Data supervision method and system based on data space

Abstract

The invention discloses a data supervision method and system based on a data space, and belongs to the technical field of data security. The data supervision method comprises the following steps: storing a data product in a data space; for a stored data product, screening out to-be-checked data information in the data product in the data space according to the data contract in a precise matching or fuzzy matching mode, and checking the to-be-checked data information through a pre-established checking model; and if the to-be-checked data information has no security risk, confirming that the locked digital contract takes effect, and allowing the data provider and the data user to perform transaction and circulation on the data product in the data space. According to the invention, data related to the digital contract can be examined preferentially, and the security risk condition is judged, so that whether the digital contract is legal and effective is judged, and sensitive data leakage is prevented.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of data security, and more particularly, to a data supervision method and system based on data space. BACKGROUND

[0002] The data space is a distributed data storage underlying architecture, which uses encryption technology and fine-grained access control to realize clear data sovereignty and safe data circulation. The participants of the data space include not only data providers and data users, but also supervision parties. The main purpose of setting the supervision party of the data space is to prevent sensitive data leakage through risk prevention and control. Some current technical solutions monitor and analyze the data transmission process, and trigger the system's early warning mechanism when sensitive data or illegal data is found. This approach has some drawbacks, which may cause partial leakage of sensitive data and belongs to the form of finding problems and then remedying them. SUMMARY

[0003] To solve the above problems, the present application provides a data supervision method based on data space, comprising:

[0004] After the data provider and the data user sign a digital contract, the digital contract is locked, and the data product of the data provider is received through the data space according to the locked digital contract, and the data product is preliminarily checked to confirm that the data product allows transaction, and the data product is stored;

[0005] For the stored data product, in the data space, according to the data contract, the data information to be checked in the data product is screened out through precise matching or fuzzy matching, and the data information to be checked is checked through a pre-established checking model.

[0006] If the data information to be checked has no security risk, the locked digital contract is confirmed to be valid, and the data provider and the data user are allowed to trade and circulate the data product in the data space.

[0007] Optionally, the method further comprises: before the data provider and the data user sign a digital contract, allowing the data provider and the data user to trade and negotiate in the data space, and real-time supervising the trading negotiation process, and generating a digital contract template according to the trading negotiation result, for the data provider and the data user to sign, if the data provider and / or the data user revise the digital contract template, the revised digital contract template is checked to confirm that the digital contract template is compliant, if the data provider and the data user are allowed to use the revised digital contract template to sign a digital contract, if not, give revision suggestions.

[0008] Optionally, the data information to be checked includes:

[0009] Sensitive information, illegal information and prohibited export information.

[0010] Optionally, if the data information to be checked has a security risk, it is confirmed that the locked digital contract is invalid, the data product of the data provider is locked in the data space, and the audit result and audit opinion of the data product are sent to the data provider and the data user respectively.

[0011] In another aspect, the present application also provides a data supervision system based on data space, comprising:

[0012] The initial checking unit is used for locking the digital contract after the data provider and the data user sign the digital contract, receiving the data product of the data provider through the data space according to the locked digital contract, and performing preliminary checking on the data product to confirm that the data product allows transaction, and storing the data product.

[0013] The checking unit is used for screening the data information to be checked in the data product in the data space according to the data contract through accurate matching or fuzzy matching for the stored data product, and checking the data information to be checked through the pre-established checking model.

[0014] The supervision unit is used for confirming that the locked digital contract is valid after the data information to be checked has no security risk, allowing the data provider and the data user to trade and circulate the data product in the data space.

[0015] Optionally, the initial checking unit is also used for allowing the data provider and the data user to trade and negotiate in the data space before signing the digital contract, real-time supervising the trading negotiation process, generating a digital contract template according to the trading negotiation result for the data provider and the data user to sign, if the data provider and / or the data user revise the digital contract template, checking the revised digital contract template to confirm that the digital contract template is compliant, if the data provider and the data user are allowed to use the revised digital contract template to sign the digital contract, if not, giving revision opinions.

[0016] Optionally, the data information to be checked includes:

[0017] Sensitive information, illegal information and prohibited export information.

[0018] Optionally, if the data information to be checked has a security risk, it is confirmed that the locked digital contract is invalid, the data product of the data provider is locked in the data space, and the audit result and audit opinion of the data product are sent to the data provider and the data user respectively.

[0019] In another aspect, the present application also provides a computing device, comprising: one or more processors;

[0020] a processor for executing one or more programs;

[0021] When the one or more programs are executed by the one or more processors, the method as described above is implemented.

[0022] In another aspect, the present application also provides a computer readable storage medium having a computer program stored thereon, which, when executed, implements the method as described above.

[0023] Compared with the prior art, the present application has the following beneficial effects:

[0024] The present application provides a data supervision method based on data space, comprising: after a digital contract is signed between a data provider and a data user, the digital contract is locked, and according to the locked digital contract, the data product of the data provider is received through the data space, the data product is preliminarily checked to confirm that the data product is allowed to trade, and the data product is stored; for the stored data product, in the data space, according to the data contract, the data information to be checked in the data product is screened out through precise matching or fuzzy matching, and the data information to be checked is checked through a pre-established checking model; if the data information to be checked has no security risk, it is confirmed that the locked digital contract is valid, and the data provider and the data user are allowed to trade and circulate the data product in the data space. The present application can prioritize the data involved in the digital contract to determine the security risk, so as to determine whether the digital contract is legal and effective, and prevent sensitive data from being leaked. BRIEF DESCRIPTION OF DRAWINGS

[0025] Figure 1 The flowchart of the method of the present application;

[0026] Figure 2 The flowchart of the specific case of the method of the present application;

[0027] Figure 3 The structure diagram of the system of the present application. DETAILED DESCRIPTION

[0028] Reference will now be made to the drawings to describe the exemplary embodiments of the present application in greater detail. The present application may, however, be embodied in many different forms and should not be construed as limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and fully convey the scope of the application to those skilled in the art. Like numbers refer to like elements throughout the description of the figures. In the drawings:

[0029] The terms used herein, including technical terms, are used in their ordinary meanings unless otherwise defined. Also, it is to be understood that the terms defined by a generally used dictionary are to be interpreted as having a meaning that is consistent with their meaning in the context of the relevant art, and are not to be interpreted in an idealized or overly formal sense unless expressly so defined.

[0030] Embodiment 1:

[0031] The present application proposes a data supervision method S100 based on data space, as shown in Figure 1 The method comprises the following steps:

[0032] S101, after the data provider and the data user sign a digital contract, the digital contract is locked, and the data product of the data provider is received through the data space according to the locked digital contract, and the data product is preliminarily checked to confirm that the data product is allowed to trade, and the data product is stored;

[0033] S102, for the stored data product, in the data space, according to the data contract, the data information to be checked in the data product is screened out through precise matching or fuzzy matching, and the data information to be checked is checked through the pre-established checking model;

[0034] S103, if the data information to be checked has no security risk, it is confirmed that the locked digital contract is valid, and the data provider and the data user are allowed to trade and circulate the data product in the data space.

[0035] The method further comprises the following steps: before the data provider and the data user sign a digital contract, the data provider and the data user are allowed to trade and negotiate in the data space, the trading negotiation process is monitored in real time, a digital contract template is generated according to the trading negotiation result, and the data provider and the data user are allowed to sign the digital contract, if the data provider and / or the data user revise the digital contract template, the revised digital contract template is checked to confirm that the digital contract template is compliant, if the data provider and the data user are allowed to use the revised digital contract template to sign a digital contract, if not, give revision suggestions.

[0036] The data information to be checked includes:

[0037] Sensitive information, illegal information and prohibited export information.

[0038] If the data information to be checked has a security risk, it is determined that the locked digital contract is invalid, the data product of the data provider is locked in the data space, and the audit result and audit opinion of the data product are sent to the data provider and the data user respectively.

[0039] The method can be used for the supervision of the data provider and the data user by the supervisor, and the method will be further described below with the supervisor as an example, and the specific implementation steps are as shown in the following table: Figure 2

[0040] In the transaction stage of the data space system, the data provider and the data user will negotiate according to the data use strategy and the price;

[0041] The negotiation will be carried out once or several times, and when both parties are satisfied, the content of the digital contract will be finalized, at which time the system will lock the contract and set the contract state to be audited.

[0042] The supervisor receives the system notification, logs in to the system to audit the digital contract, uses the data preview function provided by the system to view the data product prepared for transaction by the data provider, and can use the accurate matching or fuzzy matching method to review the information in the data.

[0043] If the supervisor determines that the data product of the data provider contains sensitive information, illegal information, prohibited export information and other information that is not suitable for transaction in the data space, it is determined that the current digital contract has a security risk, the contract state is set to be invalid, and the audit opinion is given. The system will send the audit result and the audit opinion to the data provider and the data user.

[0044] If the supervisor determines that the data product of the data provider has no security risk, the digital contract is unlocked. The system will send a notification to the data provider and the data user that the digital contract has passed the audit and can continue the data flow process.

[0045] The technical solution adopted by the application has the following advantages:

[0046] The supervisor can preferentially review the data involved in the digital contract to determine the security risk and determine whether the digital contract is legal and effective, thereby preventing sensitive data from being leaked;

[0047] The process of data flow is safe and controllable, and the supervisor completely controls whether the digital contract can be executed; ​

[0048] The data security cost of the data space is effectively reduced.

[0049] Embodiment 2:

[0050] In another aspect, the present application also provides a data supervision system 200 based on a data space, as shown, comprising: Figure 3

[0051] The first checking unit 201 is configured to lock the digital contract after the data provider and the data user sign the digital contract, and receive the data product of the data provider through the data space according to the locked digital contract, and perform preliminary checking on the data product to confirm that the data product is allowed to trade, and store the data product.

[0052] The checking unit 202 is configured to screen out the data information to be checked in the stored data product in the data space according to the data contract through precise matching or fuzzy matching, and check the data information to be checked through the pre-established checking model.

[0053] The supervision unit 203 is configured to confirm that the locked digital contract is valid after the data information to be checked has no security risk, and allow the data provider and the data user to trade and circulate the data product in the data space.

[0054] The first checking unit 201 is further configured to allow the data provider and the data user to trade and negotiate in the data space before signing the digital contract, and supervise the trading and negotiation process in real time, and generate a digital contract template according to the trading and negotiation result for the data provider and the data user to sign, if the data provider and / or the data user revise the digital contract template, check the revised digital contract template to confirm that the digital contract template is compliant, if the data provider and the data user are allowed to sign the digital contract using the revised digital contract template, if not, give revision suggestions.

[0055] The data information to be checked comprises:

[0056] Sensitive information, illegal information and prohibited export information.

[0057] If the data information to be checked has security risk, the locked digital contract is confirmed to be invalid, the data product of the data provider is locked in the data space, and the data product audit result and audit opinion are sent to the data provider and the data user respectively.

[0058] ​The application can preferentially examine data related to the digital contract, judge the security risk situation, and determine whether the digital contract is legal and effective, thereby preventing sensitive data leakage.

[0059] Embodiment 3:

[0060] Based on the same inventive concept, the application further provides a computer device, which comprises a processor and a memory, the memory is used for storing a computer program, the computer program comprises program instructions, and the processor is used for executing the program instructions stored in the computer storage medium. The processor can be a central processing unit (CPU), and can also be other general-purpose processors, digital signal processors (DSP), application specific integrated circuits (ASIC), field-programmable gate arrays (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components, etc., which are the computing core and control core of the terminal, and are suitable for implementing one or more instructions, and are specifically suitable for loading and executing one or more instructions in the computer storage medium to implement a corresponding method flow or a corresponding function, so as to implement the steps of the method in the above embodiments.

[0061] Embodiment 4:

[0062] Based on the same inventive concept, the application further provides a storage medium, specifically a computer readable storage medium (Memory), which is a memory device in the computer device and is used for storing programs and data. It can be understood that the computer readable storage medium herein can include an internal storage medium in the computer device, and of course can also include an expansion storage medium supported by the computer device. The computer readable storage medium provides a storage space, and the storage space stores an operating system of the terminal. Furthermore, one or more instructions suitable for being loaded and executed by the processor are also stored in the storage space, and the instructions can be one or more computer programs (including program codes). It should be noted that the computer readable storage medium herein can be a high-speed RAM memory, or a non-volatile memory such as at least one disk memory. One or more instructions stored in the computer readable storage medium can be loaded and executed by the processor to implement the steps of the method in the above embodiments.

[0063] Those skilled in the art will appreciate that embodiments of the present application can be readily used as software, hardware, or a combination of software and hardware. In a software embodiment, the methods can be tangibly embodied in a machine-readable storage medium having stored thereon instructions that can be used to program a computer to perform any of the methods. The software implementation can be initialized by loading and executing a set of instructions arranged to perform one of the methods into the computer's memory. Alternatively, hard-wired circuitry can be used in place of, or in combination with, software instructions. Thus, the

[0064] The present application is described in reference to the drawings using a flowchart and / or a block diagram of the method, apparatus (system) and computer program product according to embodiments of the application. It will be understood that each block of the flowchart and / or block diagram, and combinations of blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general purpose computer, special purpose computer, embedded processing device or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart and / or block diagram block or blocks. Figure 1 one or more functions specified in one or more of the flowchart or block diagram block or blocks. Figure 1 one or more functions specified in one or more of the flowchart or block diagram block or blocks.

[0065] These computer program instructions can also be stored in a computer- readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instructions which implement the flowchart and / or block diagram block or blocks. Figure 1 one or more functions specified in one or more of the flowchart or block diagram block or blocks. Figure 1 one or more functions specified in one or more of the flowchart or block diagram block or blocks.

[0066] These computer program instructions can also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer-implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the flowchart and / or block diagram block or blocks. Figure 1 one or more functions specified in one or more of the flowchart or block diagram block or blocks. Figure 1 one or more functions specified in one or more of the flowchart or block diagram block or blocks.

[0067] While preferred embodiments of the application have been described, additional variations and modifications can be made to these embodiments by those skilled in the art once they learn of the basic inventive concepts. Therefore, the appended claims are intended to cover all such modifications and variations as fall within the true scope of the present application.

[0068] It will be apparent to those skilled in the art that various modifications and variations can be made to the present application without departing from the spirit or scope of the application. Thus, it is intended that the present application cover modifications and variations of this application provided they come within the scope of the appended claims and their equivalents.

Claims

1. A data supervision method based on data space, characterized in that, include: After the data provider and the data user sign a digital contract, the digital contract is locked. Based on the locked digital contract, the data product from the data provider is received through the data space, and the data product is preliminarily verified to confirm that the data product is allowed to be traded and then stored. For the stored data products, within the data space, according to the data contract, the data information to be verified in the data products is filtered out by precise matching or fuzzy matching, and the data information to be verified is verified by a pre-established verification model; If the data to be verified has no security risks, the locked digital contract is confirmed to be effective, allowing the data provider and data user to trade and transfer data products within the data space.

2. The data supervision method according to claim 1, characterized in that, The method further includes: allowing the data provider and data user to conduct transaction negotiations within the data space before signing a digital contract, monitoring the transaction negotiation process in real time, and generating a digital contract template based on the negotiation results for the data provider and data user to sign. If the data provider and / or data user revises the digital contract template, the revised digital contract template is checked to confirm its compliance. If compliant, the data provider and data user are allowed to sign the digital contract using the revised template; if non-compliant, revision suggestions are provided.

3. The data supervision method according to claim 1, characterized in that, The data information to be verified includes: Sensitive information, illegal information, and information prohibited from export.

4. The data supervision method according to claim 1, characterized in that, If the data to be verified has security risks, the locked digital contract is confirmed to be invalid, and the data product of the data provider is locked within the data space. The audit results and audit opinions of the data product are then sent to the data provider and the data user respectively.

5. A data monitoring system based on data space, characterized in that, include: The initial verification unit is used to lock the digital contract after the data provider and the data user sign the digital contract, and to receive the data product from the data provider through the data space according to the locked digital contract, and to perform an initial verification of the data product to confirm that the data product is allowed to be traded, and to store the data product. The verification unit is used to, within the data space, filter out the data information to be verified in the stored data product by means of precise matching or fuzzy matching according to the data contract, and verify the data information to be verified by means of a pre-established verification model. The regulatory unit is used to confirm the validity of the locked digital contract after the data information to be verified has no security risks, allowing data providers and data users to trade and transfer data products within the data space.

6. The data supervision method according to claim 5, characterized in that, The initial verification unit is also used to allow the data provider and data user to conduct transaction negotiations within the data space before the data provider and data user sign a digital contract, and to monitor the transaction negotiation process in real time. Based on the transaction negotiation results, it generates a digital contract template for the data provider and data user to sign. If the data provider and / or data user revises the digital contract template, it verifies the revised digital contract template to confirm its compliance. If it complies with the rules, the data provider and data user are allowed to use the revised digital contract template to sign the digital contract. If it does not comply, it provides revision opinions.

7. The data supervision method according to claim 5, characterized in that, The data information to be verified includes: Sensitive information, illegal information, and information prohibited from export.

8. The data supervision method according to claim 5, characterized in that, If the data to be verified has security risks, the locked digital contract is confirmed to be invalid, and the data product of the data provider is locked within the data space. The audit results and audit opinions of the data product are then sent to the data provider and the data user respectively.

9. A computer device, characterized in that, include: One or more processors; A processor is used to execute one or more programs; When the one or more programs are executed by the one or more processors, the method described in any one of claims 1-4 is implemented.

10. A computer-readable storage medium, characterized in that, It contains a computer program, which, when executed, implements the method as described in any one of claims 1-4.

Images