Access request response method and device, electronic equipment, storage medium and program

Abstract

The invention provides an access request response method and device, electronic equipment, a storage medium and a program. The method comprises the following steps: in response to a received task request, determining target data pointed by the task request; judging the data level of the target data; determining a target authentication mechanism matched with the data level from a plurality of preset authentication mechanisms, and authenticating the task request according to the target authentication mechanism; in response to determining that the authentication result of the target authentication mechanism is valid, desensitizing the target data according to a preset desensitization mechanism; and opening the authority of accessing the desensitized target data for the task request. Therefore, the method can be suitable for various data access scenes by matching a proper authentication mechanism.

Description

Technical Field

[0001] The embodiments of this application relate to the technical field of information interaction, and in particular to an access request response method, apparatus, electronic device, storage medium, and program. Background Technology

[0002] When using terminal devices to access data, it is often necessary to access sensitive data. The types of sensitive data are diverse, including data such as geographical location, network environment, account information, consumption records, and personal information. When users use terminal devices to access sensitive data, it is usually necessary to authenticate the terminal device in order to determine whether the user of the terminal device has the right to access it.

[0003] In the relevant access request response methods, during the authentication process, the same single authentication method is usually adopted for different types of sensitive data. However, a single strong authentication method, such as authentication by password or fingerprint, usually sacrifices user experience, while a single weak authentication method, such as authentication by voiceprint, usually poses privacy risks.

[0004] At the same time, when terminal devices access sensitive data in different environments, a single authentication method cannot be applied to all different environments. For example, when using a terminal device to access sensitive data in a secure environment, a weak authentication method can be applied. However, when using a terminal device to access the same sensitive data in a risky environment, the same weak authentication method is not applicable.

[0005] Therefore, the current single authentication method is difficult to apply to diverse data access scenarios. Summary of the Invention

[0006] In view of the above, embodiments of this disclosure provide an access request response method, apparatus, electronic device, storage medium, and computer program product.

[0007] In a first aspect, embodiments of this disclosure provide an access request response method, the method comprising: In response to receiving a task request, determine the target data that the task request points to; Determine the data level of the target data; From multiple preset authentication mechanisms, determine the target authentication mechanism that matches the data level, and authenticate the task request according to the target authentication mechanism; In response to the determination that the authentication result of the target authentication mechanism is valid, the target data is desensitized according to the preset desensitization mechanism; Grant access permissions to the anonymized target data for the task request.

[0008] In some alternative implementations, each authentication mechanism corresponds to one of multiple authentication levels; Accordingly, a target authentication mechanism matching the data level is determined from multiple preset authentication mechanisms, including: Determine the runtime environment of the task request; From multiple authentication mechanisms, identify candidate authentication mechanisms whose authentication level is consistent with the data level; Determine whether the authentication level of the candidate authentication mechanism meets the requirements of the operating environment; In response to the determination of the requirements of the operating environment, the candidate authentication mechanism is determined as the target authentication mechanism.

[0009] In some optional implementations, after determining whether the authentication level of the candidate authentication mechanism meets the requirements of the operating environment, the method further includes: In response to the determination that the requirements of the operating environment are not met, a target authentication mechanism with a higher authentication level than the candidate authentication mechanisms is selected from multiple authentication mechanisms.

[0010] In some alternative implementations, the operating environment includes secure environments and risky environments; Accordingly, determining whether the authentication level of the candidate authentication mechanism meets the requirements of the operating environment includes: In response to the determination that the operating environment is a risky environment, it is determined whether the authentication level of the candidate authentication mechanism is the highest level; The system determines that the authentication level of the candidate authentication mechanism is not the highest level, and therefore the authentication level of the candidate authentication mechanism does not meet the requirements of the operating environment.

[0011] In some optional implementations, the desensitization mechanism includes desensitization operations corresponding to various types of sensitive information; Accordingly, the target data is desensitized according to a preset desensitization mechanism, including: Identify the sensitive information in the target data, and the type of sensitive information for each item; For each piece of sensitive information, perform the desensitization operation corresponding to the sensitive information type of that sensitive information.

[0012] In some optional implementations, the desensitization operations for various sensitive information types include: For sensitive information types with high security requirements, obfuscation is appropriate; for sensitive information types with low security requirements, deletion is appropriate.

[0013] Secondly, embodiments of this disclosure provide an access request response apparatus, the apparatus comprising: The target data determination module is configured to determine the target data pointed to by the task request in response to receiving a task request; The data level determination module is configured to determine the data level of the target data. The authentication module is configured to determine the target authentication mechanism that matches the data level from multiple preset authentication mechanisms, and perform authentication according to the target authentication mechanism. The desensitization module is configured to desensitize the target data according to the preset desensitization mechanism in response to the determination that the authentication result of the target authentication mechanism is valid. The access module is configured to grant task requests permission to access the de-identified target data.

[0014] In some alternative implementations, multiple authentication mechanisms are divided into multiple authentication levels; Accordingly, the authentication module is also specifically configured as follows: Determine the runtime environment of the task request; From multiple authentication mechanisms, identify candidate authentication mechanisms whose authentication level is consistent with the data level; Determine whether the authentication level of the candidate authentication mechanism meets the requirements of the operating environment; In response to the determination of the requirements of the operating environment, the candidate authentication mechanism is determined as the target authentication mechanism.

[0015] Accordingly, after determining whether the authentication level of the candidate authentication mechanism meets the requirements of the operating environment, the authentication module also executes: In response to the determination that the requirements of the operating environment are not met, a target authentication mechanism with a higher authentication level than the candidate authentication mechanisms is selected from multiple authentication mechanisms.

[0016] Among these, determining whether the authentication level of the candidate authentication mechanism meets the requirements of the operating environment includes: In response to the determination that the operating environment is a risky environment, it is determined whether the authentication level of the candidate authentication mechanism is the highest level; The system determines that the authentication level of the candidate authentication mechanism is not the highest level, and therefore the authentication level of the candidate authentication mechanism does not meet the requirements of the operating environment.

[0017] In some alternative implementations, the desensitization mechanism includes multiple desensitization operations; Accordingly, the desensitization module is specifically configured as follows: Identify the sensitive information in the target data, and the type of each sensitive information; Perform corresponding de-identification operations for different types of sensitive information.

[0018] The desensitization process includes blurring and deletion; the different types of sensitive information include those with high security requirements and those with low security requirements. Accordingly, de-identification operations are performed on different types of sensitive information, including: Blur out highly sensitive information; Delete sensitive information with low information level.

[0019] Thirdly, embodiments of this disclosure provide an access request response device, including: one or more processors; and a storage device storing one or more programs thereon, which, when executed by the one or more processors, cause the one or more processors to implement the method described in any implementation of the first aspect.

[0020] Fourthly, embodiments of this disclosure provide a computer-readable storage medium having a computer program stored thereon, wherein the computer program, when executed by one or more processors, implements the method as described in any implementation of the first aspect.

[0021] Fifthly, embodiments of this disclosure provide a computer program product, including a computer program / instructions that, when executed by a processor, implement the method described in any of the implementations of the first aspect.

[0022] To address the issue that a single authentication method is insufficient for diverse data access scenarios, the access request response method, apparatus, electronic device, storage medium, and program provided in this disclosure effectively solve the problem of traditional single authentication methods being unable to adapt to diverse data access scenarios by combining a data-level matching authentication mechanism with a de-identification mechanism. For target data of varying sensitivity, precise authentication is performed by matching corresponding authentication mechanisms, avoiding the impact of a single strong authentication on user experience while mitigating the privacy and security risks associated with a single weak authentication, thus achieving a balance between data security and access convenience. Simultaneously, after successful authentication, de-identification processing is performed on the target data to further remove sensitive information, ensuring that sensitive data is not leaked while granting access permissions, providing flexible and reliable security guarantees for various data access scenarios. Attached Figure Description

[0023] Other features, objects, and advantages of this disclosure will become more apparent from the following detailed description of non-limiting embodiments with reference to the accompanying drawings. The drawings are for illustrative purposes only and are not intended to limit the invention. In the drawings: Figure 1 This is an exemplary system architecture diagram to which one embodiment of this disclosure may be applied; Figure 2A A flowchart illustrating one embodiment of the access request response method according to this disclosure; Figure 2B This is a breakdown flowchart of an embodiment of the breakdown process 2020 according to one embodiment of step 202 of this disclosure; Figure 2C This is a flowchart illustrating an embodiment of the decomposition process 2040 according to one embodiment of step 204 of this disclosure; Figure 3 This is a schematic diagram of the structure of an embodiment of an access request response apparatus according to the present disclosure; Figure 4 A schematic diagram of the structure of a computer system suitable for implementing embodiments of the present disclosure. Detailed Implementation

[0024] The present disclosure will now be described in further detail with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative of the invention and not intended to limit it. Furthermore, it should be noted that, for ease of description, only the parts relevant to the invention are shown in the accompanying drawings.

[0025] It should be noted that, unless otherwise specified, the embodiments and features described in this disclosure can be combined with each other. This disclosure will now be described in detail with reference to the accompanying drawings and embodiments.

[0026] Figure 1 An exemplary system architecture 100 is shown, in which embodiments of the access request response methods, apparatuses, electronic devices, storage media, and programs of this disclosure can be applied.

[0027] like Figure 1 As shown, system architecture 100 may include terminal devices 101, 102, and 103, a network 104, and a server 105. Network 104 serves as the medium for providing communication links between terminal devices 101, 102, and 103 and server 105. Network 104 may include various connection types, such as wired or wireless communication links, or fiber optic cables, etc.

[0028] Users can use terminal devices 101, 102, and 103 to interact with server 105 via network 104 to send task requests and other related information to server 105, or to receive authentication results and other related information from server 105. Various client applications can be installed on terminal devices 101, 102, and 103, such as image processing applications, natural language processing applications, speech processing applications, large model applications, data anonymization applications, speech recognition applications, short video social applications, audio and video conferencing applications, web browser applications, instant messaging tools, email clients, social platform software, and other applications that require access to sensitive information.

[0029] Terminal devices 101, 102, and 103 can be either hardware or software. When terminal devices 101, 102, and 103 are hardware, they can be various electronic devices with sound acquisition devices (e.g., headphones with earphone cases and microphones), video and / or image acquisition devices (e.g., headphones with cameras), and displays, including but not limited to headphones with earphone cases and cameras, smartphones, smartwatches, tablets, e-book readers, MP3 players (Moving Picture Experts Group Audio Layer III), MP4 players (Moving Picture Experts Group Audio Layer IV), laptops, and desktop computers, etc. When terminal devices 101, 102, and 103 are software, they can be installed on the terminal devices listed above. They can be implemented as multiple software programs or software modules (e.g., services related to providing access request responses) or as a single software program or software module. No specific limitations are made here.

[0030] In some cases, the access request response method provided in this disclosure can be executed by server 105, and correspondingly, the access request response device can also be set in server 105. In this case, system architecture 100 may not include terminal devices 101, 102, and 103.

[0031] It should be noted that server 105 can be either hardware or software. When server 105 is hardware, it can be implemented as a distributed server cluster consisting of multiple servers, or as a single server. When server 105 is software, it can be implemented as multiple software programs or software modules (for example, used to provide distributed access request and response services), or as a single software program or software module. No specific limitations are made here.

[0032] It should be understood that Figure 1 The number of terminal devices, networks, and servers shown is merely illustrative. Depending on implementation needs, any number of terminal devices, networks, and servers can be included.

[0033] In some alternative implementations, refer to Figure 2A The document illustrates an embodiment flow 200 of the access request response method according to this disclosure. In this embodiment, the application scenario of the access request response method may include one or more terminal devices and a server. Each terminal device, as the object of authentication, can interact independently with the server and complete the corresponding steps of the access request response method. The flow 200 of the access request response method includes the following steps 201 to 205: Step 201: In response to receiving a task request, determine the target data that the task request points to.

[0034] Among them, a task request can be a task request that is automatically sent to the server by the user when running relevant instructions using the terminal device, such as running AI (Artificial Intelligence) instructions.

[0035] The task request may be, for example, a request to perform a preset task, such as a task to check the weather, a task to check personal information, or a task to use personal information to pay for goods or services. The task request may have a need to access relevant data, which may be sensitive information that needs to be kept confidential, such as personal information, or ordinary data, such as weather information.

[0036] Furthermore, in addition to being automatically generated by the terminal device and sent to the server during the execution of AI instructions, the task request can also be a voice task request issued by the user to the terminal and then sent to the server by the terminal device.

[0037] In this step, upon receiving the task request, the specific intent of the task request can be identified through a preset intent recognition component, thereby determining whether the task request requires access to relevant data.

[0038] The intent recognition component can be a model with speech recognition and semantic recognition functions, such as a large language model, which can perform semantic analysis on task requests in speech form and determine the semantic information of the task request.

[0039] Furthermore, based on the determined semantic information, it can be determined whether the task request has the intention to access relevant data. If the task request has the intention to access relevant data, the data that the intention points to can be determined, that is, the target data that needs to be accessed.

[0040] As an example, the various types of data pre-stored on the server can include, for instance, general data such as weather and product information; basic personal data such as personal nicknames and preferences; detailed personal data such as real names, mobile phone numbers, and spending records; and personal biometric and financial data such as fingerprints, facial recognition information, and payment information.

[0041] Based on the aforementioned intent, the target data that the task request needs to access can be determined from the above data.

[0042] Step 202: Determine the data level of the target data.

[0043] The data level is used to indicate the sensitivity of the corresponding data.

[0044] In this step, corresponding data levels can be set in advance for each data item to indicate the sensitivity of each data item. That is, higher data levels are set for data with higher sensitivity, and lower data levels are set for data with lower sensitivity.

[0045] For example, the least sensitive general data, such as weather information and product information, can be set as the first data level; the less sensitive basic personal data, such as personal nicknames and personal preferences, can be set as the second data level; the more sensitive detailed personal data, such as real names, mobile phone numbers, and consumption records, can be set as the third data level; and the most sensitive personal biometric and financial data, such as fingerprint information, facial recognition information, and payment information, can be set as the fourth data level.

[0046] Based on this, after identifying the target data, the corresponding data level can be determined.

[0047] Step 203: Determine the target authentication mechanism that matches the data level from multiple preset authentication mechanisms, and authenticate the task request according to the target authentication mechanism.

[0048] The authentication mechanism is used to verify whether the task request or the terminal device that issued the task request has the permission to access the target data.

[0049] In this step, multiple authentication mechanisms can be set in advance. For example, the authentication mechanism can be a mechanism that verifies permissions through a preset user identifier, a mechanism that verifies permissions through voiceprint, a mechanism that verifies permissions through fingerprint, etc. In addition, the authentication mechanism can also be a mechanism that does not require authentication.

[0050] Based on the target data and its data level determined in step 202 above, a matching authentication mechanism can be determined for it.

[0051] Specifically, multiple authentication mechanisms can be pre-divided into different authentication levels based on their accuracy and rigor during authentication. That is, each authentication mechanism corresponds to an authentication level, and thus multiple authentication mechanisms can be applied to various data with different levels of sensitivity.

[0052] Among them, the higher the accuracy and rigor of the authentication mechanism, the higher the corresponding authentication level, and the higher the sensitivity of the data, i.e., the higher the data level, can be used; the lower the accuracy and rigor of the authentication mechanism, the lower the corresponding authentication level, and the lower the sensitivity of the data, i.e., the lower the data level, can be used.

[0053] As an example, authentication mechanisms that verify permissions through preset accounts have lower accuracy and strictness, so a lower authentication level can be set for them, such as the second authentication level; authentication mechanisms that verify permissions through voiceprints have higher accuracy and strictness, so a higher authentication level can be set for them, such as the third authentication level; authentication mechanisms that verify permissions through fingerprints have the highest accuracy and strictness, so a higher authentication level can be set for them, such as the fourth authentication level; in addition, mechanisms that do not require authentication have the lowest accuracy and strictness, so a lower authentication level can be set for them, such as the first authentication level.

[0054] Based on this, if the number of data levels and the number of authentication levels are the same in the pre-set settings, a mapping relationship can be pre-set between each authentication level and its corresponding data level.

[0055] When the number of data levels and the number of authentication levels are different in the pre-set settings, a mapping relationship can be pre-set between each data level and one authentication level. For example, if there are 5 data levels and 4 authentication levels, two adjacent data levels can be mapped to the same authentication level. If there are 3 data levels and 4 authentication levels, each data level can be mapped to one authentication level, leaving one authentication level without a mapping relationship.

[0056] As an example, the ordinary data at the first data level can be mapped to the first authentication level, which has the lowest authentication level; the basic personal data at the second data level can be mapped to the second authentication level, which has a lower authentication level; the detailed personal data at the third data level can be mapped to the third authentication level, which has a higher authentication level; and the personal biometric and financial data at the fourth data level can be mapped to the fourth authentication level, which has the highest authentication level.

[0057] Furthermore, when the target data is determined, the authentication level matching the data level can be determined based on the data level of the target data and the corresponding mapping relationship. Thus, the authentication mechanism applicable to the target data can be determined and identified as the target authentication mechanism.

[0058] Furthermore, the target authentication mechanism can be used to verify whether the task requester or the terminal device that issued the task request has permission to access the target data at the corresponding data level.

[0059] Step 204: In response to the determination that the authentication result of the target authentication mechanism is valid, the target data is desensitized according to the preset desensitization mechanism.

[0060] Among them, the desensitization mechanism is the desensitization operation to remove sensitive information from the target data. Sensitive information can be one or more types of information pre-set by the user.

[0061] In this embodiment, the types of sensitive information that are preset can be, for example, the first type of sensitive information such as geographical location, time, company name and organization name; the second type of sensitive information such as user identifier, device identifier, order number and session identifier; the third type of sensitive information such as name, company name, school name and contact person; and the fourth type of sensitive information such as ID card number, bank card number, facial features and biometric parameters.

[0062] Based on this, sensitive information in target data can be identified, for example, through large language models, and the sensitive information type of that sensitive information can be determined.

[0063] Furthermore, for sensitive information of different types, the desensitization mechanism can include multiple desensitization operations corresponding to different types of sensitive information. Among them, the desensitization intensity of different desensitization operations is different. When the target data contains sensitive information of different types, each desensitization operation is applicable to desensitizing sensitive information of different types.

[0064] Based on the target authentication mechanism executed in step 203 above, when the target authentication mechanism verifies that the task request or the terminal device that issued the task request has the permission to access the target data, the sensitive information in the target data can be desensitized through the corresponding desensitization operation, thereby obtaining the desensitized target data, that is, the desensitized data with sensitive information removed.

[0065] Step 205: Grant the task request permission to access the de-identified target data.

[0066] Based on the de-identified target data obtained after performing the de-identification mechanism in step 204 above, the server can grant terminal devices permission to access the de-identified target data, thereby enabling task requests issued by the terminal devices to successfully access the de-identified target data.

[0067] As can be seen, by establishing a coherent logic of identifying target data, determining data level, matching authentication mechanisms, data anonymization, and granting access permissions, a data access mechanism adaptable to diverse data access scenarios is constructed. By first accurately locating the target data corresponding to the task request, and then matching the corresponding authentication mechanism based on the data level, it avoids the problem of insufficient adaptability of a single authentication method to data with different levels of sensitivity, and ensures the compliance of data access permissions through targeted authentication. Subsequently, anonymization further removes sensitive information from the target data, forming a dual data protection system of authentication and anonymization, effectively reducing the risk of data leakage. The entire process requires no additional complex operations, ensuring data security while also considering the convenience of data access, achieving a balance between security and efficiency for access to different types of data, and is suitable for various application scenarios requiring access to sensitive information.

[0068] In some alternative implementations, refer to Figure 2B The diagram illustrates a decomposition process 2030 of one embodiment of step 203 of this disclosure. This decomposition process 2030 includes the following steps 2031 to 2035: Step 2031: Determine the runtime environment for the task request.

[0069] The operating environment refers to the environment in which the terminal device runs the task request. The operating environment may include environmental information such as the external environment, network environment, and geographical location of the terminal device.

[0070] For example, the noise level of the external environment, relevant information about the network environment, and location information.

[0071] In this step, the server can receive the runtime environment from the terminal device.

[0072] Specifically, based on the environmental information from the above-mentioned aspects, the terminal device can comprehensively determine whether the current operating environment is safe, identify a relatively safe operating environment as a safe environment, and identify a risky operating environment as a risky environment.

[0073] For example, if the external environment of the terminal device is noisy, or if the network environment it is in is a public network, the operating environment can be identified as a risky environment.

[0074] Based on this, the terminal device can report the determined operating environment to the server.

[0075] Based on the target data determined in step 201 and the data level determined in step 202, the server can first receive the current operating environment from the terminal device during the process of determining the target authentication level, and can configure a matching target authentication mechanism for the target data in combination with different operating environments in the following steps.

[0076] Step 2032: Determine candidate authentication mechanisms from multiple authentication mechanisms whose authentication level is consistent with the data level.

[0077] Based on the data level of the target data determined in step 202 above, and the mapping relationship between the data level and the authentication level, an authentication level consistent with the data level of the target data can be determined based on the mapping relationship set in step 203 above, and the authentication mechanism corresponding to the authentication level can be used as a candidate authentication mechanism.

[0078] Step 2033: Determine whether the authentication level of the candidate authentication mechanism meets the requirements of the operating environment.

[0079] Based on the candidate authentication mechanism determined in step 2032, the operating environment determined in step 2031 can be used to verify whether the candidate authentication mechanism meets the data security requirements of the current operating environment.

[0080] Specifically, since the operating environment includes a secure environment and a risky environment, when the operating environment is a secure environment, it can be considered that the authentication level that is consistent with the data level of the target data is accurate and strict enough. The authentication mechanism corresponding to the authentication level can realize secure and effective authentication operations, that is, the candidate authentication mechanism can meet the needs of the operating environment.

[0081] In a risky operating environment, the authentication level that is consistent with the data level of the target data may not be accurate or rigorous enough. Using the authentication mechanism corresponding to the authentication level may make it difficult to achieve secure and effective authentication operations. In other words, the candidate authentication mechanism may not meet the needs of the operating environment, and a more accurate and rigorous authentication mechanism is required to effectively combat the current risky environment.

[0082] In some cases, when the operating environment is a risky environment, since the number of authentication levels is limited, if the authentication level includes four levels (first, second, third, and fourth), and the candidate authentication mechanism is at the highest level (fourth authentication level), then there is no other authentication mechanism with a higher authentication level than the candidate authentication mechanism. In other words, only when the authentication level of the candidate authentication mechanism is not the highest level can other authentication mechanisms with higher authentication levels be selected.

[0083] Therefore, in this step, after determining that the operating environment is a risky environment, before determining whether the candidate authentication mechanism meets the requirements of the operating environment, it can be determined whether the authentication level corresponding to the current candidate authentication mechanism is the highest level, that is, whether it is the fourth authentication level. If the authentication level of the candidate authentication mechanism is the highest level, then even if the operating environment is a risky environment, it can be considered that the authentication level of the candidate authentication mechanism can meet the requirements of the current operating environment; if the authentication level of the candidate authentication mechanism is not the highest level, and the operating environment is a risky environment, then it can be considered that the authentication level of the candidate authentication mechanism does not meet the requirements of the current operating environment.

[0084] Step 2034: In response to determining that the requirements of the operating environment are met, the candidate authentication mechanism is determined as the target authentication mechanism.

[0085] In some cases, based on the judgment result in step 2033 above, if the candidate authentication mechanism can meet the needs of the current operating environment, the candidate authentication mechanism can be directly used as the target authentication mechanism applicable to the target data.

[0086] In specific examples, when the candidate authentication mechanism meets the requirements of the operating environment, if the target data is the least sensitive first-level data such as weather information and product information, the corresponding first authentication level, i.e., the candidate authentication mechanism that does not require authentication, can be directly used as the target authentication mechanism. If the target data is the moderately sensitive second-level data such as personal nicknames and personal preferences, the corresponding second authentication level, i.e., the candidate authentication mechanism that verifies permissions through a preset account, can be directly used as the target authentication mechanism. If the target data is the highly sensitive third-level data such as real names, mobile phone numbers, and consumption records, the corresponding third authentication level, i.e., the candidate authentication mechanism that verifies permissions through voiceprint, can be directly used as the target authentication mechanism. If the target data is the most sensitive fourth-level data such as fingerprint information, facial recognition information, and payment information, the corresponding fourth authentication level, i.e., the candidate authentication mechanism that verifies permissions through fingerprint, can be directly used as the target authentication mechanism.

[0087] Step 2035: In response to determining that the requirements of the operating environment are not met, a target authentication mechanism with a higher authentication level than the candidate authentication mechanisms is determined from multiple authentication mechanisms.

[0088] In other cases, based on the judgment result in step 2033 above, when the candidate authentication mechanism is difficult to meet the needs of the current operating environment, other authentication mechanisms with higher authentication levels than the candidate authentication mechanisms can be selected to counteract the risks existing in the current risk environment.

[0089] In specific examples, when the candidate authentication mechanisms cannot meet the needs of the operating environment, if the target data is the least sensitive first-level data such as weather information and product information, a second-level authentication mechanism, which is one level higher than the first-level candidate authentication mechanism, can be selected as the target authentication mechanism. This mechanism verifies permissions through a preset account. If the target data is the less sensitive second-level data such as personal nicknames and personal preferences, a third-level authentication mechanism, which is one level higher than the second-level candidate authentication mechanism, can be selected as the target authentication mechanism. If the target data is the more sensitive third-level data such as real names, mobile phone numbers, and consumption records, a fourth-level authentication mechanism, which is one level higher than the third-level candidate authentication mechanism, can be selected as the target authentication mechanism.

[0090] Based on this, by first determining the runtime environment of the task request, then filtering candidate authentication mechanisms based on the data level of the target data, and further judging whether the candidate authentication mechanisms are suitable for the runtime environment requirements, the target authentication mechanism is flexibly determined, effectively solving the problem that a single authentication mechanism cannot adapt to different environments. In a secure environment, a candidate authentication mechanism that matches the data level is directly adopted, ensuring the convenience of data access; in a risky environment, if the candidate authentication mechanism is not the highest level, the authentication level is upgraded, and a more stringent authentication mechanism is used to resist environmental risks. This achieves a dynamic balance between data security and access convenience, allowing the authentication mechanism to adapt to the corresponding target data and meet the security requirements of different runtime environments, significantly improving the adaptability and security of data access scenarios.

[0091] In some alternative implementations, refer to Figure 2C The diagram illustrates a decomposition process 2040 of one embodiment of step 203 of this disclosure. This decomposition process 2040 includes the following steps 2041 to 2042: Step 2041: Determine the sensitive information items in the target data, and the sensitive information type corresponding to each sensitive information item.

[0092] Based on the authentication result in step 203 above, and based on the target data determined in step 201 above, if the authentication result is valid, sensitive information in the target data can be desensitized, thereby making it less likely for the terminal device to leak data when accessing the target data.

[0093] Specifically, the sensitive information in the target data can be identified first. Based on the multiple sensitive information types pre-set in step 204 and the semantic information pre-defined in each sensitive information type, the NER model (Named Entity Recognition model) can be used to identify the sensitive information in the target data and its corresponding sensitive information type.

[0094] Step 2042: For each piece of sensitive information, perform the desensitization operation corresponding to the sensitive information type of that sensitive information.

[0095] The different desensitization operations in the desensitization mechanism may include, for example, blurring sensitive information and deleting sensitive information.

[0096] Based on the sensitive information and corresponding sensitive information types in the target data determined in step 2041 above, and based on the multiple desensitization operations preset in the desensitization mechanism, the corresponding desensitization operations are matched for each sensitive information in the target data.

[0097] In specific examples, different types of sensitive information can also represent the degree of security requirements for various sensitive information in the target data. For example, the first type of sensitive information, such as geographical location, time, company name, and organization name; the second type of sensitive information, such as user identifier, device identifier, order number, and session identifier; and the third type of sensitive information, such as name, company name, school name, and contact person, can all be regarded as sensitive information with a lower degree of security requirements. The fourth type of sensitive information, such as ID card number, bank card number, facial features, and biometric parameters, can be regarded as sensitive information with a higher degree of security requirements.

[0098] Since different desensitization operations in the desensitization mechanism remove sensitive information with different strengths, for sensitive information types with lower security requirements, such as the first, second and third types of sensitive information, a weaker desensitization operation is performed, such as blurring it. For example, the sensitive information "No. 100 Jianguo Road, First District, Dongshan City" can be obfuscated to obtain the desensitized information "a certain road in a certain district of Dongshan City", thereby reducing its precision while preserving its semantics.

[0099] For sensitive information types with high security requirements, such as the fourth type of sensitive information, a strong desensitization operation is performed, such as deletion.

[0100] For example, the sensitive information "My ID number is XXXXXXXXXXXXXXXXXX" can be completely removed by deleting it, resulting in the de-sensitized information "My ID number is [deleted]".

[0101] In other cases, multiple types of sensitive information can represent different levels of security requirements for each type of sensitive information. For example, the first type of sensitive information, such as geographical location, time, company name, and organization name, has the lowest level of security requirement; the second type of sensitive information, such as user identifier, device identifier, order number, and session identifier, has a relatively low level of security requirement; the third type of sensitive information, such as name, company name, school name, and contact person, has a relatively high level of security requirement; and the fourth type of sensitive information, such as ID card number, bank card number, facial features, and biometric parameters, has the highest level of security requirement.

[0102] Based on this, corresponding desensitization operations can be set for each type of sensitive information.

[0103] In a specific example, for sensitive information of the lowest security level (Type 1), a desensitization operation such as obfuscation can be set.

[0104] For the second type of sensitive information with a lower level of security requirements, an anonymization operation can be set up to de-identify it. For example, for the sensitive information "Device ID: 7A-91-BF", anonymization can be used to obtain the de-identified information "Device ID: Random_XX", thereby breaking the identifiable association while retaining the data structure.

[0105] For the third type of sensitive information with a high level of security requirements, a desensitization operation can be set up for it. For example, for the sensitive information "Dongshan University", the desensitized information "First University" can be obtained through the replacement operation, so that the sensitive words can be replaced by semantically equivalent but safe placeholders.

[0106] Furthermore, for the fourth type of sensitive information, which has the highest level of security requirements, a desensitization operation can be set for deletion.

[0107] Based on this, by first identifying all sensitive information in the target data and its corresponding sensitive information types, and then performing appropriate de-identification operations for different sensitive information types, precise and differentiated protection of sensitive information is achieved. For sensitive information with low security requirements, obfuscation is used to remove sensitive attributes while preserving the basic semantics and usability of the data; for sensitive information with high security requirements, deletion is used to completely eliminate the risk of core sensitive data leakage, avoiding the problem of insufficient or excessive protection for sensitive information with different security requirements by a single de-identification method. This differentiated de-identification strategy ensures the security and compliance of the de-identified data while maximizing the preservation of the data's practical value, allowing the data to maintain a balance between security and usability even after access permissions are granted, further strengthening the privacy protection capabilities throughout the entire data access process.

[0108] Further reference Figure 3 As an implementation of the methods shown in the above figures, this disclosure provides an embodiment of an access request response device, which is similar to... Figure 2A Corresponding to the method embodiments shown, this device can be specifically applied to various electronic devices.

[0109] like Figure 3 As shown, the access request response device 300 of this embodiment includes: a target data determination module 301, a data level determination module 302, an authentication module 303, a desensitization module 304, and an access module 305.

[0110] The target data determination module 301 is configured to determine the target data pointed to by the task request in response to receiving the task request. The data level determination module 302 is configured to determine the data level of the target data. The authentication module 303 is configured to determine the target authentication mechanism that matches the data level from multiple preset authentication mechanisms, and to authenticate the task request according to the target authentication mechanism. The desensitization module 304 is configured to desensitize the target data according to the preset desensitization mechanism in response to the determination that the authentication result of the target authentication mechanism is valid. Access module 305 is configured to grant task requests permission to access the de-identified target data.

[0111] In this embodiment, the specific processing of the target data determination module 301, data level determination module 302, authentication module 303, desensitization module 304, and access module 305 of the access request response device 300, and the resulting technical effects, can be referred to respectively. Figure 2A The relevant descriptions in the corresponding embodiments will not be repeated here.

[0112] In some alternative implementations, each authentication mechanism corresponds to one of multiple authentication levels; Accordingly, the authentication module 303 is also specifically configured as follows: Determine the runtime environment of the task request; From multiple authentication mechanisms, identify candidate authentication mechanisms whose authentication level is consistent with the data level; Determine whether the authentication level of the candidate authentication mechanism meets the requirements of the operating environment; In response to the determination of the requirements of the operating environment, the candidate authentication mechanism is determined as the target authentication mechanism.

[0113] Accordingly, after determining whether the authentication level of the candidate authentication mechanism meets the requirements of the operating environment, the authentication module also executes: In response to the determination that the requirements of the operating environment are not met, a target authentication mechanism with a higher authentication level than the candidate authentication mechanisms is selected from multiple authentication mechanisms.

[0114] Among these, determining whether the authentication level of the candidate authentication mechanism meets the requirements of the operating environment includes: In response to the determination that the operating environment is a risky environment, it is determined whether the authentication level of the candidate authentication mechanism is the highest level; The system determines that the authentication level of the candidate authentication mechanism is not the highest level, and therefore the authentication level of the candidate authentication mechanism does not meet the requirements of the operating environment.

[0115] In some optional implementations, the desensitization mechanism includes desensitization operations corresponding to various types of sensitive information; Accordingly, the desensitization module 304 is specifically configured as follows: Identify the sensitive information in the target data, and the type of sensitive information for each item; For each piece of sensitive information, perform the desensitization operation corresponding to the sensitive information type of that sensitive information.

[0116] The desensitization process includes blurring and deletion; the different types of sensitive information include those with high security requirements and those with low security requirements. Accordingly, the desensitization operations for various types of sensitive information include: For sensitive information types with high security requirements, obfuscation is appropriate; for sensitive information types with low security requirements, deletion is appropriate.

[0117] It should be noted that the implementation details and technical effects of each module and unit in the access request response device 300 provided in the embodiments of this disclosure can be referred to the descriptions of other embodiments in this disclosure, and will not be repeated here.

[0118] The following is for reference. Figure 4It shows a schematic diagram of the structure of a computer system 400 suitable for implementing the electronic device of the present disclosure. Figure 4 The computer system 400 shown is merely an example and should not be construed as limiting the functionality and scope of the embodiments of this disclosure.

[0119] like Figure 4 As shown, the computer system 400 may include a processing device (e.g., a central processing unit, a graphics processing unit, etc.) 401, which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) 402 or a program loaded from a storage device 408 into a random access memory (RAM) 403. The RAM 403 also stores various programs and data required for the operation of the computer system 400. The processing device 401, ROM 402, and RAM 403 are interconnected via a bus 404. An input / output (I / O) interface 405 is also connected to the bus 404.

[0120] Typically, the following devices can be connected to I / O interface 405: input devices 406 including, for example, touchscreens, touchpads, keyboards, mice, cameras, microphones, etc.; output devices 407 including, for example, liquid crystal displays (LCDs), speakers, vibrators, etc.; storage devices 408 including, for example, magnetic tapes, hard disks, etc.; and communication devices 409. Communication device 409 allows computer system 400 to communicate wirelessly or wiredly with other devices to exchange data. Although Figure 4 A computer system 400 with various electronic devices is shown; however, it should be understood that it is not required to implement or possess all of the devices shown. More or fewer devices may be implemented or possessed alternatively.

[0121] In particular, according to embodiments of this disclosure, the processes described above with reference to the flowcharts can be implemented as computer software programs. For example, embodiments of this disclosure include a computer program product comprising a computer program carried on a computer-readable medium, the computer program containing program code for performing the methods shown in the flowcharts. In such embodiments, the computer program can be downloaded and installed from a network via communication device 409, or installed from storage device 408, or installed from ROM 402. When the computer program is executed by processing device 401, it performs the functions defined in the methods of embodiments of this disclosure.

[0122] It should be noted that the computer-readable medium described in this disclosure can be a computer-readable signal medium or a computer-readable storage medium, or any combination thereof. A computer-readable storage medium can be, for example,—but not limited to—an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination thereof. More specific examples of a computer-readable storage medium may include, but are not limited to: an electrical connection having one or more wires, a portable computer disk, a hard disk, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fiber, portable compact disk read-only memory (CD-ROM), optical storage device, magnetic storage device, or any suitable combination thereof. In this disclosure, a computer-readable storage medium can be any tangible medium containing or storing a program that can be used by or in conjunction with an instruction execution system, apparatus, or device. In this disclosure, a computer-readable signal medium can include a data signal propagated in baseband or as part of a carrier wave, carrying computer-readable program code. Such propagated data signals can take various forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination thereof. A computer-readable signal medium can be any computer-readable medium other than a computer-readable storage medium, which can send, propagate, or transmit a program for use by or in connection with an instruction execution system, apparatus, or device. The program code contained on the computer-readable medium can be transmitted using any suitable medium, including but not limited to: wires, optical fibers, RF (radio frequency), etc., or any suitable combination thereof.

[0123] The aforementioned computer-readable medium may be included in the aforementioned electronic device; or it may exist independently and not assembled into the electronic device.

[0124] The aforementioned computer-readable medium carries one or more programs, which, when executed by the electronic device, cause the electronic device to perform the following functions: Figure 2A The illustrated embodiments and their alternative implementations demonstrate access request response methods.

[0125] Computer program code for performing the operations of this disclosure can be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages ​​such as Java, Smalltalk, and C++, and conventional procedural programming languages ​​such as the "C" language or similar programming languages. The program code can be executed entirely on the user's computer, partially on the user's computer, as a standalone software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In cases involving remote computers, the remote computer can be connected to the user's computer via any type of network—including a local area network (LAN) or a wide area network (WAN)—or can be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0126] The flowcharts and block diagrams in the accompanying drawings illustrate the architecture, functionality, and operation of possible implementations of systems, methods, and computer program products according to various embodiments of this disclosure. In this regard, each block in a flowchart or block diagram may represent a module, segment, or portion of code containing one or more executable instructions for implementing a specified logical function. It should also be noted that in some alternative implementations, the functions indicated in the blocks may occur in a different order than those indicated in the drawings. For example, two consecutively indicated blocks may actually be executed substantially in parallel, and they may sometimes be executed in reverse order, depending on the functions involved. It should also be noted that each block in the block diagrams and / or flowcharts, and combinations of blocks in the block diagrams and / or flowcharts, can be implemented using a dedicated hardware-based system that performs the specified function or operation, or using a combination of dedicated hardware and computer instructions.

[0127] The units or modules described in the embodiments of this disclosure can be implemented in software or hardware. The names of the units or modules do not necessarily limit the unit itself; for example, a target data determination module can also be described as "a module that, in response to receiving a task request, determines the target data to which the task request points."

[0128] The above description is merely a preferred embodiment of this disclosure and an explanation of the technical principles employed. Those skilled in the art should understand that the scope of this disclosure is not limited to technical solutions formed by specific combinations of the above-described technical features, but should also cover other technical solutions formed by arbitrary combinations of the above-described technical features or their equivalents without departing from the above-described concept. For example, technical solutions formed by substituting the above features with (but not limited to) technical features disclosed in this disclosure that have similar functions.

Claims

1. An access request and response method, the method comprising: In response to receiving a task request, determine the target data indicated by the task request; Determine the data level of the target data; From a plurality of preset authentication mechanisms, a target authentication mechanism that matches the data level is determined, and the task request is authenticated according to the target authentication mechanism; In response to the determination that the authentication result of the target authentication mechanism is valid, the target data is desensitized according to the preset desensitization mechanism; Grant the task permission to access the anonymized target data.

2. The method according to claim 1, wherein, Each authentication mechanism corresponds to one of multiple authentication levels; The step of determining the target authentication mechanism that matches the data level from multiple preset authentication mechanisms includes: Determine the runtime environment of the task request; From multiple authentication mechanisms, identify candidate authentication mechanisms whose authentication level matches the data level; Determine whether the authentication level of the candidate authentication mechanism meets the requirements of the operating environment; In response to determining that the requirements of the operating environment are met, the candidate authentication mechanism is determined as the target authentication mechanism.

3. The method according to claim 2, wherein, After determining whether the authentication level of the candidate authentication mechanism meets the requirements of the operating environment, the method further includes: In response to determining that the requirements of the operating environment are not met, a target authentication mechanism with a higher authentication level than the candidate authentication mechanism is determined from multiple authentication mechanisms.

4. The method according to claim 2, wherein, The operating environment includes a secure environment and a risky environment; The step of determining whether the authentication level of the candidate authentication mechanism meets the requirements of the operating environment includes: In response to determining that the operating environment is a risky environment, it is determined whether the authentication level of the candidate authentication mechanism is the highest level; In response to determining that the authentication level of the candidate authentication mechanism is not the highest level, it is determined that the authentication level of the candidate authentication mechanism does not meet the requirements of the operating environment.

5. The method according to claim 2, wherein, The desensitization mechanism includes desensitization operations corresponding to various types of sensitive information; The process of desensitizing the target data according to a preset desensitization mechanism includes: Identify the sensitive information items in the target data, and the sensitive information type of each item; For each piece of sensitive information, perform the desensitization operation corresponding to the sensitive information type of that sensitive information.

6. The method according to claim 4, wherein, The desensitization operations corresponding to the various sensitive information types include: For sensitive information types with high security requirements, obfuscation is appropriate; for sensitive information types with low security requirements, deletion is appropriate.

7. An access request response device, comprising: The target data determination module is configured to determine the target data pointed to by the task request in response to receiving a task request. The data level determination module is configured to determine the data level of the target data; The authentication module is configured to determine a target authentication mechanism that matches the data level from a plurality of preset authentication mechanisms, and to authenticate the task request according to the target authentication mechanism. The desensitization module is configured to desensitize the target data according to a preset desensitization mechanism in response to determining that the authentication result of the target authentication mechanism is valid. The access module is configured to grant the task request permission to access the de-identified target data.

8. An access request response device, comprising: One or more processors; Storage device, on which one or more programs are stored, When the one or more programs are executed by the one or more processors, the one or more processors implement the method as described in any one of claims 1-6.

9. A computer-readable storage medium having a computer program stored thereon, wherein, When the computer program is executed by one or more processors, it implements the method as described in any one of claims 1 to 6.

10. A computer program product comprising computer program instructions, wherein, When the computer program instructions are executed on a computer, the computer causes the computer to perform the method as described in any one of claims 1 to 6.

Images