Method and device for identifying sensitive fields in SQL (Structured Query Language) statement and electronic equipment

By parsing and semantically analyzing SQL statements, combining them with a rule base to identify sensitive fields in the SQL statements, and dynamically selecting privacy policies based on the scenario, the problem of easy omissions in manual annotation and fixed policies is solved, thus realizing automated identification and dynamic protection of sensitive fields.

CN121723508APending Publication Date: 2026-03-24JINZHUAN INFORMATION TECHNOLOGY CO LTD
0 Cites 2 Cited by

Patent Information

Application Number
CN202511898987.8
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2025-12-16
Publication Date
2026-03-24

AI Technical Summary

Technical Problem

In existing technologies, the identification of sensitive fields in SQL statements relies on manual annotation, which is prone to omissions. Furthermore, the desensitization strategy is fixed and cannot dynamically adjust the protection level according to the visitor's identity and business scenario, resulting in insufficient data leakage risk and security.

Method used

By parsing SQL statements, a semantic analysis model and a preset rule base are used to perform dual sensitivity identification on each field. Combining field type and query scenario, an appropriate privacy processing strategy is selected from a preset privacy policy set.

Benefits of technology

It achieves automated identification and dynamic protection of sensitive fields, reduces configuration costs, improves identification accuracy and security, and adapts to various SQL scenarios and complex query structures.

✦ Generated by Eureka AI based on patent content.
Patent Text Reader

Abstract

The invention relates to a method and a device for identifying sensitive fields in SQL (Structured Query Language) statements and electronic equipment. The method comprises the following steps: analyzing an SQL statement to extract all fields in the SQL statement; performing sensitive identification on each field of the SQL statement by utilizing a semantic analysis model and a preset rule base to obtain a corresponding first identification result and a second identification result; under the condition that the first recognition result or the second recognition result of the target field is the sensitive field, the target field is determined to be the sensitive field, and the target field is any field in the SQL statement; and according to the field type of the target field and the query scene, selecting one or more privacy policies from a preset privacy policy set to perform privacy processing on the target field. The technical problems that manual labeling is prone to omission, a desensitization strategy is fixed, and sensitive fields cannot be automatically recognized and dynamically protected according to scenes are solved.
Need to check novelty before this filing date? Find Prior Art