Certificate information desensitization method and device in development or test service

Abstract

The invention relates to a certificate information desensitization method and device in development or test business. Comprising the steps of receiving a certificate information desensitization request of a current batch; splitting target certificate information in the certificate information desensitization request to obtain a target address code, a target date and a target sequence code in the certificate information; searching an address code virtual value corresponding to the target address code from the address code dictionary of the current batch; searching a random day number corresponding to the target address code from a random day number dictionary of the current batch, and calculating a date virtual value according to the target date and the random day number; encrypting the target sequence code to obtain a sequence code virtual value; calculating a check code virtual value; and splicing the address code virtual value, the date virtual value, the sequence code virtual value and the check code virtual value in sequence to obtain desensitized certificate information of the target certificate information. By means of the method, desensitization of the certificate information is achieved, and development or testing can be conducted smoothly through verification of the certificate information in the development or testing process.

Description

Technical Field

[0001] The embodiments in this specification relate to the fields of data processing and privacy protection technology, and in particular to a method and apparatus for de-identifying document information in the development or testing of business operations. Background Technology

[0002] In the development and testing of banking services, identification information is often required for business development or testing. Therefore, desensitizing identification information to ensure the security of user information is a key focus in the current technology field.

[0003] Common de-identification methods include character selection, character encoding, character arrangement, character recombination, character encryption, character conversion, character splitting into bytes, byte selection, byte conversion, byte sequence rearrangement, byte recombination into characters, byte encryption, or combinations thereof. However, these methods can only ensure the confidentiality of user information. Because the development and testing of banking services require verification of document information, the de-identified document information obtained using these methods no longer conforms to the characteristics of real document information and cannot pass verification. Using random number generation is unsuitable for banking service development and testing due to two main issues: firstly, the required data volume is enormous, leading to a large workload for random number generation; secondly, random number generation cannot ensure the relevance of virtual document information to business operations.

[0004] How to desensitize document information during the development or testing of banking services is a pressing technical problem that needs to be solved. Summary of the Invention

[0005] To address the problems existing in the prior art, this specification provides a method and apparatus for de-identifying document information in the development or testing of business processes. This not only achieves the de-identification of document information to ensure the security of user information, but also enables the smooth progress of development or testing by verifying the document information during the development or testing process, while ensuring data consistency.

[0006] The specific technical solutions of the embodiments in this specification are as follows:

[0007] On the one hand, embodiments of this specification provide a method for de-identifying document information in the development or testing of business processes, the method comprising:

[0008] Receive the current batch of document information anonymization requests;

[0009] The target document information in the document information de-identification request is split to obtain the de-identification target address code, de-identification target date, and de-identification target sequence code in the target document information;

[0010] Search the address code virtual value corresponding to the de-identified target address code from the address code dictionary corresponding to the current batch;

[0011] Search for the random number of days corresponding to the de-identified target address code in the random day dictionary corresponding to the current batch, and calculate the virtual value of the date based on the de-identified target date and the random number of days;

[0012] The desensitized target sequence code is encrypted to obtain a virtual sequence code value;

[0013] Calculate the virtual checksum value based on the virtual value of the address code, the virtual value of the date, and the virtual value of the sequence code;

[0014] The virtual values ​​of the address code, date, sequence code, and check code are concatenated in sequence to obtain the de-identified document information of the target document information.

[0015] Furthermore, the method also includes:

[0016] A pre-created address code library for address codes in document information is provided, the address code library including multiple address code true values;

[0017] Obtain the virtual value of the address code corresponding to the true value of each address code, and form an initial list of virtual values ​​for the address code.

[0018] When a request to de-identify document information for the current batch is received, the sorting of multiple virtual address codes in the initial virtual address code list is shuffled to obtain the virtual address code list.

[0019] Based on the true values ​​of the address codes in the address code library and the serial numbers of the true values ​​of the address codes, an address code dictionary corresponding to the virtual values ​​of the address codes in the address code virtual value list is constructed to create the address code dictionary for the current batch.

[0020] Furthermore, constructing the address code dictionary corresponding to the current batch based on the address code true values ​​in the address code library and the address code virtual values ​​corresponding to the address code virtual value list according to the index of the address code true values ​​further includes:

[0021] Determine the virtual address code value corresponding to the sequence number of the true address code value in the address code library from the virtual address code value list;

[0022] Use the true value of the address code as the key and the virtual value of the address code as the value to construct key-value pairs and store them in the address code dictionary.

[0023] Furthermore, the method also includes:

[0024] When a request to de-identify document information for the current batch is received, a random number of days corresponding to the true value of each address code in the address code library is randomly generated, and a random number dictionary corresponding to the current batch is constructed.

[0025] Furthermore, calculating the virtual date value based on the desensitization target date and the random number of days further includes:

[0026] The random number of days is added to the target date for desensitization to obtain the virtual date value.

[0027] Furthermore, the method also includes:

[0028] Get the current date;

[0029] Adding the random number of days to the desensitized target date to obtain the virtual date value further includes:

[0030] Add the random number of days to the target date for desensitization to obtain the calculated date;

[0031] Determine whether the calculation date exceeds the current date;

[0032] If the number of days exceeds the target date for desensitization, the random number of days is reduced to obtain the virtual date value.

[0033] If the date is not exceeded, the calculated date will be used as the virtual date value.

[0034] Furthermore, after obtaining the desensitized document information of each target document in the current batch of document information desensitization requests, the address code dictionary and / or the random date code dictionary corresponding to the current batch are deleted.

[0035] Furthermore, encrypting the desensitized target sequence code to obtain the sequence code virtual value further includes:

[0036] The de-identified target sequence code is encrypted to obtain an encrypted string;

[0037] According to the number of characters in the de-identified target sequence code, the top-ranking characters are extracted from the encrypted string and used as the virtual value of the sequence code.

[0038] On the other hand, embodiments of this specification also provide a device for de-identifying document information in the development or testing of business operations, the device comprising:

[0039] The document information desensitization request receiving unit is used to receive document information desensitization requests for the current batch;

[0040] The target document information splitting unit is used to split the target document information in the document information desensitization request to obtain the desensitized target address code, desensitized target date and desensitized target sequence code in the target document information;

[0041] The address code virtual value determination unit is used to search for the address code virtual value corresponding to the desensitized target address code from the address code dictionary corresponding to the current batch.

[0042] The date virtual value determination unit is used to look up the random number of days corresponding to the de-identified target address code from the random day dictionary corresponding to the current batch, and calculate the date virtual value based on the de-identified target date and the random number of days;

[0043] The sequence code virtual value determination unit is used to encrypt the desensitized target sequence code to obtain a sequence code virtual value;

[0044] The virtual check code value generation unit is used to calculate the virtual check code value based on the virtual address code value, the virtual date value, and the virtual sequence code value.

[0045] The desensitized document information generation unit is used to concatenate the virtual values ​​of the address code, date, sequence code, and check code in sequence to obtain the desensitized document information of the target document information.

[0046] On the other hand, embodiments of this specification also provide a computer device, including a memory, a processor, and a computer program stored in the memory, wherein the computer program, when run by the processor, executes instructions according to the method described above.

[0047] On the other hand, embodiments of this specification also provide a computer-readable storage medium storing a computer program that, when executed by a processor, implements the above-described method.

[0048] Using the embodiments in this specification, the target document information to be de-identified is split into a target address code, a target date, and a target sequence code. For the target address code, a pre-built address code dictionary corresponding to the current batch of document information de-identification requests that can pass verification is used. The virtual address code value corresponding to the target address code is searched from the address code dictionary, and this virtual address code value can pass the verification of development and testing processes. For the target date, a pre-built random day dictionary corresponding to the current batch of document information de-identification requests is used. This random day dictionary stores the random number of days corresponding to the true address code value. The random day dictionary is used to search for the random number of days corresponding to the target address code. Then, a virtual date value is calculated based on the target date and the random number of days, thus ensuring that the virtual date value also passes the verification of development and testing processes. For the target sequence code, an encrypted method is used to obtain the virtual sequence code value. Then, the virtual value of the check code is calculated based on the virtual values ​​of the address code, date, and sequence code. The virtual values ​​of the address code, date, sequence code, and check code are then concatenated in sequence to obtain the de-identified document information of the target document. This ensures that the format of the de-identified document information matches the format of the original target document information, allowing the de-identified document information to pass the verification of development and testing processes. Furthermore, it is difficult to crack the real document information corresponding to the de-identified document information, thus ensuring the user's information security.

[0049] Furthermore, since the target document information in the same batch uses the same address code dictionary and random number dictionary, each target document information in the same batch has only one corresponding unique de-identified document information. There will be no multiple different de-identified document information for the target document information. Therefore, the de-identified document information in the same batch can be applied to the same or related development or testing business, avoiding the problem of confusion between the results of development or testing business, and ensuring the relevance and traceability of the same de-identified document information in the same or related development or testing business.

[0050] Finally, because different batches of document information desensitization requests in the embodiments of the specification use different address code dictionaries and random number dictionaries, the desensitized document information obtained when desensitizing the same target document information in different batches is also different. This makes data isolation between the desensitized document information obtained in different batches and avoids data collisions. Attached Figure Description

[0051] To more clearly illustrate the technical solutions in the embodiments of this specification or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the embodiments of this specification. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0052] Figure 1 The diagram shown is a flowchart illustrating a method for de-identifying document information in the development or testing of business processes, as described in this specification.

[0053] Figure 2 The diagram shown is a flowchart illustrating the process of constructing the address code dictionary corresponding to the current batch in an embodiment of this specification.

[0054] Figure 3 The diagram shows a flowchart illustrating how, in an embodiment of this specification, an address code dictionary is constructed based on the true address code value in the address code library and the corresponding virtual address code value in the address code virtual value list.

[0055] Figure 4 The diagram shown is a flowchart illustrating the process of encrypting the desensitized target sequence code to obtain a virtual sequence code value in an embodiment of this specification.

[0056] Figure 5 The diagram shown is a structural schematic of a document information desensitization device used in the development or testing of business processes according to an embodiment of this specification.

[0057] Figure 6 The diagram shown is a structural schematic of the computer device in an embodiment of this specification.

[0058] [Explanation of Figure Markers]:

[0059] 501. Document Information De-identification Request Receiving Unit;

[0060] 502. Target document information splitting unit;

[0061] 503. Address code virtual value determination unit;

[0062] 504. Date Virtual Value Determination Unit;

[0063] 505. Sequence Code Virtual Value Determination Unit;

[0064] 506. Verification code virtual value generation unit;

[0065] 507. De-identified document information generation unit;

[0066] 602. Computer equipment;

[0067] 604. Processing equipment;

[0068] 606. Storage resources;

[0069] 608. Drive mechanism;

[0070] 610. Input / output module;

[0071] 612. Input devices;

[0072] 614. Output devices;

[0073] 616. Presentation equipment;

[0074] 618. Graphical User Interface;

[0075] 620. Network interface;

[0076] 622. Communication link;

[0077] 624. Communication bus. Detailed Implementation

[0078] The technical solutions in the embodiments of this specification will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the embodiments of this specification, and not all embodiments. Based on the embodiments of this specification, all other embodiments obtained by those skilled in the art without creative effort are within the protection scope of the embodiments of this specification.

[0079] It should be noted that the terms "first," "second," etc., in the description, claims, and accompanying drawings of the embodiments herein are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that embodiments of the embodiments described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion; for example, a process, method, apparatus, product, or device that includes a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or devices.

[0080] It should be noted that the acquisition, storage, use, and processing of data in the technical solutions of the embodiments of this specification all comply with the relevant provisions of national laws and regulations.

[0081] It should be noted that in the embodiments of this specification, certain software, components, models and other existing solutions in the industry may be mentioned. These should be regarded as exemplary and are only intended to illustrate the feasibility of implementing the technical solution of this application. However, they do not mean that the applicant has used or necessarily used the solution.

[0082] To address the problems existing in the prior art, this specification provides a method for desensitizing identification information in business development or testing. This method not only desensitizes identification information to ensure the security of user information, but also enables the smooth progress of development or testing by verifying identification information during the development or testing process, while ensuring data consistency. Figure 1 The diagram illustrates a flowchart of a method for de-identifying document information in the development or testing of business processes, as described in an embodiment of this specification. The diagram depicts the process of de-identifying target document information in the same batch of document information de-identification requests. The order of steps listed in the embodiment is merely one possible execution order among many steps and does not represent the only possible execution order. In actual system or device products, the methods shown in the embodiment or the accompanying drawings can be executed sequentially or in parallel. Specifically, as shown... Figure 1 As shown, the method may include:

[0083] Step 101: Receive the document information de-identification request for the current batch;

[0084] Step 102: Deconstruct the target document information in the document information de-identification request to obtain the de-identification target address code, de-identification target date, and de-identification target sequence code in the target document information;

[0085] Step 103: Search for the virtual address value corresponding to the de-identified target address code in the address code dictionary corresponding to the current batch;

[0086] Step 104: Find the random number of days corresponding to the de-identified target address code from the random day dictionary corresponding to the current batch, and calculate the virtual value of the date based on the de-identified target date and the random number of days;

[0087] Step 105: Encrypt the desensitized target sequence code to obtain a virtual sequence code value;

[0088] Step 106: Calculate the checksum virtual value based on the address code virtual value, date virtual value, and sequence code virtual value;

[0089] Step 107: Concatenate the virtual values ​​of the address code, date, sequence code, and check code in sequence to obtain the de-identified document information of the target document information.

[0090] Using the embodiments in this specification, the target document information to be de-identified is split into a target address code, a target date, and a target sequence code. For the target address code, a pre-built address code dictionary corresponding to the current batch of document information de-identification requests that can pass verification is used. The virtual address code value corresponding to the target address code is searched from the address code dictionary, and this virtual address code value can pass the verification of development and testing processes. For the target date, a pre-built random day dictionary corresponding to the current batch of document information de-identification requests is used. This random day dictionary stores the random number of days corresponding to the true address code value. The random day dictionary is used to search for the random number of days corresponding to the target address code. Then, a virtual date value is calculated based on the target date and the random number of days, thus ensuring that the virtual date value also passes the verification of development and testing processes. For the target sequence code, an encrypted method is used to obtain the virtual sequence code value. Then, the virtual value of the check code is calculated based on the virtual values ​​of the address code, date, and sequence code. The virtual values ​​of the address code, date, sequence code, and check code are then concatenated in sequence to obtain the de-identified document information of the target document. This ensures that the format of the de-identified document information matches the format of the original target document information, allowing the de-identified document information to pass the verification of development and testing processes. Furthermore, it is difficult to crack the real document information corresponding to the de-identified document information, thus ensuring the user's information security.

[0091] Furthermore, since the target document information in the same batch uses the same address code dictionary and random number dictionary, each target document information in the same batch has only one corresponding unique de-identified document information. There will be no multiple different de-identified document information for the target document information. Therefore, the de-identified document information in the same batch can be applied to the same or related development or testing business, avoiding the problem of confusion between the results of development or testing business, and ensuring the relevance and traceability of the same de-identified document information in the same or related development or testing business.

[0092] Finally, because different batches of document information desensitization requests in the embodiments of the specification use different address code dictionaries and random number dictionaries, the desensitized document information obtained when desensitizing the same target document information in different batches is also different. This makes data isolation between the desensitized document information obtained in different batches and avoids data collisions.

[0093] In the embodiments of this specification, the document information can be a document ID, which consists of multiple numbers. Taking an 18-digit document ID as an example, the first 6 digits are the address code, the 7th to 14th digits are the date, the 15th to 17th digits are the sequence code, and the 18th digit is the check code.

[0094] In the development and testing of banking services, a large number of user ID cards are frequently used as samples. Using real ID cards would lead to the leakage of user information. Existing methods for anonymizing ID cards often result in anonymized ID cards that no longer possess the structural characteristics of real ID cards, hindering the development and testing of banking services. The method described in this specification can anonymize ID cards while preserving their original structural characteristics, enabling the anonymized ID cards to pass ID verification in banking service development and testing scenarios, thus improving the efficiency of banking service development and testing.

[0095] In the embodiments of this specification, the de-identification of target document information (i.e., target document ID) in batches allows for the batch acquisition of users' real document IDs, with user authorization and while ensuring the privacy and security of user information. Document information de-identification requests are then generated, and the method in these embodiments processes these requests to obtain de-identified document IDs for each real document ID. These batches of de-identified document IDs can then be provided to banking business development or testing personnel for business development or testing.

[0096] In the embodiments of this specification, the ID of the document to be de-identified is first split to obtain the de-identification target address code (e.g., the first 6 digits), the de-identification target date (e.g., the 7th to 14th digits), and the de-identification target sequence code (e.g., the 15th to 17th digits) from the ID of the document to be de-identified. Then, the de-identification target address code, the de-identification target date, and the de-identification target sequence code are de-identified sequentially.

[0097] In the embodiments described in this specification, it is first necessary to construct the address code dictionary corresponding to the current batch.

[0098] Specifically, such as Figure 2 As shown, the steps for constructing the address code dictionary corresponding to the current batch include:

[0099] Step 201: Pre-create an address code library for the address codes in the document information, wherein the address code library includes multiple address code true values;

[0100] Step 202: Obtain the virtual address value corresponding to the true value of each address code to form an initial list of virtual address values;

[0101] Step 203: When a request to de-identify document information for the current batch is received, the sorting of multiple virtual address codes in the initial virtual address code list is shuffled to obtain the virtual address code list.

[0102] Step 204: Construct the address code dictionary corresponding to the current batch based on the address code true values ​​in the address code library and the address code virtual values ​​corresponding to the address code virtual values ​​in the address code virtual value list.

[0103] In this embodiment, the address code library includes all true address code values. Verifiable virtual address code values ​​provided by a third party are obtained through a third-party interface to form an initial list of virtual address code values. Because the virtual address code values ​​are obtained sequentially according to the order of the true address code values ​​in the address code library, the initial list of virtual address code values ​​can correspond to the true address code values ​​in the address code library according to their sequence numbers. Since other processing agencies can also obtain the same virtual address code values ​​through a third party, to avoid information leakage, this embodiment shuffles the order of the virtual address code values ​​in the initial list when it receives a request to de-identify the document information for the current batch. Specifically, the order of the virtual address code values ​​in the initial list is shuffled. For example, the original virtual address code value with sequence number 1 is 110111; after shuffling, the sequence number of the virtual address code value 110111 becomes 9. Then, an address code dictionary corresponding to the current batch is constructed based on the true address code values ​​in the address code library and the corresponding virtual address code values ​​in the virtual address code list according to their sequence numbers.

[0104] Specifically, such as Figure 3 As shown, constructing the address code dictionary corresponding to the current batch based on the address code truth values ​​in the address code library and the address code virtual values ​​corresponding to the address code virtual value list according to the address code truth values ​​further includes:

[0105] Step 301: Determine the virtual address code value corresponding to the sequence number of the true address code in the address code library from the virtual address code list;

[0106] Step 302: Use the true value of the address code as the key and the virtual value of the address code as the value to construct a key-value pair and store it in the address code dictionary.

[0107] This can be understood as follows: the virtual address value corresponding to the true address value in the address code dictionary is not the virtual address value corresponding to the true address value provided by a third party, but rather a randomized relationship, thereby increasing the difficulty of cracking the de-identified document information.

[0108] In the embodiments of this specification, when a request to de-identify document information for the current batch is received, a random number of days corresponding to the true value of each address code in the address code library is randomly generated, and a random number dictionary corresponding to the current batch is constructed.

[0109] Then, a virtual date value is calculated based on the target date for desensitization and the random number of days. Specifically, the random number of days can be added to the target date for desensitization to obtain the virtual date value. It should be noted that, in this embodiment of the specification, adding random days is not a mathematical addition calculation, but rather adding random days to the target date for desensitization to obtain a new date. For example, if the target date for desensitization is 20000101 and the random number of days is 5, then the virtual date value obtained is 20000106.

[0110] In some other embodiments of this specification, if the virtual date value exceeds the current date, it will not pass the verification of the development and testing business. Therefore, in the embodiments of this specification, if the calculated date exceeds the current date, the random number of days is reduced from the desensitized target date to obtain the virtual date value.

[0111] It should be noted that reducing the number of random days in the embodiments of this specification is not a mathematical subtraction calculation, but rather reducing the number of random days from the target date for desensitization to obtain a new date. For example, if the target date for desensitization is 200000305 and the number of random days is 4, then the virtual date value obtained is 20000301.

[0112] According to one embodiment of this specification, in order to avoid reverse tracing of desensitized document information, after obtaining the desensitized document information of each target document information in the current batch of document information desensitization requests, the address code dictionary and / or the random date code dictionary corresponding to the current batch are deleted.

[0113] like Figure 4 As shown, encrypting the desensitized target sequence code to obtain the sequence code virtual value further includes:

[0114] Step 401: Encrypt the de-identified target sequence code to obtain the encrypted string;

[0115] Step 402: Extract the top-ranking characters from the encrypted string according to the number of characters in the desensitized target sequence code, and use them as the virtual value of the sequence code.

[0116] In the embodiments of this specification, a symmetric or asymmetric encryption algorithm can be used to encrypt the desensitized target sequence code to obtain an encrypted string. Then, according to the number of characters in the desensitized target sequence code, the first few characters are taken from the encrypted string as the virtual value of the sequence code.

[0117] In the embodiments of this specification, a document information verification algorithm is used to calculate the virtual values ​​of the address code, date, and sequence code to obtain the virtual value of the check code. Finally, the virtual values ​​of the address code, date, sequence code, and check code are concatenated in sequence to obtain the de-identified document information of the target document information.

[0118] When performing desensitization on other batches of document information in the future, simply regenerate the corresponding address code dictionary and random date code dictionary, and then desensitize the document information again.

[0119] The method described in this specification has at least the following advantages:

[0120] 1. High fidelity to the original document, preserving document information characteristics. The method described in this specification can preserve the digital characteristics and patterns of document information, and can be verified through document information verification.

[0121] 2. Retaining Relationships: Since the target document information in the same batch uses the same address code dictionary and random number dictionary, each target document information in the same batch has only one corresponding unique de-identified document information. There will be no multiple different de-identified document information for the target document information. Therefore, the de-identified document information in the same batch can be applied to the same or related development or testing business, avoiding the problem of confusion between the results of development or testing business, and ensuring the relevance and traceability of the same de-identified document information in the same or related development or testing business.

[0122] 3. Anti-traceability: The method in the embodiments of this specification adopts a combination of random configuration and encryption. The encryption algorithm itself is difficult to crack, and when combined with the random matching method, the dictionary for each batch is randomly generated and the random matching is unpredictable. Moreover, after each batch is anonymized, the configuration dictionary is destroyed, and the dictionary for the new batch is newly randomly generated. Especially when multiple batches are used together, it is difficult to trace and crack.

[0123] 4. Reusable: The methods described in this specification can be reused repeatedly, eliminating the need to write new scripts for each batch of desensitization.

[0124] Based on the same inventive concept, embodiments of this specification also provide a device for de-identifying document information in development or testing operations, such as... Figure 5 As shown, it includes:

[0125] Document information desensitization request receiving unit 501 is used to receive document information desensitization requests for the current batch;

[0126] The target document information splitting unit 502 is used to split the target document information in the document information desensitization request to obtain the desensitized target address code, desensitized target date and desensitized target sequence code in the target document information;

[0127] Address code virtual value determination unit 503 is used to search for the address code virtual value corresponding to the desensitized target address code from the address code dictionary corresponding to the current batch;

[0128] The date virtual value determination unit 504 is used to look up the random number of days corresponding to the de-identified target address code from the random day dictionary corresponding to the current batch, and calculate the date virtual value according to the de-identified target date and the random number of days;

[0129] The sequence code virtual value determination unit 505 is used to encrypt the desensitized target sequence code to obtain a sequence code virtual value;

[0130] The virtual value generation unit 506 is used to calculate the virtual value of the check code based on the virtual value of the address code, the virtual value of the date, and the virtual value of the sequence code.

[0131] The desensitized document information generation unit 507 is used to concatenate the virtual values ​​of the address code, date, sequence code, and check code in sequence to obtain the desensitized document information of the target document information.

[0132] The beneficial effects obtained by the above-described device are the same as those obtained by the above-described method, and will not be described in detail in the embodiments of this specification.

[0133] like Figure 6The diagram illustrates the structure of a computer device according to an embodiment of this specification. The apparatus in this embodiment can be the computer device described above, executing the methods described in the embodiments of this specification. The computer device 602 may include one or more processing devices 604, such as one or more central processing units (CPUs), each of which can implement one or more hardware threads. The computer device 602 may also include any storage resource 606 for storing information of any kind, such as code, settings, data, etc. Without limitation, for example, the storage resource 606 may include any one or more combinations of the following: any type of RAM, any type of ROM, flash memory, hard disk, optical disk, etc. More generally, any storage resource can use any technology to store information. Furthermore, any storage resource can provide volatile or non-volatile retention of information. Further, any storage resource may represent a fixed or removable component of the computer device 602. In one case, when the processing device 604 executes associated instructions stored in any storage resource or combination of storage resources, the computer device 602 can perform any operation of the associated instructions. The computer device 602 also includes one or more drive mechanisms 608 for interacting with any storage resource, such as a hard disk drive mechanism, an optical disk drive mechanism, etc.

[0134] Computer device 602 may also include an input / output module 610 (I / O) for receiving various inputs (via input device 612) and providing various outputs (via output device 614). A specific output mechanism may include a presentation device 616 and an associated graphical user interface (GUI) 618. In other embodiments, the input / output module 610 (I / O), input device 612, and output device 614 may be omitted, and the device may function solely as a computer device within a network. Computer device 602 may also include one or more network interfaces 620 for exchanging data with other devices via one or more communication links 622. One or more communication buses 624 couple the components described above together.

[0135] Communication link 622 can be implemented in any way, such as via a local area network, a wide area network (e.g., the Internet), a point-to-point connection, or any combination thereof. Communication link 622 may include any combination of hardwired links, wireless links, routers, gateway functions, name servers, etc., governed by any protocol or combination of protocols.

[0136] This specification also provides a computer-readable storage medium storing a computer program that, when executed by a processor, implements the above-described method.

[0137] This specification also provides computer-readable instructions, wherein when a processor executes the instructions, the program therein causes the processor to perform the above-described method.

[0138] It should be understood that in the various embodiments of this specification, the sequence number of each process does not imply the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of this specification.

[0139] It should also be understood that, in the embodiments of this specification, the term "and / or" is merely a description of the relationship between related objects, indicating that three relationships can exist. For example, A and / or B can represent: A existing alone, A and B existing simultaneously, and B existing alone. Furthermore, in the embodiments of this specification, the character " / " generally indicates that the preceding and following related objects have an "or" relationship.

[0140] Those skilled in the art will recognize that the units and algorithm steps of the various examples described in conjunction with the embodiments disclosed in this specification can be implemented in electronic hardware, computer software, or a combination of both. To clearly illustrate the interchangeability of hardware and software, the components and steps of each example have been generally described in terms of functionality in the foregoing description. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementations should not be considered beyond the scope of the embodiments in this specification.

[0141] Those skilled in the art will clearly understand that, for the sake of convenience and brevity, the specific working processes of the systems, devices, and units described above can be referred to the corresponding processes in the foregoing method embodiments, and will not be repeated here.

[0142] In the embodiments provided in this specification, it should be understood that the disclosed systems, apparatuses, and methods can be implemented in other ways. For example, the apparatus embodiments described above are merely illustrative; for instance, the division of units is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the couplings or direct couplings or communication connections shown or discussed may be indirect couplings or communication connections through some interfaces, devices, or units, or they may be electrical, mechanical, or other forms of connection.

[0143] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of the embodiments described in this specification, depending on actual needs.

[0144] Furthermore, the functional units in the various embodiments of this specification can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or as a software functional unit.

[0145] If the integrated unit is implemented as a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solutions of the embodiments of this specification, in essence, or the parts that contribute to the prior art, or all or part of the technical solutions, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of this specification. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0146] This specification describes the principles and implementation methods of the embodiments using specific examples. The above descriptions of the embodiments are only for the purpose of helping to understand the methods and core ideas of the embodiments in this specification. At the same time, for those skilled in the art, there will be changes in the specific implementation methods and application scope based on the ideas of the embodiments in this specification. Therefore, the content of this specification should not be construed as a limitation on the embodiments in this specification.

Claims

1. A method for desensitizing identification information in the development or testing of business processes, characterized in that, The method includes: Receive the current batch of document information anonymization requests; The target document information in the document information de-identification request is split to obtain the de-identification target address code, de-identification target date, and de-identification target sequence code in the target document information; Search the address code virtual value corresponding to the de-identified target address code from the address code dictionary corresponding to the current batch; Search for the random number of days corresponding to the de-identified target address code in the random day dictionary corresponding to the current batch, and calculate the virtual value of the date based on the de-identified target date and the random number of days; The desensitized target sequence code is encrypted to obtain a virtual sequence code value; Calculate the virtual checksum value based on the virtual value of the address code, the virtual value of the date, and the virtual value of the sequence code; The virtual values ​​of the address code, date, sequence code, and check code are concatenated in sequence to obtain the de-identified document information of the target document information.

2. The method according to claim 1, characterized in that, The method further includes: A pre-created address code library for address codes in document information is provided, the address code library including multiple address code true values; Obtain the virtual value of the address code corresponding to the true value of each address code, and form an initial list of virtual values ​​for the address code. When a request to de-identify document information for the current batch is received, the sorting of multiple virtual address codes in the initial virtual address code list is shuffled to obtain the virtual address code list. Based on the true values ​​of the address codes in the address code library and the serial numbers of the true values ​​of the address codes, an address code dictionary corresponding to the virtual values ​​of the address codes in the address code virtual value list is constructed to create the address code dictionary for the current batch.

3. The method according to claim 2, characterized in that, Constructing the address code dictionary corresponding to the current batch based on the address code true values ​​in the address code library and the serial number of the address code true values ​​in the address code virtual value list further includes: Determine the virtual address code value corresponding to the sequence number of the true address code value in the address code library from the virtual address code value list; Use the true value of the address code as the key and the virtual value of the address code as the value to construct key-value pairs and store them in the address code dictionary.

4. The method according to claim 2, characterized in that, The method further includes: When a request to de-identify document information for the current batch is received, a random number of days corresponding to the true value of each address code in the address code library is randomly generated, and a random number dictionary corresponding to the current batch is constructed.

5. The method according to claim 1, characterized in that, Calculating the virtual date value based on the desensitization target date and the random number of days further includes: The random number of days is added to the target date for desensitization to obtain the virtual date value.

6. The method according to claim 5, characterized in that, The method further includes: Get the current date; Adding the random number of days to the desensitized target date to obtain the virtual date value further includes: Add the random number of days to the target date for desensitization to obtain the calculated date; Determine whether the calculation date exceeds the current date; If the number of days exceeds the target date for desensitization, the random number of days is reduced to obtain the virtual date value. If the date is not exceeded, the calculated date will be used as the virtual date value.

7. The method according to claim 1, characterized in that, After obtaining the desensitized document information of each target document in the current batch of document information desensitization requests, delete the address code dictionary and / or the random date code dictionary corresponding to the current batch.

8. The method according to claim 1, characterized in that, Encrypting the desensitized target sequence code to obtain a virtual sequence code value further includes: The de-identified target sequence code is encrypted to obtain an encrypted string; According to the number of characters in the de-identified target sequence code, the top-ranking characters are extracted from the encrypted string and used as the virtual value of the sequence code.

9. A device for desensitizing identification information in the development or testing of business documents, characterized in that, The device includes: The document information desensitization request receiving unit is used to receive document information desensitization requests for the current batch; The target document information splitting unit is used to split the target document information in the document information desensitization request to obtain the desensitized target address code, desensitized target date and desensitized target sequence code in the target document information; The address code virtual value determination unit is used to search for the address code virtual value corresponding to the desensitized target address code from the address code dictionary corresponding to the current batch. The date virtual value determination unit is used to look up the random number of days corresponding to the de-identified target address code from the random day dictionary corresponding to the current batch, and calculate the date virtual value based on the de-identified target date and the random number of days; The sequence code virtual value determination unit is used to encrypt the desensitized target sequence code to obtain a sequence code virtual value; The virtual check code value generation unit is used to calculate the virtual check code value based on the virtual address code value, the virtual date value, and the virtual sequence code value. The desensitized document information generation unit is used to concatenate the virtual values ​​of the address code, date, sequence code, and check code in sequence to obtain the desensitized document information of the target document information.

10. A computer device comprising a memory, a processor, and a computer program stored in the memory, characterized in that, When the computer program is run by the processor, it executes the instructions of the method according to any one of claims 1-8.

11. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a computer program that, when executed by a processor, implements the method of any one of claims 1 to 8.

Images