creating unit 403 and a query unit 404.

[0090] Specifically, the receiving unit 401 is configured to receive a query request of a target user and input the query request into an intelligent agent, wherein the query request is a data query request for a plurality of data storage systems.

[0091] The generating unit 402 is configured to generate query instruction information according to the query request through the intelligent agent, wherein the query instruction information at least includes data source information, read-only operation instruction and desensitization rule.

[0092] The creating unit 403 is configured to create a data read-only connection through a data access interface according to the data source information.

[0093] The query unit 404 is configured to perform data query based on the data read-only connection, the read-only operation instruction and the desensitization rule, and obtain a target query result corresponding to the query request.

[0094] The data query device provided in the embodiments of the present application receives a query request of a target user through the receiving unit 401 and inputs the query request into an intelligent agent, wherein the query request is a data query request for multiple data storage systems; the generating unit 402 generates query instruction information according to the query request through the intelligent agent, wherein the query instruction information at least includes data source information, a read-only operation instruction and a desensitization rule; the creating unit 403 creates a data read-only connection according to the data source information through a data access interface; and the querying unit 404 performs data query based on the data read-only connection, the read-only operation instruction and the desensitization rule to obtain a target query result corresponding to the query request, thereby solving the problem in the related art that when data is queried, a user needs to understand query instructions of different data storage systems, resulting in a low data query efficiency of the user.

[0095] By receiving and analyzing the query request of the target user, the user's intention can be automatically understood, the query instruction information including the data source information, the read-only operation instruction and the desensitization rule can be generated, and the technical effect of converting natural language into specific and safe query operations is achieved. Meanwhile, through the instruction information generated by the intelligent agent, the data access interface can accurately create a read-only connection according to the data source information, so that the user can safely access multiple data storage systems without the need to learn the operation modes of multiple data storage systems, and the safe query and fast query of data are realized. Further, the operation instruction is executed based on the read-only connection and the desensitization rule is applied, so that sensitive information can be properly handled in the process of obtaining the query result, the dual technical effects of meeting the user's query demand and protecting data privacy are achieved, and the security and compliance of data storage are improved.

[0096] Optionally, in the data query device provided in Embodiment 2 of the present application, the generating unit 402 includes: an identifying subunit, configured to identify a query type and a query parameter of the query request through the intelligent agent, wherein the query type includes at least one of the following: a first type, a second type and a third type, the first type represents an operation of obtaining a file, the second type is an operation of obtaining a data query result, and the third type is an operation of performing statistical processing on data, and the query parameter includes at least one of the following: a business type, data source information, a query time range, a data filtering condition and a desensitization rule; and a generating subunit, configured to generate query instruction information according to the target prompt word, the query type and the query parameter through the intelligent agent, wherein the query instruction information includes a query instruction sequence, and the query instruction sequence includes at least one read-only operation instruction.

[0097] Optionally, in the data query apparatus provided in Embodiment 2 of the present application, the query unit 404 comprises: an execution subunit, configured to execute a read-only operation instruction based on a data read-only connection through a data access interface to obtain an initial query result; and a processing subunit, configured to perform desensitization processing on the initial query result based on a desensitization rule through the data access interface to obtain a target query result, and push the target query result to the target user.

[0098] Optionally, in the data query apparatus provided in Embodiment 2 of the present application, the processing subunit comprises: a first processing module, configured to perform a desensitization operation on the initial query result based on a desensitization rule to obtain a desensitized query result; a second processing module, configured to perform statistical processing on the desensitized query result to obtain a processed query result, wherein the statistical processing at least comprises one of the following: a conversion operation, an aggregation operation, and a statistical calculation operation; and a third processing module, configured to perform structural processing on the processed query result based on a preset format to obtain the target query result.

[0099] Optionally, in the data query apparatus provided in Embodiment 2 of the present application, the creation unit 403 comprises: a mapping subunit, configured to map data source information in the query instruction information through a data access interface to obtain a mapping result, wherein the mapping result at least comprises one of the following: file system information and database information; a first creation subunit, configured to create a first read-only account when the file system information comprises the database information, and create a data read-only connection between the data access interface and the database according to the first read-only account; and a second creation subunit, configured to create a second read-only account when the file system information comprises the file system information, and create a data read-only connection between the data access interface and the file system according to the second read-only account.

[0100] Optionally, in the data query apparatus provided in Embodiment 2 of the present application, the query instruction information at least comprises query permission information, and the apparatus further comprises: an acquisition unit, configured to acquire permission information of the target user after creating the data read-only connection according to the data source information through the data access interface; a verification unit, configured to verify the permission information of the target user according to the query permission information to obtain a verification result; a disconnection unit, configured to disconnect the data read-only connection when the verification result indicates that the permission information of the target user does not comprise the query permission information; and an execution unit, configured to execute the step of executing the read-only operation instruction through the data access interface to obtain the initial query result when the verification result indicates that the permission information of the target user comprises the query permission information.

[0101] Optionally, in the data query device provided in Embodiment 2 of the present application, the processing subunit includes: a configuration module configured to generate an encrypted download link based on the target query result, configure an effective time range of the encrypted download link, and send the encrypted download link to the target user, where the encrypted download link points to the packaged file in the storage file isolation area; or a push module configured to display the target query result on a preset front-end interactive interface, and push the front-end interactive interface to the target user.

[0102] It should be noted that the receiving unit 401, the generating unit 402, the creating unit 403, and the querying unit 404 correspond to steps S201 to S204 in Embodiment 1, and the two modules have the same instances and application scenarios as the corresponding steps, but are not limited to the content disclosed in Embodiment 1. It should be noted that the above modules or units can be hardware components or software components stored in the memory (for example, the memory 104) and processed by one or more processors (for example, the processors 102a, 102b, …, 102n), and the above modules can also be run in the computer terminal 10 provided in Embodiment 1 as part of the device.

[0103] Embodiment 3

[0104] Embodiments of the present application can provide an electronic device, Figure 5 is a schematic diagram of the data query electronic device provided in Embodiment 3 of the present application. As shown in the figure, Figure 5 the electronic device can include one or more (only one is shown in the figure) processors 502, a memory 504, a storage controller, and a peripheral interface, where the peripheral interface is connected with a radio frequency module, an audio module, and a display. Figure 5

[0105] The memory can be used to store software programs and modules, such as program instructions / modules corresponding to the methods and devices in the embodiments of the present application. The processor executes various functions and data processing by running the software programs and modules stored in the memory, that is, implements the above-mentioned methods. The memory can include a high-speed random access memory, and can further include a non-volatile memory, such as one or more magnetic storage devices, flash memories, or other non-volatile solid-state memories. In some examples, the memory can further include a memory remotely arranged with respect to the processor, which can be connected to the terminal through a network. Examples of the above-mentioned network include but are not limited to the Internet, an intranet, a local area network, a mobile communication network, and a combination thereof.

[0106] ​The processor can call information and application programs stored in the memory through the transmission device to perform the following steps: receiving a query request of a target user, and inputting the query request into an agent, wherein the query request is a data query request for multiple data storage systems; generating query instruction information according to the query request through the agent, wherein the query instruction information at least includes: data source information, a read-only operation instruction, and a desensitization rule; creating a data read-only connection according to the data source information through a data access interface; and performing data query based on the data read-only connection, the read-only operation instruction, and the desensitization rule to obtain a target query result corresponding to the query request.

[0107] The processor can call information and application programs stored in the memory through the transmission device to perform the following steps: generating query instruction information according to the query request through the agent, including: identifying a query type and a query parameter of the query request through the agent, wherein the query type includes at least one of the following: a first type, a second type, and a third type, the first type represents an operation of obtaining a file, the second type is an operation of obtaining a data query result, and the third type is an operation of statistical processing on data, and the query parameter includes at least one of the following: a business type, data source information, a query time range, a data filtering condition, and a desensitization rule; and generating the query instruction information according to the target prompt word, the query type, and the query parameter through the agent, wherein the query instruction information contains a query instruction sequence, and the query instruction sequence contains at least one read-only operation instruction.

[0108] The processor can call information and application programs stored in the memory through the transmission device to perform the following steps: performing data query based on the data read-only connection, the read-only operation instruction, and the desensitization rule to obtain a target query result corresponding to the query request, including: executing the read-only operation instruction through the data access interface based on the data read-only connection to obtain an initial query result; and performing desensitization processing on the initial query result based on the desensitization rule through the data access interface to obtain the target query result, and pushing the target query result to the target user.

[0109] The processor can call information and application programs stored in the memory through the transmission device to perform the following steps: performing desensitization processing on the initial query result based on the desensitization rule through the data access interface to obtain a target query result, including: performing a desensitization operation on the initial query result based on the desensitization rule to obtain a desensitized query result; performing statistical processing on the desensitized query result to obtain a processed query result, wherein the statistical processing at least includes one of the following: a conversion operation, an aggregation operation, and a statistical calculation operation; and performing structural processing on the processed query result based on a preset format to obtain the target query result.

[0110] The processor can call information and application programs stored in the memory through the transmission device to perform the following steps: creating a data read-only connection according to the data source information through the data access interface, including: mapping the data source information in the query instruction information through the data access interface to obtain a mapping result, wherein the mapping result at least includes one of: file system information, database information; when the file system information includes the database information, creating a first read-only account, and creating a data read-only connection between the data access interface and the database according to the first read-only account; when the file system information includes the file system information, creating a second read-only account, and creating a data read-only connection between the data access interface and the file system according to the second read-only account.

[0111] The processor can call information and application programs stored in the memory through the transmission device to perform the following steps: the query instruction information at least includes: query permission information, after creating a data read-only connection according to the data source information through the data access interface, the above method further includes: obtaining the permission information of the target user; verifying the permission information of the target user according to the query permission information to obtain a verification result; when the verification result indicates that the permission information of the target user does not include the query permission information, disconnecting the data read-only connection; when the verification result indicates that the permission information of the target user includes the query permission information, executing the read-only operation instruction through the data access interface to obtain the initial query result.

[0112] The processor can call information and application programs stored in the memory through the transmission device to perform the following steps: pushing the target query result to the target user, including: generating an encrypted download link based on the target query result, configuring an effective time range of the encrypted download link, and sending the encrypted download link to the target user, wherein the encrypted download link points to a packaged file stored in the file isolation area; or, displaying the target query result on a preset front-end interaction interface, and pushing the front-end interaction interface to the target user.

[0113] By receiving a query request of a target user and inputting the query request into an intelligent agent, the query request is a data query request for multiple data storage systems; the intelligent agent generates query instruction information according to the query request, wherein the query instruction information at least includes: data source information, read-only operation instruction, and desensitization rule; a data read-only connection is created according to the data source information through a data access interface; data query is performed based on the data read-only connection, the read-only operation instruction and the desensitization rule to obtain a target query result corresponding to the query request, thereby solving the technical problem that when querying data, users need to understand the query instructions of different data storage systems, resulting in low efficiency of users querying data.

[0114] By receiving and analyzing the query request of the target user, the user's intention can be automatically understood, the query instruction information including the data source information, the read-only operation instruction and the desensitization rule is generated, and the technical effect of converting the natural language into specific and safe query operation is achieved. Meanwhile, the data access interface can accurately create a read-only connection according to the data source information through the instruction information generated by the intelligent agent, so that the user can safely access various data storage systems without learning the operation modes of the various data storage systems, and the safe query and fast query of the data are realized. Further, the operation instruction is executed based on the read-only connection and the desensitization rule is applied, which can ensure that the sensitive information is properly handled in the process of obtaining the query result, and the dual technical effects of meeting the user's query demand and protecting the data privacy are achieved, and the safety and compliance of the data storage are improved.

[0115] Those skilled in the art can understand that, Figure 5 The structure shown is only schematic, and the electronic device can also be a terminal device such as a smart phone, a tablet computer, a palm computer, a mobile Internet device (MID), a PAD, etc. Figure 5 It does not limit the structure of the above-mentioned electronic device. For example, the electronic device can further include more or less components (such as a network interface, a display device, etc.) than those shown in the figure, or have a different configuration from that shown in the figure. Figure 5 It does not limit the structure of the above-mentioned electronic device. For example, the electronic device can further include more or less components (such as a network interface, a display device, etc.) than those shown in the figure, or have a different configuration from that shown in the figure. Figure 5 It does not limit the structure of the above-mentioned electronic device. For example, the electronic device can further include more or less components (such as a network interface, a display device, etc.) than those shown in the figure, or have a different configuration from that shown in the figure.

[0116] Those skilled in the art can understand that all or part of the steps in the various methods of the above-mentioned embodiments can be completed by programs instructing the related hardware of the terminal device, and the programs can be stored in a computer readable storage medium, which can include a flash disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, etc.

[0117] Embodiment 4

[0118] The embodiments of the present application also provide a storage medium. Optionally, in the present embodiment, the above-mentioned storage medium can be used to save the program code executed by the data query method provided in the above-mentioned embodiment 1.

[0119] Optionally, in the present embodiment, the above-mentioned storage medium can be located in any one of the computer terminals in the computer terminal group in the computer network, or in any one of the mobile terminals in the mobile terminal group.

[0120] The present application also provides a computer program product adapted to execute the steps of the data query method when executed on a data processing device.

[0121] The above-mentioned sequence numbers of the embodiments of the present application are only for description, and do not represent the advantages or disadvantages of the embodiments.

[0122] In the above-mentioned embodiments of the present application, the description of each embodiment has its own focus, and the parts not described in detail in a certain embodiment can be referred to the relevant description of other embodiments.

[0123] In the several embodiments provided by the present application, it should be understood that the disclosed technology can be implemented in other ways. Of course, the embodiment described above is only a schematic, for example, the division of units is only a logical function division, and there can be another division manner in actual implementation, for example, a plurality of units or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the coupling or direct coupling or communication connection between the units shown or discussed can be indirect coupling or communication connection through some interface, unit or module, and can be electrical or other forms.

[0124] The units described as separate components can or can not be physically separate, and the components shown as units can or can not be physical units, that is, they can be located in one place, or can be distributed on a plurality of network units. Part or all of the units can be selected according to actual needs to achieve the purpose of the embodiment.

[0125] In addition, each functional unit in each embodiment of the present application can be integrated in one processing unit, or each unit can exist physically, or two or more units can be integrated in one unit. The above integrated unit can be realized in the form of hardware or in the form of software functional unit.

[0126] The integrated unit, if realized in the form of software functional unit and sold or used as an independent product, can be stored in a computer readable storage medium. Based on such understanding, the technical solutions of the present application essentially or the part of the prior art that makes a contribution or the whole or part of the technical solutions can be embodied in the form of software product, which is stored in a storage medium and includes a plurality of instructions to make a computer device (which can be a personal computer, a server or a network device, etc.) execute all or part of the steps of the method described in each embodiment of the present application. The foregoing storage medium includes: U disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), mobile hard disk, magnetic disk or optical disk and various program code storage media.

[0127] The above merely describes the preferred embodiments of the present application, and it should be pointed out that, for those skilled in the art, some improvements and refinements can be made without departing from the principles of the present application, and these improvements and refinements should also be considered as the protection scope of the present application.

Claims

1. A data query method, characterized in that, include: Receive a query request from a target user and input the query request into the intelligent agent, wherein the query request is a data query request for multiple data storage systems; The intelligent agent generates query instruction information based on the query request, wherein the query instruction information includes at least: data source information, read-only operation instructions, and desensitization rules; A read-only data connection is created based on the data source information through the data access interface; Based on the read-only data connection, the read-only operation instruction, and the de-identification rule, a data query is performed to obtain the target query result corresponding to the query request.

2. The method according to claim 1, characterized in that, The intelligent agent generates query instruction information based on the query request, including: The intelligent agent identifies the query type and query parameters of the query request. The query type includes at least one of the following: a first type, a second type, and a third type. The first type represents the operation of obtaining a file, the second type is the operation of obtaining data query results, and the third type is the operation of performing statistical processing on the data. The query parameters include at least one of the following: business type, data source information, query time range, data filtering conditions, and desensitization rules. The agent generates the query instruction information based on the target prompt, the query type, and the query parameters. The query instruction information includes a query instruction sequence, and the query instruction sequence includes at least one read-only operation instruction.

3. The method according to claim 1, characterized in that, Based on the read-only data connection, the read-only operation instruction, and the de-identification rule, a data query is performed to obtain the target query result corresponding to the query request, including: Based on the read-only data connection, the read-only operation instruction is executed through the data access interface to obtain the initial query result; The initial query result is anonymized using the data access interface based on the anonymization rules to obtain the target query result, which is then pushed to the target user.

4. The method according to claim 3, characterized in that, The initial query result is anonymized based on the anonymization rules through the data access interface to obtain the target query result, including: Based on the desensitization rules, the initial query results are desensitized to obtain desensitized query results; The desensitized query results are subjected to statistical processing operations to obtain processed query results, wherein the statistical processing operations include at least one of the following: transformation operation, aggregation operation, and statistical calculation operation; The processed query results are structured based on a preset format to obtain the target query results.

5. The method according to claim 1, characterized in that, Creating a read-only data connection based on the data source information through the data access interface includes: The data access interface is used to map the data source information in the query instruction information to obtain a mapping result, wherein the mapping result includes at least one of the following: file system information and database information; When the file system information includes the database information, a first read-only account is created, and a read-only data connection is created between the data access interface and the database based on the first read-only account; When the file system information includes the file system information, a second read-only account is created, and a read-only data connection is created between the data access interface and the file system based on the second read-only account.

6. The method according to claim 1, characterized in that, The query instruction information includes at least: query permission information. After creating a read-only data connection based on the data source information through the data access interface, the method further includes: Obtain the permission information of the target user; The permission information of the target user is verified based on the query permission information to obtain the verification result; When the verification result indicates that the target user's permission information does not include the query permission information, the read-only data connection is disconnected. When the verification result indicates that the target user's permission information includes the query permission information, the step of executing the read-only operation instruction through the data access interface to obtain the initial query result is performed.

7. The method according to claim 3, characterized in that, Pushing the target query results to the target user includes: An encrypted download link is generated based on the target query results, the validity period of the encrypted download link is configured, and the encrypted download link is sent to the target user. The encrypted download link points to a packaged file stored in an isolated file region; or... The target query results are displayed on a pre-defined front-end interactive interface, and the front-end interactive interface is pushed to the target user.

8. A data query device, characterized in that, include: A receiving unit is configured to receive a query request from a target user and input the query request into an intelligent agent, wherein the query request is a data query request for multiple data storage systems; A generation unit is used to generate query instruction information based on the query request through the intelligent agent, wherein the query instruction information includes at least: data source information, read-only operation instructions, and desensitization rules; A creation unit is used to create a read-only data connection based on the data source information through a data access interface; The query unit is used to perform data query based on the read-only data connection, the read-only operation instruction, and the de-identification rule to obtain the target query result corresponding to the query request.

9. An electronic device, characterized in that, include: Memory, which stores executable programs; A processor for running the program, wherein the program, when running, executes the data query method according to any one of claims 1 to 7.

10. A computer program product comprising computer instructions, characterized in that, When the computer instructions are executed by the processor, they implement the steps of the data query method according to any one of claims 1 to 7.

Images